This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B247EA2689872EAD1C46D365EC86710D1CFB5666AC46E823DB74477B718EB04/0/323830303a3138303a3a2f33322d3332203d3e203237393234.roa
File:                     323830303a3138303a3a2f33322d3332203d3e203237393234.roa (raw, json)
Hash identifier:          xAxXuJL0jDYMN1sAKnaEt9XXqd8KLUEQdzJq74UJkPY=
Subject key identifier:   09:35:3B:FF:D9:67:1A:DD:74:BD:3A:9F:6E:61:2D:AD:A6:92:A5:62
Certificate issuer:       /CN=448D738DFBD73388AE474D2B6ED53A04D42FCAE5
Certificate serial:       03B7434278760473DD177E7B55D98683CF9FD8C0
Authority key identifier: 44:8D:73:8D:FB:D7:33:88:AE:47:4D:2B:6E:D5:3A:04:D4:2F:CA:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/448D738DFBD73388AE474D2B6ED53A04D42FCAE5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B247EA2689872EAD1C46D365EC86710D1CFB5666AC46E823DB74477B718EB04/0/323830303a3138303a3a2f33322d3332203d3e203237393234.roa
Signing time:             Tue 06 Jan 2026 18:57:46 +0000
ROA not before:           Tue 06 Jan 2026 18:52:46 +0000
ROA not after:            Tue 05 Jan 2027 18:57:46 +0000
asID:                     27924
IP address blocks:        2800:180::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1B247EA2689872EAD1C46D365EC86710D1CFB5666AC46E823DB74477B718EB04/0/448D738DFBD73388AE474D2B6ED53A04D42FCAE5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1B247EA2689872EAD1C46D365EC86710D1CFB5666AC46E823DB74477B718EB04/0/448D738DFBD73388AE474D2B6ED53A04D42FCAE5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/448D738DFBD73388AE474D2B6ED53A04D42FCAE5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Jan 2026 09:10:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:b7:43:42:78:76:04:73:dd:17:7e:7b:55:d9:86:83:cf:9f:d8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=448D738DFBD73388AE474D2B6ED53A04D42FCAE5
        Validity
            Not Before: Jan  6 18:52:46 2026 GMT
            Not After : Jan  5 18:57:46 2027 GMT
        Subject: CN=09353BFFD9671ADD74BD3A9F6E612DADA692A562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:05:5d:7a:f2:44:85:93:01:ea:40:68:ed:6e:
                    23:72:af:54:a8:18:79:66:b5:b2:5d:d9:75:56:d6:
                    e9:03:3f:30:b5:c4:6c:b3:d1:f4:32:80:ff:a1:c1:
                    7e:90:74:1f:b7:7b:dd:82:65:63:70:7c:53:32:74:
                    40:10:d6:dc:bf:65:82:8b:d5:3f:e4:ee:61:16:25:
                    61:3e:ab:58:d2:2e:b1:42:81:08:d5:44:a1:12:43:
                    61:c5:f6:ca:1e:26:e4:3f:5a:d1:7a:d7:87:d1:02:
                    c2:e5:f0:b7:f7:4d:e3:a6:b1:39:5d:44:0c:b3:00:
                    59:01:54:12:ad:d2:d6:b3:c5:0f:e6:c8:5d:f3:0e:
                    60:62:0c:e9:60:b6:a4:98:d7:53:8e:20:85:5e:cd:
                    0f:40:40:c4:b6:ff:5b:f6:db:24:e3:91:c4:43:27:
                    a6:a4:4d:53:63:f3:84:c9:78:d5:39:dc:da:c4:55:
                    ae:b5:bc:11:3a:3a:b3:60:f3:c4:d3:07:28:e5:e1:
                    7e:bd:18:ca:56:ee:d0:6a:89:dc:90:22:08:78:e1:
                    db:77:f6:d7:f8:16:9f:e2:bd:37:de:4d:d1:38:3d:
                    ae:ff:15:1f:c4:b4:14:a2:0c:eb:ee:a1:33:3a:6d:
                    4d:4e:a4:f9:ff:4b:5b:14:86:0e:da:f4:3c:01:60:
                    43:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:35:3B:FF:D9:67:1A:DD:74:BD:3A:9F:6E:61:2D:AD:A6:92:A5:62
            X509v3 Authority Key Identifier:
                keyid:44:8D:73:8D:FB:D7:33:88:AE:47:4D:2B:6E:D5:3A:04:D4:2F:CA:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B247EA2689872EAD1C46D365EC86710D1CFB5666AC46E823DB74477B718EB04/0/448D738DFBD73388AE474D2B6ED53A04D42FCAE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/448D738DFBD73388AE474D2B6ED53A04D42FCAE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B247EA2689872EAD1C46D365EC86710D1CFB5666AC46E823DB74477B718EB04/0/323830303a3138303a3a2f33322d3332203d3e203237393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:180::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:da:2a:0a:6e:58:d1:bb:23:99:b5:3b:a4:81:71:eb:d0:8e:
         8a:24:97:c5:59:5b:22:fb:85:ea:31:04:5a:41:e3:10:3c:db:
         6c:0e:d6:ff:03:5a:fb:9f:de:d7:ac:d7:87:d3:73:ec:6e:a7:
         57:ce:8f:09:25:02:33:de:df:e3:02:19:8a:f9:ab:0e:f5:70:
         c2:10:07:f1:21:3b:ed:ec:3d:7d:73:3f:6b:8b:fc:04:32:6e:
         50:f8:6e:b0:ea:45:cc:e4:be:bb:90:ef:f4:cd:a8:a2:51:b2:
         bc:8d:ba:e3:cc:c0:81:27:de:e7:24:a1:83:ee:3e:35:d9:dc:
         56:5f:12:5a:2a:92:40:62:5b:22:55:17:d3:42:40:82:3d:a4:
         27:c4:66:a8:53:fb:d0:e5:5d:d5:ed:29:8d:45:e9:b6:64:88:
         b6:ca:c1:1a:7a:c6:95:eb:81:03:bd:26:44:ec:2e:f6:e1:30:
         a7:7f:30:25:69:f4:36:fc:b0:c7:44:73:19:e1:de:15:d3:61:
         4f:97:ff:38:83:ba:0d:20:ed:ae:f9:38:b7:79:a8:0a:e3:d1:
         f3:21:eb:77:68:1e:83:59:7d:54:af:14:71:eb:88:aa:f9:e3:
         4d:ed:d7:46:f8:68:a6:fe:b1:de:0f:14:33:e3:cf:97:c9:0c:
         b4:0c:41:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 06:52:15 2026 by rpki-client