This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/348FD3A8D91FF9721B29593786923BC63FDCB54B5E65F249590B1DD45A7297C6/0/323830313a3163303a3a2f33392d3430203d3e203532343234.roa
File:                     323830313a3163303a3a2f33392d3430203d3e203532343234.roa (raw, json)
Hash identifier:          uj4mO+fVggAWKQ/gXyX1gK4yRgp4ugnuzDHzieB7nF4=
Subject key identifier:   CA:B2:49:58:9F:85:36:76:12:FD:0D:39:57:73:FF:6C:FE:09:8F:E7
Certificate issuer:       /CN=A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5
Certificate serial:       78371BFDB6C3E972B40A9703A79C304487CACDAA
Authority key identifier: A1:DE:78:60:58:F6:42:AD:7E:C9:BD:0E:15:4D:6B:F9:E2:E1:87:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/348FD3A8D91FF9721B29593786923BC63FDCB54B5E65F249590B1DD45A7297C6/0/323830313a3163303a3a2f33392d3430203d3e203532343234.roa
Signing time:             Tue 06 Jan 2026 19:01:12 +0000
ROA not before:           Tue 06 Jan 2026 18:56:12 +0000
ROA not after:            Tue 05 Jan 2027 19:01:12 +0000
asID:                     52424
IP address blocks:        2801:1c0::/39 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/348FD3A8D91FF9721B29593786923BC63FDCB54B5E65F249590B1DD45A7297C6/0/A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/348FD3A8D91FF9721B29593786923BC63FDCB54B5E65F249590B1DD45A7297C6/0/A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 07:32:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:37:1b:fd:b6:c3:e9:72:b4:0a:97:03:a7:9c:30:44:87:ca:cd:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5
        Validity
            Not Before: Jan  6 18:56:12 2026 GMT
            Not After : Jan  5 19:01:12 2027 GMT
        Subject: CN=CAB249589F85367612FD0D395773FF6CFE098FE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c3:b6:d7:ca:77:21:15:cd:37:f2:86:62:8f:
                    33:2c:e9:cb:ae:99:38:05:b2:1e:45:2f:3c:27:0b:
                    e6:7c:75:22:09:c6:0a:be:c8:fa:2c:e4:21:68:7d:
                    ae:25:91:0e:65:98:8f:86:77:de:df:53:f9:aa:70:
                    ff:c0:49:06:ed:c7:4c:6c:a6:9d:e1:5c:c7:d9:65:
                    b6:84:7d:9b:95:f4:a4:9c:a1:fe:e7:48:a9:8e:d9:
                    46:2e:57:74:e2:9a:d7:e1:a1:01:85:53:c8:a6:71:
                    65:de:bc:7e:f3:a2:4e:7d:5c:58:b9:c6:bc:54:98:
                    9c:2f:39:d3:d5:fe:df:a0:90:87:20:0e:a7:a1:22:
                    a0:83:af:09:92:6e:ae:7e:cf:0d:cd:00:54:c0:08:
                    df:ba:0d:5c:d6:54:a8:bc:35:67:50:fe:2b:6b:29:
                    7e:72:c8:97:26:b6:26:90:11:04:5b:a8:48:16:18:
                    e3:3d:41:83:b8:d8:7c:7f:5d:f3:ac:58:01:a9:0e:
                    3e:0b:2f:a6:d9:d7:95:5c:bb:75:2c:73:7c:44:cf:
                    a0:19:53:57:fd:f9:1b:94:cb:ce:81:2a:d9:30:73:
                    8d:92:fe:48:aa:27:d0:06:b8:dc:c9:5f:91:a1:d6:
                    97:0b:32:d8:09:1c:1d:5b:ba:44:64:fb:67:aa:09:
                    e4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:B2:49:58:9F:85:36:76:12:FD:0D:39:57:73:FF:6C:FE:09:8F:E7
            X509v3 Authority Key Identifier:
