This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0653CF7224244D73885E34B62A8054D31B523340F5A630C5FD699F299AFF2CD3/0/323830313a3137323a3a2f34382d3438203d3e203134303830.roa
File:                     323830313a3137323a3a2f34382d3438203d3e203134303830.roa (raw, json)
Hash identifier:          3iHCqauAeMjtJGWiZakwgham8iFO0SSJiD+UMe5IIR0=
Subject key identifier:   C0:36:ED:C5:E6:C4:27:F2:13:7F:AF:2C:86:D0:95:F0:AD:26:FC:2B
Certificate issuer:       /CN=C4B95FE3CE8CD6143789324F89D2791DABBB5AD8
Certificate serial:       788C7128D1EBF9DCFE7872B5E5A9B5033A73981B
Authority key identifier: C4:B9:5F:E3:CE:8C:D6:14:37:89:32:4F:89:D2:79:1D:AB:BB:5A:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0653CF7224244D73885E34B62A8054D31B523340F5A630C5FD699F299AFF2CD3/0/323830313a3137323a3a2f34382d3438203d3e203134303830.roa
Signing time:             Tue 06 Jan 2026 19:26:50 +0000
ROA not before:           Tue 06 Jan 2026 19:21:50 +0000
ROA not after:            Tue 05 Jan 2027 19:26:50 +0000
asID:                     14080
IP address blocks:        2801:172::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0653CF7224244D73885E34B62A8054D31B523340F5A630C5FD699F299AFF2CD3/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0653CF7224244D73885E34B62A8054D31B523340F5A630C5FD699F299AFF2CD3/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:8c:71:28:d1:eb:f9:dc:fe:78:72:b5:e5:a9:b5:03:3a:73:98:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4B95FE3CE8CD6143789324F89D2791DABBB5AD8
        Validity
            Not Before: Jan  6 19:21:50 2026 GMT
            Not After : Jan  5 19:26:50 2027 GMT
        Subject: CN=C036EDC5E6C427F2137FAF2C86D095F0AD26FC2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b5:d6:38:04:ba:86:b9:95:a0:7b:56:35:6a:
                    b4:77:0f:7f:7f:45:af:a9:ee:36:16:4a:aa:15:a7:
                    74:2f:c2:08:a1:8f:c3:53:86:08:2d:8b:de:4c:a8:
                    a4:a4:3d:19:c3:dc:cb:87:ea:54:7b:fe:77:e6:92:
                    4d:7e:88:7e:bf:c9:57:ea:78:3c:58:7f:b6:5a:57:
                    63:da:85:39:5f:1d:4b:ee:44:ed:91:0d:da:08:42:
                    2e:06:7f:9b:65:88:77:da:5a:80:8c:12:92:f3:75:
                    86:6a:ef:aa:5b:c0:19:71:1a:c4:bb:6b:bf:2d:91:
                    86:1f:d9:15:6d:4e:0a:54:a0:54:4c:c8:cb:b7:37:
                    ce:67:49:33:8a:25:74:98:a4:f8:e7:28:b4:dc:bc:
                    44:6f:f5:6b:93:3b:dc:9f:44:0d:29:fa:45:b9:59:
                    bb:ea:05:94:9b:32:09:d2:48:1b:b2:a8:4d:8d:70:
                    cf:9f:c7:25:5a:1b:c6:7b:a4:bf:b7:ff:c7:1b:1e:
                    60:e7:e9:0d:cf:5a:29:bf:d1:90:c7:be:5d:af:84:
                    95:cc:be:8a:c8:ec:48:cd:96:b0:1b:58:e7:30:43:
                    33:77:05:62:c4:df:64:48:79:28:40:31:ff:96:1f:
                    df:70:7b:10:7a:e4:1c:10:97:86:ea:28:88:9f:6c:
                    d7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:36:ED:C5:E6:C4:27:F2:13:7F:AF:2C:86:D0:95:F0:AD:26:FC:2B
            X509v3 Authority Key Identifier:
                keyid:C4:B9:5F:E3:CE:8C:D6:14:37:89:32:4F:89:D2:79:1D:AB:BB:5A:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0653CF7224244D73885E34B62A8054D31B523340F5A630C5FD699F299AFF2CD3/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0653CF7224244D73885E34B62A8054D31B523340F5A630C5FD699F299AFF2CD3/0/323830313a3137323a3a2f34382d3438203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:172::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:87:a4:66:df:60:cf:b8:7d:07:1e:91:f1:d4:83:5c:f5:ca:
         28:1b:91:8a:d6:02:ae:5e:69:23:96:49:9c:df:51:d1:a4:2e:
         f3:eb:c5:5f:73:6b:ee:43:52:28:39:3a:aa:94:99:47:b3:21:
         63:d5:9d:ef:5e:48:bc:3c:eb:32:dd:89:08:c8:27:4b:45:9b:
         00:d7:64:4e:97:02:07:39:d3:9a:42:06:85:89:a8:95:35:2d:
         42:ff:bb:b7:29:1f:db:c7:7f:24:03:ab:34:75:f6:9f:9b:79:
         9a:d1:45:27:92:ed:f8:79:ce:49:d0:70:ab:4e:32:0d:be:ee:
         06:1d:9d:a3:8c:10:b6:d8:11:27:58:2f:39:d0:b8:65:3a:cb:
         d2:f5:1d:eb:51:3a:89:a2:f4:c4:5b:31:6e:38:59:a1:78:24:
         5c:b0:04:63:9e:dd:49:ae:a9:ce:22:90:28:6f:c3:fc:b4:99:
         75:38:6b:79:59:ac:d7:df:a4:b1:2b:d0:b4:b8:65:80:34:5d:
         82:4e:a8:f6:80:70:7a:34:47:e3:8a:71:cb:b8:cc:40:67:4d:
         ac:88:f9:93:68:fb:6c:53:47:b7:4c:5d:04:16:a6:93:8e:34:
         da:67:00:83:a1:01:2c:6d:10:f6:e9:5b:aa:aa:47:74:78:55:
         7c:dc:07:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:58:37 2026 by rpki-client