This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/304B9C2550FC9A369B6FF451607501F38218BD478B69FE790F1379077CCA9428/0/323830313a31363a313030303a3a2f34382d3438203d3e20323634363138.roa
File:                     323830313a31363a313030303a3a2f34382d3438203d3e20323634363138.roa (raw, json)
Hash identifier:          zW7K2XxcZt6uYE2nDh79SXMdjB7h5ox4wWXz6I53WPk=
Subject key identifier:   9A:41:EA:A2:42:65:13:7C:31:FE:9E:60:59:E5:2E:65:78:61:96:A5
Certificate issuer:       /CN=7BBA799A94770E31F16F691BE643DE0718D988E7
Certificate serial:       4FF811A75A3BCD35E376CD20140BD3D6F608D974
Authority key identifier: 7B:BA:79:9A:94:77:0E:31:F1:6F:69:1B:E6:43:DE:07:18:D9:88:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7BBA799A94770E31F16F691BE643DE0718D988E7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/304B9C2550FC9A369B6FF451607501F38218BD478B69FE790F1379077CCA9428/0/323830313a31363a313030303a3a2f34382d3438203d3e20323634363138.roa
Signing time:             Tue 06 Jan 2026 19:40:34 +0000
ROA not before:           Tue 06 Jan 2026 19:35:34 +0000
ROA not after:            Tue 05 Jan 2027 19:40:34 +0000
asID:                     264618
IP address blocks:        2801:16:1000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/304B9C2550FC9A369B6FF451607501F38218BD478B69FE790F1379077CCA9428/0/7BBA799A94770E31F16F691BE643DE0718D988E7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/304B9C2550FC9A369B6FF451607501F38218BD478B69FE790F1379077CCA9428/0/7BBA799A94770E31F16F691BE643DE0718D988E7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7BBA799A94770E31F16F691BE643DE0718D988E7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 10:44:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:f8:11:a7:5a:3b:cd:35:e3:76:cd:20:14:0b:d3:d6:f6:08:d9:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BBA799A94770E31F16F691BE643DE0718D988E7
        Validity
            Not Before: Jan  6 19:35:34 2026 GMT
            Not After : Jan  5 19:40:34 2027 GMT
        Subject: CN=9A41EAA24265137C31FE9E6059E52E65786196A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fa:df:62:0b:23:33:10:7d:6d:62:6b:dc:b9:
                    69:a3:4a:51:e1:c9:ab:da:57:63:8d:3f:5b:54:f9:
                    2d:dd:34:23:f0:8f:fd:9f:a5:6d:76:c9:10:26:36:
                    89:25:c0:da:24:32:bb:f1:df:55:0a:47:92:cd:ef:
                    84:ef:d9:bb:47:78:50:b4:37:bd:8a:ee:d4:1b:bc:
                    95:e4:4c:9b:03:c6:f8:01:ef:21:8a:ea:e9:aa:ed:
                    4d:b2:7d:5d:b4:99:37:cf:0d:ad:56:d7:54:32:04:
                    8a:0c:82:03:57:bc:53:64:c2:34:10:e3:02:6c:3b:
                    e8:3a:4d:cf:b7:8d:0b:16:81:84:ed:07:67:ec:98:
                    cd:f3:33:1d:63:a3:d9:77:c8:de:17:6d:0f:7b:86:
                    eb:a8:87:a5:7f:39:71:04:28:b0:60:8a:03:de:9d:
                    60:85:b8:bb:ff:9b:e1:70:26:4f:d4:f6:21:f2:ba:
                    84:8f:81:7a:f0:5b:7f:19:10:b3:87:88:51:bc:ea:
                    c5:b3:ae:87:9b:4f:41:67:5f:06:72:bc:0b:95:82:
                    c0:41:df:99:7e:61:39:54:aa:89:c3:f3:a3:51:e5:
                    98:ae:62:1f:ee:1e:44:6f:23:e6:df:2b:70:d5:72:
                    6d:33:f0:58:fe:98:18:18:27:4f:a9:bd:ab:2d:7c:
                    e6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:41:EA:A2:42:65:13:7C:31:FE:9E:60:59:E5:2E:65:78:61:96:A5
            X509v3 Authority Key Identifier:
                keyid:7B:BA:79:9A:94:77:0E:31:F1:6F:69:1B:E6:43:DE:07:18:D9:88:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/304B9C2550FC9A369B6FF451607501F38218BD478B69FE790F1379077CCA9428/0/7BBA799A94770E31F16F691BE643DE0718D988E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7BBA799A94770E31F16F691BE643DE0718D988E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/304B9C2550FC9A369B6FF451607501F38218BD478B69FE790F1379077CCA9428/0/323830313a31363a313030303a3a2f34382d3438203d3e20323634363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:16:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:c0:f7:6a:b2:b2:ad:d6:e6:6c:b7:17:8c:f2:28:6d:60:66:
         13:e4:1e:fc:5e:cf:12:63:de:15:3d:df:50:0f:ad:82:ef:ed:
         85:65:cb:d4:4b:e3:d9:e8:06:e9:cc:fb:76:ab:a1:46:0e:5e:
         51:82:c8:3e:c1:a0:c6:0b:c3:67:96:7c:b4:b1:53:2d:da:45:
         07:71:32:e7:4c:b7:12:88:37:1a:31:36:d6:70:93:ef:7b:d0:
         2c:c0:0f:67:ca:0e:1f:1e:e8:1f:71:22:9c:22:ff:a6:8b:01:
         66:93:c8:7d:40:80:e9:79:91:8b:80:4a:5f:39:4e:2c:cc:8d:
         1c:ed:fd:25:24:cf:2a:a2:d0:c5:2e:1c:78:b4:d9:5f:a3:28:
         06:d3:48:09:b6:bc:dd:0b:7e:b0:50:6e:8c:0b:aa:d8:4e:47:
         db:5a:bb:65:49:e2:5e:31:a7:10:af:35:6a:10:e7:81:3f:62:
         08:d4:59:d4:aa:81:fe:4b:ce:93:be:3d:5e:96:a1:34:b4:0d:
         ca:ef:3a:9c:d5:7f:5b:8a:05:8c:a0:e8:1b:5c:ec:ad:c7:a3:
         84:f6:b2:65:c7:f5:46:ea:7a:1c:26:d3:56:86:26:66:e7:b6:
         c4:7c:4d:9c:0f:43:72:eb:78:ce:e5:5e:76:2f:04:f2:0f:3c:
         ae:ef:2c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:29:37 2026 by rpki-client