This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0DD04EE5C1D5E5284F12004A3B9C51557A34C5449DA5AC6AC6EA3D3614F7AE71/0/323830313a3135633a3a2f34382d3438203d3e203134303830.roa
File:                     323830313a3135633a3a2f34382d3438203d3e203134303830.roa (raw, json)
Hash identifier:          LMUUkS2wuhfKT5GGZrjYS625DJ4GKDGqT5Qn1U8u3zw=
Subject key identifier:   2F:FA:3C:F1:63:53:7D:96:06:84:7C:E5:BE:96:7B:5C:90:75:76:7D
Certificate issuer:       /CN=728EC5445CEE97191BF04E1B6FE632CB14937698
Certificate serial:       531150DB2C950AEE5AD71A14BF0BA0930B1E0751
Authority key identifier: 72:8E:C5:44:5C:EE:97:19:1B:F0:4E:1B:6F:E6:32:CB:14:93:76:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/728EC5445CEE97191BF04E1B6FE632CB14937698.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0DD04EE5C1D5E5284F12004A3B9C51557A34C5449DA5AC6AC6EA3D3614F7AE71/0/323830313a3135633a3a2f34382d3438203d3e203134303830.roa
Signing time:             Tue 06 Jan 2026 19:39:14 +0000
ROA not before:           Tue 06 Jan 2026 19:34:14 +0000
ROA not after:            Tue 05 Jan 2027 19:39:14 +0000
asID:                     14080
IP address blocks:        2801:15c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0DD04EE5C1D5E5284F12004A3B9C51557A34C5449DA5AC6AC6EA3D3614F7AE71/0/728EC5445CEE97191BF04E1B6FE632CB14937698.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0DD04EE5C1D5E5284F12004A3B9C51557A34C5449DA5AC6AC6EA3D3614F7AE71/0/728EC5445CEE97191BF04E1B6FE632CB14937698.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/728EC5445CEE97191BF04E1B6FE632CB14937698.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 09:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:11:50:db:2c:95:0a:ee:5a:d7:1a:14:bf:0b:a0:93:0b:1e:07:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=728EC5445CEE97191BF04E1B6FE632CB14937698
        Validity
            Not Before: Jan  6 19:34:14 2026 GMT
            Not After : Jan  5 19:39:14 2027 GMT
        Subject: CN=2FFA3CF163537D9606847CE5BE967B5C9075767D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f4:b5:71:94:73:22:cd:81:3e:6e:86:74:0b:
                    7a:6a:08:4d:1f:a4:1e:7e:a8:45:db:e0:c5:4a:c3:
                    ab:4c:98:7b:a8:81:70:f6:50:08:b9:57:27:01:80:
                    e8:d6:77:67:4c:af:e4:83:c0:21:67:0d:8c:43:14:
                    42:84:c5:64:bd:72:16:b5:42:91:6f:c3:a8:77:65:
                    0a:b4:67:64:1f:b9:fc:8e:0d:88:89:5f:0f:22:a3:
                    f7:c5:3a:17:ca:f8:b9:4b:72:f9:76:7f:04:81:54:
                    3a:46:22:e3:38:72:40:39:63:a2:71:3b:6a:4b:87:
                    c9:78:8c:9a:11:40:76:e6:39:4d:a8:6a:59:31:06:
                    bb:2e:69:08:41:bf:70:43:b3:8a:e8:f3:fc:8c:03:
                    6a:2c:8c:e6:11:2b:03:87:50:95:d0:54:15:99:57:
                    4c:dd:b9:9e:7b:f4:ac:da:25:cd:ec:32:f2:a2:cd:
                    20:f9:47:4d:b0:d3:dc:60:e9:30:46:a1:c6:77:e6:
                    bf:fa:40:17:24:51:5d:43:7b:d7:6b:7f:28:ce:03:
                    41:ce:63:af:75:43:f5:b4:bf:12:21:c3:99:ef:1c:
                    0f:6e:08:cf:25:cb:c0:67:88:90:76:4c:0e:b5:07:
                    81:fe:05:88:49:4b:24:f9:79:08:35:ab:c4:e7:31:
                    82:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:FA:3C:F1:63:53:7D:96:06:84:7C:E5:BE:96:7B:5C:90:75:76:7D
            X509v3 Authority Key Identifier:
                keyid:72:8E:C5:44:5C:EE:97:19:1B:F0:4E:1B:6F:E6:32:CB:14:93:76:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0DD04EE5C1D5E5284F12004A3B9C51557A34C5449DA5AC6AC6EA3D3614F7AE71/0/728EC5445CEE97191BF04E1B6FE632CB14937698.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/728EC5445CEE97191BF04E1B6FE632CB14937698.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0DD04EE5C1D5E5284F12004A3B9C51557A34C5449DA5AC6AC6EA3D3614F7AE71/0/323830313a3135633a3a2f34382d3438203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:15c::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:ce:0a:9c:80:6c:3a:d0:f1:af:d2:b1:cb:f1:39:9b:1b:3b:
         ac:ef:8f:db:8d:6a:62:79:b4:b0:24:c5:73:fb:94:23:8e:35:
         1b:ef:87:86:b9:7f:33:39:a8:95:96:c7:fd:f1:ef:d1:a2:83:
         11:28:11:df:c3:bd:29:07:af:b2:7d:a2:ee:a1:9c:97:9b:07:
         98:df:c9:a3:ff:a9:56:96:52:8e:fc:3a:12:e4:dc:c3:74:b2:
         e7:91:61:62:51:35:8f:3e:49:93:fa:51:c4:be:b9:a5:e2:53:
         48:ee:3a:80:eb:14:12:fb:ee:63:54:8c:17:82:8a:72:4d:71:
         c8:b3:0d:a3:90:8f:21:69:4b:07:26:2b:66:dc:81:3e:bc:b7:
         fe:11:23:83:a7:62:86:1e:fb:e7:72:f9:7e:a3:df:17:c5:57:
         67:f4:d4:c9:ea:37:91:59:f6:b3:b9:4c:5f:b6:c7:5e:cb:f1:
         0b:d6:13:7d:7d:3e:21:be:56:1f:9d:59:49:7e:31:b2:62:f0:
         17:a2:76:4a:59:09:64:d0:ea:5f:ad:fe:cb:a7:1c:00:16:63:
         8d:45:9a:b0:79:8a:a5:e8:80:53:0c:60:42:0e:2d:b2:02:60:
         9b:83:3b:f4:33:35:b7:e0:39:a9:87:9d:e3:ad:04:5b:1b:f1:
         fb:8d:a5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 23:38:18 2026 by rpki-client