This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/323830303a6138303a3a2f33322d3332203d3e203532323638.roa
File:                     323830303a6138303a3a2f33322d3332203d3e203532323638.roa (raw, json)
Hash identifier:          KyMmKYtbtheTiCHRnc0X5Wvfz7vc/SrjHak6Jweok3E=
Subject key identifier:   D7:C6:68:64:00:CE:07:31:08:B5:35:D6:AD:CA:61:F4:63:C3:52:FE
Certificate issuer:       /CN=A79979549298C107B25C6C7E7FC2C7DBB295FC02
Certificate serial:       300938502E645C47DFF12FEE12E386FAB5A3D8A8
Authority key identifier: A7:99:79:54:92:98:C1:07:B2:5C:6C:7E:7F:C2:C7:DB:B2:95:FC:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/323830303a6138303a3a2f33322d3332203d3e203532323638.roa
Signing time:             Tue 06 Jan 2026 19:42:02 +0000
ROA not before:           Tue 06 Jan 2026 19:37:02 +0000
ROA not after:            Tue 05 Jan 2027 19:42:02 +0000
asID:                     52268
IP address blocks:        2800:a80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:09:38:50:2e:64:5c:47:df:f1:2f:ee:12:e3:86:fa:b5:a3:d8:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A79979549298C107B25C6C7E7FC2C7DBB295FC02
        Validity
            Not Before: Jan  6 19:37:02 2026 GMT
            Not After : Jan  5 19:42:02 2027 GMT
        Subject: CN=D7C6686400CE073108B535D6ADCA61F463C352FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:85:49:a6:26:a7:3e:40:10:9c:7b:19:0f:c1:
                    a8:50:90:c1:ee:f4:9c:21:ac:af:f9:0c:11:e3:50:
                    00:e2:76:f0:32:7e:26:2f:cd:43:21:83:db:56:5e:
                    7a:c1:95:ec:53:50:bc:21:6a:a0:06:0a:53:c5:45:
                    0e:3e:96:71:68:a3:56:97:c5:a3:ca:8a:78:a5:a5:
                    c3:c4:43:d4:be:c3:8d:db:6c:5d:ef:ab:d6:0e:c8:
                    64:ab:e2:0a:93:12:b9:58:26:7f:b4:4f:b7:50:75:
                    23:81:de:a3:31:e7:92:c2:40:87:42:5f:e9:aa:af:
                    8f:28:61:da:f0:19:55:0b:6e:9b:4b:1a:da:3b:31:
                    1e:11:c0:2d:c3:1a:7f:73:0a:34:49:7d:5f:6e:10:
                    0c:6b:6c:35:e6:2f:9f:2f:86:19:7d:c8:5d:41:8a:
                    3f:d2:2c:01:f0:11:75:13:35:4f:9d:4c:36:19:2a:
                    0b:ce:dc:c6:ef:1b:6a:bb:b8:ba:9a:a6:92:eb:b1:
                    aa:cd:42:00:42:98:0e:e0:1d:5f:27:11:03:97:eb:
                    29:dc:60:ad:6f:67:4e:46:1e:1a:ca:ab:6f:29:34:
                    ad:dd:d4:75:a1:db:7e:c8:ee:68:80:d6:0b:32:44:
                    5f:d3:ac:a1:b8:09:d1:9e:4b:c8:a7:5c:92:98:30:
                    d4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C6:68:64:00:CE:07:31:08:B5:35:D6:AD:CA:61:F4:63:C3:52:FE
            X509v3 Authority Key Identifier:
                keyid:A7:99:79:54:92:98:C1:07:B2:5C:6C:7E:7F:C2:C7:DB:B2:95:FC:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/323830303a6138303a3a2f33322d3332203d3e203532323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:a80::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:09:9e:f8:e1:b9:97:4b:2b:d2:10:b8:35:47:41:e7:41:c5:
