This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a34393a3a2f34382d3438203d3e20323632323439.roa
File:                     323830313a3134303a34393a3a2f34382d3438203d3e20323632323439.roa (raw, json)
Hash identifier:          jqnmRTYufpJbNRi/+GkWePuXFADHQ8+7zVZska91If4=
Subject key identifier:   98:9F:00:DC:58:A3:65:BD:9F:34:43:63:60:BE:35:7D:1F:FF:FD:D2
Certificate issuer:       /CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Certificate serial:       0D03EE480203E81E40A48AAB29A9F3EEBF3F1D3D
Authority key identifier: D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a34393a3a2f34382d3438203d3e20323632323439.roa
Signing time:             Mon 17 Nov 2025 11:52:49 +0000
ROA not before:           Mon 17 Nov 2025 11:47:49 +0000
ROA not after:            Mon 16 Nov 2026 11:52:49 +0000
asID:                     262249
IP address blocks:        2801:140:49::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 03:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:03:ee:48:02:03:e8:1e:40:a4:8a:ab:29:a9:f3:ee:bf:3f:1d:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
        Validity
            Not Before: Nov 17 11:47:49 2025 GMT
            Not After : Nov 16 11:52:49 2026 GMT
        Subject: CN=989F00DC58A365BD9F34436360BE357D1FFFFDD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f4:1b:b5:02:e2:28:7f:f1:20:18:7f:25:eb:
                    bf:cd:70:96:a1:5c:dd:04:ee:2d:4b:11:88:3f:25:
                    60:9e:d5:b5:06:48:25:05:8b:a9:c0:03:c5:58:9c:
                    fc:c1:c8:32:2d:be:d7:34:a1:35:23:2a:8f:10:58:
                    87:46:66:5c:9f:99:9b:d1:a4:3b:52:f0:61:4d:57:
                    91:73:49:aa:e8:e1:6c:9e:3c:36:6b:ae:70:56:f9:
                    f0:50:57:8e:ed:1c:41:85:0a:fd:45:dc:af:55:5f:
                    c8:ff:61:e4:03:8f:ee:66:7a:d2:48:0b:02:17:bc:
                    3f:75:8e:bc:d6:70:af:3d:ff:1d:1b:3e:aa:51:fa:
                    db:6a:76:b2:60:48:1b:1b:51:39:ab:b4:fa:28:e5:
                    b2:59:07:66:9e:90:f1:b3:74:5e:d7:12:fb:f3:68:
                    ca:26:54:f7:0c:9a:c6:bb:50:13:b1:da:3a:a5:60:
                    85:23:77:8b:27:27:76:78:92:4f:06:fc:62:9e:31:
                    a2:f5:6a:a4:71:94:9e:01:7f:08:39:51:30:be:5a:
                    50:65:2c:7e:9b:66:4b:5c:f0:67:bb:28:11:e0:db:
                    ef:53:76:09:00:4b:fb:65:54:6c:e8:e5:bf:cd:f6:
                    80:7a:bc:9c:b4:e7:ac:87:d1:a9:43:33:db:42:bf:
                    11:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:9F:00:DC:58:A3:65:BD:9F:34:43:63:60:BE:35:7D:1F:FF:FD:D2
            X509v3 Authority Key Identifier:
                keyid:D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a34393a3a2f34382d3438203d3e20323632323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:140:49::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:ab:6b:e4:7e:5b:69:bb:7c:68:83:5a:f9:74:21:71:13:60:
         1a:a2:cc:94:7a:11:51:72:6d:b5:a1:23:f7:18:d6:56:9b:67:
         16:d0:29:19:9c:5a:cb:f7:db:bb:7d:f4:ea:5b:08:04:c9:c3:
         f5:ab:e5:82:ca:df:10:c9:7d:8a:27:62:32:e1:21:fc:1a:66:
         05:c2:3f:3a:af:4d:41:79:cb:a3:cb:6d:bd:2f:47:15:36:30:
         ab:67:f2:48:b2:c9:23:ee:89:72:48:d3:c3:e5:80:9f:f1:5d:
         61:50:c6:38:be:41:02:7d:34:07:fe:53:bb:8f:d0:f0:a6:88:
         d0:b2:4c:77:14:92:78:b8:e3:81:03:d1:3a:b4:a4:ca:dc:64:
         47:23:8b:c8:e0:f4:84:32:27:7f:41:3e:7d:58:08:02:8f:11:
         ee:b2:9c:dd:e7:20:d6:6d:48:c9:18:2c:06:cd:2a:ed:bc:b6:
         d3:49:fe:79:9e:71:7f:77:48:31:08:fc:7e:6d:f1:75:1c:35:
         65:43:19:a2:df:05:62:2b:02:da:f9:39:5d:bb:59:1b:f5:db:
         f0:33:b4:64:25:6f:33:0b:d0:2e:b8:ac:c7:20:4a:5a:6f:1f:
         ba:2c:42:af:3b:56:d1:fa:45:22:8d:cf:07:cf:7e:2a:67:29:
         20:b2:4b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:41:42 2025 by rpki-client