This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0C266DEA5767581F16FCC1CDAE444AF5C6C5F589AFB89EDFCCD9446C5A5E1791/0/323830313a31613a623030303a3a2f34382d3438203d3e203237383137.roa
File:                     323830313a31613a623030303a3a2f34382d3438203d3e203237383137.roa (raw, json)
Hash identifier:          Irxrcrft2+HRIW8uB+bbIcuAIPSnKRq2NixaYBgcFn8=
Subject key identifier:   D1:B0:EC:36:AA:C7:9D:68:69:71:4A:E8:74:8A:1C:CA:B1:DD:30:7B
Certificate issuer:       /CN=8829B72F41DDDC406EF086511DC7C0AF26D8C3E9
Certificate serial:       5BDA5E93520B6C490D63B7CEAC8BB49F7DE98C8E
Authority key identifier: 88:29:B7:2F:41:DD:DC:40:6E:F0:86:51:1D:C7:C0:AF:26:D8:C3:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8829B72F41DDDC406EF086511DC7C0AF26D8C3E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0C266DEA5767581F16FCC1CDAE444AF5C6C5F589AFB89EDFCCD9446C5A5E1791/0/323830313a31613a623030303a3a2f34382d3438203d3e203237383137.roa
Signing time:             Tue 06 Jan 2026 19:18:43 +0000
ROA not before:           Tue 06 Jan 2026 19:13:43 +0000
ROA not after:            Tue 05 Jan 2027 19:18:43 +0000
asID:                     27817
IP address blocks:        2801:1a:b000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0C266DEA5767581F16FCC1CDAE444AF5C6C5F589AFB89EDFCCD9446C5A5E1791/0/8829B72F41DDDC406EF086511DC7C0AF26D8C3E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0C266DEA5767581F16FCC1CDAE444AF5C6C5F589AFB89EDFCCD9446C5A5E1791/0/8829B72F41DDDC406EF086511DC7C0AF26D8C3E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8829B72F41DDDC406EF086511DC7C0AF26D8C3E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:da:5e:93:52:0b:6c:49:0d:63:b7:ce:ac:8b:b4:9f:7d:e9:8c:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8829B72F41DDDC406EF086511DC7C0AF26D8C3E9
        Validity
            Not Before: Jan  6 19:13:43 2026 GMT
            Not After : Jan  5 19:18:43 2027 GMT
        Subject: CN=D1B0EC36AAC79D6869714AE8748A1CCAB1DD307B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:9c:78:36:13:94:9c:94:6d:dd:47:6b:42:8e:
                    2e:04:a6:36:b5:07:f2:90:42:9f:33:6b:6e:fe:c1:
                    db:b6:8c:6a:9c:4e:69:1f:b2:2a:88:dd:92:18:50:
                    33:87:49:30:1d:30:70:b5:51:f5:d6:a6:aa:85:9d:
                    3a:cf:77:5d:b2:04:da:61:31:b5:46:93:7e:a2:7e:
                    92:40:2b:a7:d1:c4:ca:3b:08:57:cd:da:20:d4:e4:
                    00:63:e4:58:97:8a:f1:5d:68:ef:ce:d8:30:67:ab:
                    e0:fd:8d:f7:e0:a7:7a:54:fc:ae:59:39:67:52:32:
                    fb:d5:1d:22:ff:cd:6d:24:25:ed:24:47:16:0d:bd:
                    a3:1a:77:d4:15:9a:7e:df:9f:f6:ec:fc:4f:fd:5b:
                    74:22:a6:5e:9f:d6:83:ad:00:88:be:55:55:81:3d:
                    fd:e3:52:84:d8:91:61:53:d0:c9:b2:99:bf:7c:65:
                    d0:ee:2a:a9:78:02:11:41:8d:38:06:22:b6:7d:fc:
                    3b:af:47:55:50:96:50:ff:45:04:17:ee:56:42:16:
                    94:e8:59:cd:15:9d:f1:34:5e:26:c0:29:00:fe:5e:
                    45:dd:fc:d9:c2:99:9a:b8:5e:82:65:cb:7c:cb:30:
                    a5:21:ec:7c:d0:10:f4:6b:e5:ba:82:41:87:59:a1:
                    ec:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B0:EC:36:AA:C7:9D:68:69:71:4A:E8:74:8A:1C:CA:B1:DD:30:7B
            X509v3 Authority Key Identifier:
                keyid:88:29:B7:2F:41:DD:DC:40:6E:F0:86:51:1D:C7:C0:AF:26:D8:C3:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0C266DEA5767581F16FCC1CDAE444AF5C6C5F589AFB89EDFCCD9446C5A5E1791/0/8829B72F41DDDC406EF086511DC7C0AF26D8C3E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8829B72F41DDDC406EF086511DC7C0AF26D8C3E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0C266DEA5767581F16FCC1CDAE444AF5C6C5F589AFB89EDFCCD9446C5A5E1791/0/323830313a31613a623030303a3a2f34382d3438203d3e203237383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a:b000::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:9f:8e:91:df:31:02:3f:9a:77:a2:10:26:b8:31:e5:90:78:
         db:07:64:ce:4f:24:1c:17:62:80:ed:9c:24:b4:f4:78:98:d9:
         c1:85:be:92:2c:aa:a5:5b:60:1a:fa:d3:b2:3e:b1:0f:d9:1a:
         cb:8a:b8:f8:bd:36:aa:b3:0e:d8:bb:3a:79:3c:f5:88:82:13:
         c4:0e:44:5b:12:da:29:74:ed:ad:91:32:19:73:8f:df:48:ce:
         74:89:b2:ff:e5:f1:18:5b:8c:fc:2e:d7:06:bf:88:8f:c2:0e:
         80:f4:73:43:f3:7a:0c:03:87:0f:e2:85:be:34:cf:fe:ee:29:
         ec:2b:f3:f5:21:de:fb:a5:88:30:f3:8d:86:52:7c:c8:4d:3a:
         7d:e0:25:96:e5:19:15:74:11:17:e8:e7:54:12:d8:ea:11:06:
         b2:1f:10:f6:fd:99:07:9a:6e:a7:1d:a6:0e:cb:22:d6:7e:78:
         a0:cb:db:fe:32:23:e6:12:ec:8e:23:59:76:b0:d1:90:f6:5b:
         2c:1c:56:83:9f:5f:75:6a:98:b7:f4:89:58:ed:e2:18:63:c8:
         49:74:2b:23:3d:52:de:9e:76:64:45:6d:0c:a7:3d:a6:c4:53:
         e5:79:f8:b6:3f:0c:95:03:e3:af:a1:2d:fd:2e:e6:31:5b:b7:
         d5:d0:81:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:08 2026 by rpki-client