This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4BA37A459F293C30036216BB44FE99FC147CD8BFFDE2FF3C5E67537287481E60/0/323830313a3162393a3a2f34382d3438203d3e20323732393532.roa
File:                     323830313a3162393a3a2f34382d3438203d3e20323732393532.roa (raw, json)
Hash identifier:          /EiobGKf5oIE40lOyMXzyjObxOhVnKw6068y32eeunc=
Subject key identifier:   01:60:C3:75:AC:5B:7F:C6:79:FA:57:22:54:AC:22:3D:56:51:3B:18
Certificate issuer:       /CN=721723EE6C96BAE63225C18652977F8E404DBD28
Certificate serial:       242B590AF884DA090245041EC17DADC410C099
Authority key identifier: 72:17:23:EE:6C:96:BA:E6:32:25:C1:86:52:97:7F:8E:40:4D:BD:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/721723EE6C96BAE63225C18652977F8E404DBD28.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4BA37A459F293C30036216BB44FE99FC147CD8BFFDE2FF3C5E67537287481E60/0/323830313a3162393a3a2f34382d3438203d3e20323732393532.roa
Signing time:             Tue 06 Jan 2026 19:10:37 +0000
ROA not before:           Tue 06 Jan 2026 19:05:37 +0000
ROA not after:            Tue 05 Jan 2027 19:10:37 +0000
asID:                     272952
IP address blocks:        2801:1b9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4BA37A459F293C30036216BB44FE99FC147CD8BFFDE2FF3C5E67537287481E60/0/721723EE6C96BAE63225C18652977F8E404DBD28.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4BA37A459F293C30036216BB44FE99FC147CD8BFFDE2FF3C5E67537287481E60/0/721723EE6C96BAE63225C18652977F8E404DBD28.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/721723EE6C96BAE63225C18652977F8E404DBD28.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 01:31:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:2b:59:0a:f8:84:da:09:02:45:04:1e:c1:7d:ad:c4:10:c0:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=721723EE6C96BAE63225C18652977F8E404DBD28
        Validity
            Not Before: Jan  6 19:05:37 2026 GMT
            Not After : Jan  5 19:10:37 2027 GMT
        Subject: CN=0160C375AC5B7FC679FA572254AC223D56513B18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3b:d2:b1:17:6b:ac:e9:87:7f:2d:fa:40:f8:
                    7e:aa:a4:82:5f:49:3c:32:42:0a:44:37:73:5a:8e:
                    5d:f4:de:c4:5b:45:85:3f:35:74:a7:73:b2:2f:28:
                    a0:ed:7a:06:5a:70:13:26:01:df:84:48:60:4c:4f:
                    a7:62:96:ad:75:13:cc:be:ff:6d:51:88:70:38:06:
                    bb:fb:f7:64:a2:17:2a:fc:63:4f:19:d3:da:3b:0f:
                    cc:04:c1:4b:40:5a:ff:15:30:46:f3:9f:76:9c:1d:
                    55:5f:eb:f8:0b:22:03:12:8d:7a:6f:bb:4d:3c:31:
                    36:ec:ca:92:a9:39:27:35:dc:42:b7:02:fe:af:86:
                    6e:ce:b6:62:49:ed:58:89:b0:f4:0b:b6:ee:a9:71:
                    8c:74:69:0e:c3:12:2f:ee:40:cb:6d:88:48:13:aa:
                    62:dc:f6:75:a7:39:67:73:89:1c:2b:40:35:53:0b:
                    73:7f:2c:e8:b1:73:ba:9d:30:d7:fa:13:45:29:e9:
                    9f:aa:8c:37:d3:15:20:9f:f6:65:e0:6c:d5:29:0e:
                    11:ad:d8:38:25:64:0c:87:d5:93:2f:25:ca:65:11:
                    ce:93:fb:21:97:1d:e4:bf:dd:30:77:df:e7:41:f6:
                    50:5d:63:79:74:b5:8b:1b:3d:d3:b3:07:5d:d2:52:
                    88:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:60:C3:75:AC:5B:7F:C6:79:FA:57:22:54:AC:22:3D:56:51:3B:18
            X509v3 Authority Key Identifier:
                keyid:72:17:23:EE:6C:96:BA:E6:32:25:C1:86:52:97:7F:8E:40:4D:BD:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4BA37A459F293C30036216BB44FE99FC147CD8BFFDE2FF3C5E67537287481E60/0/721723EE6C96BAE63225C18652977F8E404DBD28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/721723EE6C96BAE63225C18652977F8E404DBD28.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4BA37A459F293C30036216BB44FE99FC147CD8BFFDE2FF3C5E67537287481E60/0/323830313a3162393a3a2f34382d3438203d3e20323732393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b9::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:84:37:3e:24:47:3b:76:bc:f4:50:74:48:e9:ab:df:f1:2e:
         18:5d:3b:75:6c:dc:5c:2a:cc:de:be:76:94:2e:5f:c7:60:97:
         aa:5f:8f:88:a3:78:f4:d7:7b:c6:e2:1d:cd:93:6c:05:e3:73:
         75:1d:7d:7e:65:e3:82:9c:6b:28:48:3e:29:b0:02:d8:ac:45:
         85:ca:4c:e8:4b:27:72:51:42:33:45:c3:b6:9a:5a:f1:d4:07:
         97:09:13:3e:25:47:3b:15:fb:2e:13:c9:6a:22:99:2c:72:23:
         91:d6:db:0a:6d:94:2b:23:46:be:c7:a8:84:48:1d:69:3f:98:
         c8:ec:a8:66:86:1e:80:43:ff:7e:10:18:69:0f:fc:64:ff:44:
         c1:bf:7f:81:0b:2a:52:82:64:0a:72:68:16:a8:c6:d8:90:13:
         82:10:9e:e5:fd:dc:c1:d4:c0:0e:5e:c0:84:a3:f8:38:93:7b:
         66:83:56:00:84:db:92:5f:80:9a:b1:94:a8:2c:b7:5b:01:c1:
         ff:1e:ba:a2:c2:3c:58:49:ba:03:f2:f8:08:2b:78:83:bb:09:
         09:5c:45:e3:43:4a:7a:dc:01:a3:2d:3c:2a:84:ce:56:d2:09:
         fc:60:a8:2b:31:96:46:54:8e:63:a0:21:e3:1c:15:f3:c3:74:
         93:c8:bd:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:49:37 2026 by rpki-client