This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/323830313a303a34303a3a2f34382d3438203d3e203238303637.roa
File:                     323830313a303a34303a3a2f34382d3438203d3e203238303637.roa (raw, json)
Hash identifier:          maSk+KmeVGU64iSRjzmVjUIXivN4jnIEYXAppYuTKrU=
Subject key identifier:   91:2C:5B:37:B8:2A:29:4D:81:F3:A3:A5:3C:A6:6F:0F:51:F6:1C:DA
Certificate issuer:       /CN=8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30
Certificate serial:       683546041CD229432B871110F851D93621293638
Authority key identifier: 8F:CB:3D:AE:D8:FB:3A:82:F6:BD:E9:5F:BC:5A:C3:B7:9C:CE:FD:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/323830313a303a34303a3a2f34382d3438203d3e203238303637.roa
Signing time:             Tue 06 Jan 2026 19:24:08 +0000
ROA not before:           Tue 06 Jan 2026 19:19:08 +0000
ROA not after:            Tue 05 Jan 2027 19:24:08 +0000
asID:                     28067
IP address blocks:        2801:0:40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.crl
                          rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 02:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:35:46:04:1c:d2:29:43:2b:87:11:10:f8:51:d9:36:21:29:36:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30
        Validity
            Not Before: Jan  6 19:19:08 2026 GMT
            Not After : Jan  5 19:24:08 2027 GMT
        Subject: CN=912C5B37B82A294D81F3A3A53CA66F0F51F61CDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:53:81:ac:d0:95:c3:40:de:fc:19:ad:55:d3:
                    31:00:a4:44:69:ae:97:4b:65:03:33:d6:4a:57:cc:
                    8a:29:d6:d0:c5:06:95:c1:6e:e6:91:e9:ad:55:dd:
                    82:86:39:35:0b:ba:0d:c8:fb:c9:17:63:ad:9e:72:
                    48:1f:82:46:01:71:ad:34:48:b3:5f:a5:35:27:67:
                    e9:17:01:ad:37:02:f2:1e:4b:5c:2b:96:0d:9c:98:
                    4f:e8:10:00:be:ae:86:86:6c:98:f0:57:6b:65:98:
                    53:7d:6f:90:22:cc:f1:01:3e:f9:05:5b:09:93:59:
                    5c:cc:65:c6:1f:95:fd:26:a8:a4:2a:ac:e6:53:15:
                    c5:27:9a:44:cf:b9:52:d8:53:8f:48:02:0c:d2:39:
                    1f:12:2a:a6:31:cf:c5:9c:64:75:8a:94:16:a2:4d:
                    ac:4f:43:c1:15:7b:4d:71:86:4a:d5:d4:cd:93:95:
                    4f:c8:ed:2a:fc:ec:fa:5f:05:2d:ba:a8:16:28:30:
                    84:2e:ae:a8:bc:a2:a8:17:e6:6a:db:4d:b8:1d:b0:
                    57:27:f9:65:18:c6:1d:bd:58:00:0c:51:98:7a:78:
                    00:4a:87:a5:ab:5a:49:59:81:f5:f9:07:c5:ae:07:
                    18:c3:64:cf:3a:e0:7c:b1:41:68:02:fe:94:c5:57:
                    71:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:2C:5B:37:B8:2A:29:4D:81:F3:A3:A5:3C:A6:6F:0F:51:F6:1C:DA
            X509v3 Authority Key Identifier:
                keyid:8F:CB:3D:AE:D8:FB:3A:82:F6:BD:E9:5F:BC:5A:C3:B7:9C:CE:FD:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/323830313a303a34303a3a2f34382d3438203d3e203238303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:40::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:7f:97:e2:ee:b4:89:79:21:20:06:ac:d0:37:0b:c2:f8:75:
         7e:34:11:54:af:a2:86:83:e1:d2:d8:82:60:ce:6c:b0:11:aa:
         a3:74:4b:a4:f5:03:02:f8:1e:92:71:63:01:74:9d:42:86:49:
         a9:e4:eb:48:70:a2:5a:40:43:12:c0:f5:6a:26:39:31:38:de:
         2b:2e:43:b4:7f:ee:c7:83:70:c4:6e:76:64:01:c9:f7:ca:9c:
         fe:ac:c0:7f:3d:0b:d6:e2:d4:47:ac:cf:76:38:73:d6:8a:0a:
         aa:b4:30:a3:b3:a4:d0:1d:3a:8d:81:49:03:e7:dc:e4:c3:40:
         75:8a:9f:d5:48:3f:fd:c1:33:ec:4c:40:1f:e8:4e:bd:77:01:
         c9:cd:16:fc:02:96:b2:34:e4:a4:86:a4:6b:51:84:62:ad:32:
         c6:4c:fb:cf:92:18:57:5f:3e:5f:75:04:af:d1:6f:2f:70:f3:
         f9:2c:ed:91:6e:f2:72:af:9f:92:51:90:e3:d6:94:c0:b7:fe:
         80:23:95:17:67:7d:1a:0b:0a:9b:eb:34:b1:07:f9:b2:a7:17:
         18:10:c6:c8:64:b8:5d:70:2d:90:b1:6f:8d:53:ca:96:dd:de:
         bb:05:2e:d0:14:5f:ff:80:a9:71:79:69:e5:95:74:17:14:d5:
         3e:e6:0f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:54:46 2026 by rpki-client