This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a3132313a3a2f34382d3438203d3e20323632323439.roa
File:                     323830313a3134303a3132313a3a2f34382d3438203d3e20323632323439.roa (raw, json)
Hash identifier:          AlvdXM6L2H+JoTu6+ObdpJLwUa/rzd4Xwl69dCiwQdE=
Subject key identifier:   10:FF:1E:7E:A9:9A:E9:7C:8C:1C:CC:C6:52:96:38:5C:B8:F5:BD:C3
Certificate issuer:       /CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Certificate serial:       21C6B9A93C1F5A78210E4B78F8EC9CA8F2C4E1DF
Authority key identifier: D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a3132313a3a2f34382d3438203d3e20323632323439.roa
Signing time:             Mon 17 Nov 2025 11:52:46 +0000
ROA not before:           Mon 17 Nov 2025 11:47:46 +0000
ROA not after:            Mon 16 Nov 2026 11:52:46 +0000
asID:                     262249
IP address blocks:        2801:140:121::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 03:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:c6:b9:a9:3c:1f:5a:78:21:0e:4b:78:f8:ec:9c:a8:f2:c4:e1:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
        Validity
            Not Before: Nov 17 11:47:46 2025 GMT
            Not After : Nov 16 11:52:46 2026 GMT
        Subject: CN=10FF1E7EA99AE97C8C1CCCC65296385CB8F5BDC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4b:73:4d:e3:4a:30:fc:91:e8:46:08:22:6b:
                    ef:af:24:32:ec:c6:d9:ab:42:37:46:79:1e:37:8e:
                    a8:71:97:03:8c:bd:5b:47:1b:90:e5:6b:a5:3f:f8:
                    32:d2:f7:53:fc:b1:e1:8a:38:41:70:0b:2a:a5:c7:
                    d1:d1:de:e2:66:f1:cf:72:3f:b0:e6:df:ff:9f:5b:
                    01:a3:f9:aa:b9:eb:cc:32:6c:75:81:0f:67:dd:8b:
                    13:50:f0:c7:5c:9f:d5:82:fa:d7:7e:d2:8b:78:8a:
                    11:23:ae:08:88:e1:a3:bb:88:73:1b:26:53:3c:85:
                    87:9a:94:ce:7c:b0:d7:31:c2:8b:5c:9d:1d:5c:5c:
                    bc:83:59:be:c0:23:94:45:ed:b4:a6:2c:1f:d5:93:
                    07:0e:7a:8b:22:bf:6a:2b:d7:58:e4:46:c0:11:6f:
                    bf:e6:23:d9:73:2f:4a:6d:e7:5c:88:f8:af:d7:0b:
                    7c:c9:3c:2e:cc:74:36:48:37:c7:77:fc:b7:d9:13:
                    58:77:90:29:e1:74:4c:56:0c:a7:52:b2:4b:e2:af:
                    28:4b:6b:99:60:42:74:03:18:1b:07:cb:c0:6d:f9:
                    0b:30:34:fe:aa:f0:32:70:75:b1:97:4a:b2:14:4d:
                    08:07:56:f9:df:e2:5e:82:cd:da:d5:b6:cc:26:2a:
                    82:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:FF:1E:7E:A9:9A:E9:7C:8C:1C:CC:C6:52:96:38:5C:B8:F5:BD:C3
            X509v3 Authority Key Identifier:
                keyid:D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a3132313a3a2f34382d3438203d3e20323632323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:140:121::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:d1:dc:6f:f5:46:96:82:5e:38:7a:49:89:1c:eb:ad:3f:8a:
