This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CF8B87503A84E48F7652084EAC8AF0DE7CB357A55CDCA2F4B682724B356B877F/0/323830313a63343a62343a3a2f34382d3438203d3e203238333932.roa
File:                     323830313a63343a62343a3a2f34382d3438203d3e203238333932.roa (raw, json)
Hash identifier:          6Emknh0Dmw2d0oNnm/ipQ9p6nDiuC9h62Xsp1fSUZk8=
Subject key identifier:   90:52:54:27:96:E0:89:D7:34:94:FB:83:55:73:24:FD:F5:DC:9C:48
Certificate issuer:       /CN=4F43917327673645BD0B520BF95E9CA235CEFEB8
Certificate serial:       594CDFCEEB7DEAF5C71DA09B44F9C1826BDDA0E7
Authority key identifier: 4F:43:91:73:27:67:36:45:BD:0B:52:0B:F9:5E:9C:A2:35:CE:FE:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CF8B87503A84E48F7652084EAC8AF0DE7CB357A55CDCA2F4B682724B356B877F/0/323830313a63343a62343a3a2f34382d3438203d3e203238333932.roa
Signing time:             Tue 06 Jan 2026 18:57:56 +0000
ROA not before:           Tue 06 Jan 2026 18:52:56 +0000
ROA not after:            Tue 05 Jan 2027 18:57:56 +0000
asID:                     28392
IP address blocks:        2801:c4:b4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CF8B87503A84E48F7652084EAC8AF0DE7CB357A55CDCA2F4B682724B356B877F/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CF8B87503A84E48F7652084EAC8AF0DE7CB357A55CDCA2F4B682724B356B877F/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:4c:df:ce:eb:7d:ea:f5:c7:1d:a0:9b:44:f9:c1:82:6b:dd:a0:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F43917327673645BD0B520BF95E9CA235CEFEB8
        Validity
            Not Before: Jan  6 18:52:56 2026 GMT
            Not After : Jan  5 18:57:56 2027 GMT
        Subject: CN=9052542796E089D73494FB83557324FDF5DC9C48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d0:97:a5:91:cb:ec:1c:27:46:b2:3d:31:00:
                    9d:1a:b7:b0:58:af:9e:26:0a:85:46:f2:04:b6:56:
                    d3:ac:c1:02:20:6e:fd:75:e7:72:5b:36:9a:da:aa:
                    16:ac:2b:2d:d5:9e:52:8d:56:bc:8c:15:03:56:2b:
                    40:8f:14:36:61:3e:db:b5:2e:50:f0:37:fd:20:e6:
                    39:90:2c:1d:a0:b8:c8:27:cc:06:35:68:5e:60:06:
                    06:94:5c:2c:d6:6a:df:45:e1:0f:e4:13:bc:71:81:
                    b4:94:cf:d8:c7:5a:60:92:f6:32:e2:f5:30:9f:d2:
                    30:fb:ef:6c:a6:55:dc:d2:45:39:d9:e8:cf:8d:3d:
                    b1:1f:2c:1c:fa:4d:37:0e:da:4d:81:89:c9:95:c4:
                    e6:e2:d1:ba:57:d3:f9:9e:89:b0:e1:39:fd:30:56:
                    b4:4f:c2:b3:cb:2e:16:05:fe:87:4e:5b:3c:c6:df:
                    d4:1f:bb:ff:9c:24:ef:69:7b:33:1e:62:00:a2:6d:
                    bc:42:89:70:7b:2b:2c:a4:17:52:d5:db:26:42:69:
                    96:e6:ff:03:2e:79:ea:fa:65:be:34:b6:56:01:96:
                    f3:d7:e3:6d:32:f8:38:5b:6d:c4:0c:fd:c5:32:ff:
                    68:32:d2:dc:86:0a:c8:8e:0a:5f:3e:cb:74:46:9d:
                    8f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:52:54:27:96:E0:89:D7:34:94:FB:83:55:73:24:FD:F5:DC:9C:48
            X509v3 Authority Key Identifier:
                keyid:4F:43:91:73:27:67:36:45:BD:0B:52:0B:F9:5E:9C:A2:35:CE:FE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CF8B87503A84E48F7652084EAC8AF0DE7CB357A55CDCA2F4B682724B356B877F/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CF8B87503A84E48F7652084EAC8AF0DE7CB357A55CDCA2F4B682724B356B877F/0/323830313a63343a62343a3a2f34382d3438203d3e203238333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c4:b4::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:25:ab:74:4c:f4:b6:7e:a1:46:13:18:5b:91:d9:34:20:ac:
         bd:f3:e4:8e:f2:9c:1f:e0:ec:a5:aa:8a:91:29:b8:3e:19:6a:
         a7:fd:8a:27:1d:ed:a8:6d:4b:08:92:30:bd:64:cc:89:42:da:
         19:64:9e:a1:8e:ca:3e:92:bc:3d:36:cc:96:5a:21:68:05:4d:
         c3:b5:7c:2a:13:db:bb:5f:34:ef:fd:72:09:b8:7a:30:0d:7e:
         b6:75:2a:62:11:8b:88:16:ea:a7:16:4a:01:b0:56:b0:9e:40:
         4f:5f:92:9a:61:cc:db:10:9e:a7:fe:78:3d:01:39:d8:45:b9:
         02:ea:b9:2c:29:87:29:0a:ed:d8:a9:61:b4:31:0c:7e:7e:11:
         2c:73:4f:b2:b7:ca:60:15:d8:7c:ce:2f:d9:3e:6e:a8:4d:99:
         c7:81:b4:50:73:ed:f5:f9:52:24:02:bc:90:3d:39:9e:a0:b4:
         6a:69:26:ac:16:ed:d5:aa:6d:21:ba:93:70:0a:6f:b9:45:c4:
         b4:ab:57:74:dd:91:e6:49:cc:ec:b4:7b:47:de:c1:22:a1:97:
         b8:12:68:25:0f:3b:8a:2e:30:45:a4:3f:97:f1:07:b6:69:0f:
         ee:38:a7:a9:c0:bd:3b:2d:4d:58:39:74:9b:0b:bb:21:de:8f:
         99:c9:aa:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:35:48 2026 by rpki-client