This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a646330303a3a2f34302d3430203d3e203631343631.roa
File:                     323830333a643730303a646330303a3a2f34302d3430203d3e203631343631.roa (raw, json)
Hash identifier:          VP2sB+voUtkpCW/mIJ0u0ff6TZ1yAeonBgKAPOcRsJU=
Subject key identifier:   2A:0A:FB:17:41:A7:10:D3:B0:65:F8:B6:78:85:05:D2:69:03:6B:F6
Certificate issuer:       /CN=B137142754DED915D3341628E74A8B91AF0CB76A
Certificate serial:       5CDE37CC3E1123743323ED9E44D06F1437FE2454
Authority key identifier: B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a646330303a3a2f34302d3430203d3e203631343631.roa
Signing time:             Tue 06 Jan 2026 19:11:26 +0000
ROA not before:           Tue 06 Jan 2026 19:06:26 +0000
ROA not after:            Tue 05 Jan 2027 19:11:26 +0000
asID:                     61461
IP address blocks:        2803:d700:dc00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 06:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:de:37:cc:3e:11:23:74:33:23:ed:9e:44:d0:6f:14:37:fe:24:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B137142754DED915D3341628E74A8B91AF0CB76A
        Validity
            Not Before: Jan  6 19:06:26 2026 GMT
            Not After : Jan  5 19:11:26 2027 GMT
        Subject: CN=2A0AFB1741A710D3B065F8B6788505D269036BF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:58:45:ca:e3:b7:ff:86:24:87:65:b0:bf:56:
                    e3:cc:1c:c5:ee:78:b8:2d:ff:45:0d:77:54:1e:4b:
                    3e:7a:fb:27:73:2d:c8:24:e0:f5:35:d7:52:f7:0c:
                    03:94:17:09:37:92:62:31:dc:f7:25:e9:fc:fe:0a:
                    ce:cd:3a:a8:25:88:24:8f:98:1a:1e:9c:6a:31:7c:
                    ae:08:3f:c4:22:4c:28:13:2c:7c:2d:0b:f0:20:f8:
                    94:b7:09:ff:f0:e1:75:78:27:2b:ff:51:a3:d7:77:
                    28:77:b2:ff:f8:43:87:5b:14:bc:21:32:19:94:fd:
                    40:1c:af:3c:92:02:65:fa:34:a4:23:fd:a7:a0:57:
                    b4:f2:2d:1b:a3:63:8c:e3:e3:33:b9:ae:2a:ce:f2:
                    b9:e8:8c:30:94:89:55:70:da:a9:cb:9b:4a:e0:fa:
                    0d:63:cc:8f:4c:a6:cc:54:6e:b9:44:fb:de:d6:11:
                    a7:41:ec:4c:11:62:15:38:9e:47:8c:50:83:1b:f8:
                    51:e4:5b:c0:a9:52:df:3d:16:05:cf:66:83:93:5c:
                    6c:ad:e6:28:9b:08:86:ad:22:68:d2:fa:ff:d7:51:
                    14:d0:d2:54:14:ab:67:8b:db:00:92:71:d4:f3:e4:
                    f3:ad:94:31:96:90:f9:77:9a:fd:9b:97:23:ee:c8:
                    9d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:0A:FB:17:41:A7:10:D3:B0:65:F8:B6:78:85:05:D2:69:03:6B:F6
            X509v3 Authority Key Identifier:
                keyid:B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a646330303a3a2f34302d3430203d3e203631343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d700:dc00::/40

    Signature Algorithm: sha256WithRSAEncryption
         9a:5e:b7:4d:20:92:fe:c0:13:b8:72:6a:04:ca:63:36:20:cf:
         44:3a:70:a1:54:ba:42:51:8d:00:69:7d:87:01:da:00:d9:1f:
         5b:9d:5d:26:e6:7c:db:b4:0b:a3:77:de:a8:c7:66:0d:26:5e:
         f7:f0:f5:47:17:7a:49:a8:29:35:b3:b9:0d:f2:16:10:55:2c:
         c5:20:29:da:d8:28:43:39:8e:9a:67:43:75:c5:f2:60:46:f1:
         75:ad:51:69:76:68:ba:73:1d:78:f2:16:19:00:19:c6:2c:91:
         ba:4a:a4:8f:c9:3d:1e:fc:c9:35:35:5b:8f:3f:f0:38:aa:29:
         62:26:aa:a6:1c:02:10:9e:84:bc:4e:27:31:1a:c2:03:c8:71:
         b2:45:8c:00:e7:53:a0:00:a4:ef:ed:06:e7:1a:74:bb:02:32:
         b7:c3:2c:da:0c:9a:2a:26:75:24:ee:08:d0:f0:5c:58:77:87:
         50:d2:d5:b4:be:72:d8:69:7f:5c:b9:f1:02:c8:81:cd:8b:a7:
         24:e9:23:ab:7a:31:f9:df:8d:93:d7:04:6f:5a:e6:11:e5:a7:
         08:9c:0b:19:95:3a:ea:2c:7a:be:c9:8b:44:68:bb:8b:da:03:
         73:48:ce:7b:d8:53:0a:3c:16:d0:38:89:8a:20:00:02:d2:78:
         f0:65:0e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 06:44:03 2026 by rpki-client