This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/323030313a313338383a3a2f33322d3438203d3e2036313437.roa
File:                     323030313a313338383a3a2f33322d3438203d3e2036313437.roa (raw, json)
Hash identifier:          zEYdkhm3r5HBN0gvNevdQK48k61DC/kZKMGrF6Uu64Y=
Subject key identifier:   80:84:86:6D:53:6D:57:8E:BB:A3:DF:AC:03:A1:A1:5E:91:0B:CE:EB
Certificate issuer:       /CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
Certificate serial:       0CDAEFF9FB84D33D1FE956515152720B781978D4
Authority key identifier: 74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/323030313a313338383a3a2f33322d3438203d3e2036313437.roa
Signing time:             Tue 06 Jan 2026 20:55:59 +0000
ROA not before:           Tue 06 Jan 2026 20:50:59 +0000
ROA not after:            Tue 05 Jan 2027 20:55:59 +0000
asID:                     6147
IP address blocks:        2001:1388::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:da:ef:f9:fb:84:d3:3d:1f:e9:56:51:51:52:72:0b:78:19:78:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
        Validity
            Not Before: Jan  6 20:50:59 2026 GMT
            Not After : Jan  5 20:55:59 2027 GMT
        Subject: CN=8084866D536D578EBBA3DFAC03A1A15E910BCEEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:71:78:2b:25:cf:77:7a:4a:fc:65:f4:2c:8a:
                    d7:4e:88:6a:55:46:2b:9f:1d:20:1c:bc:d0:6c:4f:
                    e4:ee:87:f1:19:b4:93:85:de:ee:6b:60:d2:44:e6:
                    7f:a1:08:8a:2a:c7:4b:07:ae:2c:8d:6d:c5:01:27:
                    21:28:0e:aa:1c:5d:6f:0f:5b:6b:8f:2c:b5:ac:76:
                    ec:fd:50:85:22:fd:e7:57:05:5e:d9:66:7d:24:96:
                    68:0c:bc:58:89:0f:65:90:fe:89:2a:76:80:fd:35:
                    71:0c:f2:14:6b:f4:da:3a:19:cc:71:24:1f:c2:ef:
                    f0:16:7a:13:d0:d8:e4:b4:23:7f:0c:2b:f4:fe:7e:
                    1b:57:77:62:64:6a:d9:88:57:f1:3a:d7:d3:17:f0:
                    0c:f3:ee:23:c8:99:0d:b7:c6:44:e8:4d:e6:0c:ba:
                    75:e2:c4:ac:7a:b2:cc:28:19:6e:22:cc:00:c2:8e:
                    c4:d3:e0:7d:4f:5b:83:ac:14:5b:f7:21:2d:2b:74:
                    63:6f:27:e7:6d:d4:42:48:f4:a9:ed:0d:a2:92:0e:
                    95:df:73:ac:de:f5:41:26:85:ed:ec:8e:e1:a5:db:
                    94:c6:a2:a6:dc:04:c9:6b:57:5c:bb:8d:54:d7:f4:
                    7e:97:2a:c5:e3:eb:d9:e2:a7:26:63:e7:f7:52:29:
                    08:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:84:86:6D:53:6D:57:8E:BB:A3:DF:AC:03:A1:A1:5E:91:0B:CE:EB
            X509v3 Authority Key Identifier:
                keyid:74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/323030313a313338383a3a2f33322d3438203d3e2036313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1388::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:d9:0f:83:d4:5a:cc:37:00:3d:e0:c4:f9:4e:09:82:aa:24:
