This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/060045F00065D662D9A502DCF201C2A5A96F95762F1579756CB1CA4DF0145F29/0/323830313a3130313a3a2f34302d3430203d3e20323732383432.roa
File:                     323830313a3130313a3a2f34302d3430203d3e20323732383432.roa (raw, json)
Hash identifier:          PDWBZBIvKbK3WovuaE0ctAuc50fIqmQprEcEAl/rers=
Subject key identifier:   ED:76:49:4D:62:CB:01:AD:BC:04:EF:ED:5A:3A:6B:B1:2B:E6:1C:AE
Certificate issuer:       /CN=D140E636C01F4B0B8FD792DA243D104B6B3AAB5F
Certificate serial:       7122E3F719691429BBF848226BE115976FDB9E95
Authority key identifier: D1:40:E6:36:C0:1F:4B:0B:8F:D7:92:DA:24:3D:10:4B:6B:3A:AB:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D140E636C01F4B0B8FD792DA243D104B6B3AAB5F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/060045F00065D662D9A502DCF201C2A5A96F95762F1579756CB1CA4DF0145F29/0/323830313a3130313a3a2f34302d3430203d3e20323732383432.roa
Signing time:             Tue 06 Jan 2026 19:36:32 +0000
ROA not before:           Tue 06 Jan 2026 19:31:32 +0000
ROA not after:            Tue 05 Jan 2027 19:36:32 +0000
asID:                     272842
IP address blocks:        2801:101::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/060045F00065D662D9A502DCF201C2A5A96F95762F1579756CB1CA4DF0145F29/0/D140E636C01F4B0B8FD792DA243D104B6B3AAB5F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/060045F00065D662D9A502DCF201C2A5A96F95762F1579756CB1CA4DF0145F29/0/D140E636C01F4B0B8FD792DA243D104B6B3AAB5F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D140E636C01F4B0B8FD792DA243D104B6B3AAB5F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:22:e3:f7:19:69:14:29:bb:f8:48:22:6b:e1:15:97:6f:db:9e:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D140E636C01F4B0B8FD792DA243D104B6B3AAB5F
        Validity
            Not Before: Jan  6 19:31:32 2026 GMT
            Not After : Jan  5 19:36:32 2027 GMT
        Subject: CN=ED76494D62CB01ADBC04EFED5A3A6BB12BE61CAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c6:18:c6:2d:f2:87:24:b6:5a:5c:b4:00:59:
                    1e:66:6c:7d:10:a9:49:50:e1:6a:af:6c:60:08:4c:
                    aa:0e:8e:4c:77:91:4c:65:c2:f7:aa:85:08:21:b7:
                    7f:f5:bc:ad:00:3e:b5:13:34:c6:5a:bd:57:8d:c0:
                    40:e0:0e:c0:1b:99:fc:bd:f1:9e:5d:0a:3c:d3:f1:
                    f4:36:ba:03:e3:f9:71:42:03:4f:44:dd:d5:dd:36:
                    2a:2e:0b:f7:06:7d:2c:fa:13:e9:af:a6:56:82:15:
                    44:3b:6c:7d:30:b3:a4:cd:1b:17:e9:4d:0d:e9:e6:
                    1b:16:a2:9a:e6:67:64:98:1b:cc:88:c9:62:9a:82:
                    ba:dd:0b:bb:4a:cc:77:fe:39:37:64:78:08:8a:b0:
                    d1:16:db:ae:55:64:c4:26:8f:7b:98:16:09:ca:9b:
                    b6:c8:80:70:26:e5:2e:ed:25:8e:7e:32:9b:5d:75:
                    af:c8:03:ce:b5:50:b5:83:74:51:62:71:f5:6f:bd:
                    6b:5e:ba:4c:db:b3:83:8b:3f:c0:45:7d:68:10:b0:
                    c7:71:bf:17:fa:f0:ee:e4:f4:5a:3c:24:ca:0f:81:
                    bc:f5:53:8c:46:79:d6:10:37:3f:d0:24:51:98:8b:
                    57:78:8b:e7:6c:b8:21:c8:6e:13:8e:9d:0c:68:49:
                    08:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:76:49:4D:62:CB:01:AD:BC:04:EF:ED:5A:3A:6B:B1:2B:E6:1C:AE
            X509v3 Authority Key Identifier:
