This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/323830333a626130303a3a2f33322d3332203d3e203532323836.roa
File:                     323830333a626130303a3a2f33322d3332203d3e203532323836.roa (raw, json)
Hash identifier:          uzvlaZAKsiYsLEN2RAyeNtUQXFsiHFTseKA3MFHxXtY=
Subject key identifier:   A1:BA:7D:2D:9E:6B:8A:14:2A:7E:4F:AD:84:70:28:02:D7:3D:98:1A
Certificate issuer:       /CN=241DE049AC3C932631785D79E6569AB7CF57A340
Certificate serial:       3C2578073E822E51473EE275BF1B7528DE43711B
Authority key identifier: 24:1D:E0:49:AC:3C:93:26:31:78:5D:79:E6:56:9A:B7:CF:57:A3:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/241DE049AC3C932631785D79E6569AB7CF57A340.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/323830333a626130303a3a2f33322d3332203d3e203532323836.roa
Signing time:             Tue 06 Jan 2026 18:59:32 +0000
ROA not before:           Tue 06 Jan 2026 18:54:32 +0000
ROA not after:            Tue 05 Jan 2027 18:59:32 +0000
asID:                     52286
IP address blocks:        2803:ba00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/241DE049AC3C932631785D79E6569AB7CF57A340.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/241DE049AC3C932631785D79E6569AB7CF57A340.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/241DE049AC3C932631785D79E6569AB7CF57A340.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:25:78:07:3e:82:2e:51:47:3e:e2:75:bf:1b:75:28:de:43:71:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=241DE049AC3C932631785D79E6569AB7CF57A340
        Validity
            Not Before: Jan  6 18:54:32 2026 GMT
            Not After : Jan  5 18:59:32 2027 GMT
        Subject: CN=A1BA7D2D9E6B8A142A7E4FAD84702802D73D981A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:30:94:40:fc:f8:77:7e:22:75:94:f3:3f:40:
                    e8:6a:f4:e6:33:a7:f3:73:ed:2a:db:be:f1:53:bf:
                    9e:41:92:4f:f4:2c:c4:16:40:1f:1f:b1:9e:f1:06:
                    da:b9:95:8c:2c:20:46:09:c0:2b:74:36:01:76:80:
                    f5:5e:69:54:49:7c:ea:8f:97:5f:32:52:3c:ec:0b:
                    54:d9:8d:27:d5:6f:51:20:ff:db:0d:eb:28:57:1b:
                    60:4d:d1:3d:a4:d7:61:d8:44:4d:96:d2:03:97:5f:
                    50:bd:a6:59:95:0f:27:14:22:17:dc:39:bb:29:57:
                    d9:a3:96:08:32:6d:ca:a0:b4:72:43:de:69:18:68:
                    cd:ca:ce:86:b2:57:52:47:1a:06:83:82:41:63:b0:
                    34:50:92:f8:0b:54:32:7e:00:90:d4:93:60:11:13:
                    b9:13:68:3b:db:26:35:c8:43:40:0d:91:99:26:48:
                    40:f5:dd:7d:7d:54:b6:5f:a8:e1:9f:b5:17:0d:bd:
                    cd:3f:0f:0a:7c:ca:a5:6e:dc:af:93:6e:71:e7:89:
                    f7:fd:28:27:0b:09:8a:e8:9f:ee:eb:48:d2:2a:67:
                    48:32:67:55:39:b1:65:56:b6:68:f6:80:a2:ed:c0:
                    68:4d:fc:01:16:48:62:ea:00:f1:80:41:56:ec:c8:
                    45:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:BA:7D:2D:9E:6B:8A:14:2A:7E:4F:AD:84:70:28:02:D7:3D:98:1A
            X509v3 Authority Key Identifier:
                keyid:24:1D:E0:49:AC:3C:93:26:31:78:5D:79:E6:56:9A:B7:CF:57:A3:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/241DE049AC3C932631785D79E6569AB7CF57A340.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/241DE049AC3C932631785D79E6569AB7CF57A340.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/323830333a626130303a3a2f33322d3332203d3e203532323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ba00::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:7e:ad:64:ad:26:0d:3f:0f:bc:fa:75:cb:68:2e:58:f3:34:
         c1:59:8a:0c:10:d2:80:ef:1a:28:19:e5:24:29:ca:8d:f0:92:
         0f:49:64:f1:a4:8f:13:40:80:05:2d:2d:71:59:14:b3:84:0e:
         38:fa:85:0e:06:63:29:3f:35:7f:9d:6e:4b:d3:c2:42:d6:20:
         15:2f:40:3e:ec:c6:d2:db:47:e4:7e:e4:72:76:70:0e:98:4d:
         2c:6b:86:58:e7:a8:95:04:0e:f2:b4:1e:7a:1b:db:53:00:11:
         d4:91:bf:b4:b5:21:21:10:92:99:94:33:70:35:09:0f:cc:2f:
         0d:0f:e3:30:a4:cf:6b:b8:90:2c:50:a8:67:d9:c8:a8:05:63:
         42:b0:25:83:3d:17:76:ad:b6:56:ed:5f:64:b1:91:03:e1:b2:
         9c:7c:f5:f6:97:e2:f0:56:18:bc:61:70:8c:59:3f:b3:e8:6a:
         cb:87:ec:41:38:02:b0:4c:c5:5d:e6:65:de:f3:80:e1:92:e4:
         3e:c7:c7:7c:15:32:71:eb:df:ad:84:ac:81:5f:2f:0c:d9:2b:
         54:3e:c7:6d:38:4b:d1:9d:19:35:90:9d:73:fb:fb:c4:60:95:
         63:b0:45:63:f1:97:4b:49:dd:3a:6f:77:05:38:44:86:99:64:
         e2:f3:57:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:09:59 2026 by rpki-client