This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/323830333a393439303a3a2f33322d3438203d3e20323732383233.roa
File:                     323830333a393439303a3a2f33322d3438203d3e20323732383233.roa (raw, json)
Hash identifier:          xr7qdp5RlAAtSHMfn+keb0e1GcHY4lZiz2YQT2CjRdQ=
Subject key identifier:   1A:11:6E:4B:50:B1:BE:C5:63:A6:DF:29:B9:7F:38:07:5A:A0:4E:5F
Certificate issuer:       /CN=2AFF142AE78A7D965F8E227DFAA659E2FEBDE078
Certificate serial:       0F8D921FBA23D7E7F0BBB75EACA592B80EB0D4B6
Authority key identifier: 2A:FF:14:2A:E7:8A:7D:96:5F:8E:22:7D:FA:A6:59:E2:FE:BD:E0:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/323830333a393439303a3a2f33322d3438203d3e20323732383233.roa
Signing time:             Tue 06 Jan 2026 19:20:42 +0000
ROA not before:           Tue 06 Jan 2026 19:15:42 +0000
ROA not after:            Tue 05 Jan 2027 19:20:42 +0000
asID:                     272823
IP address blocks:        2803:9490::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 12:46:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:8d:92:1f:ba:23:d7:e7:f0:bb:b7:5e:ac:a5:92:b8:0e:b0:d4:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AFF142AE78A7D965F8E227DFAA659E2FEBDE078
        Validity
            Not Before: Jan  6 19:15:42 2026 GMT
            Not After : Jan  5 19:20:42 2027 GMT
        Subject: CN=1A116E4B50B1BEC563A6DF29B97F38075AA04E5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0b:79:31:e8:69:fe:80:90:09:0b:b5:54:18:
                    79:94:85:4b:ba:19:03:0f:94:6e:f8:da:76:01:91:
                    ff:09:82:b1:70:fb:c8:99:c5:4d:a4:71:ce:da:11:
                    d8:e6:a0:cb:00:30:8f:ba:f2:be:57:23:48:ea:dd:
                    7b:c0:19:10:bd:fb:86:e3:30:fa:ee:84:a2:e1:fe:
                    06:d8:96:81:03:8d:5f:43:7a:9a:4d:db:44:b8:e1:
                    47:1f:e6:c2:07:63:12:4a:67:ef:0c:ec:86:95:cc:
                    08:e7:cd:48:e3:c8:17:c7:4c:68:ef:97:49:26:37:
                    60:1e:86:e8:f5:70:f0:88:d8:bd:04:27:eb:0f:f9:
                    f5:b9:73:12:c1:fd:33:21:5f:b0:c4:79:d8:2b:ae:
                    91:25:a3:9b:c3:d3:99:53:ff:c3:4b:e0:52:d4:c4:
                    ee:4b:09:d4:cb:d5:14:47:2b:ec:f8:5d:63:72:c2:
                    00:e1:bf:c1:f4:c3:e7:5e:c0:f0:c9:a3:74:c7:c6:
                    f6:e3:0e:75:38:dc:49:00:fa:61:09:b2:e6:c1:4a:
                    07:ca:43:97:75:70:3c:35:12:76:2f:e1:41:4e:3d:
                    38:6c:9f:d3:1c:7e:3e:5f:62:c5:93:24:60:63:15:
                    a5:16:bb:6e:d4:dd:45:eb:d1:30:1f:2c:43:fb:b1:
                    13:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:11:6E:4B:50:B1:BE:C5:63:A6:DF:29:B9:7F:38:07:5A:A0:4E:5F
            X509v3 Authority Key Identifier:
                keyid:2A:FF:14:2A:E7:8A:7D:96:5F:8E:22:7D:FA:A6:59:E2:FE:BD:E0:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/323830333a393439303a3a2f33322d3438203d3e20323732383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9490::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:d4:18:ae:82:ed:cf:d9:1c:40:78:17:37:6f:2d:4e:d3:ae:
         fc:05:7b:83:d3:5e:1f:88:27:47:cf:f3:47:b4:ae:9e:c6:c2:
         38:53:6c:f5:32:94:f2:10:98:78:14:3a:48:ed:a4:ff:4d:90:
         08:c8:fd:92:e1:fd:8d:95:02:c6:58:0b:3d:d0:1d:04:c1:23:
         e7:53:19:a1:3f:5b:ff:bc:b6:20:eb:82:74:49:ef:f1:38:c6:
         22:ce:a3:ec:0b:79:94:7c:99:b4:75:43:30:34:86:eb:a8:9c:
         4c:30:2e:e2:ca:f1:80:d0:87:df:f0:1c:59:7b:78:09:51:b0:
         b5:18:08:12:32:21:d9:d9:42:28:ba:a0:12:66:e8:98:cb:4b:
         77:ed:af:f4:8e:6a:aa:c7:82:b8:0c:31:08:9d:52:9b:4c:18:
         84:39:a1:50:d4:33:ec:cd:d9:11:8a:3b:11:ae:94:56:b9:9d:
         6c:a5:93:1d:56:60:1c:b5:f8:dc:ca:16:28:45:90:c4:e1:20:
         3a:0e:81:b5:4f:f0:a1:d7:50:e7:4c:ab:49:54:0e:f0:49:ab:
         e6:f9:fa:cb:1b:de:b9:cc:f6:77:f9:68:43:c2:b8:c8:05:be:
         d2:f6:e6:db:43:08:7e:ad:34:18:20:49:35:32:9e:3b:4d:7a:
         31:6e:ee:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:30:40 2026 by rpki-client