This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/07031B138BCD42121ACEF5EB2D60F1E4E467BDF55355C269F94C650F4F597F50/0/323830313a3135383a3a2f33362d3336203d3e203532333336.roa
File:                     323830313a3135383a3a2f33362d3336203d3e203532333336.roa (raw, json)
Hash identifier:          aHZfKCIihs+JmMgMJax2nsSP5Ti+p9MJaYCe9ws/qMs=
Subject key identifier:   F6:2C:2F:A0:6A:34:3E:76:C7:11:E3:8B:8C:12:4F:58:35:FA:4F:20
Certificate issuer:       /CN=2FCA9EF36FD988A173F6DE2A363AB29540E686A6
Certificate serial:       1AEA548BA665908AF071BA2056FD9C7053ED11F8
Authority key identifier: 2F:CA:9E:F3:6F:D9:88:A1:73:F6:DE:2A:36:3A:B2:95:40:E6:86:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCA9EF36FD988A173F6DE2A363AB29540E686A6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/07031B138BCD42121ACEF5EB2D60F1E4E467BDF55355C269F94C650F4F597F50/0/323830313a3135383a3a2f33362d3336203d3e203532333336.roa
Signing time:             Tue 06 Jan 2026 20:54:11 +0000
ROA not before:           Tue 06 Jan 2026 20:49:11 +0000
ROA not after:            Tue 05 Jan 2027 20:54:11 +0000
asID:                     52336
IP address blocks:        2801:158::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/07031B138BCD42121ACEF5EB2D60F1E4E467BDF55355C269F94C650F4F597F50/0/2FCA9EF36FD988A173F6DE2A363AB29540E686A6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/07031B138BCD42121ACEF5EB2D60F1E4E467BDF55355C269F94C650F4F597F50/0/2FCA9EF36FD988A173F6DE2A363AB29540E686A6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCA9EF36FD988A173F6DE2A363AB29540E686A6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 07:58:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ea:54:8b:a6:65:90:8a:f0:71:ba:20:56:fd:9c:70:53:ed:11:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FCA9EF36FD988A173F6DE2A363AB29540E686A6
        Validity
            Not Before: Jan  6 20:49:11 2026 GMT
            Not After : Jan  5 20:54:11 2027 GMT
        Subject: CN=F62C2FA06A343E76C711E38B8C124F5835FA4F20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:48:77:00:4d:a0:b3:6e:02:ae:97:0a:e6:5a:
                    ac:ba:85:f4:07:dd:87:27:60:6f:04:cf:75:72:52:
                    02:4a:ef:b0:37:1a:fb:03:b9:36:18:b5:b9:01:ea:
                    7a:4e:0e:48:47:2f:bd:e2:b5:43:9b:8d:c0:93:25:
                    86:9a:1d:76:90:eb:ce:7e:ef:ed:20:e4:20:9a:d2:
                    ab:e0:19:7b:4d:4e:c6:b4:57:7b:63:c5:06:13:52:
                    d8:fe:b0:d8:d7:14:f4:60:ae:e8:21:42:f4:8e:db:
                    7d:56:f4:e2:31:6a:89:75:ab:72:9f:e0:64:bd:17:
                    81:b7:ee:df:9f:8f:1a:f1:e9:f5:b2:53:bc:59:41:
                    7c:1f:36:21:5b:3d:83:c4:22:ed:cd:aa:3b:a1:22:
                    cb:2c:98:cd:87:4c:a3:97:eb:48:e7:10:bc:9f:d1:
                    e0:8c:8d:c3:58:b7:2d:f4:a6:49:97:f7:76:1f:de:
                    51:8f:03:08:40:a8:96:36:4c:05:74:52:b9:2c:d7:
                    0b:5a:23:b0:7a:b9:35:a0:b8:ed:92:9e:28:28:bf:
                    5f:8a:26:f0:d9:f8:bd:80:4c:c0:43:65:85:8a:57:
                    c4:ca:10:03:d3:20:23:81:76:1c:13:95:38:6f:92:
                    7e:87:09:a8:ef:2b:97:c3:4f:78:fd:b2:48:61:23:
                    64:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:2C:2F:A0:6A:34:3E:76:C7:11:E3:8B:8C:12:4F:58:35:FA:4F:20
            X509v3 Authority Key Identifier:
                keyid:2F:CA:9E:F3:6F:D9:88:A1:73:F6:DE:2A:36:3A:B2:95:40:E6:86:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/07031B138BCD42121ACEF5EB2D60F1E4E467BDF55355C269F94C650F4F597F50/0/2FCA9EF36FD988A173F6DE2A363AB29540E686A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCA9EF36FD988A173F6DE2A363AB29540E686A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/07031B138BCD42121ACEF5EB2D60F1E4E467BDF55355C269F94C650F4F597F50/0/323830313a3135383a3a2f33362d3336203d3e203532333336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:158::/36

    Signature Algorithm: sha256WithRSAEncryption
         5b:a8:b3:38:78:2d:e6:91:b0:23:eb:77:d7:94:07:2c:7d:88:
         fc:18:51:4f:3e:50:eb:c8:9b:0d:52:8e:58:ac:7f:22:45:3c:
         73:ef:bc:92:33:f8:c8:4f:6b:4f:aa:44:b8:a1:90:24:98:89:
         40:45:8c:98:84:e3:41:8e:e7:ba:1f:de:7a:9d:5b:77:94:3c:
         0c:b7:29:f4:b8:60:d9:55:0f:d2:48:46:f5:8a:c0:5c:59:8d:
         60:c1:3b:69:a5:f5:b2:08:2a:73:a9:48:23:24:f7:80:c5:9f:
         c5:9b:8e:16:f4:7a:6d:2c:6b:b3:5b:be:a4:41:eb:79:04:a8:
         6b:ad:ec:37:97:a1:26:2a:fe:06:90:d0:be:55:8a:5e:fb:59:
         0f:81:79:e8:90:9f:2f:af:aa:42:19:1b:c3:46:6e:5b:e5:da:
         72:e1:c2:c2:48:ca:26:c1:63:01:84:9c:39:e0:31:4d:d7:3a:
         e6:3b:01:87:9a:5b:b0:bc:52:17:ac:37:3b:96:2a:51:6d:ad:
         84:18:ad:f4:63:a9:07:fa:1e:24:3c:2b:d7:8d:a6:db:9c:e8:
         ad:12:09:a3:41:e8:b1:5f:e9:1f:86:0c:77:ad:19:d7:db:be:
         b4:bf:ee:8f:95:e0:fc:c9:13:67:c9:f9:fb:fc:d6:e9:40:26:
         6c:c2:b3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:54:07 2026 by rpki-client