This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/323030313a313338383a3a2f33322d3438203d3e20323634363834.roa
File:                     323030313a313338383a3a2f33322d3438203d3e20323634363834.roa (raw, json)
Hash identifier:          6Bv8tcarFsGGGyOpweOVt/lwQZ1/r0SPwXkoCgKv5wE=
Subject key identifier:   17:E9:C8:F4:48:D4:CA:0B:84:B4:34:E9:A5:8F:B5:5C:88:16:9B:77
Certificate issuer:       /CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
Certificate serial:       2E3D607FB9299F9C4CED22503E4214929E21DFC5
Authority key identifier: 74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/323030313a313338383a3a2f33322d3438203d3e20323634363834.roa
Signing time:             Tue 06 Jan 2026 20:56:01 +0000
ROA not before:           Tue 06 Jan 2026 20:51:01 +0000
ROA not after:            Tue 05 Jan 2027 20:56:01 +0000
asID:                     264684
IP address blocks:        2001:1388::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:3d:60:7f:b9:29:9f:9c:4c:ed:22:50:3e:42:14:92:9e:21:df:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
        Validity
            Not Before: Jan  6 20:51:01 2026 GMT
            Not After : Jan  5 20:56:01 2027 GMT
        Subject: CN=17E9C8F448D4CA0B84B434E9A58FB55C88169B77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:34:cc:cf:67:cd:cb:27:f4:80:87:ec:71:cf:
                    3d:66:07:30:6d:d8:5e:55:17:67:71:72:c0:a3:2c:
                    50:5f:47:55:e9:ef:43:d3:7b:56:b0:51:74:48:21:
                    ff:bf:4c:46:03:cd:89:8d:5e:d1:e9:51:34:85:27:
                    f0:1d:32:38:a2:70:3f:cb:d9:97:49:4b:36:71:29:
                    f6:e0:89:d4:4c:9f:73:4b:fb:cb:80:9a:5e:d6:5b:
                    81:5b:b3:76:d1:ab:f6:4d:c7:3e:3d:0a:51:4b:0e:
                    ff:96:59:6b:be:b4:dc:10:4c:02:43:d6:ba:2d:09:
                    bf:bc:02:71:73:39:43:cc:af:38:9d:ef:a4:07:8d:
                    6b:5b:53:9f:b1:bf:01:5d:d5:17:27:ab:da:bb:ec:
                    9d:45:c4:ee:5c:a1:3e:e9:5c:08:20:e2:6d:6c:70:
                    b9:67:bc:5a:4a:b3:bf:f2:b3:76:ff:a9:e7:7d:c1:
                    37:7f:4a:96:28:c6:15:5c:43:59:24:71:fa:f0:98:
                    72:2b:99:61:dc:16:2a:ed:89:d5:4b:26:04:18:d4:
                    8f:58:bb:f8:aa:70:29:c0:ed:52:08:fd:3e:d8:46:
                    76:8b:e5:9f:82:5d:e6:e5:69:4d:20:a4:b0:47:d2:
                    2f:5f:39:cb:5d:e3:6e:c5:38:e8:e9:43:2f:79:ec:
                    d3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E9:C8:F4:48:D4:CA:0B:84:B4:34:E9:A5:8F:B5:5C:88:16:9B:77
            X509v3 Authority Key Identifier:
                keyid:74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/323030313a313338383a3a2f33322d3438203d3e20323634363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1388::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:03:84:1c:6d:f4:93:64:a2:a8:c3:c4:a6:95:9d:bd:0f:0f:
         82:2c:70:b8:4d:46:d0:41:a3:10:75:9e:75:00:5c:bd:a1:61:
         a1:3f:76:b3:14:f4:48:3b:ca:0a:84:5a:21:98:3f:e4:3c:88:
         eb:b7:28:9d:9d:3b:5a:c5:36:45:6f:20:e5:53:5b:d2:01:2b:
         b0:18:2d:d7:c9:75:2b:c2:7b:98:d9:ad:87:f8:c9:35:b5:28:
         74:9f:3a:de:c1:5b:93:d2:32:03:57:ad:ea:f0:25:86:bf:52:
         32:e8:ce:bb:ee:de:29:6f:c9:d1:a7:7d:c8:e2:b0:c7:18:ac:
         f0:11:5f:22:91:1c:4c:e2:26:db:4a:ea:c6:95:e7:21:93:96:
         6b:e6:4f:b5:b5:4d:df:0c:b8:73:08:ad:a6:cb:77:30:bb:0c:
         17:d3:4a:9d:eb:12:1f:05:50:1d:b6:63:b4:2b:6e:52:8e:2d:
         9c:45:9d:95:58:4c:8c:eb:c8:b4:bc:ea:ba:6f:5b:b5:be:c0:
         20:34:da:5b:b1:ff:14:16:76:ca:dd:09:20:42:66:05:bb:d2:
         75:a7:3f:ed:19:c0:b2:07:fa:c0:8a:bd:3c:76:b0:52:c4:e7:
         77:dc:b5:83:8b:59:1f:4d:05:d5:9c:d8:a4:ac:d7:36:1a:e6:
         31:b3:87:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:58:29 2026 by rpki-client