         af:cc:62:08:4b:b7:16:0f:16:2e:36:90:6b:6e:2a:4a:90:e7:
         b1:8d:67:4e:7c:f9:ba:aa:b8:b1:c0:49:58:93:1c:c8:be:dd:
         57:5e:c2:1c:a9:22:89:d6:9b:04:c1:3d:58:cf:a1:5c:a9:03:
         35:38:b5:5d:fb:71:72:c6:bf:62:6f:d8:d1:eb:d7:2d:63:1c:
         61:c2:00:2d:2c:35:e9:a5:8b:64:3c:5d:8f:54:c1:41:1d:f8:
         0c:fb:43:65:87:ba:c2:0c:52:bb:2d:be:89:bd:ef:bb:10:48:
         82:e3:85:e8:09:29:2d:d9:f3:59:07:d1:4b:1c:0b:28:91:32:
         19:41:5a:14:d0:83:1e:0a:7d:5c:e7:06:3c:b6:d9:33:96:41:
         9c:e4:53:77:b2:a4:f8:6b:f8:56:84:c0:c5:15:54:04:98:98:
         99:c3:bd:e1:1c:09:9e:0e:64:d7:95:af:eb:81:18:cf:f8:f8:
         05:02:9e:3e:9b:b2:81:57:f5:bb:b3:b5:58:44:df:bb:7f:b7:
         17:4c:5b:82:6b:71:01:e4:6f:89:58:76:0a:77:a9:a3:ff:b4:
         29:54:75:62:97:33:70:36:59:a4:28:8b:a4:5f:8e:28:df:b4:
         15:60:11:6f
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUIca5qTwfWnghDkt4+OycqPLE4d8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhFNkQ5QzA2RTREOEZGQ0RDQzIyQUZGNEI0Q0EzOTJD
MUE3RDYwMDAeFw0yNTExMTcxMTQ3NDZaFw0yNjExMTYxMTUyNDZaMDMxMTAvBgNV
BAMTKDEwRkYxRTdFQTk5QUU5N0M4QzFDQ0NDNjUyOTYzODVDQjhGNUJEQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8S3NN40ow/JHoRggia++vJDLs
xtmrQjdGeR43jqhxlwOMvVtHG5Dla6U/+DLS91P8seGKOEFwCyqlx9HR3uJm8c9y
P7Dm3/+fWwGj+aq568wybHWBD2fdixNQ8Mdcn9WC+td+0ot4ihEjrgiI4aO7iHMb
JlM8hYealM58sNcxwotcnR1cXLyDWb7AI5RF7bSmLB/VkwcOeosiv2or11jkRsAR
b7/mI9lzL0pt51yI+K/XC3zJPC7MdDZIN8d3/LfZE1h3kCnhdExWDKdSskviryhL
a5lgQnQDGBsHy8Bt+QswNP6q8DJwdbGXSrIUTQgHVvnf4l6CzdrVtswmKoLLAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUEP8efqma6XyMHMzGUpY4XLj1vcMwHwYDVR0j
BBgwFoAU2ObZwG5Nj/zcwir/S0yjksGn1gAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRjY4MzYwQzQzNUVFMTQ2MTJDMTk0NEREOEI3QTY1RUI5
MDkzN0VDMkMxRDY4RkE0MkNCMDZDQTdFMzAwRjNDLzAvRDhFNkQ5QzA2RTREOEZG
Q0RDQzIyQUZGNEI0Q0EzOTJDMUE3RDYwMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOEU2RDlDMDZFNEQ4RkZDREND
MjJBRkY0QjRDQTM5MkMxQTdENjAwLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkY2ODM2MEM0MzVFRTE0NjEyQzE5NDRERDhCN0E2NUVCOTA5MzdFQzJD
MUQ2OEZBNDJDQjA2Q0E3RTMwMEYzQy8wLzMyMzgzMDMxM2EzMTM0MzAzYTMxMzIz
MTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzMjMyMzQzOS5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgBAUABITANBgkqhkiG9w0BAQsFAAOCAQEAGtHcb/VGloJeOHpJiRzrrT+Kr8xi
CEu3Fg8WLjaQa24qSpDnsY1nTnz5uqq4scBJWJMcyL7dV17CHKkiidabBME9WM+h
XKkDNTi1Xftxcsa/Ym/Y0evXLWMcYcIALSw16aWLZDxdj1TBQR34DPtDZYe6wgxS
uy2+ib3vuxBIguOF6AkpLdnzWQfRSxwLKJEyGUFaFNCDHgp9XOcGPLbZM5ZBnORT
d7Kk+Gv4VoTAxRVUBJiYmcO94RwJng5k15Wv64EYz/j4BQKePpuygVf1u7O1WETf
u3+3F0xbgmtxAeRviVh2Cnepo/+0KVR1YpczcDZZpCiLpF+OKN+0FWARbw==
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:38:58 2025 by rpki-client