This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7CC77240B380933714F88645DD3E1DAF1567171BCAA623EE56386B757C02B126/0/323830313a3162613a65303a3a2f34382d3438203d3e20323733303237.roa
File:                     323830313a3162613a65303a3a2f34382d3438203d3e20323733303237.roa (raw, json)
Hash identifier:          IWzXfLs9wO8mDMs/b05hD9Si/FfSIWsDXUihT3WT6Ns=
Subject key identifier:   59:03:49:A4:1B:BD:DB:B6:34:92:FC:61:42:88:4A:85:78:95:44:13
Certificate issuer:       /CN=B1E5A9F08FC1D3810E3215DE0235E6957AE52076
Certificate serial:       19D576B9258C66DE0BD8CAD67FEA9E2CE71CDD24
Authority key identifier: B1:E5:A9:F0:8F:C1:D3:81:0E:32:15:DE:02:35:E6:95:7A:E5:20:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1E5A9F08FC1D3810E3215DE0235E6957AE52076.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7CC77240B380933714F88645DD3E1DAF1567171BCAA623EE56386B757C02B126/0/323830313a3162613a65303a3a2f34382d3438203d3e20323733303237.roa
Signing time:             Tue 06 Jan 2026 19:42:56 +0000
ROA not before:           Tue 06 Jan 2026 19:37:56 +0000
ROA not after:            Tue 05 Jan 2027 19:42:56 +0000
asID:                     273027
IP address blocks:        2801:1ba:e0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7CC77240B380933714F88645DD3E1DAF1567171BCAA623EE56386B757C02B126/0/B1E5A9F08FC1D3810E3215DE0235E6957AE52076.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7CC77240B380933714F88645DD3E1DAF1567171BCAA623EE56386B757C02B126/0/B1E5A9F08FC1D3810E3215DE0235E6957AE52076.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1E5A9F08FC1D3810E3215DE0235E6957AE52076.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 21:14:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:d5:76:b9:25:8c:66:de:0b:d8:ca:d6:7f:ea:9e:2c:e7:1c:dd:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1E5A9F08FC1D3810E3215DE0235E6957AE52076
        Validity
            Not Before: Jan  6 19:37:56 2026 GMT
            Not After : Jan  5 19:42:56 2027 GMT
        Subject: CN=590349A41BBDDBB63492FC6142884A8578954413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e8:d1:96:23:0a:6a:19:ed:b3:84:86:85:de:
                    47:5d:5e:7f:2f:a0:13:46:3f:ca:f7:7c:95:d8:29:
                    b5:3e:8f:c6:bc:18:f7:4d:d8:56:1e:54:27:aa:31:
                    1b:56:0f:ed:b3:4c:3d:54:e9:cc:82:27:20:02:06:
                    d7:ad:42:56:8a:28:20:2c:01:0a:46:e0:2c:d3:06:
                    22:9e:82:81:f5:e5:10:25:ae:bf:97:d0:d0:40:d9:
                    1f:ed:fa:fb:47:b3:b7:43:a5:3e:54:fd:74:72:06:
                    bc:f7:f8:a5:8e:37:a9:80:78:54:da:b1:24:18:12:
                    9f:00:db:39:65:b8:21:59:08:e1:58:4a:2c:39:98:
                    ce:06:af:3c:63:8c:9e:b3:52:f6:2b:3d:ff:0d:5d:
                    b1:35:31:8f:b0:96:9f:11:7d:1a:6d:1b:25:e5:17:
                    b6:6b:c8:8d:e8:51:03:3b:2a:8a:ed:11:5d:4b:d7:
                    6d:78:a2:8c:af:7f:9a:c4:14:67:e8:b8:54:a4:be:
                    7c:d3:76:2e:15:0a:1a:72:7a:7d:30:dd:aa:66:1e:
                    d8:5e:c6:6b:c4:bd:83:ef:bc:fa:63:52:33:8a:7f:
                    46:c3:fc:88:56:12:8f:9f:a9:37:ab:03:da:e1:1d:
                    4a:50:5b:11:e2:81:ce:40:ea:1e:0f:12:c1:24:0b:
                    2f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:03:49:A4:1B:BD:DB:B6:34:92:FC:61:42:88:4A:85:78:95:44:13
            X509v3 Authority Key Identifier:
                keyid:B1:E5:A9:F0:8F:C1:D3:81:0E:32:15:DE:02:35:E6:95:7A:E5:20:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7CC77240B380933714F88645DD3E1DAF1567171BCAA623EE56386B757C02B126/0/B1E5A9F08FC1D3810E3215DE0235E6957AE52076.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1E5A9F08FC1D3810E3215DE0235E6957AE52076.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7CC77240B380933714F88645DD3E1DAF1567171BCAA623EE56386B757C02B126/0/323830313a3162613a65303a3a2f34382d3438203d3e20323733303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1ba:e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:4c:fc:5b:6f:2a:8c:fb:14:7b:a2:97:42:ca:3b:11:ba:55:
         44:4b:51:40:bd:21:df:e2:c0:6b:51:eb:49:49:90:2b:fb:af:
         fc:a4:15:fb:45:a7:3b:f0:94:ff:bf:88:6d:15:4a:df:63:02:
         26:9f:8f:3d:ba:b3:6c:38:8e:e5:5b:87:00:e9:4b:6f:a7:f5:
         fe:bd:6f:19:a1:21:e6:27:4a:24:59:44:24:36:1c:fa:61:b3:
         a6:4a:8f:a9:96:19:71:79:cf:2e:f5:ad:34:57:1f:6d:74:ab:
         91:85:3e:80:1e:35:0b:fe:84:c6:c3:df:aa:1d:26:80:83:b6:
         6f:3c:b2:62:6e:22:f2:b9:55:e8:cf:70:42:8c:cd:c4:87:ad:
         4a:2b:a2:5c:49:3a:77:eb:cd:5b:4d:f1:3b:3b:25:e9:d0:75:
         1c:94:be:d6:37:0a:2f:96:2c:47:58:90:e9:f1:3a:fa:27:ff:
         4b:f7:e2:11:d1:1e:45:bd:a6:88:cf:3e:bd:d8:e7:1c:fb:b2:
         0c:2b:47:15:99:02:65:e3:86:9f:4c:69:f5:e2:92:f4:c4:64:
         84:31:a6:9d:7f:13:31:0c:e8:aa:3d:d8:4b:40:d5:76:67:44:
         7d:22:7a:0b:80:3e:40:5c:fb:fc:64:9c:ab:d0:e0:5a:b8:ad:
         57:5c:1b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:06:09 2026 by rpki-client