         c0:0d:4a:d1:bc:3c:06:de:f9:a7:34:2a:17:12:40:12:d8:28:
         ce:2c:7d:48:61:01:7c:0a:11:15:bd:02:e1:7d:0a:12:19:f2:
         5d:c1:ef:52:97:c1:67:75:bb:d1:71:2f:85:96:03:72:95:14:
         ad:d5:2f:83:8c:37:f2:12:44:29:f9:a8:4e:31:28:e8:c1:b6:
         cc:82:cd:34:d4:63:bf:68:2b:5d:57:55:f8:39:b1:bd:c0:98:
         e8:ec:a5:87:89:62:e1:7b:e7:24:31:2d:9d:ec:a2:85:62:46:
         7b:7e:3e:68:dd:5f:31:95:08:dd:96:9c:cd:5b:2b:d5:b9:8e:
         78:e0:fa:78:c7:32:fb:0b:af:6a:49:e5:22:ff:32:48:f2:b6:
         09:93:0e:27:93:e2:f7:2c:f6:eb:0e:57:a2:5c:08:0f:cf:1f:
         9f:0b:87:42:81:47:60:ef:d6:ec:6f:34:b9:2e:c5:a7:ac:e0:
         12:96:b7:d5:5c:5f:d3:21:a3:2a:f1:9e:33:1b:d6:40:98:d5:
         cf:31:51:f4:2a:7a:97:b4:cb:bf:d5:b7:b8:fd:fb:9c:b4:80:
         9f:4c:f2:83:71:3c:d8:44:48:51:5e:70:4f:bd:1c:a3:9c:b7:
         c2:39:74:15
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUDNrv+fuE0z0f6VZRUVJyC3gZeNQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ3NDk5RUU0OUY2RTQ1RjUwQzQ4NjBCRTc5RDc5Q0JE
N0NCNTdCMTAeFw0yNjAxMDYyMDUwNTlaFw0yNzAxMDUyMDU1NTlaMDMxMTAvBgNV
BAMTKDgwODQ4NjZENTM2RDU3OEVCQkEzREZBQzAzQTFBMTVFOTEwQkNFRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2cXgrJc93ekr8ZfQsitdOiGpV
RiufHSAcvNBsT+Tuh/EZtJOF3u5rYNJE5n+hCIoqx0sHriyNbcUBJyEoDqocXW8P
W2uPLLWsduz9UIUi/edXBV7ZZn0klmgMvFiJD2WQ/okqdoD9NXEM8hRr9No6Gcxx
JB/C7/AWehPQ2OS0I38MK/T+fhtXd2JkatmIV/E619MX8Azz7iPImQ23xkToTeYM
unXixKx6sswoGW4izADCjsTT4H1PW4OsFFv3IS0rdGNvJ+dt1EJI9KntDaKSDpXf
c6ze9UEmhe3sjuGl25TGoqbcBMlrV1y7jVTX9H6XKsXj69nipyZj5/dSKQgfAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUgISGbVNtV467o9+sA6GhXpELzuswHwYDVR0j
BBgwFoAUdHSZ7kn25F9QxIYL5515y9fLV7EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NTAyQTIxMjZGRUYzMzhEMzlDOEI3NDM5MjBDMUJBMjI0
MTA3Q0ZEMTI2MzU1MEZDOTJGNEQ1OEVEMUEzQzJCLzAvNzQ3NDk5RUU0OUY2RTQ1
RjUwQzQ4NjBCRTc5RDc5Q0JEN0NCNTdCMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83NDc0OTlFRTQ5RjZFNDVGNTBD
NDg2MEJFNzlENzlDQkQ3Q0I1N0IxLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTUwMkEyMTI2RkVGMzM4RDM5QzhCNzQzOTIwQzFCQTIyNDEwN0NGRDEy
NjM1NTBGQzkyRjRENThFRDFBM0MyQi8wLzMyMzAzMDMxM2EzMTMzMzgzODNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDM2MzEzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAETiDANBgkq
hkiG9w0BAQsFAAOCAQEAT9kPg9RazDcAPeDE+U4JgqokwA1K0bw8Bt75pzQqFxJA
Etgozix9SGEBfAoRFb0C4X0KEhnyXcHvUpfBZ3W70XEvhZYDcpUUrdUvg4w38hJE
KfmoTjEo6MG2zILNNNRjv2grXVdV+DmxvcCY6Oylh4li4XvnJDEtneyihWJGe34+
aN1fMZUI3ZaczVsr1bmOeOD6eMcy+wuvaknlIv8ySPK2CZMOJ5Pi9yz26w5XolwI
D88fnwuHQoFHYO/W7G80uS7Fp6zgEpa31Vxf0yGjKvGeMxvWQJjVzzFR9Cp6l7TL
v9W3uP37nLSAn0zyg3E82ERIUV5wT70co5y3wjl0FQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:26:23 2026 by rpki-client