This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9C7F5E7D44D40870ABDDF369BC6567D5DBDC7CBDC323102248845F6DE259BBF9/0/323830313a31373a343830303a3a2f34382d3438203d3e203237393531.roa
File:                     323830313a31373a343830303a3a2f34382d3438203d3e203237393531.roa (raw, json)
Hash identifier:          CbPC4TnDJerp0IBHOW6QyPMPvQ255nScDfjQFq9cYaU=
Subject key identifier:   3D:7B:52:CB:6E:63:14:43:0C:EA:73:05:57:E6:99:2E:DF:B9:32:6C
Certificate issuer:       /CN=24E5CBDFA3780F8B7BFB97791F5B3487172BCB6B
Certificate serial:       17923D3A9652C65FFD5BC52808B52A5FAC61359A
Authority key identifier: 24:E5:CB:DF:A3:78:0F:8B:7B:FB:97:79:1F:5B:34:87:17:2B:CB:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24E5CBDFA3780F8B7BFB97791F5B3487172BCB6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9C7F5E7D44D40870ABDDF369BC6567D5DBDC7CBDC323102248845F6DE259BBF9/0/323830313a31373a343830303a3a2f34382d3438203d3e203237393531.roa
Signing time:             Tue 06 Jan 2026 19:36:36 +0000
ROA not before:           Tue 06 Jan 2026 19:31:36 +0000
ROA not after:            Tue 05 Jan 2027 19:36:36 +0000
asID:                     27951
IP address blocks:        2801:17:4800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9C7F5E7D44D40870ABDDF369BC6567D5DBDC7CBDC323102248845F6DE259BBF9/0/24E5CBDFA3780F8B7BFB97791F5B3487172BCB6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9C7F5E7D44D40870ABDDF369BC6567D5DBDC7CBDC323102248845F6DE259BBF9/0/24E5CBDFA3780F8B7BFB97791F5B3487172BCB6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24E5CBDFA3780F8B7BFB97791F5B3487172BCB6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:92:3d:3a:96:52:c6:5f:fd:5b:c5:28:08:b5:2a:5f:ac:61:35:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24E5CBDFA3780F8B7BFB97791F5B3487172BCB6B
        Validity
            Not Before: Jan  6 19:31:36 2026 GMT
            Not After : Jan  5 19:36:36 2027 GMT
        Subject: CN=3D7B52CB6E6314430CEA730557E6992EDFB9326C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a1:91:ea:09:e6:d9:60:92:98:84:63:1c:b1:
                    3f:53:67:00:21:36:dd:6d:1f:bc:3d:a7:7f:dd:c7:
                    14:30:c6:90:4e:58:2d:75:49:bb:3b:3a:79:49:ea:
                    46:59:18:da:33:36:14:38:7f:73:77:90:41:eb:f5:
                    a4:e0:fa:ea:a1:3f:14:1a:a2:98:0a:9e:3f:2a:0b:
                    ef:67:4a:8f:3f:b4:bc:bf:33:8d:76:1b:6e:d1:3f:
                    71:0a:81:40:29:7a:a8:c5:9e:67:3f:00:46:f8:c8:
                    1a:81:ed:c8:3b:4b:67:ed:ae:d5:07:59:76:57:ce:
                    13:0a:51:65:21:50:47:a7:3d:7a:2c:31:b4:a6:59:
                    4f:a2:c2:33:d3:50:68:c5:4a:59:30:bb:fb:16:a2:
                    62:fc:e8:ac:19:05:cb:1e:aa:b7:ad:9d:94:41:70:
                    6b:df:fa:34:8c:ad:20:e8:34:12:df:ee:af:33:25:
                    a8:85:e9:a2:39:59:f1:69:ce:35:04:41:37:27:6a:
                    e7:1a:9a:a1:50:71:aa:79:d3:ba:32:52:0f:59:49:
                    eb:e8:16:03:08:60:2a:a9:37:27:11:ad:48:d8:88:
                    59:99:b9:47:f2:bf:8c:ca:2e:1f:d2:4a:9b:1c:79:
                    b8:76:cd:3a:21:4d:5a:e3:e1:f4:f0:28:43:9c:fb:
                    78:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:7B:52:CB:6E:63:14:43:0C:EA:73:05:57:E6:99:2E:DF:B9:32:6C
            X509v3 Authority Key Identifier:
