This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/323830303a37303a3a2f33322d3336203d3e203237373839.roa
File:                     323830303a37303a3a2f33322d3336203d3e203237373839.roa (raw, json)
Hash identifier:          3IHWq8bJdIN/NN8REWcV7efsoKiFcSiIN8E9NSHj0P0=
Subject key identifier:   6D:3A:B6:7B:F7:F5:A8:51:23:55:E0:2F:36:4B:37:5F:95:79:A0:47
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       623C9AA73596D4BA145003A8842E7A18925762A6
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/323830303a37303a3a2f33322d3336203d3e203237373839.roa
Signing time:             Tue 06 Jan 2026 20:58:48 +0000
ROA not before:           Tue 06 Jan 2026 20:53:48 +0000
ROA not after:            Tue 05 Jan 2027 20:58:48 +0000
asID:                     27789
IP address blocks:        2800:70::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 03:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:3c:9a:a7:35:96:d4:ba:14:50:03:a8:84:2e:7a:18:92:57:62:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Jan  6 20:53:48 2026 GMT
            Not After : Jan  5 20:58:48 2027 GMT
        Subject: CN=6D3AB67BF7F5A8512355E02F364B375F9579A047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2c:46:90:d9:50:7c:6f:c7:0b:14:2d:d9:57:
                    29:7b:5d:bc:05:54:22:d6:1f:cc:75:61:4f:3a:1d:
                    79:9a:d3:57:df:56:3e:50:ca:2a:28:0c:fb:23:b0:
                    a8:a0:0d:1f:bc:9e:90:9f:52:b1:7b:6b:7f:1c:71:
                    70:6e:ae:5e:12:b6:be:cb:56:50:e1:15:a2:23:4d:
                    57:ec:10:b1:f0:1e:88:f7:e0:64:94:ca:ba:1c:7c:
                    62:e3:56:e1:58:85:67:e8:bd:6c:8d:0b:35:00:5f:
                    56:0c:7e:bb:dc:1e:71:1c:b0:92:1d:83:e0:8e:f9:
                    cb:16:a7:16:61:db:64:9f:0c:03:44:d8:67:c0:6a:
                    95:ea:5c:41:53:77:98:c2:2e:73:77:34:0e:85:c0:
                    69:08:2a:26:53:51:9f:29:14:e3:83:1a:18:a7:8e:
                    0d:c7:15:40:26:e3:5f:be:c4:2b:65:bd:29:d3:46:
                    4a:63:c9:5d:76:8b:a9:03:f4:74:4f:63:9e:4a:4b:
                    e6:9a:19:0a:14:97:1e:03:51:1d:c0:5e:8f:e2:a3:
                    36:68:ce:a2:fa:c5:e7:88:c9:1b:f8:e0:a8:dc:fe:
                    fa:44:12:50:41:0c:d3:60:53:6b:5c:47:1a:6f:fe:
                    54:76:cd:4e:8e:55:7b:3a:a0:a2:b1:f7:7c:43:57:
                    19:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:3A:B6:7B:F7:F5:A8:51:23:55:E0:2F:36:4B:37:5F:95:79:A0:47
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/323830303a37303a3a2f33322d3336203d3e203237373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:70::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:b8:1b:b9:4f:8d:2b:c9:eb:d4:6f:48:11:56:4e:8f:03:51:
         71:83:31:9a:53:ab:2e:61:88:d2:8f:60:37:7c:67:59:c9:48:
         81:ea:a9:10:98:e7:6a:c1:9f:6b:44:47:39:94:e1:a4:37:4d:
         06:9e:a4:4a:65:4b:af:be:a1:e2:cf:a3:6b:4e:6e:00:af:85:
         19:7f:1c:95:a4:a8:9c:b9:a0:83:c5:e8:6b:98:7d:4a:85:f4:
         3f:96:26:80:84:99:14:8e:83:dc:07:60:45:be:05:9e:94:43:
         75:5f:73:4f:32:c3:00:46:28:d6:1c:69:c3:ff:d2:64:b7:6a:
         4d:e3:18:e3:44:87:7b:cd:ad:18:df:65:47:49:6e:e8:b1:5a:
         ca:53:92:74:e9:c5:12:88:1c:8b:23:78:99:79:45:55:6c:86:
         40:02:db:e1:0c:fa:a4:ad:25:a8:a3:89:ff:24:e9:5f:e7:d2:
         5b:56:52:ca:1b:f2:33:bb:2b:85:ee:18:49:f1:13:60:04:3e:
         31:df:46:18:c0:4f:a4:62:f6:86:88:3e:e1:fe:88:47:2c:c9:
         bd:61:03:8c:9f:b7:46:30:2e:4a:39:7a:90:23:fa:1c:56:df:
         0b:78:19:da:ff:80:1e:e1:21:66:ec:ee:91:9d:aa:45:85:c5:
         47:51:ef:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 04:21:33 2026 by rpki-client