This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/20C91421EB59CC1900F7BE84330CC85C275017D06EEF777E35FCF3871FD8AD7D/0/323830313a3166363a3a2f34382d3438203d3e203134303830.roa
File:                     323830313a3166363a3a2f34382d3438203d3e203134303830.roa (raw, json)
Hash identifier:          WpBB84Ksi8xqTwolFwUxHT/O7dcLlghWGebCEyfsq9Y=
Subject key identifier:   D6:BF:23:9B:E4:F5:E5:B9:56:C7:0C:0A:78:CA:47:05:F8:1B:8B:72
Certificate issuer:       /CN=AC8A4C476174CCE15922EC3E0D5B614ABFAC19B0
Certificate serial:       0E6DA8448757984693DD388451BB9C4B853711A2
Authority key identifier: AC:8A:4C:47:61:74:CC:E1:59:22:EC:3E:0D:5B:61:4A:BF:AC:19:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC8A4C476174CCE15922EC3E0D5B614ABFAC19B0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/20C91421EB59CC1900F7BE84330CC85C275017D06EEF777E35FCF3871FD8AD7D/0/323830313a3166363a3a2f34382d3438203d3e203134303830.roa
Signing time:             Tue 06 Jan 2026 20:52:38 +0000
ROA not before:           Tue 06 Jan 2026 20:47:38 +0000
ROA not after:            Tue 05 Jan 2027 20:52:38 +0000
asID:                     14080
IP address blocks:        2801:1f6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/20C91421EB59CC1900F7BE84330CC85C275017D06EEF777E35FCF3871FD8AD7D/0/AC8A4C476174CCE15922EC3E0D5B614ABFAC19B0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/20C91421EB59CC1900F7BE84330CC85C275017D06EEF777E35FCF3871FD8AD7D/0/AC8A4C476174CCE15922EC3E0D5B614ABFAC19B0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC8A4C476174CCE15922EC3E0D5B614ABFAC19B0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:6d:a8:44:87:57:98:46:93:dd:38:84:51:bb:9c:4b:85:37:11:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC8A4C476174CCE15922EC3E0D5B614ABFAC19B0
        Validity
            Not Before: Jan  6 20:47:38 2026 GMT
            Not After : Jan  5 20:52:38 2027 GMT
        Subject: CN=D6BF239BE4F5E5B956C70C0A78CA4705F81B8B72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7a:f2:6f:00:89:5c:1c:19:33:bd:98:e8:03:
                    0e:39:58:a1:e6:df:da:48:74:49:2a:13:0e:c1:83:
                    7f:35:23:49:02:7d:4c:0f:96:6a:00:ba:5a:2c:38:
                    69:a6:f7:45:14:42:b0:8a:ea:d1:4e:b1:57:5d:cb:
                    87:a4:df:7d:2b:4a:a2:3b:a0:62:ed:0a:e5:52:de:
                    fb:af:4d:37:8d:4c:8a:e2:a1:d8:64:68:f0:b4:48:
                    90:0e:8f:20:0c:8c:3a:e3:98:7c:73:66:3f:ee:4e:
                    47:fd:50:49:f4:75:e0:f0:08:0d:54:4b:68:51:70:
                    93:24:4a:19:1a:21:27:b8:29:03:4b:31:fc:36:ec:
                    fe:42:c9:cf:2a:3e:1d:9e:3c:23:db:fd:34:18:df:
                    98:48:94:2c:a3:d7:e2:d0:74:7e:f6:15:88:5e:f1:
                    fb:e5:db:b8:3e:b0:17:79:84:9f:5e:01:45:18:3f:
                    44:9f:94:64:f6:8b:61:8c:67:79:7d:3d:ca:da:a5:
                    b1:25:44:e7:f2:43:24:07:11:b7:8b:09:1e:8b:7e:
                    9e:db:72:45:a6:29:3b:a3:e1:5d:37:02:83:e0:09:
                    36:c3:01:d1:50:39:25:a6:56:c4:5e:b9:81:0a:47:
                    c9:d5:37:4b:ec:e4:14:b2:84:d4:45:6a:dc:d4:ad:
                    77:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:BF:23:9B:E4:F5:E5:B9:56:C7:0C:0A:78:CA:47:05:F8:1B:8B:72
            X509v3 Authority Key Identifier:
