This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4BA37A459F293C30036216BB44FE99FC147CD8BFFDE2FF3C5E67537287481E60/0/323830313a3162393a343a3a2f34382d3438203d3e20323732393532.roa
File:                     323830313a3162393a343a3a2f34382d3438203d3e20323732393532.roa (raw, json)
Hash identifier:          LBX3Xq895+NK9fXGDxQrSokP8+fNUd9eA6LCb4o5QPw=
Subject key identifier:   6D:25:50:30:34:82:CB:F1:4A:B1:6F:CD:24:55:FD:8B:9B:A3:2B:0A
Certificate issuer:       /CN=721723EE6C96BAE63225C18652977F8E404DBD28
Certificate serial:       21CCB2382447AEF5CE401E6A79469BDB4C618D7F
Authority key identifier: 72:17:23:EE:6C:96:BA:E6:32:25:C1:86:52:97:7F:8E:40:4D:BD:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/721723EE6C96BAE63225C18652977F8E404DBD28.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4BA37A459F293C30036216BB44FE99FC147CD8BFFDE2FF3C5E67537287481E60/0/323830313a3162393a343a3a2f34382d3438203d3e20323732393532.roa
Signing time:             Tue 06 Jan 2026 19:10:37 +0000
ROA not before:           Tue 06 Jan 2026 19:05:37 +0000
ROA not after:            Tue 05 Jan 2027 19:10:37 +0000
asID:                     272952
IP address blocks:        2801:1b9:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4BA37A459F293C30036216BB44FE99FC147CD8BFFDE2FF3C5E67537287481E60/0/721723EE6C96BAE63225C18652977F8E404DBD28.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4BA37A459F293C30036216BB44FE99FC147CD8BFFDE2FF3C5E67537287481E60/0/721723EE6C96BAE63225C18652977F8E404DBD28.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/721723EE6C96BAE63225C18652977F8E404DBD28.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:cc:b2:38:24:47:ae:f5:ce:40:1e:6a:79:46:9b:db:4c:61:8d:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=721723EE6C96BAE63225C18652977F8E404DBD28
        Validity
            Not Before: Jan  6 19:05:37 2026 GMT
            Not After : Jan  5 19:10:37 2027 GMT
        Subject: CN=6D2550303482CBF14AB16FCD2455FD8B9BA32B0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:36:5c:1e:ef:22:e1:9e:8e:b9:6f:a4:f6:9a:
                    bd:bb:e2:de:c9:01:85:9a:d3:12:bf:76:7f:e9:65:
                    83:e4:47:f3:f3:12:7f:82:3a:63:eb:be:7c:2f:8a:
                    39:d7:85:f5:37:38:b8:ee:a5:99:6c:9d:8f:05:09:
                    35:c9:28:dc:89:8a:52:c7:ce:cb:6d:70:49:40:92:
                    7b:7b:4f:a0:02:6c:24:65:b8:b2:59:e0:9e:56:af:
                    0f:30:9e:9f:8a:97:c3:28:f9:22:a2:55:9e:50:af:
                    f2:65:8f:2e:52:39:aa:d6:aa:af:e0:91:d5:7e:70:
                    63:de:58:fe:7f:e5:97:9b:c7:60:d3:1e:69:ae:f8:
                    43:db:27:9a:23:8e:71:83:bd:41:31:7b:23:62:e3:
                    74:c5:4c:1b:2c:e8:0d:ae:41:50:48:65:26:f9:c2:
                    4a:49:32:30:ae:cc:eb:0b:f8:4b:5b:89:3f:82:97:
                    5d:b4:7f:6b:9e:86:94:82:c1:70:36:96:76:08:cd:
                    2b:a4:1a:1e:d3:01:78:a9:ae:3b:03:3b:89:31:30:
                    5f:04:7a:db:89:fd:5a:da:5f:e0:1e:12:31:0f:6d:
                    89:9e:e6:85:ec:fa:b6:25:ce:96:9a:ff:77:31:8a:
                    8e:4b:55:9d:38:8c:0e:27:f0:93:cd:79:10:2f:96:
                    ac:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:25:50:30:34:82:CB:F1:4A:B1:6F:CD:24:55:FD:8B:9B:A3:2B:0A
            X509v3 Authority Key Identifier:
                keyid:72:17:23:EE:6C:96:BA:E6:32:25:C1:86:52:97:7F:8E:40:4D:BD:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4BA37A459F293C30036216BB44FE99FC147CD8BFFDE2FF3C5E67537287481E60/0/721723EE6C96BAE63225C18652977F8E404DBD28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/721723EE6C96BAE63225C18652977F8E404DBD28.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4BA37A459F293C30036216BB44FE99FC147CD8BFFDE2FF3C5E67537287481E60/0/323830313a3162393a343a3a2f34382d3438203d3e20323732393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b9:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:a8:fc:24:e5:8e:1c:4a:f2:63:0b:44:89:22:2f:7e:41:45:
         e0:f0:b9:05:58:32:4f:83:29:6e:4a:d7:cd:ed:64:9b:28:b1:
         32:fe:73:0a:2e:dc:95:ae:e5:0e:39:a6:e9:8e:ca:02:9f:8d:
         20:0f:1c:1a:3c:53:4d:dd:6d:bc:b3:50:8b:41:a4:c5:17:f3:
         89:02:5e:71:b7:ad:fa:ba:ad:a0:51:1a:54:29:14:7f:64:b9:
         56:6b:f0:b9:31:f9:d3:0e:c3:40:cd:ad:64:db:49:3e:a6:0a:
         69:cf:bc:c5:10:a1:24:2a:ed:70:28:da:a6:72:e3:2a:28:84:
         7d:a9:cc:d4:a0:f0:d4:cb:fb:27:fc:59:62:72:9b:6b:5f:3b:
         fe:73:65:cb:41:92:92:c3:11:d7:3b:ae:c1:91:d5:0e:57:6f:
         77:33:4c:91:88:49:b4:6c:32:78:c6:63:30:d0:11:ac:d3:f5:
         31:03:db:be:3e:d7:b0:d0:b6:f8:df:82:42:c1:52:be:eb:b2:
         79:3a:6d:c0:78:42:28:74:37:27:18:b1:f8:72:a5:3a:0d:1d:
         22:c7:e8:4e:17:80:45:b7:d0:de:1f:4d:12:2d:c3:f6:a5:de:
         0d:6f:21:97:ef:f4:7c:ae:d6:cf:42:54:1f:12:63:d2:2e:2a:
         0d:45:6a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:25:51 2026 by rpki-client