This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4BA37A459F293C30036216BB44FE99FC147CD8BFFDE2FF3C5E67537287481E60/0/323830313a3162393a323a3a2f34382d3438203d3e20323732393532.roa
File:                     323830313a3162393a323a3a2f34382d3438203d3e20323732393532.roa (raw, json)
Hash identifier:          3/sYfjZUuExGwlUejx0rRma+SXIbMVWdO+axe7LVkG0=
Subject key identifier:   D1:90:88:64:DF:5F:E9:49:D4:8E:60:7C:7D:77:A0:14:82:BC:00:44
Certificate issuer:       /CN=721723EE6C96BAE63225C18652977F8E404DBD28
Certificate serial:       6EB3527178F417F5486BDBD0BC7FD6A78D20BD42
Authority key identifier: 72:17:23:EE:6C:96:BA:E6:32:25:C1:86:52:97:7F:8E:40:4D:BD:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/721723EE6C96BAE63225C18652977F8E404DBD28.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4BA37A459F293C30036216BB44FE99FC147CD8BFFDE2FF3C5E67537287481E60/0/323830313a3162393a323a3a2f34382d3438203d3e20323732393532.roa
Signing time:             Tue 06 Jan 2026 19:10:39 +0000
ROA not before:           Tue 06 Jan 2026 19:05:39 +0000
ROA not after:            Tue 05 Jan 2027 19:10:39 +0000
asID:                     272952
IP address blocks:        2801:1b9:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4BA37A459F293C30036216BB44FE99FC147CD8BFFDE2FF3C5E67537287481E60/0/721723EE6C96BAE63225C18652977F8E404DBD28.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4BA37A459F293C30036216BB44FE99FC147CD8BFFDE2FF3C5E67537287481E60/0/721723EE6C96BAE63225C18652977F8E404DBD28.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/721723EE6C96BAE63225C18652977F8E404DBD28.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 02:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:b3:52:71:78:f4:17:f5:48:6b:db:d0:bc:7f:d6:a7:8d:20:bd:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=721723EE6C96BAE63225C18652977F8E404DBD28
        Validity
            Not Before: Jan  6 19:05:39 2026 GMT
            Not After : Jan  5 19:10:39 2027 GMT
        Subject: CN=D1908864DF5FE949D48E607C7D77A01482BC0044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f8:00:a1:da:32:2e:4b:50:ac:1c:3b:29:9d:
                    b9:37:a0:1b:5a:54:17:f2:95:f2:a5:6b:1e:2e:07:
                    b3:fa:04:10:a5:28:ef:0b:82:bf:e6:0c:a7:64:1a:
                    e3:8c:15:b2:6e:dd:ca:90:98:c0:9c:11:20:a1:b0:
                    e4:fc:bd:1b:7e:82:a8:43:97:93:26:1e:01:06:f7:
                    c2:63:b6:3b:1b:db:e0:eb:64:f3:cf:69:a3:d2:8d:
                    c6:3b:d8:b3:ee:fc:1a:bf:57:4a:b8:27:b9:28:7c:
                    b8:2d:9b:64:0e:78:cc:f8:cf:e5:24:f5:3e:01:6a:
                    43:1c:6b:67:c6:80:e1:5e:33:73:9c:2c:6e:8c:d4:
                    39:0e:df:65:34:3a:d2:56:3a:50:da:12:b3:5e:3d:
                    17:67:fb:1b:a2:9e:fb:3e:ef:07:89:a5:01:ed:86:
                    3b:6f:a3:98:d0:91:b3:34:c9:b2:7a:28:3e:3f:80:
                    a7:9d:c1:67:6d:a7:53:fd:5d:cc:a7:ef:d4:5e:69:
                    10:89:e0:fb:89:74:fd:aa:ed:4d:c0:e8:e6:6e:04:
                    14:81:9c:03:8a:0c:c3:bf:ce:bf:5f:47:e4:b0:1c:
                    54:e6:f4:42:37:66:3c:90:3c:1e:58:3a:f9:a8:38:
                    ee:54:48:a9:22:49:73:7c:16:37:d2:08:21:41:6f:
                    61:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:90:88:64:DF:5F:E9:49:D4:8E:60:7C:7D:77:A0:14:82:BC:00:44
            X509v3 Authority Key Identifier:
                keyid:72:17:23:EE:6C:96:BA:E6:32:25:C1:86:52:97:7F:8E:40:4D:BD:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4BA37A459F293C30036216BB44FE99FC147CD8BFFDE2FF3C5E67537287481E60/0/721723EE6C96BAE63225C18652977F8E404DBD28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/721723EE6C96BAE63225C18652977F8E404DBD28.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4BA37A459F293C30036216BB44FE99FC147CD8BFFDE2FF3C5E67537287481E60/0/323830313a3162393a323a3a2f34382d3438203d3e20323732393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b9:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:4e:d3:ca:12:18:59:db:55:0b:98:9c:d8:69:5f:e7:c8:8a:
         a3:98:1a:b2:1e:0a:9b:5c:1e:25:fc:61:5c:32:ff:37:5f:d5:
         e8:41:4b:8c:eb:57:e3:f3:2e:6f:13:a8:32:2b:68:fc:e5:24:
         1d:9f:da:3d:84:a4:70:bd:6e:02:dd:0a:8b:7b:6a:e6:ad:bc:
         ed:28:7c:db:f7:c4:e5:94:36:0e:00:05:30:f0:64:23:dd:f9:
         91:b8:8f:2a:d0:71:d1:ad:d6:8e:29:77:83:40:5f:48:69:f1:
         7b:0a:80:c9:6a:bb:f6:c3:5c:a7:ff:18:99:d8:06:d7:b9:8f:
         45:d8:cb:24:b4:64:8e:c6:b2:3c:75:9a:11:bf:c6:32:43:51:
         97:cd:5b:e2:f2:b0:36:0c:35:ee:b6:7c:1b:58:e2:52:26:11:
         f6:73:d9:7b:0f:db:5d:3d:42:7f:9e:46:be:23:85:57:5d:af:
         ec:d3:99:aa:67:e3:05:47:6b:48:6a:35:24:26:03:78:c4:30:
         be:1e:05:3f:3a:25:b8:3e:b4:fa:df:42:04:cd:71:8e:c2:90:
         0e:42:ef:a2:60:80:57:2a:84:e4:ae:35:db:27:a4:3e:b8:84:
         10:23:59:50:df:95:c0:39:aa:36:f7:fe:a6:b7:1d:7f:17:e3:
         c3:54:79:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 23:58:53 2026 by rpki-client