This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/323830303a3133303a3a2f33322d3332203d3e203237383230.roa
File:                     323830303a3133303a3a2f33322d3332203d3e203237383230.roa (raw, json)
Hash identifier:          gfJ15hwqeO5vk5ajkph+Az1rXeR/gI1yRjo5xyvmKtQ=
Subject key identifier:   9C:F4:2D:12:5B:EF:B8:29:07:51:CD:D5:CD:79:91:DF:EC:65:63:0E
Certificate issuer:       /CN=004C78F3729207534118FFE002E2186FC5375901
Certificate serial:       491A05C7E0894514CEDECEA2F2B71E39351DD2B8
Authority key identifier: 00:4C:78:F3:72:92:07:53:41:18:FF:E0:02:E2:18:6F:C5:37:59:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004C78F3729207534118FFE002E2186FC5375901.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/323830303a3133303a3a2f33322d3332203d3e203237383230.roa
Signing time:             Tue 06 Jan 2026 20:53:33 +0000
ROA not before:           Tue 06 Jan 2026 20:48:33 +0000
ROA not after:            Tue 05 Jan 2027 20:53:33 +0000
asID:                     27820
IP address blocks:        2800:130::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/004C78F3729207534118FFE002E2186FC5375901.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/004C78F3729207534118FFE002E2186FC5375901.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004C78F3729207534118FFE002E2186FC5375901.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 09:23:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:1a:05:c7:e0:89:45:14:ce:de:ce:a2:f2:b7:1e:39:35:1d:d2:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=004C78F3729207534118FFE002E2186FC5375901
        Validity
            Not Before: Jan  6 20:48:33 2026 GMT
            Not After : Jan  5 20:53:33 2027 GMT
        Subject: CN=9CF42D125BEFB8290751CDD5CD7991DFEC65630E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d4:33:1b:18:09:27:b0:61:23:93:02:e8:b8:
                    08:d4:58:98:1e:ab:a3:4b:c0:9a:b8:22:42:9b:8d:
                    03:6e:c3:74:d0:e2:43:e5:a7:d2:0e:a4:88:e0:70:
                    d6:4e:68:53:cc:84:34:c2:20:c2:7f:56:30:80:13:
                    e4:fa:66:b9:c3:04:8c:d7:79:9f:df:9b:65:7c:11:
                    44:e3:d7:f0:c9:6b:18:a4:cc:e7:2c:c3:6c:6b:61:
                    ff:34:35:42:d2:f5:36:6f:36:59:e7:01:e0:28:dd:
                    0e:9d:8c:5b:23:64:4b:5a:16:56:09:71:81:bb:f4:
                    9a:94:dc:4f:22:1a:8f:a1:e8:85:a7:61:94:40:54:
                    39:2f:31:18:ce:1d:d0:54:47:f7:45:21:ee:0c:5c:
                    9f:88:cf:c3:dd:df:fa:1e:47:e6:46:78:1e:71:5a:
                    56:0c:60:d3:b8:29:9d:08:f8:46:77:63:a5:6e:a9:
                    f4:6e:ef:3b:03:b4:21:da:b6:ad:5d:42:47:f3:7d:
                    f5:7d:f9:89:0f:4a:05:ca:bd:55:00:90:c4:f5:56:
                    df:22:02:87:3a:c1:e6:e3:f7:a0:23:eb:9d:14:9d:
                    e7:e2:87:54:5b:a8:4c:7b:48:69:0d:8e:ca:6e:fe:
                    6d:cd:94:60:b7:cd:44:43:cc:1b:b1:fe:55:ba:c5:
                    cc:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F4:2D:12:5B:EF:B8:29:07:51:CD:D5:CD:79:91:DF:EC:65:63:0E
            X509v3 Authority Key Identifier:
                keyid:00:4C:78:F3:72:92:07:53:41:18:FF:E0:02:E2:18:6F:C5:37:59:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/004C78F3729207534118FFE002E2186FC5375901.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004C78F3729207534118FFE002E2186FC5375901.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/323830303a3133303a3a2f33322d3332203d3e203237383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:130::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:b8:5c:b9:cf:36:e5:45:b0:1b:98:8a:1d:79:13:04:9a:23:
         6d:67:ae:b6:7d:ea:aa:00:32:70:44:89:3f:25:cc:0f:e9:1a:
         f3:3c:7b:91:c7:ec:ab:1c:d6:81:c7:c3:c9:ff:17:d7:13:e3:
         aa:0a:28:e6:e9:76:08:34:29:0e:b2:be:81:01:66:7f:ba:f8:
         dd:8d:0a:4e:6c:aa:45:23:f3:69:3f:28:43:04:5b:37:ce:a3:
         b8:2b:4c:00:34:d1:20:26:d7:c4:87:d9:94:22:0d:41:45:24:
         1b:53:48:fb:12:44:cb:0f:52:fb:82:58:a0:44:4e:e7:9b:9a:
         9f:40:3f:ab:43:3a:ee:f1:34:fa:15:92:ea:d0:f3:dc:ef:d3:
         88:8b:24:9a:d7:d6:1b:d1:d8:d4:6a:d5:83:e2:7f:06:37:d5:
         99:a0:74:c1:75:55:95:3e:03:48:3a:e4:10:65:13:a9:3a:c8:
         d5:03:16:7c:1b:f5:5a:44:e5:3b:05:1c:88:65:77:36:d3:20:
         5c:16:0d:14:b1:83:81:51:89:55:9d:59:df:0b:c5:a2:f3:f4:
         63:e5:dc:eb:3a:80:24:aa:d3:f7:c7:25:ee:6e:fc:09:f7:fa:
         87:8a:82:3e:47:dc:dc:43:d7:d1:45:b9:74:57:8b:61:05:84:
         e2:2a:c3:90
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUSRoFx+CJRRTO3s6i8rceOTUd0rgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDA0Qzc4RjM3MjkyMDc1MzQxMThGRkUwMDJFMjE4NkZD
NTM3NTkwMTAeFw0yNjAxMDYyMDQ4MzNaFw0yNzAxMDUyMDUzMzNaMDMxMTAvBgNV
BAMTKDlDRjQyRDEyNUJFRkI4MjkwNzUxQ0RENUNENzk5MURGRUM2NTYzMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ1DMbGAknsGEjkwLouAjUWJge
q6NLwJq4IkKbjQNuw3TQ4kPlp9IOpIjgcNZOaFPMhDTCIMJ/VjCAE+T6ZrnDBIzX
eZ/fm2V8EUTj1/DJaxikzOcsw2xrYf80NULS9TZvNlnnAeAo3Q6djFsjZEtaFlYJ
cYG79JqU3E8iGo+h6IWnYZRAVDkvMRjOHdBUR/dFIe4MXJ+Iz8Pd3/oeR+ZGeB5x
WlYMYNO4KZ0I+EZ3Y6VuqfRu7zsDtCHatq1dQkfzffV9+YkPSgXKvVUAkMT1Vt8i
Aoc6webj96Aj650Unefih1RbqEx7SGkNjspu/m3NlGC3zURDzBux/lW6xcztAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUnPQtElvvuCkHUc3VzXmR3+xlYw4wHwYDVR0j
BBgwFoAUAEx483KSB1NBGP/gAuIYb8U3WQEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yOTYyREMyRENCRTg2NjAyQUU2QTJFNDIzOTM0ODdFNTJB
RjVDNjgxNUQxMjM2Q0FEMTEwQzhBNkM4NzgyMzNELzAvMDA0Qzc4RjM3MjkyMDc1
MzQxMThGRkUwMDJFMjE4NkZDNTM3NTkwMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMDRDNzhGMzcyOTIwNzUzNDEx
OEZGRTAwMkUyMTg2RkM1Mzc1OTAxLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjk2MkRDMkRDQkU4NjYwMkFFNkEyRTQyMzkzNDg3RTUyQUY1QzY4MTVE
MTIzNkNBRDExMEM4QTZDODc4MjMzRC8wLzMyMzgzMDMwM2EzMTMzMzAzYTNhMmYz
MzMyMmQzMzMyMjAzZDNlMjAzMjM3MzgzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAABMDANBgkq
hkiG9w0BAQsFAAOCAQEAnbhcuc825UWwG5iKHXkTBJojbWeutn3qqgAycESJPyXM
D+ka8zx7kcfsqxzWgcfDyf8X1xPjqgoo5ul2CDQpDrK+gQFmf7r43Y0KTmyqRSPz
aT8oQwRbN86juCtMADTRICbXxIfZlCINQUUkG1NI+xJEyw9S+4JYoERO55uan0A/
q0M67vE0+hWS6tDz3O/TiIskmtfWG9HY1GrVg+J/BjfVmaB0wXVVlT4DSDrkEGUT
qTrI1QMWfBv1WkTlOwUciGV3NtMgXBYNFLGDgVGJVZ1Z3wvFovP0Y+Xc6zqAJKrT
98cl7m78Cff6h4qCPkfc3EPX0UW5dFeLYQWE4irDkA==
-----END CERTIFICATE-----
Generated at Tue Jan 13 03:43:16 2026 by rpki-client