This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/323830303a6166303a3a2f33322d3438203d3e203237393834.roa
File:                     323830303a6166303a3a2f33322d3438203d3e203237393834.roa (raw, json)
Hash identifier:          obhpgMgnIiiKxzmyh6d6//T2NJyjSwfg4kOdvpTypBs=
Subject key identifier:   40:E7:F3:C8:EC:D1:3E:8E:46:F9:9A:74:5A:F5:13:97:46:E3:32:00
Certificate issuer:       /CN=62C9B2701C4466FB48976AE4EEBB9C1FA017AD95
Certificate serial:       2E14473EDC0C29A042B125E7285D86A344F5C984
Authority key identifier: 62:C9:B2:70:1C:44:66:FB:48:97:6A:E4:EE:BB:9C:1F:A0:17:AD:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/323830303a6166303a3a2f33322d3438203d3e203237393834.roa
Signing time:             Tue 06 Jan 2026 19:02:50 +0000
ROA not before:           Tue 06 Jan 2026 18:57:50 +0000
ROA not after:            Tue 05 Jan 2027 19:02:50 +0000
asID:                     27984
IP address blocks:        2800:af0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 13:54:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:14:47:3e:dc:0c:29:a0:42:b1:25:e7:28:5d:86:a3:44:f5:c9:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62C9B2701C4466FB48976AE4EEBB9C1FA017AD95
        Validity
            Not Before: Jan  6 18:57:50 2026 GMT
            Not After : Jan  5 19:02:50 2027 GMT
        Subject: CN=40E7F3C8ECD13E8E46F99A745AF5139746E33200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:42:ae:b4:23:39:fd:fe:ba:87:e5:77:20:6f:
                    fc:90:fe:a9:48:75:9a:94:8b:52:89:5f:1a:b6:3d:
                    0d:be:f1:69:76:62:d7:e6:5e:93:a4:6a:61:ff:51:
                    0a:0e:06:27:12:bc:4f:0d:14:10:e7:81:09:60:21:
                    f7:43:64:79:c0:2b:2b:eb:0f:c1:0f:8f:2e:c5:d2:
                    b6:02:49:f5:ed:61:14:cf:07:d1:db:85:97:17:a2:
                    73:74:9e:ce:19:8a:1a:ca:d4:74:db:c9:ac:ca:b1:
                    d1:d1:f3:fd:49:2b:fc:be:c5:e1:2f:c3:de:34:db:
                    89:d1:b8:1e:2a:e2:97:8b:8e:b2:c8:89:da:80:34:
                    63:3c:99:13:54:62:0e:9a:2c:b4:dd:77:70:ed:66:
                    e8:40:e1:ce:6e:fb:e9:ab:0a:74:ee:91:f4:bf:31:
                    86:83:0a:b5:f2:77:63:8b:ea:68:07:42:d2:89:53:
                    ea:89:15:64:60:35:b9:8d:77:35:44:10:73:f3:33:
                    b1:ec:c5:f9:b5:c1:5f:8a:d1:fa:2f:bd:39:08:e8:
                    03:39:35:aa:f8:7c:fa:ef:77:47:14:d7:07:61:eb:
                    12:7f:9c:c6:ec:30:e4:e4:9a:e7:28:b2:20:63:99:
                    41:b1:df:67:ab:be:f7:09:7c:20:8d:9a:e7:2f:19:
                    66:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E7:F3:C8:EC:D1:3E:8E:46:F9:9A:74:5A:F5:13:97:46:E3:32:00
            X509v3 Authority Key Identifier:
                keyid:62:C9:B2:70:1C:44:66:FB:48:97:6A:E4:EE:BB:9C:1F:A0:17:AD:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/323830303a6166303a3a2f33322d3438203d3e203237393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:af0::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:7e:4d:8e:c7:b2:ee:6f:16:2b:8d:ff:54:b3:fa:a2:74:85:
         9a:dc:eb:b3:66:aa:99:84:f7:67:83:5f:f7:73:90:91:e4:8c:
         e1:19:54:e4:de:69:a2:13:a7:5d:0c:cc:ec:bc:36:e3:4e:ae:
         a2:28:8f:87:52:04:f1:7e:4d:a1:7e:37:35:39:70:c3:d0:26:
         36:87:19:08:27:d0:9d:69:04:68:bc:de:53:03:c5:15:54:28:
         23:5b:87:05:e8:35:a7:71:f7:77:3a:20:8a:09:23:d0:d1:16:
         90:69:4f:2e:fc:73:b5:f6:b6:dd:de:bb:58:aa:59:b5:45:45:
         f4:1f:7f:77:15:94:1c:30:fc:2b:da:c3:65:51:f3:fd:2c:06:
         40:3c:07:fc:cb:37:3e:63:26:d4:c1:52:6a:d3:78:ea:5a:c2:
         68:f7:16:b5:bf:2b:9d:e4:88:21:3b:64:01:71:79:48:71:59:
         07:12:3b:32:c7:a7:c0:d0:c8:fb:89:b8:b3:09:c9:e6:eb:f6:
         a1:72:e0:01:fc:d3:3a:2f:b3:2e:6d:09:22:26:db:1a:d6:1a:
         de:06:48:6f:5a:fe:18:43:f5:b2:f2:36:c8:dd:90:ed:c0:19:
         fd:e4:5e:0a:64:5c:4e:19:ef:ef:73:65:3d:11:ae:15:5a:8d:
         53:82:0c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:28:36 2026 by rpki-client