This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/323830303a6138303a3a2f33322d3334203d3e203532323638.roa
File:                     323830303a6138303a3a2f33322d3334203d3e203532323638.roa (raw, json)
Hash identifier:          qhGeAUOG/uJt1BkhX09ZwwXjUCcvt8Y9NdJfpC/IuJY=
Subject key identifier:   84:90:A9:C9:86:78:E4:E0:BF:D2:99:48:B4:FC:7C:F1:83:17:7F:D9
Certificate issuer:       /CN=A79979549298C107B25C6C7E7FC2C7DBB295FC02
Certificate serial:       25CAC952AB8BE217AEE3013AD71D05BF73E73C17
Authority key identifier: A7:99:79:54:92:98:C1:07:B2:5C:6C:7E:7F:C2:C7:DB:B2:95:FC:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/323830303a6138303a3a2f33322d3334203d3e203532323638.roa
Signing time:             Tue 13 Jan 2026 15:00:15 +0000
ROA not before:           Tue 13 Jan 2026 14:55:15 +0000
ROA not after:            Tue 12 Jan 2027 15:00:15 +0000
asID:                     52268
IP address blocks:        2800:a80::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 02:26:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:ca:c9:52:ab:8b:e2:17:ae:e3:01:3a:d7:1d:05:bf:73:e7:3c:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A79979549298C107B25C6C7E7FC2C7DBB295FC02
        Validity
            Not Before: Jan 13 14:55:15 2026 GMT
            Not After : Jan 12 15:00:15 2027 GMT
        Subject: CN=8490A9C98678E4E0BFD29948B4FC7CF183177FD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0f:4f:63:41:c1:5e:14:7e:0f:ae:f8:b1:a8:
                    c7:88:98:1c:3e:d5:ff:11:ec:fa:18:9d:58:38:7d:
                    40:0e:fa:d8:e3:73:b1:10:2c:33:d3:14:ba:ce:3a:
                    b6:58:d5:29:b4:03:3b:44:bd:52:bf:2c:de:13:22:
                    f9:cf:86:53:b6:cd:a0:15:31:de:80:df:78:a9:1d:
                    7b:54:80:3f:f3:6d:0c:bf:b5:ad:e9:4c:58:9c:19:
                    96:42:ea:58:e3:00:ee:fc:70:43:8d:75:ef:07:ce:
                    5d:fd:a6:95:c6:d8:cb:38:c2:22:ea:36:72:c1:04:
                    4c:4e:06:fa:bd:2c:2e:ab:c7:12:06:cf:e4:e0:05:
                    a3:3c:61:96:4b:81:4a:4c:51:5f:8b:93:6d:bf:30:
                    d6:59:f0:1e:e5:2f:ef:5c:f2:8f:10:06:cf:42:93:
                    ab:d6:c8:29:1c:46:78:10:99:8c:0d:be:5c:5b:f3:
                    e9:0f:bc:2a:0a:61:bd:11:e8:67:46:5d:27:c3:4f:
                    87:5e:61:78:f2:ff:85:64:e2:7c:f4:f0:72:cc:9c:
                    ef:df:d2:d8:36:ae:37:d7:0b:8a:f1:e9:ab:db:d6:
                    28:e4:c8:79:38:0f:b8:b2:7f:f8:c2:09:25:6a:d7:
                    4c:01:72:97:01:45:9b:e9:a9:27:23:fc:21:8b:b5:
                    c0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:90:A9:C9:86:78:E4:E0:BF:D2:99:48:B4:FC:7C:F1:83:17:7F:D9
            X509v3 Authority Key Identifier:
                keyid:A7:99:79:54:92:98:C1:07:B2:5C:6C:7E:7F:C2:C7:DB:B2:95:FC:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/323830303a6138303a3a2f33322d3334203d3e203532323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:a80::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:28:3a:4d:a6:ed:43:c3:82:ef:6f:81:57:ff:77:df:ec:f8:
         a9:2d:cb:7e:fe:7e:ab:f9:00:b3:f0:f3:20:28:1e:26:d7:ca:
         ef:57:87:cf:84:31:1a:34:05:06:46:b8:71:cc:1e:ab:ce:f3:
         a4:11:2b:f3:cb:31:bd:af:aa:82:66:33:f4:bb:9d:56:ca:69:
         b3:83:83:8d:ed:b3:77:ee:3f:76:70:da:cc:03:4a:a6:f1:9e:
         c1:0c:5f:80:8e:6f:c2:50:a5:5b:7a:cf:11:fa:b1:b1:6c:47:
         83:6d:2f:a6:df:1a:16:11:09:17:e6:cd:80:fc:1e:11:46:79:
         e5:33:7d:d5:a9:95:e4:c4:ab:3b:62:52:51:fa:89:82:0a:57:
         7d:6f:fc:64:2d:82:c3:59:78:be:86:7b:07:b4:00:70:9a:ce:
         d9:9a:5c:95:7e:d8:a4:63:19:56:f8:80:94:a0:cb:e8:e6:74:
         ab:2e:ec:c5:86:bc:a1:99:49:ca:cc:18:49:02:e3:28:76:84:
         b4:fe:a4:6e:f7:91:d5:72:57:4d:76:d7:ee:45:3f:5a:a0:ff:
         7a:49:57:54:15:cc:c1:f9:5e:47:68:08:4d:ec:58:82:e0:07:
         51:f1:79:a1:fb:ab:46:5f:f0:19:b2:1e:c3:32:0f:22:3d:23:
         ba:cd:25:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:56:42 2026 by rpki-client