This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0CA759B8199E5906366E9FAA851E79C0B9FE535F6D9863A2EA90A0AAFBA36B29/0/323830313a31353a313830313a3a2f34382d3438203d3e20323732303230.roa
File:                     323830313a31353a313830313a3a2f34382d3438203d3e20323732303230.roa (raw, json)
Hash identifier:          1wDqbKQvnL9AXuRxurIqNFNzE1yRA/WmcmJz6Y47010=
Subject key identifier:   02:84:F0:73:A6:7E:FB:8A:59:D2:21:5E:BC:24:33:FF:CA:EE:86:15
Certificate issuer:       /CN=84B80CC6B02BB4525CA87C82E224988CEEA1F809
Certificate serial:       3C75973EEDBC128257C744905AEA88F4F2078341
Authority key identifier: 84:B8:0C:C6:B0:2B:B4:52:5C:A8:7C:82:E2:24:98:8C:EE:A1:F8:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B80CC6B02BB4525CA87C82E224988CEEA1F809.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0CA759B8199E5906366E9FAA851E79C0B9FE535F6D9863A2EA90A0AAFBA36B29/0/323830313a31353a313830313a3a2f34382d3438203d3e20323732303230.roa
Signing time:             Thu 06 Nov 2025 23:10:00 +0000
ROA not before:           Thu 06 Nov 2025 23:05:00 +0000
ROA not after:            Thu 05 Nov 2026 23:10:00 +0000
asID:                     272020
IP address blocks:        2801:15:1801::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0CA759B8199E5906366E9FAA851E79C0B9FE535F6D9863A2EA90A0AAFBA36B29/0/84B80CC6B02BB4525CA87C82E224988CEEA1F809.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0CA759B8199E5906366E9FAA851E79C0B9FE535F6D9863A2EA90A0AAFBA36B29/0/84B80CC6B02BB4525CA87C82E224988CEEA1F809.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B80CC6B02BB4525CA87C82E224988CEEA1F809.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 20:51:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:75:97:3e:ed:bc:12:82:57:c7:44:90:5a:ea:88:f4:f2:07:83:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84B80CC6B02BB4525CA87C82E224988CEEA1F809
        Validity
            Not Before: Nov  6 23:05:00 2025 GMT
            Not After : Nov  5 23:10:00 2026 GMT
        Subject: CN=0284F073A67EFB8A59D2215EBC2433FFCAEE8615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fb:b5:91:16:4a:0b:ef:d5:e4:28:b0:84:f5:
                    64:c5:5b:ab:a2:ba:d5:c4:37:70:55:11:70:a4:7d:
                    e6:23:83:3c:52:8c:a9:66:52:4f:c4:cb:ae:c9:ec:
                    70:1c:23:4d:e5:73:cf:27:ec:79:63:f1:bc:9c:9c:
                    26:72:2f:04:2d:e9:5f:99:92:36:fd:94:65:85:af:
                    f8:8e:0f:cc:4d:64:26:31:06:50:a5:aa:7a:23:d0:
                    43:4a:01:ec:20:2a:c6:13:e4:03:96:13:63:a7:59:
                    f1:6f:00:d9:02:54:7e:56:18:53:b4:40:2e:dc:d9:
                    c2:54:20:02:fa:a2:1d:b3:07:9c:01:a1:9d:16:ff:
                    24:be:1e:20:09:2c:ef:c3:33:d9:62:41:a9:b3:3e:
                    ad:bb:28:02:62:50:0f:c5:27:8c:64:5d:27:8e:3d:
                    df:99:80:c6:a0:31:42:b0:48:0d:05:74:55:a7:92:
                    0e:33:35:de:b6:4f:86:49:55:40:be:9e:54:0d:46:
                    9f:0d:0c:e6:38:94:85:1c:58:38:dc:ad:05:4b:5d:
                    48:5a:f2:ad:19:fa:fb:c6:bb:0a:9c:e4:03:71:de:
                    45:eb:42:4d:5c:17:3a:84:cb:6b:00:2a:01:0f:04:
                    28:49:cf:9c:31:f0:12:b8:60:64:42:68:4a:32:4e:
                    2e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:84:F0:73:A6:7E:FB:8A:59:D2:21:5E:BC:24:33:FF:CA:EE:86:15
            X509v3 Authority Key Identifier:
                keyid:84:B8:0C:C6:B0:2B:B4:52:5C:A8:7C:82:E2:24:98:8C:EE:A1:F8:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0CA759B8199E5906366E9FAA851E79C0B9FE535F6D9863A2EA90A0AAFBA36B29/0/84B80CC6B02BB4525CA87C82E224988CEEA1F809.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B80CC6B02BB4525CA87C82E224988CEEA1F809.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0CA759B8199E5906366E9FAA851E79C0B9FE535F6D9863A2EA90A0AAFBA36B29/0/323830313a31353a313830313a3a2f34382d3438203d3e20323732303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:15:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:0a:89:c4:40:52:73:11:b8:91:c0:f2:18:6f:1f:5f:55:d5:
         45:5e:0f:db:e1:a7:a9:74:41:09:eb:d9:52:1c:76:75:2e:68:
         5b:91:42:d0:96:5a:72:7f:f1:73:d3:00:fc:07:1d:27:60:1d:
         3d:8f:64:de:31:8e:ca:e7:db:71:47:db:29:ed:bf:c9:ec:21:
         fc:bf:53:fa:a7:41:8a:25:df:d8:b3:1f:45:83:7c:48:f6:90:
         2d:a1:62:41:42:ba:35:ae:8f:0a:7b:ea:27:a7:60:5d:0e:7e:
         9d:f7:ba:0c:46:8b:2f:53:25:19:4f:04:a2:a6:e9:55:a0:b3:
         e4:ec:bc:95:5f:8e:3e:86:a1:ca:d9:08:f0:c3:6e:65:ca:be:
         f3:b6:27:99:b1:17:bf:ae:3d:e4:a9:d3:6f:f6:c2:99:c3:ad:
         f8:13:0c:d3:4f:c5:a5:ce:a5:e4:3b:9e:f3:66:6e:a8:c2:36:
         75:c5:3a:bf:5e:90:9e:c2:a9:ad:a3:e3:ed:26:e3:b7:30:85:
         f9:f1:4d:28:94:67:4e:9f:e1:e4:32:fe:65:50:03:bf:17:81:
         18:0d:20:3a:f7:1c:ae:ff:d6:6a:fa:c8:ac:a9:32:5b:03:17:
         10:3c:77:13:5d:58:81:f5:49:f0:b9:82:6b:87:75:41:00:b1:
         27:69:7b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 14:35:51 2025 by rpki-client