This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/42F4A7A284B4F77FC1779AF2C8A0DB08941699F86880911AA796D19E018D4455/0/323830313a3137653a3a2f34342d3438203d3e20323632353839.roa
File:                     323830313a3137653a3a2f34342d3438203d3e20323632353839.roa (raw, json)
Hash identifier:          WW5elYSH1SlElt61EBRbRm1YMk9cH+Tgv5dtuQRau9Y=
Subject key identifier:   77:66:83:0D:9E:44:DF:FE:44:51:2D:D2:9C:92:2D:EB:60:8B:B4:C4
Certificate issuer:       /CN=1109011CA008BAA2F51E264C73C31CC3E90D1CC5
Certificate serial:       75BDCA8C3AF5698EF53A1FC3AA6BB606B80B2E40
Authority key identifier: 11:09:01:1C:A0:08:BA:A2:F5:1E:26:4C:73:C3:1C:C3:E9:0D:1C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1109011CA008BAA2F51E264C73C31CC3E90D1CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/42F4A7A284B4F77FC1779AF2C8A0DB08941699F86880911AA796D19E018D4455/0/323830313a3137653a3a2f34342d3438203d3e20323632353839.roa
Signing time:             Tue 06 Jan 2026 19:41:51 +0000
ROA not before:           Tue 06 Jan 2026 19:36:51 +0000
ROA not after:            Tue 05 Jan 2027 19:41:51 +0000
asID:                     262589
IP address blocks:        2801:17e::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/42F4A7A284B4F77FC1779AF2C8A0DB08941699F86880911AA796D19E018D4455/0/1109011CA008BAA2F51E264C73C31CC3E90D1CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/42F4A7A284B4F77FC1779AF2C8A0DB08941699F86880911AA796D19E018D4455/0/1109011CA008BAA2F51E264C73C31CC3E90D1CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1109011CA008BAA2F51E264C73C31CC3E90D1CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:bd:ca:8c:3a:f5:69:8e:f5:3a:1f:c3:aa:6b:b6:06:b8:0b:2e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1109011CA008BAA2F51E264C73C31CC3E90D1CC5
        Validity
            Not Before: Jan  6 19:36:51 2026 GMT
            Not After : Jan  5 19:41:51 2027 GMT
        Subject: CN=7766830D9E44DFFE44512DD29C922DEB608BB4C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:32:88:88:b4:f5:18:56:68:12:90:36:d0:44:
                    77:fe:02:c4:74:43:b4:0a:83:fd:c4:05:67:c3:23:
                    c8:6f:4c:7f:64:9d:fc:14:d1:86:c3:f1:fb:e7:19:
                    6f:73:28:b5:88:5a:36:76:70:42:b7:54:af:78:10:
                    6f:3f:72:40:28:1c:28:06:67:90:e4:0d:9d:a2:33:
                    5c:48:a6:fc:50:b9:65:45:a9:ec:1c:e1:ce:9a:9e:
                    98:de:70:9c:3a:13:03:a1:1c:a4:80:f9:c0:8f:77:
                    88:29:62:bd:d8:a4:96:0b:3c:c9:aa:0f:ac:9d:b0:
                    08:9d:f0:21:75:74:29:75:12:e3:a2:96:77:9d:5a:
                    00:64:0f:97:a1:ef:5e:9f:9f:7c:35:78:60:5f:c3:
                    41:bb:ba:fa:b5:5d:51:33:85:60:f8:a1:c1:94:da:
                    09:e0:de:0d:bc:d6:89:f5:6d:c6:85:93:f3:34:46:
                    f7:be:9d:ae:97:c3:a4:6e:f3:36:e4:e6:15:fa:22:
                    05:dd:34:7e:bf:04:52:ec:7e:86:68:71:c7:bf:12:
                    ef:a0:07:b3:39:73:2f:0f:1f:18:44:8f:a7:13:6a:
                    6f:98:a6:81:7b:38:be:63:6e:50:84:7d:cd:d2:9b:
                    32:4f:73:69:80:62:2b:b5:73:13:21:6c:8d:0c:83:
                    58:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:66:83:0D:9E:44:DF:FE:44:51:2D:D2:9C:92:2D:EB:60:8B:B4:C4
            X509v3 Authority Key Identifier:
                keyid:11:09:01:1C:A0:08:BA:A2:F5:1E:26:4C:73:C3:1C:C3:E9:0D:1C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/42F4A7A284B4F77FC1779AF2C8A0DB08941699F86880911AA796D19E018D4455/0/1109011CA008BAA2F51E264C73C31CC3E90D1CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1109011CA008BAA2F51E264C73C31CC3E90D1CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/42F4A7A284B4F77FC1779AF2C8A0DB08941699F86880911AA796D19E018D4455/0/323830313a3137653a3a2f34342d3438203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17e::/44

    Signature Algorithm: sha256WithRSAEncryption
         61:89:0d:74:29:38:1e:88:95:20:28:4b:18:b2:01:bc:ff:18:
         61:8f:9e:aa:da:45:f7:a8:7c:18:68:87:9a:8b:f9:68:e5:e3:
         cd:a7:cd:53:99:d7:18:c9:e6:f7:17:05:e2:f1:5b:37:e7:90:
         9e:a7:26:23:76:8f:82:3e:1e:e9:e9:9f:03:ad:38:5a:89:54:
         8a:02:f2:93:11:f9:d8:66:c4:a2:c4:c5:d6:4b:45:80:dc:42:
         9c:b4:7e:60:6b:4d:06:8c:63:62:60:cb:0c:20:9b:44:36:40:
         07:c0:ea:50:26:e2:1e:83:bd:22:03:ab:17:e8:64:99:a3:a9:
         40:a1:05:38:5f:76:06:20:f4:6f:4c:ac:ab:08:29:be:2e:20:
         f5:cc:44:fe:3d:2a:3f:a4:45:62:b8:3c:53:23:df:4e:25:79:
         01:dc:1b:00:2e:10:b5:6f:87:8c:69:51:53:75:b0:ea:11:6d:
         33:d9:73:84:ff:91:86:f1:57:83:74:32:8f:50:f7:85:71:c7:
         d3:5e:df:a1:f8:bd:27:ee:e0:b7:48:46:ea:15:08:ce:27:ca:
         b5:7d:eb:b8:e2:d0:8a:c3:29:e9:3e:5f:cb:9f:0b:81:18:b9:
         aa:a5:74:68:69:06:b1:58:a2:df:05:cc:26:56:34:d6:6a:af:
         a2:db:a8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:25:36 2026 by rpki-client