This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031393a3a2f34382d3438203d3e203532353038.roa
File:                     323030313a313363373a363031393a3a2f34382d3438203d3e203532353038.roa (raw, json)
Hash identifier:          LK4loqCXluvqyhYXkkWPknrsukneWrN1P9QEfcPYKcY=
Subject key identifier:   48:79:4F:67:A9:5B:8B:7B:82:FD:4D:69:D1:93:23:04:B5:62:E0:32
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       430B5E5CDF68BD7BAF00B8F461E570C516D5E40D
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031393a3a2f34382d3438203d3e203532353038.roa
Signing time:             Tue 06 Jan 2026 19:29:23 +0000
ROA not before:           Tue 06 Jan 2026 19:24:23 +0000
ROA not after:            Tue 05 Jan 2027 19:29:23 +0000
asID:                     52508
IP address blocks:        2001:13c7:6019::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 18:05:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:0b:5e:5c:df:68:bd:7b:af:00:b8:f4:61:e5:70:c5:16:d5:e4:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Jan  6 19:24:23 2026 GMT
            Not After : Jan  5 19:29:23 2027 GMT
        Subject: CN=48794F67A95B8B7B82FD4D69D1932304B562E032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:10:91:d7:ce:dc:15:1b:50:ba:cc:76:4a:38:
                    70:8b:4d:3c:d2:5c:72:44:cc:4a:fd:c9:59:c0:82:
                    26:b7:6f:24:c0:61:93:a4:e2:6f:76:70:0c:c6:66:
                    23:73:6a:ee:eb:99:5c:fe:8a:dc:e0:23:41:30:38:
                    9e:62:09:63:2c:6f:ef:bb:0c:8d:b9:f7:47:2a:27:
                    e6:4e:46:8c:c6:a5:7e:fa:10:0c:e2:c5:73:35:7e:
                    96:57:83:e7:45:ba:dd:45:3d:a5:e9:c7:52:0d:77:
                    e0:49:77:2e:7a:e0:d4:93:b9:14:03:99:9e:ff:89:
                    1a:2e:65:2b:2f:10:c9:37:f0:ee:fa:36:b7:fc:59:
                    29:32:47:c6:2b:fa:76:75:63:06:45:b1:39:44:16:
                    c8:93:09:b8:b4:6a:27:61:31:ca:d6:77:2a:13:8b:
                    33:3e:4c:95:2a:43:e8:8f:15:e8:ff:90:0b:dc:66:
                    f9:3c:73:35:9e:59:72:8e:51:ed:12:a4:01:68:c4:
                    8a:63:ed:b1:0d:f3:80:43:57:b5:d0:0b:2c:2b:cb:
                    c5:5e:44:ef:34:35:01:4d:b1:c6:f3:ce:42:69:3c:
                    2a:da:69:3e:5b:0a:85:46:be:cf:6a:c6:8f:09:b1:
                    98:8a:6f:00:54:9f:86:a8:82:7a:9f:3f:98:69:34:
                    69:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:79:4F:67:A9:5B:8B:7B:82:FD:4D:69:D1:93:23:04:B5:62:E0:32
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031393a3a2f34382d3438203d3e203532353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:6019::/48

    Signature Algorithm: sha256WithRSAEncryption
         cc:70:73:e3:42:50:77:63:a6:00:eb:e1:dd:a0:20:56:ab:a7:
         b6:8c:6d:fb:43:19:2f:6e:b7:ce:62:71:bc:fa:01:14:8e:60:
         76:22:7b:8d:65:f0:20:b6:31:09:d5:f6:43:5e:21:fe:f5:a4:
         31:6f:a4:44:69:6d:87:fa:27:b9:f9:8e:cb:1b:26:8d:47:6a:
         a9:ce:d4:39:aa:bc:3e:42:e3:06:ae:43:a6:c1:6c:01:78:08:
         f3:4d:ee:cf:9e:66:d5:1d:1a:ae:07:0b:86:7c:8a:83:a7:4a:
         2c:da:27:66:d2:88:68:40:53:d8:d5:2b:bf:36:f5:0d:0a:1e:
         3b:bc:6f:4d:65:f8:9b:5b:5f:9c:da:63:7e:a9:15:b8:3d:2f:
         96:79:d7:c5:99:18:8c:62:33:00:ef:3e:d8:63:b7:03:28:b6:
         76:bf:c1:b7:16:48:ec:eb:09:41:72:a3:bf:bc:25:fe:3d:ed:
         e4:cd:a4:be:48:5c:9f:7c:8f:1d:db:b3:bd:0a:7d:7f:c5:c1:
         85:43:ad:9a:9d:ed:2f:35:78:bc:aa:69:4c:2a:a6:e1:1b:f4:
         d8:44:40:a6:2e:44:c7:07:4b:b2:80:57:09:5f:fc:a2:bb:9b:
         44:69:77:1e:5f:ae:80:c4:56:a8:fa:01:7c:35:76:e5:c9:90:
         66:72:0c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 09:28:30 2026 by rpki-client