                keyid:24:E5:CB:DF:A3:78:0F:8B:7B:FB:97:79:1F:5B:34:87:17:2B:CB:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9C7F5E7D44D40870ABDDF369BC6567D5DBDC7CBDC323102248845F6DE259BBF9/0/24E5CBDFA3780F8B7BFB97791F5B3487172BCB6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24E5CBDFA3780F8B7BFB97791F5B3487172BCB6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9C7F5E7D44D40870ABDDF369BC6567D5DBDC7CBDC323102248845F6DE259BBF9/0/323830313a31373a343830303a3a2f34382d3438203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17:4800::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:31:57:0c:ca:a8:da:2f:0b:67:33:c1:c6:3a:26:0e:b4:b5:
         6f:cb:c2:d1:ab:fe:72:55:c5:22:77:33:14:e0:ac:7b:5a:16:
         88:19:e9:52:c7:fa:3d:6c:0f:2c:52:a1:99:53:84:12:10:57:
         b9:d1:c7:3b:fd:75:4c:d4:c7:fe:ab:d8:ba:28:cb:21:37:7f:
         61:96:41:53:63:09:80:e9:3c:76:5b:01:21:47:db:ef:ac:a1:
         da:25:73:7c:16:4d:f6:4c:01:b9:a6:2f:01:0f:33:39:ee:54:
         9b:de:52:57:12:a8:cd:81:bc:df:aa:25:a1:73:9c:2c:be:f9:
         95:be:88:2a:95:0d:3b:1a:9f:99:d4:69:c2:96:ab:be:04:4a:
         17:bb:e3:0e:9d:75:63:d0:1e:49:7b:88:c9:0c:ea:b0:d1:1f:
         43:2e:d1:f7:9c:db:f4:1f:7c:d5:70:7f:d9:53:d6:0c:f3:6f:
         15:19:1f:bf:fa:8d:6a:6b:16:0f:3d:dd:03:23:9d:4b:6a:17:
         7a:fc:89:44:7f:9b:a5:14:10:a5:3d:c5:19:e0:b2:84:18:82:
         f7:ea:26:2a:91:f8:83:32:22:f8:f6:b0:56:60:f6:3e:13:47:
         92:59:2b:6b:07:a2:00:4c:11:ed:1a:e3:26:ef:09:c1:fa:f6:
         22:84:20:2f
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUF5I9OpZSxl/9W8UoCLUqX6xhNZowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjRFNUNCREZBMzc4MEY4QjdCRkI5Nzc5MUY1QjM0ODcx
NzJCQ0I2QjAeFw0yNjAxMDYxOTMxMzZaFw0yNzAxMDUxOTM2MzZaMDMxMTAvBgNV
BAMTKDNEN0I1MkNCNkU2MzE0NDMwQ0VBNzMwNTU3RTY5OTJFREZCOTMyNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuoZHqCebZYJKYhGMcsT9TZwAh
Nt1tH7w9p3/dxxQwxpBOWC11Sbs7OnlJ6kZZGNozNhQ4f3N3kEHr9aTg+uqhPxQa
opgKnj8qC+9nSo8/tLy/M412G27RP3EKgUApeqjFnmc/AEb4yBqB7cg7S2ftrtUH
WXZXzhMKUWUhUEenPXosMbSmWU+iwjPTUGjFSlkwu/sWomL86KwZBcseqretnZRB
cGvf+jSMrSDoNBLf7q8zJaiF6aI5WfFpzjUEQTcnaucamqFQcap507oyUg9ZSevo
FgMIYCqpNycRrUjYiFmZuUfyv4zKLh/SSpscebh2zTohTVrj4fTwKEOc+3h7AgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUPXtSy25jFEMM6nMFV+aZLt+5MmwwHwYDVR0j
BBgwFoAUJOXL36N4D4t7+5d5H1s0hxcry2swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85QzdGNUU3RDQ0RDQwODcwQUJEREYzNjlCQzY1NjdENURC
REM3Q0JEQzMyMzEwMjI0ODg0NUY2REUyNTlCQkY5LzAvMjRFNUNCREZBMzc4MEY4
QjdCRkI5Nzc5MUY1QjM0ODcxNzJCQ0I2Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNEU1Q0JERkEzNzgwRjhCN0JG
Qjk3NzkxRjVCMzQ4NzE3MkJDQjZCLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUM3RjVFN0Q0NEQ0MDg3MEFCRERGMzY5QkM2NTY3RDVEQkRDN0NCREMz
MjMxMDIyNDg4NDVGNkRFMjU5QkJGOS8wLzMyMzgzMDMxM2EzMTM3M2EzNDM4MzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzczOTM1MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AQAXSAAwDQYJKoZIhvcNAQELBQADggEBABcxVwzKqNovC2czwcY6Jg60tW/LwtGr
/nJVxSJ3MxTgrHtaFogZ6VLH+j1sDyxSoZlThBIQV7nRxzv9dUzUx/6r2LooyyE3
f2GWQVNjCYDpPHZbASFH2++sodolc3wWTfZMAbmmLwEPMznuVJveUlcSqM2BvN+q
JaFznCy++ZW+iCqVDTsan5nUacKWq74EShe74w6ddWPQHkl7iMkM6rDRH0Mu0fec
2/QffNVwf9lT1gzzbxUZH7/6jWprFg893QMjnUtqF3r8iUR/m6UUEKU9xRngsoQY
gvfqJiqR+IMyIvj2sFZg9j4TR5JZK2sHogBMEe0a4ybvCcH69iKEIC8=
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:54:51 2026 by rpki-client