This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0DC0F12CD7F8A1E0B19B363F9025B50C68490FD499080BDD2DC2C42AD7B743A7/0/323830313a3137633a3a2f34342d3438203d3e203134303830.roa
File:                     323830313a3137633a3a2f34342d3438203d3e203134303830.roa (raw, json)
Hash identifier:          xgA7njcrnpEsnWb783288MkqKZgrD+n+f7hsoy0RSzo=
Subject key identifier:   73:B3:BC:F5:BA:5C:DB:81:A4:8D:06:66:1C:60:4D:61:C2:FB:D9:98
Certificate issuer:       /CN=81264D0CF845C65FEB8A7BCDB3CEDCBA64652ECB
Certificate serial:       0B017EC5FC7751E88038573434D22D2EB917EA5A
Authority key identifier: 81:26:4D:0C:F8:45:C6:5F:EB:8A:7B:CD:B3:CE:DC:BA:64:65:2E:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81264D0CF845C65FEB8A7BCDB3CEDCBA64652ECB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0DC0F12CD7F8A1E0B19B363F9025B50C68490FD499080BDD2DC2C42AD7B743A7/0/323830313a3137633a3a2f34342d3438203d3e203134303830.roa
Signing time:             Tue 06 Jan 2026 19:01:55 +0000
ROA not before:           Tue 06 Jan 2026 18:56:55 +0000
ROA not after:            Tue 05 Jan 2027 19:01:55 +0000
asID:                     14080
IP address blocks:        2801:17c::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0DC0F12CD7F8A1E0B19B363F9025B50C68490FD499080BDD2DC2C42AD7B743A7/0/81264D0CF845C65FEB8A7BCDB3CEDCBA64652ECB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0DC0F12CD7F8A1E0B19B363F9025B50C68490FD499080BDD2DC2C42AD7B743A7/0/81264D0CF845C65FEB8A7BCDB3CEDCBA64652ECB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81264D0CF845C65FEB8A7BCDB3CEDCBA64652ECB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 13:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:01:7e:c5:fc:77:51:e8:80:38:57:34:34:d2:2d:2e:b9:17:ea:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81264D0CF845C65FEB8A7BCDB3CEDCBA64652ECB
        Validity
            Not Before: Jan  6 18:56:55 2026 GMT
            Not After : Jan  5 19:01:55 2027 GMT
        Subject: CN=73B3BCF5BA5CDB81A48D06661C604D61C2FBD998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4b:91:d8:68:2b:af:d7:da:18:d3:9a:37:9d:
                    47:49:12:72:f0:41:a3:0e:62:91:8b:26:f4:f9:a0:
                    e4:2c:0a:e4:d5:f3:5f:fb:23:be:85:47:6e:8b:92:
                    a6:83:6a:6d:b9:e3:21:7c:db:4e:f5:63:55:c7:33:
                    d7:b0:2c:b8:c8:d1:a8:c6:cc:b7:11:0c:76:b5:c1:
                    6b:f2:39:2a:f4:3a:17:22:bf:9f:0d:d7:a6:82:92:
                    22:e8:0b:69:ac:dd:70:a6:9a:bd:71:a1:ee:d2:fb:
                    bf:20:8e:63:b1:16:e8:cd:1f:aa:c8:34:9e:d5:95:
                    a0:f7:c1:f7:a4:ab:98:e3:85:97:45:e4:e5:de:1d:
                    ff:a0:a9:2f:f2:10:4f:af:60:0f:29:8d:ee:9e:1e:
                    87:e6:69:b3:97:f0:ac:35:42:86:b8:09:9d:c9:c9:
                    42:50:67:b5:f1:8a:01:7f:66:01:90:30:29:27:10:
                    c3:1d:9e:a8:92:51:f9:9f:09:85:e3:05:7d:32:c6:
                    91:ef:b4:3a:9c:49:e6:86:9f:79:ec:12:15:a9:63:
                    a5:6b:4a:51:7c:e2:4c:57:59:75:60:16:1d:9a:2b:
                    ed:a9:37:d4:65:68:0b:f4:7c:03:fd:ae:fe:bf:1e:
                    58:9f:04:dd:c9:ed:ca:87:97:af:21:8d:69:76:2a:
                    38:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B3:BC:F5:BA:5C:DB:81:A4:8D:06:66:1C:60:4D:61:C2:FB:D9:98
            X509v3 Authority Key Identifier:
                keyid:81:26:4D:0C:F8:45:C6:5F:EB:8A:7B:CD:B3:CE:DC:BA:64:65:2E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0DC0F12CD7F8A1E0B19B363F9025B50C68490FD499080BDD2DC2C42AD7B743A7/0/81264D0CF845C65FEB8A7BCDB3CEDCBA64652ECB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81264D0CF845C65FEB8A7BCDB3CEDCBA64652ECB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0DC0F12CD7F8A1E0B19B363F9025B50C68490FD499080BDD2DC2C42AD7B743A7/0/323830313a3137633a3a2f34342d3438203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17c::/44

    Signature Algorithm: sha256WithRSAEncryption
         98:dd:2a:b0:7e:5f:87:0d:c7:8f:d1:05:a6:78:80:d5:89:7e:
         00:6b:f0:67:7d:38:68:98:eb:26:5b:de:d3:16:ae:0d:e1:50:
         8a:4e:37:8b:05:83:71:96:6a:9a:96:3a:e5:04:5f:2c:12:62:
         c0:78:4a:10:ba:74:08:9f:cf:6a:57:c1:c4:53:4c:08:cf:50:
         f8:fe:fb:25:8d:7a:c5:1e:42:dd:78:51:94:83:11:02:bb:c9:
         cc:e8:36:9d:ee:de:8f:24:79:ba:9d:5f:0a:1f:f0:5e:45:c3:
         6e:e2:c5:97:47:bb:99:d2:4a:a1:1c:58:d8:45:71:da:d8:b8:
         6f:67:80:88:03:28:52:20:d6:55:95:3b:d5:cb:05:e3:8e:1c:
         36:78:cf:58:14:04:db:34:bf:2b:36:ac:1f:1b:ce:1e:b8:84:
         6b:19:0a:6a:0e:24:76:76:35:83:ea:5f:89:c3:28:eb:36:29:
         73:55:83:ee:4c:91:79:39:40:01:25:dc:5c:c6:15:88:96:c1:
         8c:63:60:56:f0:7b:50:14:a8:19:52:2e:01:3b:5a:7e:36:d2:
         46:63:9e:25:e1:ec:98:08:ad:ac:e0:a3:35:b7:04:6a:46:8f:
         dd:3c:85:0e:00:0f:1c:24:b5:e9:90:df:6b:b4:42:7c:84:7b:
         20:67:09:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:57:58 2026 by rpki-client