                keyid:D1:40:E6:36:C0:1F:4B:0B:8F:D7:92:DA:24:3D:10:4B:6B:3A:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/060045F00065D662D9A502DCF201C2A5A96F95762F1579756CB1CA4DF0145F29/0/D140E636C01F4B0B8FD792DA243D104B6B3AAB5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D140E636C01F4B0B8FD792DA243D104B6B3AAB5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/060045F00065D662D9A502DCF201C2A5A96F95762F1579756CB1CA4DF0145F29/0/323830313a3130313a3a2f34302d3430203d3e20323732383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:101::/40

    Signature Algorithm: sha256WithRSAEncryption
         8f:99:ce:df:e4:60:a4:31:51:f7:2d:1e:e5:36:1e:ae:59:e2:
         36:ef:80:1d:69:5b:9f:37:78:d7:8f:5b:46:e3:27:2f:cd:c3:
         b4:73:a5:ff:b0:9a:a2:08:27:08:c3:df:91:9c:bb:37:20:b9:
         7d:ca:e4:5c:74:ba:8b:59:b2:04:1f:0b:99:69:68:84:34:53:
         86:ee:51:4f:62:60:7d:d4:3b:fe:6c:87:2a:65:3c:74:84:0b:
         eb:8f:26:57:0e:8f:d3:9d:4c:6b:fe:96:67:41:59:18:4f:ce:
         d1:41:65:37:cc:d5:50:f0:79:ee:b0:8b:f9:56:8f:dc:ac:ea:
         97:9e:53:73:91:1b:47:aa:bd:a5:18:da:d3:8b:df:74:8f:13:
         33:e0:5e:58:5e:0b:62:5c:3c:a0:7c:53:02:7b:38:97:8f:43:
         56:f9:5d:59:59:04:d4:86:5f:30:c2:53:70:b9:e4:46:f5:f5:
         5d:13:18:5f:7c:d0:29:b5:55:4d:d9:72:b2:c1:6d:17:4f:ec:
         8b:cd:dd:2d:b4:f9:f7:06:90:db:a4:45:18:0f:90:b7:af:a1:
         14:b8:7c:17:58:a5:8b:4c:28:ca:86:36:9a:61:4c:04:a8:a0:
         6a:1e:55:68:24:ad:dd:95:48:ee:2c:ed:b6:52:49:ba:54:52:
         dc:b3:cb:7b
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUcSLj9xlpFCm7+Egia+EVl2/bnpUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDE0MEU2MzZDMDFGNEIwQjhGRDc5MkRBMjQzRDEwNEI2
QjNBQUI1RjAeFw0yNjAxMDYxOTMxMzJaFw0yNzAxMDUxOTM2MzJaMDMxMTAvBgNV
BAMTKEVENzY0OTRENjJDQjAxQURCQzA0RUZFRDVBM0E2QkIxMkJFNjFDQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8xhjGLfKHJLZaXLQAWR5mbH0Q
qUlQ4WqvbGAITKoOjkx3kUxlwveqhQght3/1vK0APrUTNMZavVeNwEDgDsAbmfy9
8Z5dCjzT8fQ2ugPj+XFCA09E3dXdNiouC/cGfSz6E+mvplaCFUQ7bH0ws6TNGxfp
TQ3p5hsWoprmZ2SYG8yIyWKagrrdC7tKzHf+OTdkeAiKsNEW265VZMQmj3uYFgnK
m7bIgHAm5S7tJY5+Mptdda/IA861ULWDdFFicfVvvWteukzbs4OLP8BFfWgQsMdx
vxf68O7k9Fo8JMoPgbz1U4xGedYQNz/QJFGYi1d4i+dsuCHIbhOOnQxoSQg3AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU7XZJTWLLAa28BO/tWjprsSvmHK4wHwYDVR0j
BBgwFoAU0UDmNsAfSwuP15LaJD0QS2s6q18wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNjAwNDVGMDAwNjVENjYyRDlBNTAyRENGMjAxQzJBNUE5
NkY5NTc2MkYxNTc5NzU2Q0IxQ0E0REYwMTQ1RjI5LzAvRDE0MEU2MzZDMDFGNEIw
QjhGRDc5MkRBMjQzRDEwNEI2QjNBQUI1Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMTQwRTYzNkMwMUY0QjBCOEZE
NzkyREEyNDNEMTA0QjZCM0FBQjVGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDYwMDQ1RjAwMDY1RDY2MkQ5QTUwMkRDRjIwMUMyQTVBOTZGOTU3NjJG
MTU3OTc1NkNCMUNBNERGMDE0NUYyOS8wLzMyMzgzMDMxM2EzMTMwMzEzYTNhMmYz
NDMwMmQzNDMwMjAzZDNlMjAzMjM3MzIzODM0MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoAQEBADAN
BgkqhkiG9w0BAQsFAAOCAQEAj5nO3+RgpDFR9y0e5TYerlniNu+AHWlbnzd4149b
RuMnL83DtHOl/7CaoggnCMPfkZy7NyC5fcrkXHS6i1myBB8LmWlohDRThu5RT2Jg
fdQ7/myHKmU8dIQL648mVw6P051Ma/6WZ0FZGE/O0UFlN8zVUPB57rCL+VaP3Kzq
l55Tc5EbR6q9pRja04vfdI8TM+BeWF4LYlw8oHxTAns4l49DVvldWVkE1IZfMMJT
cLnkRvX1XRMYX3zQKbVVTdlyssFtF0/si83dLbT59waQ26RFGA+Qt6+hFLh8F1il
i0woyoY2mmFMBKigah5VaCSt3ZVI7izttlJJulRS3LPLew==
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:24:09 2026 by rpki-client