This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031323a3a2f34382d3438203d3e203532343033.roa
File:                     323030313a313363373a363031323a3a2f34382d3438203d3e203532343033.roa (raw, json)
Hash identifier:          0lnYzvq4yL4eRF9ZoOC26L/tUbcmZI1Q2qjiwJFu1Bc=
Subject key identifier:   95:9C:53:AD:6C:B7:A2:FD:54:7A:DB:82:6C:EB:0F:67:8F:4E:E0:13
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       08F8DA6C0547739BC628BECE77145D55CFCC1CDA
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031323a3a2f34382d3438203d3e203532343033.roa
Signing time:             Tue 06 Jan 2026 19:29:23 +0000
ROA not before:           Tue 06 Jan 2026 19:24:23 +0000
ROA not after:            Tue 05 Jan 2027 19:29:23 +0000
asID:                     52403
IP address blocks:        2001:13c7:6012::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:f8:da:6c:05:47:73:9b:c6:28:be:ce:77:14:5d:55:cf:cc:1c:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Jan  6 19:24:23 2026 GMT
            Not After : Jan  5 19:29:23 2027 GMT
        Subject: CN=959C53AD6CB7A2FD547ADB826CEB0F678F4EE013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:30:88:ee:e8:44:66:5a:97:af:38:b9:ef:8a:
                    9e:be:96:fc:c8:a6:23:70:ad:9d:3c:3a:6a:91:a8:
                    86:91:f7:ed:23:7d:b8:70:1a:87:e7:e1:a9:c8:fe:
                    27:5f:d3:6f:92:90:88:1e:a3:ec:a8:45:ef:4f:fd:
                    a6:fd:7b:6f:69:ed:fa:d7:eb:c2:68:31:dc:b3:3f:
                    05:36:3b:bd:37:eb:6f:ca:aa:19:c1:76:83:36:3e:
                    21:fe:63:55:c5:f5:83:5f:e8:23:59:f4:5a:57:10:
                    67:81:9d:f2:58:07:2c:97:9e:88:5d:36:ab:c7:b0:
                    88:40:f6:e2:22:b1:4e:8d:86:4b:4e:6a:a0:d0:18:
                    8a:7e:6d:fc:b3:4d:46:a5:97:cc:65:e0:0d:fc:0c:
                    60:5d:81:1b:80:c3:6a:d2:90:1e:6c:9e:01:74:8b:
                    fb:e0:61:9c:11:f3:7c:e3:80:7f:ac:f1:db:79:48:
                    c6:2a:f9:c4:54:a9:3d:47:cf:79:46:f9:94:17:6c:
                    72:55:b5:d4:43:08:03:86:be:f6:11:e5:28:36:e5:
                    a1:8d:58:4b:1a:5f:08:73:f2:8a:ac:05:62:5e:54:
                    9a:3f:51:8b:94:1e:52:2a:50:2d:a7:2a:7c:8b:00:
                    cf:44:93:36:af:4c:8e:39:fe:00:34:20:7e:3a:b5:
                    eb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:9C:53:AD:6C:B7:A2:FD:54:7A:DB:82:6C:EB:0F:67:8F:4E:E0:13
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031323a3a2f34382d3438203d3e203532343033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:6012::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:7c:bc:34:20:54:2e:72:e1:32:78:d8:c1:cb:e7:c0:b2:ab:
         af:4a:0d:fa:23:38:1b:5d:bc:cd:9c:38:30:c0:22:1a:96:0e:
         db:b9:4b:cd:31:f9:7f:25:db:61:f8:98:08:69:f1:19:70:15:
         06:ff:e8:ab:60:36:e4:64:06:ac:75:cd:11:04:1d:6f:f2:2f:
         81:6a:e6:82:f6:0d:42:11:23:d2:d8:69:18:59:a2:38:b9:92:
         c1:cf:47:03:ef:ef:4a:9e:c9:02:cb:42:2a:e4:04:6f:9f:bd:
         c8:80:52:5e:5c:25:52:1e:4d:89:de:13:f4:6a:98:6e:b7:86:
         8f:92:81:2d:43:ea:ca:db:c8:f9:ee:b0:a9:22:af:e6:c9:ba:
         91:0e:24:54:b9:4b:a2:59:1c:42:5d:4b:2d:0d:74:bf:32:f4:
         41:7f:4f:71:c6:32:c3:0a:1c:24:12:45:c5:e7:b6:dd:d4:02:
         22:7c:13:cb:6a:b4:5d:53:32:58:c3:02:4f:9c:44:1c:3f:36:
         48:9e:db:73:c1:92:25:c0:45:2b:3d:2c:8c:79:f9:6c:68:90:
         a6:05:c7:f4:5c:31:44:cc:b9:9a:ac:e1:ba:b1:b8:48:44:2e:
         db:77:9b:0d:5d:fc:7c:63:96:e4:6a:e0:0e:9f:02:cd:ec:bf:
         f8:8a:87:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:34 2026 by rpki-client