This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031633a3a2f34382d3438203d3e203631353231.roa
File:                     323030313a313363373a363031633a3a2f34382d3438203d3e203631353231.roa (raw, json)
Hash identifier:          rErlAlkO8oFKWLoPt+Ua4uBzTfrGjtu7aRBSsGYF4Cc=
Subject key identifier:   86:56:38:F4:57:8B:F2:61:96:24:29:AA:14:9C:B7:26:D8:16:01:6E
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       01695B4D2D62342B7EA79A2F9D163C3C3F9D38CA
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031633a3a2f34382d3438203d3e203631353231.roa
Signing time:             Tue 06 Jan 2026 19:29:34 +0000
ROA not before:           Tue 06 Jan 2026 19:24:34 +0000
ROA not after:            Tue 05 Jan 2027 19:29:34 +0000
asID:                     61521
IP address blocks:        2001:13c7:601c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:69:5b:4d:2d:62:34:2b:7e:a7:9a:2f:9d:16:3c:3c:3f:9d:38:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Jan  6 19:24:34 2026 GMT
            Not After : Jan  5 19:29:34 2027 GMT
        Subject: CN=865638F4578BF261962429AA149CB726D816016E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:62:03:64:2c:20:81:39:28:86:cf:d3:53:1a:
                    63:86:c0:82:16:92:99:4d:9b:2e:6d:87:ce:c2:fa:
                    b9:6a:62:3e:92:32:ad:cb:68:3f:ea:fd:38:a6:d6:
                    a6:5d:48:c1:b3:3f:65:fe:0f:34:37:25:88:70:1f:
                    b8:8f:4c:7f:9e:3a:c0:20:ae:9a:1e:a5:62:60:df:
                    86:9b:a4:3c:ce:6b:74:03:0a:e5:26:04:b2:6b:0a:
                    56:6e:71:28:d8:0c:18:19:9c:12:14:b8:40:8d:a8:
                    ba:9a:28:a9:7c:ee:95:1c:ea:39:7f:3c:08:72:c3:
                    8d:a6:1c:6d:ff:43:6d:07:bc:05:53:20:81:7f:0d:
                    be:f6:11:0f:c1:ca:76:ee:85:71:90:80:72:c6:f0:
                    93:7f:04:28:9b:af:6d:00:71:09:56:31:8d:b0:a1:
                    53:0c:61:94:94:ce:ff:f6:4b:8c:27:97:8b:ed:7c:
                    6d:08:1d:dc:f6:dd:b3:c7:4b:ed:8f:e0:16:8d:00:
                    33:f5:20:2d:b3:7e:9e:15:8d:3d:ca:aa:d3:b8:2c:
                    09:88:26:fd:14:3e:38:9c:8d:83:eb:b1:62:eb:c0:
                    ce:17:67:fc:7c:f5:0d:e9:13:52:e3:ef:77:35:af:
                    c7:27:85:96:71:f4:dc:3b:a7:54:52:e1:58:4c:c6:
                    8e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:56:38:F4:57:8B:F2:61:96:24:29:AA:14:9C:B7:26:D8:16:01:6E
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031633a3a2f34382d3438203d3e203631353231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:601c::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:1c:51:68:d7:b6:41:92:d6:2b:24:fd:c4:56:64:30:b1:5a:
         8c:ea:22:ae:52:e4:a7:28:ec:bc:02:a7:23:83:0c:cf:0f:3f:
         aa:b7:76:9e:89:02:27:0b:05:30:d1:2d:00:60:bb:cd:a1:c7:
         65:28:0c:e8:31:3c:3b:bf:84:9d:54:25:47:73:a4:f4:5e:55:
         5a:8e:39:3b:55:5b:56:d2:fe:06:b2:9d:a9:2b:e6:89:b7:9f:
         8b:59:e5:47:96:df:2b:0d:c6:05:5b:41:3a:7a:39:87:24:32:
         3e:d7:71:82:d1:f7:81:06:31:99:b0:2a:d9:fa:2e:c5:23:ba:
         01:67:b2:40:21:d5:2b:db:8a:0f:6d:89:66:08:16:1d:67:22:
         e7:d4:67:a5:9c:87:c1:90:0b:05:5a:c3:25:23:c5:ea:a2:3e:
         0a:d7:e7:0d:e1:14:8e:5a:64:f8:aa:8f:56:65:d6:42:a0:ff:
         08:3e:ff:70:3d:53:56:f2:af:26:57:9e:0a:91:b9:1c:cd:c5:
         64:7f:c0:85:35:3d:51:32:8c:e6:05:d6:f3:9d:e1:51:ba:59:
         73:4f:e6:22:5c:f5:93:86:43:5c:2b:84:31:b2:b7:0c:7c:ce:
         20:ea:89:f9:36:d7:83:3a:93:09:82:00:90:47:79:05:6d:80:
         7c:a6:10:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:17:10 2026 by rpki-client