This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/450287B9BE8F759A1FD152B275F5BD4B6F1955318E013982FBBACCDAF2B4BE9A/0/323830313a31363a613830303a3a2f34382d3438203d3e203237383137.roa
File:                     323830313a31363a613830303a3a2f34382d3438203d3e203237383137.roa (raw, json)
Hash identifier:          b9k/8/V5b9UsmbeKyzO1XawxpGJ5hbtdeZ0p7coK5A0=
Subject key identifier:   E8:A9:1D:9A:91:5D:B0:B6:A0:4A:A8:77:45:13:57:81:F2:7B:88:F3
Certificate issuer:       /CN=4A674C28810A7EE72B65D279F12485974DF2E1EE
Certificate serial:       1EF4F0A7E29FD201E9199A3B11BF6CE17F1C6A6D
Authority key identifier: 4A:67:4C:28:81:0A:7E:E7:2B:65:D2:79:F1:24:85:97:4D:F2:E1:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A674C28810A7EE72B65D279F12485974DF2E1EE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/450287B9BE8F759A1FD152B275F5BD4B6F1955318E013982FBBACCDAF2B4BE9A/0/323830313a31363a613830303a3a2f34382d3438203d3e203237383137.roa
Signing time:             Tue 06 Jan 2026 19:37:18 +0000
ROA not before:           Tue 06 Jan 2026 19:32:18 +0000
ROA not after:            Tue 05 Jan 2027 19:37:18 +0000
asID:                     27817
IP address blocks:        2801:16:a800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/450287B9BE8F759A1FD152B275F5BD4B6F1955318E013982FBBACCDAF2B4BE9A/0/4A674C28810A7EE72B65D279F12485974DF2E1EE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/450287B9BE8F759A1FD152B275F5BD4B6F1955318E013982FBBACCDAF2B4BE9A/0/4A674C28810A7EE72B65D279F12485974DF2E1EE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A674C28810A7EE72B65D279F12485974DF2E1EE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:f4:f0:a7:e2:9f:d2:01:e9:19:9a:3b:11:bf:6c:e1:7f:1c:6a:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A674C28810A7EE72B65D279F12485974DF2E1EE
        Validity
            Not Before: Jan  6 19:32:18 2026 GMT
            Not After : Jan  5 19:37:18 2027 GMT
        Subject: CN=E8A91D9A915DB0B6A04AA87745135781F27B88F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6e:26:08:55:6e:56:06:39:52:cb:79:23:da:
                    32:5c:11:81:1d:3b:76:82:8c:db:91:80:b1:d0:d2:
                    a1:6e:9b:a6:a5:44:e2:78:60:4e:2b:ed:7d:b1:a5:
                    dd:c6:63:ec:55:04:37:93:60:45:a2:43:e7:7e:98:
                    18:a5:55:63:a6:ef:25:a3:0b:5a:34:20:92:91:f1:
                    09:85:34:26:77:43:9f:6c:01:ee:4b:1e:24:3c:22:
                    ad:9c:16:23:c8:b1:71:14:2a:d3:c4:e7:c6:31:76:
                    b2:2a:f3:f1:59:8b:a0:6e:7d:3f:7e:3c:76:3b:e1:
                    96:70:fc:71:85:63:ac:51:60:cf:ef:ae:23:61:fe:
                    9b:e3:0c:ee:dd:92:29:92:af:ec:e7:86:10:a1:f0:
                    20:99:92:91:69:12:03:b4:61:a8:40:7d:07:c3:58:
                    4c:82:cf:bd:2f:4c:22:2c:e2:6e:8c:57:58:ed:42:
                    ae:12:4c:3c:3b:81:79:8a:71:02:77:65:a4:44:04:
                    0c:2a:36:88:f8:2f:90:81:5c:35:43:46:81:10:5e:
                    9c:ae:d0:11:60:7e:2f:1d:c2:cd:c0:44:3c:87:2a:
                    91:cb:d6:9d:e4:66:a2:72:1c:51:12:04:84:11:e3:
                    50:ce:25:ec:e6:49:32:db:00:8b:a9:f8:7c:5e:03:
                    ad:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A9:1D:9A:91:5D:B0:B6:A0:4A:A8:77:45:13:57:81:F2:7B:88:F3
            X509v3 Authority Key Identifier:
                keyid:4A:67:4C:28:81:0A:7E:E7:2B:65:D2:79:F1:24:85:97:4D:F2:E1:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/450287B9BE8F759A1FD152B275F5BD4B6F1955318E013982FBBACCDAF2B4BE9A/0/4A674C28810A7EE72B65D279F12485974DF2E1EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A674C28810A7EE72B65D279F12485974DF2E1EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/450287B9BE8F759A1FD152B275F5BD4B6F1955318E013982FBBACCDAF2B4BE9A/0/323830313a31363a613830303a3a2f34382d3438203d3e203237383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:16:a800::/48

    Signature Algorithm: sha256WithRSAEncryption
         c3:94:16:ae:a7:31:af:9f:91:91:8e:3d:aa:11:e4:2e:a1:2b:
         9f:4a:83:01:ad:1f:03:cd:e8:b8:f4:4a:74:a4:0e:7f:a7:f2:
         74:4e:7d:92:ac:eb:d2:72:1c:b1:ea:f6:22:09:00:43:89:ba:
         8c:b5:a9:7f:c0:37:ad:fc:c3:e7:d9:c3:d0:df:dd:a1:c7:f0:
         7b:d9:a1:4e:25:38:35:74:97:66:82:b1:fe:61:d9:e7:be:6d:
         05:4c:e5:c7:9b:26:a5:e8:b0:4b:2d:a1:1c:f1:2e:e1:04:9d:
         ee:d9:72:b7:11:66:71:ec:d5:c7:6c:65:95:50:c1:b6:0a:80:
         7e:3e:4b:2f:b2:d2:18:34:c8:93:1e:ce:b3:3d:49:9c:de:76:
         54:2f:99:11:53:41:a2:e9:ce:76:0a:07:b6:78:2b:83:bb:a4:
         97:c8:1a:a7:2e:48:70:89:09:f2:da:50:06:89:87:0a:4f:50:
         9a:47:06:78:5b:c0:1d:80:23:d6:8b:d1:5f:81:8d:6f:50:51:
         05:38:e8:a7:7f:18:e0:77:06:cd:d1:98:db:f4:08:b5:b9:b0:
         32:ce:91:45:a0:4e:0f:f2:c0:01:08:a2:69:47:09:fb:2f:73:
         73:06:69:6d:65:78:79:43:67:8e:d2:ee:76:52:7a:4b:01:32:
         af:4b:8e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 06:55:16 2026 by rpki-client