This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363030633a3a2f34382d3438203d3e203532333730.roa
File:                     323030313a313363373a363030633a3a2f34382d3438203d3e203532333730.roa (raw, json)
Hash identifier:          a4YB7viZJ/pONmyiCk/581ExhDprSVaVUAEo8MP6InQ=
Subject key identifier:   9A:99:05:6F:29:58:92:2E:ED:B1:6E:D1:5B:8D:80:78:74:41:68:D6
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       63A7E48C9F5317F7D55102CD3840281964F5F30D
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363030633a3a2f34382d3438203d3e203532333730.roa
Signing time:             Tue 06 Jan 2026 19:29:15 +0000
ROA not before:           Tue 06 Jan 2026 19:24:15 +0000
ROA not after:            Tue 05 Jan 2027 19:29:15 +0000
asID:                     52370
IP address blocks:        2001:13c7:600c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:a7:e4:8c:9f:53:17:f7:d5:51:02:cd:38:40:28:19:64:f5:f3:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Jan  6 19:24:15 2026 GMT
            Not After : Jan  5 19:29:15 2027 GMT
        Subject: CN=9A99056F2958922EEDB16ED15B8D8078744168D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1f:a9:a4:8d:ab:5a:a8:dc:5a:38:53:c0:45:
                    b1:88:3e:f5:f7:55:34:04:21:ed:d2:55:cf:2c:8b:
                    79:ef:7d:09:a4:84:16:34:41:aa:05:c4:bb:9c:de:
                    87:14:74:7d:3c:ad:81:63:f7:34:80:ac:7d:ba:2c:
                    d1:a0:f4:16:59:f7:2c:16:30:4f:13:82:61:ce:8b:
                    bb:42:56:a0:f0:bd:d4:c1:0e:79:31:22:60:67:78:
                    b5:13:89:78:b7:93:77:33:5c:88:ae:dc:fe:87:b1:
                    72:7d:93:e1:e5:b2:70:fb:39:97:ec:3c:84:0c:f5:
                    a3:9f:12:99:75:37:9e:5c:a5:48:b3:21:00:78:ca:
                    e5:ca:1d:64:ff:cf:62:53:55:3a:07:4b:17:7f:06:
                    26:b0:05:e3:90:32:31:f9:bb:39:60:03:f8:d3:56:
                    73:bd:a6:8c:fd:78:f9:fc:a7:53:0a:ff:47:ac:2c:
                    d7:ec:3c:d3:d5:85:a9:ab:1e:6c:d9:d3:38:21:20:
                    ce:b2:6d:a8:f4:ac:eb:04:1b:4b:ef:f0:72:db:6d:
                    22:48:bb:c8:33:0a:2a:57:8b:31:54:b2:12:5d:fb:
                    b3:22:e9:ab:3f:a2:10:bf:f6:ca:0c:66:41:82:22:
                    d1:0a:4a:0b:b5:ca:14:5c:c4:a2:09:fc:67:87:21:
                    dd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:99:05:6F:29:58:92:2E:ED:B1:6E:D1:5B:8D:80:78:74:41:68:D6
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363030633a3a2f34382d3438203d3e203532333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:600c::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:af:62:9c:4a:98:19:17:d6:ed:15:e8:b3:10:36:bd:ae:c4:
         bf:95:0d:21:df:ca:41:c4:1a:5f:77:7d:9e:3c:71:7b:d4:dc:
         ef:29:b6:8e:ab:f5:1e:fa:1f:53:f7:79:4e:3e:87:d9:dd:75:
         d6:34:52:91:84:7f:5d:46:68:80:84:f6:d4:fc:49:81:14:27:
         2f:3d:4e:44:27:ae:f7:80:4d:f2:2a:e7:78:a6:bb:17:2d:38:
         b6:04:af:8e:cd:f5:14:e7:37:15:b4:15:26:b5:de:34:2e:ea:
         da:9e:78:cd:dd:8a:86:0e:1d:7a:78:2e:70:af:f9:9a:5f:a3:
         61:b4:05:92:df:ce:21:60:f0:2e:76:f8:8e:91:70:f0:df:f5:
         82:4a:6d:60:b5:d8:81:40:50:e8:6b:4f:1e:22:09:8a:b6:a0:
         ba:81:a5:31:17:d9:f7:27:40:87:35:f7:86:b2:01:da:76:61:
         9e:89:94:2b:0d:01:74:7d:39:f6:a4:ed:54:0b:fc:6e:57:b1:
         b9:03:c5:1f:8f:6a:35:fb:ad:0c:b7:cf:83:50:0e:90:54:fc:
         37:94:78:cd:2f:3f:84:3a:14:0e:d3:d8:d7:86:85:fd:50:78:
         d2:03:08:85:f0:6a:d8:58:e3:86:e2:41:b1:88:a7:21:49:e3:
         49:a7:3f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:17:08 2026 by rpki-client