This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31303a3a2f34382d3438203d3e20323632313931.roa
File:                     323830303a6237303a31303a3a2f34382d3438203d3e20323632313931.roa (raw, json)
Hash identifier:          BioSFXM5Q/fAJemdVCUVaZtNcC4jTnSbKWv4LMnZAOs=
Subject key identifier:   0B:70:8B:CA:09:6D:8E:60:E6:31:18:00:5E:5F:D0:F7:D5:F4:96:78
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       52228F62CC53630731DE18A30662FCF5ECD14637
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31303a3a2f34382d3438203d3e20323632313931.roa
Signing time:             Tue 06 Jan 2026 20:55:38 +0000
ROA not before:           Tue 06 Jan 2026 20:50:38 +0000
ROA not after:            Tue 05 Jan 2027 20:55:38 +0000
asID:                     262191
IP address blocks:        2800:b70:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:22:8f:62:cc:53:63:07:31:de:18:a3:06:62:fc:f5:ec:d1:46:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Jan  6 20:50:38 2026 GMT
            Not After : Jan  5 20:55:38 2027 GMT
        Subject: CN=0B708BCA096D8E60E63118005E5FD0F7D5F49678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ba:dc:10:ab:a2:85:9b:08:34:ab:3f:8f:45:
                    4d:14:15:cf:3f:8b:f2:46:f7:9e:0e:6c:a3:dd:c0:
                    c2:73:4a:a2:77:e0:30:5b:fc:bf:8f:4c:d1:e7:7d:
                    36:3a:7f:ed:ec:be:ce:6f:e9:42:82:b6:d7:77:d4:
                    db:0c:4e:7b:1e:6d:1a:42:c1:28:32:a1:d7:7a:bd:
                    f5:bd:e4:97:f6:46:3f:5f:40:2e:50:2c:0f:95:b4:
                    a2:9c:64:fd:41:64:92:d3:88:7b:ba:c9:2f:15:9a:
                    69:51:b3:9c:ee:c5:f3:fb:ff:11:37:23:56:bb:48:
                    d0:c9:62:d8:4d:f4:5b:d3:4e:12:f6:92:da:a4:54:
                    26:8e:0f:e3:b8:e9:2a:63:b7:bf:93:7d:e5:0e:84:
                    7a:8a:21:52:22:15:f6:d7:5d:15:95:4c:06:81:30:
                    0d:34:09:8a:20:70:07:95:a3:7e:3a:3b:e9:57:87:
                    28:aa:89:11:c3:a8:c7:e5:e2:2c:34:d5:08:5c:e8:
                    b8:9f:aa:93:94:f2:89:9d:0a:0d:39:d7:b8:61:d8:
                    42:29:31:93:bd:67:77:b5:03:00:db:57:55:1b:a2:
                    f2:c0:43:e5:c9:9f:95:2a:2d:23:ae:21:1b:42:92:
                    57:3e:b0:e3:f0:78:65:bd:08:9e:72:77:ce:72:b4:
                    51:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:70:8B:CA:09:6D:8E:60:E6:31:18:00:5E:5F:D0:F7:D5:F4:96:78
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31303a3a2f34382d3438203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:3e:bf:a6:9b:d9:38:eb:38:e8:4f:1a:e9:6f:e7:89:84:65:
         d5:91:b9:4f:ec:67:b6:79:d2:fa:f5:d1:70:a3:03:5a:83:76:
         74:bd:9d:ef:67:ea:52:71:a7:01:30:98:c2:30:5f:40:f0:e3:
         76:24:8f:2c:5a:bb:d3:07:18:bf:5d:9b:0f:fd:22:03:17:6b:
         12:4f:10:ba:bb:62:42:55:57:88:61:36:49:b0:e7:59:14:fa:
         0a:ab:13:1f:73:bb:db:a7:1f:4c:00:7a:0c:4b:7e:cf:2f:8f:
         01:58:f8:2f:3e:b6:ac:73:de:32:01:94:36:a0:ba:13:30:18:
         c4:e0:bf:e6:26:29:ea:0a:c4:1d:9f:59:7f:ed:31:3f:8b:be:
         53:6f:ac:6b:e5:43:d2:e8:08:bd:a5:27:9f:31:29:bf:9b:2b:
         91:7c:d3:19:1d:3b:0b:df:2f:dc:7a:6f:0a:a7:d0:b6:48:ca:
         15:a2:32:0d:c3:e5:73:31:ae:8a:df:25:9c:bf:95:2f:ae:1c:
         36:76:51:33:3e:ba:12:97:0f:23:b1:5e:24:7b:84:50:e6:27:
         60:e5:c7:4e:ad:0e:06:d5:f8:cc:81:34:9e:7d:aa:92:0c:a9:
         e5:4f:72:e3:ce:cf:59:36:10:a9:51:b3:19:2b:c7:01:de:ef:
         fe:83:a4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:09:23 2026 by rpki-client