This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/323030313a313339383a3237363a3a2f34382d3438203d3e203532333035.roa
File:                     323030313a313339383a3237363a3a2f34382d3438203d3e203532333035.roa (raw, json)
Hash identifier:          CyNMTO06OW5wcHclMopxNcIZ2W2xkmZ4jhy3pOLvhow=
Subject key identifier:   60:16:A7:EB:B7:5A:34:C1:C2:EA:87:A3:A8:BB:79:EC:CA:0E:13:BB
Certificate issuer:       /CN=E35FC2646A9FC8929B694AAAE04D52023AA4680C
Certificate serial:       347DBFF45A8CA9B5BABED4C6B3CBDCEFD85F101F
Authority key identifier: E3:5F:C2:64:6A:9F:C8:92:9B:69:4A:AA:E0:4D:52:02:3A:A4:68:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/323030313a313339383a3237363a3a2f34382d3438203d3e203532333035.roa
Signing time:             Tue 06 Jan 2026 20:56:29 +0000
ROA not before:           Tue 06 Jan 2026 20:51:29 +0000
ROA not after:            Tue 05 Jan 2027 20:56:29 +0000
asID:                     52305
IP address blocks:        2001:1398:276::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 22:51:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:7d:bf:f4:5a:8c:a9:b5:ba:be:d4:c6:b3:cb:dc:ef:d8:5f:10:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35FC2646A9FC8929B694AAAE04D52023AA4680C
        Validity
            Not Before: Jan  6 20:51:29 2026 GMT
            Not After : Jan  5 20:56:29 2027 GMT
        Subject: CN=6016A7EBB75A34C1C2EA87A3A8BB79ECCA0E13BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0e:0f:c6:b3:17:0f:4e:f7:77:2e:4b:f3:1d:
                    21:58:30:c9:d8:84:2a:57:87:e7:98:3b:31:66:cf:
                    af:c3:52:77:9c:49:9a:fd:f1:6c:7b:f6:30:14:6b:
                    e0:eb:fd:39:c2:ca:ea:16:be:bf:1d:dd:ef:f8:eb:
                    7c:bb:86:6a:66:18:d5:ca:0f:51:0d:3f:cc:f4:51:
                    47:14:f9:f5:c2:c3:d5:0a:5e:30:82:9e:46:c4:04:
                    88:70:a1:b5:81:e2:77:bc:89:e3:f5:9b:10:92:e0:
                    14:e1:9c:1c:74:85:57:90:1f:fc:f2:99:74:bc:9c:
                    3f:31:42:5a:9b:ef:fa:e6:b1:a6:5c:41:29:c0:82:
                    e3:a5:3e:c4:56:a4:ad:b3:ef:c5:df:b6:98:f6:9d:
                    42:06:f6:04:2f:21:a6:b5:a1:d6:88:ed:3f:6e:2f:
                    1f:84:dd:2b:e2:76:37:87:a9:4e:6e:30:8f:07:fa:
                    57:76:7b:80:7c:79:68:64:52:14:e4:61:75:d0:9f:
                    94:f2:dd:01:ae:d9:90:62:0d:77:08:11:49:e3:27:
                    71:e8:2e:c0:eb:b8:b3:1e:3d:5a:30:d4:f6:79:86:
                    6c:ad:30:1f:b3:7b:fd:33:f2:46:a5:c8:28:a6:30:
                    0b:17:7d:23:fc:04:86:1b:ab:f6:3c:16:f4:c6:43:
                    27:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:16:A7:EB:B7:5A:34:C1:C2:EA:87:A3:A8:BB:79:EC:CA:0E:13:BB
            X509v3 Authority Key Identifier:
                keyid:E3:5F:C2:64:6A:9F:C8:92:9B:69:4A:AA:E0:4D:52:02:3A:A4:68:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/323030313a313339383a3237363a3a2f34382d3438203d3e203532333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1398:276::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:39:75:f3:cb:dd:35:52:60:52:a1:40:ca:d5:e5:15:18:2f:
         e5:3c:27:f3:d7:eb:8b:ad:f0:84:a4:a0:ce:6d:7b:90:d6:e8:
         d2:f7:1e:9c:5e:b4:de:ea:7d:dd:7e:4c:27:11:cd:fd:50:ff:
         a5:d7:ac:11:2a:cb:7c:4b:25:ef:fb:0e:3c:76:0c:52:c9:64:
         2b:95:d0:e4:27:1e:51:bd:44:80:eb:7f:61:a4:a3:90:34:3d:
         96:d5:ef:6b:67:6c:a5:7a:03:9d:69:41:a7:06:5b:b7:9b:c2:
         7a:3c:76:70:7d:9b:d0:67:69:cb:a1:21:69:1c:39:be:9a:91:
         26:11:be:6c:63:67:bc:6b:98:c3:07:0d:17:1a:0b:5e:b9:2b:
         8e:5b:82:27:aa:a8:c2:4c:5a:26:90:06:52:1d:a5:ce:99:b6:
         95:e7:b9:98:5e:a5:a3:6c:fd:27:97:a2:11:5b:9c:6c:14:d6:
         10:de:af:88:0a:6b:b7:10:74:f6:03:3d:91:5e:5e:ac:5a:0f:
         d9:11:7c:20:30:6f:58:08:4f:f3:d9:15:1a:84:7a:62:56:29:
         43:56:9b:65:b2:86:c9:6b:34:9f:ad:5c:48:72:cd:cd:96:eb:
         c5:7e:71:3a:97:b0:22:ac:9c:0d:1f:18:18:9b:0e:6f:62:57:
         d7:5e:ab:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:40:49 2026 by rpki-client