This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/323830313a3166393a373a3a2f34382d3438203d3e203134303830.roa
File:                     323830313a3166393a373a3a2f34382d3438203d3e203134303830.roa (raw, json)
Hash identifier:          m7bXWiV2UDC7x2U3qAxy91GNWHizAQVdtwYay9ARjTQ=
Subject key identifier:   14:DF:77:C9:4D:79:55:03:14:D7:4A:07:B7:F4:E6:DA:A5:B2:48:E6
Certificate issuer:       /CN=B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0
Certificate serial:       27B4596206C1C35D4F856440C6679EF5767A534D
Authority key identifier: B9:1E:C1:9B:AC:53:1E:9C:D8:2F:3D:8F:0D:2B:BC:FB:E4:15:0B:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/323830313a3166393a373a3a2f34382d3438203d3e203134303830.roa
Signing time:             Tue 06 Jan 2026 19:10:57 +0000
ROA not before:           Tue 06 Jan 2026 19:05:57 +0000
ROA not after:            Tue 05 Jan 2027 19:10:57 +0000
asID:                     14080
IP address blocks:        2801:1f9:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:b4:59:62:06:c1:c3:5d:4f:85:64:40:c6:67:9e:f5:76:7a:53:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0
        Validity
            Not Before: Jan  6 19:05:57 2026 GMT
            Not After : Jan  5 19:10:57 2027 GMT
        Subject: CN=14DF77C94D79550314D74A07B7F4E6DAA5B248E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:07:c0:71:17:8b:83:be:6b:6f:41:7e:de:94:
                    27:e2:1e:e7:44:93:c3:91:f2:3c:9d:0e:8d:ce:4a:
                    b4:6c:a7:41:a1:75:e8:e5:57:7f:52:04:cf:67:f3:
                    e8:31:5a:be:e2:dc:fb:c8:6a:3c:32:b6:1c:3f:e4:
                    78:d6:a0:53:8d:1e:c7:b3:30:b6:bd:35:df:a5:ca:
                    a4:91:9a:e4:25:03:71:4d:85:33:de:7b:d0:8e:68:
                    c2:fb:1d:f6:65:09:4d:c7:42:6f:48:c7:1a:d5:4a:
                    d0:0b:2d:e9:06:fe:54:f0:db:8b:de:5f:e5:d5:15:
                    2e:16:06:57:63:1a:25:fb:45:7c:ea:86:93:57:8e:
                    f4:31:10:5d:c8:f6:e5:e7:8a:1c:b4:52:79:24:fd:
                    03:8b:c2:84:4f:d9:2a:f7:08:74:06:9d:73:c9:06:
                    90:fd:91:7a:32:a9:13:5e:67:95:a5:7b:c8:70:2f:
                    c5:c7:b3:87:f0:d7:b8:d7:70:82:93:27:c4:ab:41:
                    23:85:c5:4f:19:36:b4:d0:85:e2:82:fd:56:77:00:
                    69:cf:46:de:d5:8f:39:46:03:c2:ff:14:81:17:4f:
                    62:a6:4d:df:3c:2d:2e:ab:4e:47:84:06:2e:ce:66:
                    62:81:24:90:7f:6c:e8:3e:f2:fa:c8:8a:b9:c7:60:
                    d9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:DF:77:C9:4D:79:55:03:14:D7:4A:07:B7:F4:E6:DA:A5:B2:48:E6
            X509v3 Authority Key Identifier:
                keyid:B9:1E:C1:9B:AC:53:1E:9C:D8:2F:3D:8F:0D:2B:BC:FB:E4:15:0B:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/323830313a3166393a373a3a2f34382d3438203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f9:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:3c:24:b9:1f:5a:49:0f:0e:92:e1:4b:9f:f2:4e:87:36:42:
         9f:56:a0:47:73:94:ef:9e:a2:12:07:9e:46:f9:33:3b:6c:ed:
         bd:7b:48:1d:59:9a:aa:8c:59:89:50:ee:7a:39:56:f8:1b:7a:
         93:9a:97:4a:08:93:13:d2:ab:b8:1e:96:1e:81:37:90:d3:2f:
         1d:58:a0:f8:c6:00:e5:b4:4b:79:17:6a:fc:6a:7f:9e:f8:d7:
         64:c2:3c:90:75:ee:97:5c:2a:cd:c7:76:38:01:55:b1:b9:3c:
         e6:5a:5d:61:16:87:78:06:80:b4:1e:1e:00:5e:6b:fe:45:0a:
         6e:a8:e8:3d:e3:d9:62:c1:b6:15:65:e0:a8:bf:3c:f3:05:87:
         96:9e:81:b5:b7:7a:1b:fc:7a:9b:b7:5a:27:89:bc:24:d1:9e:
         90:b2:80:17:39:f9:05:ec:2b:c4:d9:61:9f:86:13:e9:bb:2f:
         cc:23:d1:cf:71:8a:d2:89:00:19:eb:ea:b8:c9:04:43:03:c3:
         06:15:48:ee:c8:4d:01:ba:58:19:d6:e3:24:7e:a6:8f:1d:ff:
         d7:d1:2f:bb:bf:89:a0:e0:00:56:21:e8:98:15:9a:48:bb:62:
         c1:86:a7:80:13:3f:40:b6:49:c1:98:70:ec:36:e2:9f:cd:d1:
         eb:3c:29:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:44:55 2026 by rpki-client