This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/323030313a313237383a653a3a2f34372d3438203d3e203138373334.roa
File:                     323030313a313237383a653a3a2f34372d3438203d3e203138373334.roa (raw, json)
Hash identifier:          6e+3RwI1wuEJ5irNRKvl3Kzx+ojsjq0tW2KCQrp71JM=
Subject key identifier:   0E:C0:FC:87:B5:38:D4:C6:3A:3F:73:5E:9D:4D:08:36:07:A9:17:AB
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       551F140BFFE0F4F166B9888B78E64711F5721793
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/323030313a313237383a653a3a2f34372d3438203d3e203138373334.roa
Signing time:             Tue 06 Jan 2026 19:04:34 +0000
ROA not before:           Tue 06 Jan 2026 18:59:34 +0000
ROA not after:            Tue 05 Jan 2027 19:04:34 +0000
asID:                     18734
IP address blocks:        2001:1278:e::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 09:30:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:1f:14:0b:ff:e0:f4:f1:66:b9:88:8b:78:e6:47:11:f5:72:17:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Jan  6 18:59:34 2026 GMT
            Not After : Jan  5 19:04:34 2027 GMT
        Subject: CN=0EC0FC87B538D4C63A3F735E9D4D083607A917AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2a:7a:24:a9:3e:3d:96:7f:6b:96:5f:c1:7c:
                    ee:2a:13:60:9c:cd:8d:c5:33:ec:a4:6b:46:f1:59:
                    2e:f8:62:34:c9:06:08:a4:30:54:5a:19:09:ab:a4:
                    7e:b8:36:c1:67:c1:a1:34:df:74:53:bf:27:06:98:
                    82:e2:e8:e0:c2:6d:08:19:2e:13:01:17:cf:53:a9:
                    17:09:e5:69:1c:78:5c:70:ba:93:56:42:bb:5b:e6:
                    cb:2b:c7:24:17:62:12:96:24:57:46:31:8b:19:02:
                    af:18:61:10:08:b7:04:c2:9d:98:d8:8b:f5:b7:02:
                    0e:df:49:ca:b1:da:4a:e6:d6:8f:cf:aa:2f:b4:9c:
                    42:78:0d:81:70:aa:0f:8d:34:bf:89:dd:44:86:c9:
                    5d:a8:e1:44:2e:1f:cf:55:b4:f9:d7:05:87:21:e2:
                    26:4f:00:d0:3b:21:23:9f:aa:dc:10:f7:04:e2:f7:
                    26:be:f5:72:c0:1b:79:d0:d3:5b:59:dc:fa:e9:26:
                    e8:3f:9b:a3:e3:ca:22:20:23:f3:94:51:6f:75:40:
                    df:1b:6e:54:37:4f:40:2b:ff:9d:79:05:49:cb:cb:
                    1f:9e:3a:f8:d3:7b:79:6c:bf:df:7f:a8:74:7b:73:
                    63:ae:dd:75:e2:d0:23:e6:bf:32:f5:bd:5a:c3:8f:
                    9e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C0:FC:87:B5:38:D4:C6:3A:3F:73:5E:9D:4D:08:36:07:A9:17:AB
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/323030313a313237383a653a3a2f34372d3438203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1278:e::/47

    Signature Algorithm: sha256WithRSAEncryption
         31:62:af:e8:f9:c2:d4:81:59:35:58:02:48:52:d0:86:22:0f:
         86:f7:1b:38:8e:9d:93:09:f9:f8:24:33:44:c5:60:9c:b2:56:
         18:25:4b:48:6e:ed:c5:f2:12:cd:b1:ed:66:cc:49:d1:41:69:
         b0:bd:00:ce:f7:35:1e:5e:ab:f2:90:73:f8:b2:0e:a7:3b:f7:
         51:e9:39:1e:10:23:22:1c:91:7d:56:1b:ba:9a:15:b5:76:31:
         b6:26:ea:9d:51:8e:dd:6c:f9:3d:a1:69:a4:a4:1a:2e:e4:c3:
         b3:d8:79:a0:7d:6b:9d:a9:7e:c8:e3:3a:08:d9:49:34:50:0e:
         6b:7e:f4:3d:36:62:b9:60:46:17:b0:17:cf:99:33:d7:f8:d0:
         ce:40:17:82:bf:ff:c2:0d:d1:df:a7:9e:a4:49:49:ab:8a:c1:
         5f:9e:16:7f:9c:c6:a9:cd:a9:27:44:47:8e:87:b4:42:03:09:
         b9:fe:29:32:29:0f:73:96:3f:bf:24:93:bd:3d:72:c3:01:16:
         5e:2a:f5:d3:eb:9b:40:45:db:e9:97:72:f5:56:4e:90:c2:14:
         42:a1:fe:9e:85:63:f2:ff:51:d5:0f:18:7e:cb:9a:e6:98:cd:
         a8:6e:da:3a:dd:01:fd:cf:42:45:b4:a6:be:62:41:68:a9:9c:
         2c:d9:95:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 08:00:28 2026 by rpki-client