This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/323830313a303a3464303a3a2f34382d3438203d3e203237373834.roa
File:                     323830313a303a3464303a3a2f34382d3438203d3e203237373834.roa (raw, json)
Hash identifier:          57qb5IxGyiBiuO919aLZd6UeZXSPzzhHfFODBPgnfxE=
Subject key identifier:   E6:79:CF:51:31:C7:C1:EB:A6:74:A2:4A:F9:94:C4:3B:77:5B:90:E1
Certificate issuer:       /CN=63DAFE7C6D072AD758B2EAA7C654C528C8DD256B
Certificate serial:       6CB851AF8E0903EFDAA532C4807255B4BF46C9A4
Authority key identifier: 63:DA:FE:7C:6D:07:2A:D7:58:B2:EA:A7:C6:54:C5:28:C8:DD:25:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/323830313a303a3464303a3a2f34382d3438203d3e203237373834.roa
Signing time:             Tue 06 Jan 2026 19:45:59 +0000
ROA not before:           Tue 06 Jan 2026 19:40:59 +0000
ROA not after:            Tue 05 Jan 2027 19:45:59 +0000
asID:                     27784
IP address blocks:        2801:0:4d0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:b8:51:af:8e:09:03:ef:da:a5:32:c4:80:72:55:b4:bf:46:c9:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63DAFE7C6D072AD758B2EAA7C654C528C8DD256B
        Validity
            Not Before: Jan  6 19:40:59 2026 GMT
            Not After : Jan  5 19:45:59 2027 GMT
        Subject: CN=E679CF5131C7C1EBA674A24AF994C43B775B90E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a9:8e:2e:1b:41:be:5c:a7:ab:89:7e:4b:51:
                    ff:76:f2:44:3a:6b:d2:a4:61:c5:c0:4e:c0:71:61:
                    b0:c9:40:0d:27:ab:1b:66:8e:55:05:3b:15:f1:dc:
                    f1:69:42:dc:72:b4:1f:6a:ce:3a:0b:a5:52:11:c0:
                    93:af:d9:29:13:69:70:1e:9e:2a:80:50:a0:4b:e9:
                    68:b4:c3:bc:cc:d3:a8:83:a8:68:a4:32:f0:30:35:
                    de:f9:03:b5:7d:ed:51:9d:79:d7:d4:86:91:aa:69:
                    4c:f7:68:d7:f0:4e:2d:1a:4f:8b:05:31:7d:90:60:
                    4a:b2:c0:8c:94:b9:78:3b:22:2c:db:1d:e3:f3:cf:
                    a8:9c:77:9a:a1:9c:be:41:87:cd:54:08:78:b2:80:
                    29:07:cc:58:31:21:c8:68:d6:03:d2:68:9a:1d:15:
                    f8:f0:e5:80:a9:2a:e4:f8:b4:ac:c9:c6:98:d3:93:
                    73:fb:1b:0d:1e:57:76:b9:f9:d6:c8:48:50:b0:f7:
                    75:c8:82:93:e5:15:4e:db:e3:8a:1e:3c:a3:40:45:
                    b6:f2:76:9b:90:60:0f:cc:4a:43:69:d9:93:28:6c:
                    29:af:c7:84:24:cf:b9:03:cc:43:d8:5b:3f:8a:b9:
                    4e:19:14:75:ec:97:50:b0:4b:8a:fb:e0:d5:23:14:
                    59:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:79:CF:51:31:C7:C1:EB:A6:74:A2:4A:F9:94:C4:3B:77:5B:90:E1
            X509v3 Authority Key Identifier:
                keyid:63:DA:FE:7C:6D:07:2A:D7:58:B2:EA:A7:C6:54:C5:28:C8:DD:25:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/323830313a303a3464303a3a2f34382d3438203d3e203237373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:4d0::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:45:b0:5a:4c:56:f8:17:e1:9e:4e:8d:29:d9:a1:2e:b9:c4:
         f8:55:aa:4c:11:3d:6b:ac:e2:76:7d:94:24:ad:49:05:c7:50:
         a0:78:03:7e:f5:9e:54:ee:4e:8f:2d:54:b2:58:f8:02:78:1e:
         27:ca:8f:26:b3:12:4d:4d:95:b2:c4:bb:f7:b1:f0:cf:53:cb:
         7a:2d:0a:bf:6b:e2:eb:d1:8f:db:ac:70:56:8b:63:42:da:50:
         b9:a1:ef:ab:3f:50:83:f1:06:1b:ba:89:d3:61:9f:ac:c3:55:
         73:8a:2d:d4:09:00:19:62:c5:fa:1d:8c:ae:be:a1:b6:ac:43:
         97:9c:f8:ab:11:ea:01:86:d5:d0:eb:9a:65:f8:45:e2:07:a4:
         b8:27:23:35:74:52:87:8c:8f:3c:f5:c1:15:ec:cd:a4:a4:63:
         ee:2d:18:95:60:48:d9:20:b4:9d:7b:74:80:e4:90:73:d4:d6:
         91:07:be:ff:67:f2:bc:a7:34:f1:7f:bc:de:1f:d9:6c:39:5a:
         8d:23:f7:55:4f:a9:31:b2:0b:b0:61:07:bc:21:a6:1d:39:43:
         27:51:10:11:4a:e4:38:da:58:db:4c:4b:09:ed:9d:66:fb:13:
         ed:f6:7d:22:f6:14:01:a0:8b:11:de:24:5c:e2:6b:83:57:85:
         53:15:f1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:38:53 2026 by rpki-client