This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/323830313a3165303a3a2f34372d3437203d3e203237383735.roa
File:                     323830313a3165303a3a2f34372d3437203d3e203237383735.roa (raw, json)
Hash identifier:          KfJ52YEpySoKWg1tdt9aT+Su7QVS4hUpk/Ruri2YCis=
Subject key identifier:   1D:6D:A0:D2:C9:C2:14:29:6D:1A:9B:04:05:76:A8:08:F7:FB:B8:BA
Certificate issuer:       /CN=D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC
Certificate serial:       345C8D6DB75F7150D1F26C724417AD21FEB5A82B
Authority key identifier: D0:53:F7:D4:2F:C9:FD:03:55:6A:9F:3D:2A:F9:E3:D2:22:1B:AD:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/323830313a3165303a3a2f34372d3437203d3e203237383735.roa
Signing time:             Tue 06 Jan 2026 19:03:16 +0000
ROA not before:           Tue 06 Jan 2026 18:58:16 +0000
ROA not after:            Tue 05 Jan 2027 19:03:16 +0000
asID:                     27875
IP address blocks:        2801:1e0::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 15:26:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:5c:8d:6d:b7:5f:71:50:d1:f2:6c:72:44:17:ad:21:fe:b5:a8:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC
        Validity
            Not Before: Jan  6 18:58:16 2026 GMT
            Not After : Jan  5 19:03:16 2027 GMT
        Subject: CN=1D6DA0D2C9C214296D1A9B040576A808F7FBB8BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5b:25:06:a5:ee:13:8e:63:36:1d:ff:8f:9f:
                    71:57:9f:a5:63:84:0a:7d:f1:3e:de:19:d4:cb:81:
                    3e:37:ed:83:7a:e5:da:cd:d6:91:db:e5:b5:fa:e7:
                    97:76:e8:8d:3f:b1:f0:d4:4b:d8:77:12:e4:da:48:
                    91:bd:1d:16:9e:a7:af:ce:e6:3c:a1:01:08:7d:ed:
                    68:40:2d:72:0b:d5:9a:a4:1a:55:f5:0b:a6:8f:a8:
                    5c:8d:3c:04:be:46:fc:15:ec:0b:58:a0:50:3a:f0:
                    11:59:6b:27:f8:ee:02:ab:6f:93:cc:4f:06:59:6f:
                    87:25:07:63:f5:93:b6:ec:19:1a:59:9d:2d:68:92:
                    87:23:0e:aa:72:85:69:ae:7f:58:15:2c:ca:9a:b7:
                    d5:24:ef:69:db:09:ae:9e:17:3d:73:7b:b8:cc:f3:
                    2c:26:1a:ec:90:8a:42:82:45:8f:3e:16:75:8c:f8:
                    49:3e:cc:e9:61:0a:95:bf:3f:6d:2e:23:1c:3a:f2:
                    af:bf:ca:35:3d:28:79:a0:3d:69:2d:ed:38:89:ab:
                    c2:cb:ef:de:92:00:d6:10:a4:47:0b:28:2c:08:f9:
                    d6:b7:86:af:82:1f:85:69:0e:3b:40:b2:00:ac:e3:
                    a7:c0:ce:38:03:62:4a:9a:08:d8:d5:39:8e:c2:fe:
                    b6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:6D:A0:D2:C9:C2:14:29:6D:1A:9B:04:05:76:A8:08:F7:FB:B8:BA
            X509v3 Authority Key Identifier:
                keyid:D0:53:F7:D4:2F:C9:FD:03:55:6A:9F:3D:2A:F9:E3:D2:22:1B:AD:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/323830313a3165303a3a2f34372d3437203d3e203237383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e0::/47

    Signature Algorithm: sha256WithRSAEncryption
         3c:b9:82:8a:79:88:26:35:77:1d:05:60:13:b6:a4:b9:58:0f:
         2d:00:de:16:16:c7:98:43:0d:41:a8:08:f1:16:d4:01:4b:b0:
         8c:79:e9:a5:53:fe:96:4d:ba:25:e5:23:9a:5c:2d:ae:2c:78:
         9e:80:67:ac:d4:c5:14:49:be:20:5f:2c:6a:59:3a:2f:3f:25:
         d3:4b:76:92:a9:bf:21:5d:8e:c2:bb:de:4f:09:e8:46:9a:99:
         f8:b8:94:ee:e3:c2:fe:24:06:2c:f2:01:f6:9c:2d:0e:2d:18:
         b3:7b:76:da:14:b6:c5:35:b4:5f:38:63:5c:3c:ec:81:30:b9:
         58:db:93:3d:46:71:bd:04:78:1d:aa:13:ee:80:a4:d9:9b:e2:
         41:c3:1c:83:2b:13:5d:6a:b9:c7:ee:78:cb:7a:e6:e6:69:7a:
         fc:54:3f:2c:b4:81:58:ed:61:b4:68:26:4a:ee:5f:69:fa:61:
         6a:1c:4e:e9:6b:dc:e8:7a:8d:61:8f:82:04:1f:ee:f3:91:7f:
         6b:50:57:48:9e:15:e0:53:75:c6:0b:63:74:b4:59:d4:ed:51:
         0f:30:85:c4:35:b1:77:89:29:36:a6:d5:e9:3a:0d:83:20:c6:
         d7:cc:cc:63:5e:db:7d:b3:a7:f4:cb:d8:69:d8:64:8e:bf:af:
         ff:90:b3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:25:40 2026 by rpki-client