                keyid:A1:DE:78:60:58:F6:42:AD:7E:C9:BD:0E:15:4D:6B:F9:E2:E1:87:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/348FD3A8D91FF9721B29593786923BC63FDCB54B5E65F249590B1DD45A7297C6/0/A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/348FD3A8D91FF9721B29593786923BC63FDCB54B5E65F249590B1DD45A7297C6/0/323830313a3163303a3a2f33392d3430203d3e203532343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c0::/39

    Signature Algorithm: sha256WithRSAEncryption
         41:ab:c6:d3:bb:bb:a3:f8:a2:f2:c7:6b:d6:ae:e8:a0:af:17:
         be:93:cc:be:24:5d:64:f1:6c:bc:8d:c3:be:cc:2d:00:ab:09:
         c6:fe:7a:4d:05:85:f7:1d:c5:78:11:bb:93:52:d3:d0:0f:e1:
         1a:3b:e7:74:c2:43:bb:fe:d9:55:ef:c5:41:13:2d:8c:2e:84:
         97:c2:9d:5e:04:b9:d3:4f:09:1e:90:ee:fb:a2:d1:a6:7e:56:
         3e:6d:29:40:43:7a:21:95:bf:58:a7:64:1e:44:d2:cb:22:29:
         27:54:ff:51:ba:b0:63:57:41:35:d6:39:da:38:18:e2:39:f2:
         02:d7:4c:f2:fe:d2:46:4e:27:dc:f0:51:3e:51:17:9f:4e:b1:
         8e:ad:ed:aa:d8:72:00:23:af:95:89:43:5c:17:23:49:85:fb:
         4c:bc:e1:7f:f6:56:86:ff:63:74:a3:a0:b5:a0:d8:d7:e3:e0:
         51:d3:22:cb:f3:81:15:99:f6:76:97:21:d6:ea:8a:ef:d0:df:
         66:e7:5a:f2:2e:2f:6d:c8:c8:81:02:38:5e:73:1b:d9:2f:09:
         18:da:4f:65:38:68:ce:e7:d9:3d:49:dd:9f:db:cd:76:7e:17:
         13:0a:73:c1:46:30:b8:2a:d8:05:e3:e4:8f:37:fb:f3:92:a4:
         3c:77:f0:28
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUeDcb/bbD6XK0CpcDp5wwRIfKzaowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTFERTc4NjA1OEY2NDJBRDdFQzlCRDBFMTU0RDZCRjlF
MkUxODdGNTAeFw0yNjAxMDYxODU2MTJaFw0yNzAxMDUxOTAxMTJaMDMxMTAvBgNV
BAMTKENBQjI0OTU4OUY4NTM2NzYxMkZEMEQzOTU3NzNGRjZDRkUwOThGRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjw7bXynchFc038oZijzMs6cuu
mTgFsh5FLzwnC+Z8dSIJxgq+yPos5CFofa4lkQ5lmI+Gd97fU/mqcP/ASQbtx0xs
pp3hXMfZZbaEfZuV9KScof7nSKmO2UYuV3TimtfhoQGFU8imcWXevH7zok59XFi5
xrxUmJwvOdPV/t+gkIcgDqehIqCDrwmSbq5+zw3NAFTACN+6DVzWVKi8NWdQ/itr
KX5yyJcmtiaQEQRbqEgWGOM9QYO42Hx/XfOsWAGpDj4LL6bZ15Vcu3Usc3xEz6AZ
U1f9+RuUy86BKtkwc42S/kiqJ9AGuNzJX5Gh1pcLMtgJHB1bukRk+2eqCeQ5AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUyrJJWJ+FNnYS/Q05V3P/bP4Jj+cwHwYDVR0j
BBgwFoAUod54YFj2Qq1+yb0OFU1r+eLhh/UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNDhGRDNBOEQ5MUZGOTcyMUIyOTU5Mzc4NjkyM0JDNjNG
RENCNTRCNUU2NUYyNDk1OTBCMURENDVBNzI5N0M2LzAvQTFERTc4NjA1OEY2NDJB
RDdFQzlCRDBFMTU0RDZCRjlFMkUxODdGNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMURFNzg2MDU4RjY0MkFEN0VD
OUJEMEUxNTRENkJGOUUyRTE4N0Y1LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzQ4RkQzQThEOTFGRjk3MjFCMjk1OTM3ODY5MjNCQzYzRkRDQjU0QjVF
NjVGMjQ5NTkwQjFERDQ1QTcyOTdDNi8wLzMyMzgzMDMxM2EzMTYzMzAzYTNhMmYz
MzM5MmQzNDMwMjAzZDNlMjAzNTMyMzQzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBKAEBwAAwDQYJ
KoZIhvcNAQELBQADggEBAEGrxtO7u6P4ovLHa9au6KCvF76TzL4kXWTxbLyNw77M
LQCrCcb+ek0FhfcdxXgRu5NS09AP4Ro753TCQ7v+2VXvxUETLYwuhJfCnV4EudNP
CR6Q7vui0aZ+Vj5tKUBDeiGVv1inZB5E0ssiKSdU/1G6sGNXQTXWOdo4GOI58gLX
TPL+0kZOJ9zwUT5RF59OsY6t7arYcgAjr5WJQ1wXI0mF+0y84X/2Vob/Y3SjoLWg
2Nfj4FHTIsvzgRWZ9naXIdbqiu/Q32bnWvIuL23IyIECOF5zG9kvCRjaT2U4aM7n
2T1J3Z/bzXZ+FxMKc8FGMLgq2AXj5I83+/OSpDx38Cg=
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:04:30 2026 by rpki-client