         2d:f0:30:8a:20:56:9b:6c:ed:b8:3b:ae:6c:60:30:81:2f:b8:
         53:0b:60:88:aa:1e:4f:8f:99:e3:03:4c:0b:1c:a6:25:c1:b7:
         65:5a:15:98:72:97:93:a7:30:30:6c:bf:0d:d7:4f:91:e3:a1:
         47:0f:f6:05:3a:57:0e:00:86:4c:e7:2f:8a:6a:09:a0:49:d3:
         28:92:8d:55:2f:37:1b:b8:9e:0b:57:48:75:1e:44:d4:43:e3:
         3c:40:28:2d:a9:5e:f3:66:b8:f9:0b:10:6d:1e:0c:c6:02:0a:
         78:2e:9b:26:f9:65:0c:32:71:72:30:34:24:12:5a:54:ee:4a:
         06:06:4e:a5:73:85:88:ae:73:bf:c1:69:ea:3c:46:fe:a4:1a:
         e0:10:20:79:2e:31:07:60:5a:ae:35:ba:d0:34:f2:bd:a3:84:
         a8:11:10:2c:cc:db:7e:bf:6f:a2:d2:fd:0d:14:a7:ea:94:00:
         32:5e:f4:4c:6a:30:d5:37:20:1e:7d:76:1a:cf:5a:da:76:4c:
         d2:12:6c:c5:d8:56:a5:fc:69:73:4e:a4:bf:b8:e1:1b:41:b9:
         7d:8a:7d:13:99:c2:d3:c8:4d:16:cd:e2:1d:f7:b0:bc:73:54:
         09:60:ed:25
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUMAk4UC5kXEff8S/uEuOG+rWj2KgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTc5OTc5NTQ5Mjk4QzEwN0IyNUM2QzdFN0ZDMkM3REJC
Mjk1RkMwMjAeFw0yNjAxMDYxOTM3MDJaFw0yNzAxMDUxOTQyMDJaMDMxMTAvBgNV
BAMTKEQ3QzY2ODY0MDBDRTA3MzEwOEI1MzVENkFEQ0E2MUY0NjNDMzUyRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrhUmmJqc+QBCcexkPwahQkMHu
9JwhrK/5DBHjUADidvAyfiYvzUMhg9tWXnrBlexTULwhaqAGClPFRQ4+lnFoo1aX
xaPKinilpcPEQ9S+w43bbF3vq9YOyGSr4gqTErlYJn+0T7dQdSOB3qMx55LCQIdC
X+mqr48oYdrwGVULbptLGto7MR4RwC3DGn9zCjRJfV9uEAxrbDXmL58vhhl9yF1B
ij/SLAHwEXUTNU+dTDYZKgvO3MbvG2q7uLqappLrsarNQgBCmA7gHV8nEQOX6ync
YK1vZ05GHhrKq28pNK3d1HWh237I7miA1gsyRF/TrKG4CdGeS8inXJKYMNTlAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQU18ZoZADOBzEItTXWrcph9GPDUv4wHwYDVR0j
BBgwFoAUp5l5VJKYwQeyXGx+f8LH27KV/AIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80Rjc1QzVERDQyRjYxOERFMzA4NzZFREZFQ0EyRDM5MTBD
RUY4RDFBRjIyQUY0RUM0NjAyOTA1MTVGMUE4ODg3LzAvQTc5OTc5NTQ5Mjk4QzEw
N0IyNUM2QzdFN0ZDMkM3REJCMjk1RkMwMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNzk5Nzk1NDkyOThDMTA3QjI1
QzZDN0U3RkMyQzdEQkIyOTVGQzAyLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEY3NUM1REQ0MkY2MThERTMwODc2RURGRUNBMkQzOTEwQ0VGOEQxQUYy
MkFGNEVDNDYwMjkwNTE1RjFBODg4Ny8wLzMyMzgzMDMwM2E2MTM4MzAzYTNhMmYz
MzMyMmQzMzMyMjAzZDNlMjAzNTMyMzIzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAAKgDANBgkq
hkiG9w0BAQsFAAOCAQEAZQme+OG5l0sr0hC4NUdB50HFLfAwiiBWm2ztuDuubGAw
gS+4UwtgiKoeT4+Z4wNMCxymJcG3ZVoVmHKXk6cwMGy/DddPkeOhRw/2BTpXDgCG
TOcvimoJoEnTKJKNVS83G7ieC1dIdR5E1EPjPEAoLale82a4+QsQbR4MxgIKeC6b
JvllDDJxcjA0JBJaVO5KBgZOpXOFiK5zv8Fp6jxG/qQa4BAgeS4xB2BarjW60DTy
vaOEqBEQLMzbfr9votL9DRSn6pQAMl70TGow1TcgHn12Gs9a2nZM0hJsxdhWpfxp
c06kv7jhG0G5fYp9E5nC08hNFs3iHfewvHNUCWDtJQ==
-----END CERTIFICATE-----
Generated at Thu Jan 29 08:21:43 2026 by rpki-client