This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EDA73E9B40BD4CB5AD89AA1516A142DD4912160A6D36AC9D3FF104FAF6618089/0/323030313a313365303a3a2f33322d3634203d3e20323632313738.roa
File:                     323030313a313365303a3a2f33322d3634203d3e20323632313738.roa (raw, json)
Hash identifier:          u+pcuhdxXhBSYnpvfDuLSOv9BjVH+RLrQzLEgtTIAjM=
Subject key identifier:   2E:4B:66:DE:B5:81:F7:54:ED:9D:94:D3:0D:EF:C5:8C:4B:E2:3D:CD
Certificate issuer:       /CN=C9AE029974BF7364D796B09E2D313FA4128E1865
Certificate serial:       49026D2DB7454D1232CA7C7E9D26036131D20FD9
Authority key identifier: C9:AE:02:99:74:BF:73:64:D7:96:B0:9E:2D:31:3F:A4:12:8E:18:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9AE029974BF7364D796B09E2D313FA4128E1865.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EDA73E9B40BD4CB5AD89AA1516A142DD4912160A6D36AC9D3FF104FAF6618089/0/323030313a313365303a3a2f33322d3634203d3e20323632313738.roa
Signing time:             Tue 06 Jan 2026 19:47:44 +0000
ROA not before:           Tue 06 Jan 2026 19:42:44 +0000
ROA not after:            Tue 05 Jan 2027 19:47:44 +0000
asID:                     262178
IP address blocks:        2001:13e0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EDA73E9B40BD4CB5AD89AA1516A142DD4912160A6D36AC9D3FF104FAF6618089/0/C9AE029974BF7364D796B09E2D313FA4128E1865.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EDA73E9B40BD4CB5AD89AA1516A142DD4912160A6D36AC9D3FF104FAF6618089/0/C9AE029974BF7364D796B09E2D313FA4128E1865.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9AE029974BF7364D796B09E2D313FA4128E1865.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 12:43:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:02:6d:2d:b7:45:4d:12:32:ca:7c:7e:9d:26:03:61:31:d2:0f:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9AE029974BF7364D796B09E2D313FA4128E1865
        Validity
            Not Before: Jan  6 19:42:44 2026 GMT
            Not After : Jan  5 19:47:44 2027 GMT
        Subject: CN=2E4B66DEB581F754ED9D94D30DEFC58C4BE23DCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:59:9d:83:d7:a3:bb:c2:f3:46:f9:15:57:e7:
                    3b:4f:fe:16:f8:8b:4a:1c:a7:3c:2d:53:1b:55:ce:
                    95:a3:5e:1d:c9:d7:04:d8:2e:20:17:bb:b9:82:a0:
                    ff:7b:9f:fa:6a:d7:d9:a0:cf:83:40:c2:13:ef:c0:
                    a2:11:a8:23:1f:3d:30:0c:7f:33:c6:42:11:5c:e7:
                    fa:e0:71:f1:e4:e5:96:5e:2b:68:cc:46:e2:19:15:
                    dc:83:aa:c8:1b:75:c3:56:f1:ed:44:1b:2c:3b:1d:
                    1e:ae:d0:cd:93:14:f9:8a:68:bb:4b:c0:48:ec:61:
                    a9:cc:72:bf:d0:d0:21:d4:ea:3d:d0:25:cf:15:00:
                    aa:f4:59:7c:7c:78:92:cb:cc:36:7a:92:71:d9:1e:
                    2d:17:f3:e4:7a:c8:a1:4f:2a:c2:55:3b:ec:d9:ae:
                    e6:b7:9c:66:0e:b8:0e:47:e1:f2:8f:6a:f8:01:7d:
                    a1:f9:ab:ec:8e:7d:ad:16:87:8f:1d:1e:63:aa:a6:
                    ac:94:dd:65:ad:29:33:60:0e:88:5f:42:4f:b4:b9:
                    48:0d:f6:ab:da:07:42:55:e0:c7:f3:24:60:d5:d9:
                    4c:54:5f:c5:59:70:70:1c:5f:04:ff:cc:83:b1:6c:
                    9f:86:35:6d:b2:8e:74:06:62:d7:ea:96:29:63:23:
                    83:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:4B:66:DE:B5:81:F7:54:ED:9D:94:D3:0D:EF:C5:8C:4B:E2:3D:CD
            X509v3 Authority Key Identifier:
                keyid:C9:AE:02:99:74:BF:73:64:D7:96:B0:9E:2D:31:3F:A4:12:8E:18:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EDA73E9B40BD4CB5AD89AA1516A142DD4912160A6D36AC9D3FF104FAF6618089/0/C9AE029974BF7364D796B09E2D313FA4128E1865.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9AE029974BF7364D796B09E2D313FA4128E1865.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EDA73E9B40BD4CB5AD89AA1516A142DD4912160A6D36AC9D3FF104FAF6618089/0/323030313a313365303a3a2f33322d3634203d3e20323632313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:81:8b:98:33:db:98:96:53:96:71:ed:1f:f7:09:3d:7f:cd:
         9f:96:cb:92:4e:16:87:12:b1:8f:be:18:9e:47:b7:6e:a1:6a:
         20:81:d5:8e:cf:ce:27:e1:17:51:9a:be:30:f9:92:e6:86:be:
         b0:96:0f:6c:7b:cf:34:47:54:7b:bd:54:f6:ac:ad:cd:a5:09:
         42:45:4b:b0:76:7c:c0:93:e0:12:92:f0:7d:cc:1f:83:c6:06:
         95:b3:c7:f3:2c:c6:7e:96:5f:b4:7c:0b:ea:ed:c9:e1:17:c6:
         a0:2a:59:66:9e:7f:a7:c1:6b:2c:6f:84:a0:1a:a6:23:5d:4b:
         e9:20:f5:34:a1:f0:08:62:29:c6:81:59:48:5b:b7:73:bf:59:
         c5:e0:d0:fb:b3:0a:93:dd:35:7d:c9:12:e7:3e:f5:24:2e:c6:
         9d:f8:de:b6:9e:6b:2a:89:84:98:b6:03:e0:72:46:6f:0a:ad:
         d6:c3:c8:76:29:eb:e1:a4:10:03:0e:74:10:64:9d:2a:7d:2e:
         b4:2f:bf:2e:4e:1b:63:b3:42:df:f5:6c:29:18:83:8e:0b:ed:
         8a:f4:f0:9f:85:9b:b2:4f:13:4d:77:27:d5:ae:8a:0a:fe:55:
         d0:6a:fe:b4:7a:a1:a4:a0:42:e0:b7:e6:15:46:c2:ba:b9:08:
         8c:8b:bd:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:19:28 2026 by rpki-client