This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/323830303a3933373a3a2f33322d313236203d3e20323634373331.roa
File:                     323830303a3933373a3a2f33322d313236203d3e20323634373331.roa (raw, json)
Hash identifier:          yBLCVuW0KDCrWIBZWIuwZ6iHgoFQIHPqvOj74d6/UtA=
Subject key identifier:   09:43:17:AF:5E:8E:40:97:8E:3C:9C:4E:E0:E8:8C:2D:6F:CF:CB:2E
Certificate issuer:       /CN=4952A16D3AC597268E782F4930101E90D668A012
Certificate serial:       7CDB691D11345E7EA759C581F39EB206809607CC
Authority key identifier: 49:52:A1:6D:3A:C5:97:26:8E:78:2F:49:30:10:1E:90:D6:68:A0:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/323830303a3933373a3a2f33322d313236203d3e20323634373331.roa
Signing time:             Tue 06 Jan 2026 19:16:13 +0000
ROA not before:           Tue 06 Jan 2026 19:11:13 +0000
ROA not after:            Tue 05 Jan 2027 19:16:13 +0000
asID:                     264731
IP address blocks:        2800:937::/32 maxlen: 126
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/4952A16D3AC597268E782F4930101E90D668A012.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/4952A16D3AC597268E782F4930101E90D668A012.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 13:34:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:db:69:1d:11:34:5e:7e:a7:59:c5:81:f3:9e:b2:06:80:96:07:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4952A16D3AC597268E782F4930101E90D668A012
        Validity
            Not Before: Jan  6 19:11:13 2026 GMT
            Not After : Jan  5 19:16:13 2027 GMT
        Subject: CN=094317AF5E8E40978E3C9C4EE0E88C2D6FCFCB2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1b:39:70:fe:cc:ca:6d:e0:f1:66:e2:4c:e1:
                    2a:09:03:32:21:7a:e3:df:81:2a:37:8b:89:ea:ce:
                    df:d0:63:1a:71:53:93:45:14:d2:3a:4e:47:b8:14:
                    f8:97:1e:8a:3e:01:d3:72:32:e6:91:d3:77:7f:a8:
                    9f:b9:cb:a3:1d:e5:94:a3:b5:a8:2f:60:ea:46:e7:
                    f5:e7:ad:c2:19:1e:2f:91:4b:a4:84:1b:98:50:c1:
                    e6:48:95:40:b8:cb:7c:c1:7a:f9:4a:78:9d:cf:3a:
                    42:f8:0a:0f:5e:71:ac:f4:67:a5:1b:4e:71:3e:dc:
                    d4:9a:b6:5f:88:ba:3b:ba:27:ee:23:df:47:73:37:
                    9f:95:6b:f3:05:53:bd:d2:99:73:fc:7f:cf:75:15:
                    e1:15:60:51:64:b7:72:2d:a3:dc:ee:37:cb:8d:f3:
                    9e:69:cc:2b:5f:a4:37:d3:5f:8e:e8:07:85:99:bf:
                    bf:1e:48:91:67:78:31:c0:02:c7:3c:70:5c:24:92:
                    36:cc:58:ac:0c:23:8b:19:cc:79:08:b9:47:72:a2:
                    70:8f:6d:98:31:aa:6b:f1:0f:6b:b5:7c:a5:f1:9e:
                    59:bc:37:22:cc:33:d0:78:38:71:93:bf:1f:15:a7:
                    e7:8f:de:23:5e:19:80:4b:30:07:8a:ca:c1:e2:94:
                    89:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:43:17:AF:5E:8E:40:97:8E:3C:9C:4E:E0:E8:8C:2D:6F:CF:CB:2E
            X509v3 Authority Key Identifier:
                keyid:49:52:A1:6D:3A:C5:97:26:8E:78:2F:49:30:10:1E:90:D6:68:A0:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/4952A16D3AC597268E782F4930101E90D668A012.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/323830303a3933373a3a2f33322d313236203d3e20323634373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:937::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:79:fe:9e:a0:29:f3:0f:2d:9a:7c:3b:be:9c:ee:21:cd:00:
         c3:97:76:5d:5c:68:20:10:f7:89:51:b1:9d:fb:8c:96:77:1e:
         68:1c:03:16:ca:29:e4:6f:8d:bf:49:57:e3:96:2e:e8:02:0a:
         ef:a1:63:86:ab:f8:e5:44:8e:e7:30:6b:07:14:8a:ce:af:e4:
         84:3c:03:48:b2:86:e3:bf:ee:17:d4:33:fa:4d:56:06:fd:3c:
         a2:45:51:d2:c6:33:2e:58:98:7f:e4:c9:4f:89:24:0b:8d:75:
         98:e1:47:25:eb:f8:f7:34:3d:93:ce:4d:ae:ef:7d:96:f1:0b:
         ec:01:d4:ec:b0:7c:c4:da:54:fe:f2:aa:b7:58:8d:82:22:c2:
         ab:a4:41:db:74:10:99:64:28:ee:80:ec:e5:af:c4:03:43:29:
         6d:f9:59:0b:c0:0c:41:48:f3:85:c2:0a:df:c8:bd:93:cc:25:
         86:3d:95:09:3a:65:6a:47:2a:46:e3:05:0b:7a:9a:ba:f4:e3:
         35:52:40:6f:27:3d:fe:05:02:21:18:bf:3b:a8:91:d9:99:78:
         22:b4:34:39:45:ec:8a:10:8d:48:9c:21:0d:97:b6:c0:bb:c7:
         2f:fc:ea:80:aa:33:3b:88:30:7d:97:c9:6b:d3:41:38:6e:c1:
         8e:76:92:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:07:46 2026 by rpki-client