This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a343030303a3a2f34302d3430203d3e203631343631.roa
File:                     323830333a643730303a343030303a3a2f34302d3430203d3e203631343631.roa (raw, json)
Hash identifier:          iCVORYxkVNGusq5moX06alYuzQRAX751jV0ZIb+L9gI=
Subject key identifier:   E0:1F:43:60:10:E9:53:42:A5:9C:5E:14:AA:36:F1:57:3E:0C:5D:01
Certificate issuer:       /CN=B137142754DED915D3341628E74A8B91AF0CB76A
Certificate serial:       2F5703251F5E8672D10CCED1AA16B7612F98CB86
Authority key identifier: B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a343030303a3a2f34302d3430203d3e203631343631.roa
Signing time:             Tue 06 Jan 2026 19:11:30 +0000
ROA not before:           Tue 06 Jan 2026 19:06:30 +0000
ROA not after:            Tue 05 Jan 2027 19:11:30 +0000
asID:                     61461
IP address blocks:        2803:d700:4000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 12:36:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:57:03:25:1f:5e:86:72:d1:0c:ce:d1:aa:16:b7:61:2f:98:cb:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B137142754DED915D3341628E74A8B91AF0CB76A
        Validity
            Not Before: Jan  6 19:06:30 2026 GMT
            Not After : Jan  5 19:11:30 2027 GMT
        Subject: CN=E01F436010E95342A59C5E14AA36F1573E0C5D01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:94:10:6c:50:b5:44:dd:7e:e8:d7:8f:bd:2f:
                    8b:41:6c:8b:fe:78:d9:ae:bc:bc:ac:74:13:2f:ba:
                    7f:26:fa:b5:10:98:dd:6a:32:8d:43:db:4b:4e:ee:
                    85:14:32:08:ea:95:2f:fb:34:de:df:da:fb:18:ed:
                    e8:63:8b:a3:1a:ba:3b:43:14:69:94:08:cc:0c:ba:
                    be:9e:30:b3:5d:5f:05:97:68:64:8a:b6:33:0f:29:
                    71:a6:81:af:75:b0:b6:e1:0f:dd:78:1c:09:46:ce:
                    f0:47:e3:c0:c6:db:33:a5:a5:e8:15:61:57:1c:9e:
                    50:0f:84:73:94:44:1c:9c:11:ad:e1:a9:51:5f:04:
                    fa:47:2b:25:7b:82:4f:c6:72:27:57:1a:83:32:ac:
                    fa:5f:ce:1b:70:8f:de:6e:64:7b:0b:d8:58:ff:88:
                    d2:dc:a4:ad:23:de:35:4e:40:f7:28:c3:dd:12:16:
                    f9:61:8d:ea:92:0e:91:79:3f:a0:78:d8:02:a6:88:
                    aa:9f:e3:ca:bd:6f:2b:1d:87:e8:c6:7d:b1:8b:ad:
                    ec:c1:92:d1:b9:5c:1e:fc:25:7d:3f:03:bf:3c:10:
                    dc:07:cf:4b:69:4a:e8:dc:76:90:86:f0:35:8f:29:
                    b4:f6:6b:cd:ce:c7:eb:e1:83:7e:37:79:09:f4:64:
                    9b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:1F:43:60:10:E9:53:42:A5:9C:5E:14:AA:36:F1:57:3E:0C:5D:01
            X509v3 Authority Key Identifier:
                keyid:B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a343030303a3a2f34302d3430203d3e203631343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d700:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         96:5d:3d:5a:02:af:85:1e:a2:7a:54:c0:95:ef:6b:13:f7:d0:
         65:02:45:f9:ab:26:12:c4:ed:00:75:65:c2:29:47:9f:bb:44:
         e6:80:bd:95:74:24:02:92:f8:51:2c:75:79:cd:06:57:08:81:
         92:24:85:70:34:30:7e:35:8a:59:13:98:47:2d:6a:79:20:7a:
         5e:a4:d7:ce:33:ea:bd:ac:85:3d:31:75:eb:65:b2:f3:c1:c6:
         91:28:8b:62:b0:40:88:8a:b3:a3:e3:93:7c:29:77:0d:c0:46:
         2e:a6:59:a2:16:c2:09:f2:b0:e0:98:a2:ad:cc:d2:e3:70:7f:
         92:04:bc:51:88:78:eb:65:15:57:ec:a5:e3:ee:2d:f4:8b:c0:
         36:96:11:4c:0e:4f:c6:e2:b8:f4:4b:cf:e1:0e:41:20:88:fe:
         e3:f9:05:91:ad:fe:ea:3d:e2:27:47:49:82:4e:8a:b7:ad:a7:
         4d:0a:c3:cb:6c:18:73:47:75:e2:85:3e:5f:79:b1:c8:2f:ab:
         d7:ab:62:31:9a:c2:ab:16:d1:f5:bf:a1:de:49:17:b9:d9:5b:
         27:b6:7f:b4:41:c4:19:39:20:bd:16:62:df:aa:e4:82:d5:4b:
         fa:00:7e:99:06:ce:9a:10:8a:b5:01:a9:5b:34:4e:8e:9b:7f:
         d0:97:6c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 09:26:53 2026 by rpki-client