This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/323030313a313336303a3a2f33322d3332203d3e203532323836.roa
File:                     323030313a313336303a3a2f33322d3332203d3e203532323836.roa (raw, json)
Hash identifier:          b7YYDHLlt8upjLgGCAF7rO6gc79HPn/cT9QC2pYT1fU=
Subject key identifier:   DD:B3:C3:81:15:0A:82:1D:22:39:40:67:D6:A6:A7:84:2E:18:21:37
Certificate issuer:       /CN=241DE049AC3C932631785D79E6569AB7CF57A340
Certificate serial:       3128E187E9E2AE6EC200CFE8574B562AE419AEAD
Authority key identifier: 24:1D:E0:49:AC:3C:93:26:31:78:5D:79:E6:56:9A:B7:CF:57:A3:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/241DE049AC3C932631785D79E6569AB7CF57A340.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/323030313a313336303a3a2f33322d3332203d3e203532323836.roa
Signing time:             Tue 06 Jan 2026 18:59:33 +0000
ROA not before:           Tue 06 Jan 2026 18:54:33 +0000
ROA not after:            Tue 05 Jan 2027 18:59:33 +0000
asID:                     52286
IP address blocks:        2001:1360::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/241DE049AC3C932631785D79E6569AB7CF57A340.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/241DE049AC3C932631785D79E6569AB7CF57A340.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/241DE049AC3C932631785D79E6569AB7CF57A340.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:28:e1:87:e9:e2:ae:6e:c2:00:cf:e8:57:4b:56:2a:e4:19:ae:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=241DE049AC3C932631785D79E6569AB7CF57A340
        Validity
            Not Before: Jan  6 18:54:33 2026 GMT
            Not After : Jan  5 18:59:33 2027 GMT
        Subject: CN=DDB3C381150A821D22394067D6A6A7842E182137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:81:28:d1:0f:76:3d:b1:d1:c4:a7:a0:ad:f7:
                    43:80:67:fe:94:7c:6f:93:03:2f:2e:e8:7f:8e:82:
                    37:5a:aa:6b:7f:ae:b2:6f:1a:10:98:77:0e:a5:fb:
                    6b:8c:08:46:03:53:fb:7e:64:71:17:e8:58:a2:f3:
                    07:3e:c7:f6:69:2c:92:2e:a8:4d:00:9b:8c:27:6d:
                    0a:c4:59:ab:3c:ff:d5:bf:04:84:8c:f4:bf:b7:7c:
                    6d:1f:ec:68:a7:ae:00:26:b8:e0:c8:6e:1a:4e:63:
                    80:9a:e6:c6:0f:1e:f5:f9:2a:a5:b0:a8:c3:04:23:
                    12:ec:be:b2:52:76:89:91:72:e5:49:b7:e2:a3:a3:
                    77:70:c9:21:4e:66:8d:c2:4f:64:bd:b0:e7:fc:1d:
                    93:02:2d:e2:05:d1:5a:64:f5:7c:02:28:7c:66:1a:
                    f9:7a:ce:52:79:a6:49:18:e3:83:12:0b:e0:5e:9b:
                    b1:b7:dd:c7:28:f1:e2:fd:1e:b1:8f:e6:4e:c5:90:
                    74:50:6c:0c:20:c3:67:16:0a:31:8d:56:03:09:bc:
                    97:5f:92:e6:e7:95:f9:a2:5b:a6:67:de:66:4a:4a:
                    37:13:91:78:39:6b:50:75:3b:39:e3:46:69:4d:5f:
                    81:45:85:c7:4b:04:5b:68:e2:34:a3:78:e7:67:be:
                    d0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:B3:C3:81:15:0A:82:1D:22:39:40:67:D6:A6:A7:84:2E:18:21:37
            X509v3 Authority Key Identifier:
                keyid:24:1D:E0:49:AC:3C:93:26:31:78:5D:79:E6:56:9A:B7:CF:57:A3:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/241DE049AC3C932631785D79E6569AB7CF57A340.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/241DE049AC3C932631785D79E6569AB7CF57A340.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/323030313a313336303a3a2f33322d3332203d3e203532323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1360::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:b7:3b:43:e4:f8:98:84:31:5c:aa:36:f7:92:ba:9c:c8:a9:
         9c:e2:86:a6:30:3f:75:22:29:3d:45:29:5c:25:6c:61:32:c5:
         26:0e:46:3f:43:d1:d3:36:81:f4:e8:a0:01:6b:91:11:a3:87:
         bf:9c:f8:3c:04:13:87:78:a0:83:b4:09:dd:a5:0a:dd:c0:e4:
         a8:52:6d:82:94:b5:43:ba:83:aa:6b:23:4c:03:57:1a:89:c6:
         46:8a:35:3f:a7:69:13:a9:d1:a2:ac:75:71:37:04:0f:c5:9d:
         ed:64:2c:c3:76:10:91:3c:d3:0c:18:e9:8a:47:7e:2f:58:81:
         cd:30:50:90:d9:ca:ea:c4:f8:81:76:68:f8:98:10:3e:ba:3e:
         7a:f6:02:72:e0:57:29:12:94:39:45:d8:b3:d8:65:92:1b:73:
         17:42:35:d7:00:c6:44:52:e6:d4:6b:24:9c:af:63:7a:23:58:
         e5:77:34:6e:c5:5b:83:05:ed:30:c7:37:1b:d6:32:31:ba:48:
         54:2b:dd:22:f0:f0:32:4b:da:e4:96:cf:ff:b9:34:e3:1e:92:
         c2:24:e8:80:3a:86:0d:55:65:ff:be:33:11:ce:f5:6e:76:fe:
         2c:da:ec:62:ab:7d:9b:cb:7a:77:4f:e4:35:68:5b:1e:02:1f:
         22:b6:93:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:45:29 2026 by rpki-client