                keyid:AC:8A:4C:47:61:74:CC:E1:59:22:EC:3E:0D:5B:61:4A:BF:AC:19:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/20C91421EB59CC1900F7BE84330CC85C275017D06EEF777E35FCF3871FD8AD7D/0/AC8A4C476174CCE15922EC3E0D5B614ABFAC19B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC8A4C476174CCE15922EC3E0D5B614ABFAC19B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/20C91421EB59CC1900F7BE84330CC85C275017D06EEF777E35FCF3871FD8AD7D/0/323830313a3166363a3a2f34382d3438203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f6::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:18:e6:34:09:8a:6d:13:14:42:57:85:b8:41:cb:ce:85:eb:
         47:a8:9a:59:2b:2f:58:29:38:f8:9e:7a:32:7f:b0:e0:8c:13:
         65:90:ee:10:b5:34:d5:18:5d:4d:67:75:6a:a8:9f:96:e4:00:
         e6:5c:9d:38:7a:36:2c:29:b0:2b:02:de:e4:03:ca:bb:43:a3:
         cb:9a:9f:4b:39:92:7d:2a:7c:2b:96:74:7e:f8:e7:4a:dd:06:
         88:4b:5a:7d:c0:f0:69:0e:72:05:a1:6b:31:e0:56:9c:28:0c:
         8b:a7:22:18:a1:af:3e:5b:dc:fe:8b:33:f7:3f:1e:5a:34:3c:
         87:66:ef:ba:a6:08:58:1e:3d:d7:ac:7b:d9:b2:ce:7f:d4:4a:
         5b:33:05:a2:d8:89:83:84:e1:b1:ec:c3:b4:8d:aa:13:7a:ba:
         d9:40:fa:b7:38:d9:fc:28:da:2a:2b:49:b3:59:86:cb:d7:1d:
         ae:63:b6:dc:ec:ba:b8:bd:92:d0:48:62:b4:03:a2:7c:70:98:
         df:57:f4:2e:cf:8a:d0:6f:c0:0b:fb:14:a6:a3:f3:ec:c6:79:
         3f:98:88:4c:7a:49:c3:8a:f2:61:96:88:b3:05:e4:80:2f:5a:
         7d:fc:7d:36:0d:11:31:7b:96:fd:f9:ec:0f:80:a5:f8:81:0a:
         c4:40:d7:69
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUDm2oRIdXmEaT3TiEUbucS4U3EaIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM4QTRDNDc2MTc0Q0NFMTU5MjJFQzNFMEQ1QjYxNEFC
RkFDMTlCMDAeFw0yNjAxMDYyMDQ3MzhaFw0yNzAxMDUyMDUyMzhaMDMxMTAvBgNV
BAMTKEQ2QkYyMzlCRTRGNUU1Qjk1NkM3MEMwQTc4Q0E0NzA1RjgxQjhCNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMevJvAIlcHBkzvZjoAw45WKHm
39pIdEkqEw7Bg381I0kCfUwPlmoAulosOGmm90UUQrCK6tFOsVddy4ek330rSqI7
oGLtCuVS3vuvTTeNTIriodhkaPC0SJAOjyAMjDrjmHxzZj/uTkf9UEn0deDwCA1U
S2hRcJMkShkaISe4KQNLMfw27P5Cyc8qPh2ePCPb/TQY35hIlCyj1+LQdH72FYhe
8fvl27g+sBd5hJ9eAUUYP0SflGT2i2GMZ3l9PcrapbElROfyQyQHEbeLCR6Lfp7b
ckWmKTuj4V03AoPgCTbDAdFQOSWmVsReuYEKR8nVN0vs5BSyhNRFatzUrXcNAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQU1r8jm+T15blWxwwKeMpHBfgbi3IwHwYDVR0j
BBgwFoAUrIpMR2F0zOFZIuw+DVthSr+sGbAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yMEM5MTQyMUVCNTlDQzE5MDBGN0JFODQzMzBDQzg1QzI3
NTAxN0QwNkVFRjc3N0UzNUZDRjM4NzFGRDhBRDdELzAvQUM4QTRDNDc2MTc0Q0NF
MTU5MjJFQzNFMEQ1QjYxNEFCRkFDMTlCMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQzhBNEM0NzYxNzRDQ0UxNTky
MkVDM0UwRDVCNjE0QUJGQUMxOUIwLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjBDOTE0MjFFQjU5Q0MxOTAwRjdCRTg0MzMwQ0M4NUMyNzUwMTdEMDZF
RUY3NzdFMzVGQ0YzODcxRkQ4QUQ3RC8wLzMyMzgzMDMxM2EzMTY2MzYzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMTM0MzAzODMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAEB9gAAMA0G
CSqGSIb3DQEBCwUAA4IBAQCTGOY0CYptExRCV4W4QcvOhetHqJpZKy9YKTj4nnoy
f7DgjBNlkO4QtTTVGF1NZ3VqqJ+W5ADmXJ04ejYsKbArAt7kA8q7Q6PLmp9LOZJ9
KnwrlnR++OdK3QaIS1p9wPBpDnIFoWsx4FacKAyLpyIYoa8+W9z+izP3Px5aNDyH
Zu+6pghYHj3XrHvZss5/1EpbMwWi2ImDhOGx7MO0jaoTerrZQPq3ONn8KNoqK0mz
WYbL1x2uY7bc7Lq4vZLQSGK0A6J8cJjfV/Quz4rQb8AL+xSmo/Psxnk/mIhMeknD
ivJhloizBeSAL1p9/H02DRExe5b9+ewPgKX4gQrEQNdp
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:26:56 2026 by rpki-client