This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a3a2f34382d3438203d3e20323632323439.roa
File:                     323830313a3134303a3a2f34382d3438203d3e20323632323439.roa (raw, json)
Hash identifier:          ZA0s7TWvR5OoEECmL5wjqWkWjmnrwowY5PCrZPbieQE=
Subject key identifier:   1F:92:59:32:16:60:D5:8B:0B:A3:AA:41:A3:6B:DF:B2:ED:21:BF:74
Certificate issuer:       /CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Certificate serial:       111D98D99F15FF29597BDF50FB1AB894A8CA057F
Authority key identifier: D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a3a2f34382d3438203d3e20323632323439.roa
Signing time:             Mon 17 Nov 2025 11:52:49 +0000
ROA not before:           Mon 17 Nov 2025 11:47:49 +0000
ROA not after:            Mon 16 Nov 2026 11:52:49 +0000
asID:                     262249
IP address blocks:        2801:140::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 03:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:1d:98:d9:9f:15:ff:29:59:7b:df:50:fb:1a:b8:94:a8:ca:05:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
        Validity
            Not Before: Nov 17 11:47:49 2025 GMT
            Not After : Nov 16 11:52:49 2026 GMT
        Subject: CN=1F9259321660D58B0BA3AA41A36BDFB2ED21BF74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:54:22:02:ee:0e:f9:8a:d0:00:56:3f:49:2b:
                    c0:f2:1e:f5:ef:1c:51:12:85:b4:48:21:8d:46:25:
                    cd:d4:3e:9e:74:5a:f2:27:ce:d0:03:30:bf:c6:8c:
                    8a:73:19:28:be:a3:a2:75:7c:fe:90:c1:8f:8c:6e:
                    ef:2d:89:50:79:d3:c9:01:7f:20:65:e9:fa:90:fd:
                    3c:19:e8:40:05:0a:ef:72:2c:b4:3d:c2:5a:06:9e:
                    2c:4b:60:0e:61:a1:3e:15:5f:00:e5:17:f5:18:3f:
                    bb:16:09:cd:bb:34:a3:e3:9c:89:c1:35:61:51:03:
                    58:6a:ac:24:4b:72:60:9a:3a:f6:7f:62:f9:28:ac:
                    88:5f:31:29:69:7f:56:aa:36:c7:8c:5e:47:6c:25:
                    21:d8:3d:d6:d8:11:d8:c4:70:86:61:e2:ee:1f:a7:
                    cd:04:28:3f:26:2d:0b:3b:e5:71:72:48:ca:f1:b7:
                    1a:c1:05:e6:ea:41:b2:46:9c:a1:de:45:9e:80:17:
                    59:82:5d:79:50:bd:6f:50:17:b2:4d:9f:b4:1f:73:
                    bb:f5:bd:44:6a:44:a1:83:5d:e8:5e:f2:39:11:b8:
                    38:e1:7c:fb:46:b8:92:fd:8d:b0:4e:77:8b:ad:64:
                    b7:03:6c:3d:e4:0b:b0:7d:46:9f:58:3e:df:32:56:
                    ce:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:92:59:32:16:60:D5:8B:0B:A3:AA:41:A3:6B:DF:B2:ED:21:BF:74
            X509v3 Authority Key Identifier:
                keyid:D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a3a2f34382d3438203d3e20323632323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:140::/48

    Signature Algorithm: sha256WithRSAEncryption
         ae:88:32:53:0e:f3:94:08:d8:6f:6c:1c:cb:80:3c:26:c6:d8:
         a3:f2:0e:d1:2b:04:39:c0:7d:38:5a:a7:09:e8:7b:d0:14:0b:
         3d:0d:85:3f:68:c9:fc:7b:0c:d7:a7:c5:df:a1:89:5a:d6:ea:
         cf:b8:fe:e3:f7:b5:97:6a:91:82:f1:33:77:8a:75:b6:44:78:
         54:ad:1e:24:b9:41:d9:58:2a:15:ea:fe:1d:94:96:87:b5:22:
         5b:1e:d4:8b:f0:39:e7:a6:53:20:95:5c:fb:7e:44:af:62:0a:
         6c:68:d2:f5:5a:3a:46:1c:5a:1b:6e:dd:09:ea:ea:08:cc:8d:
         a3:64:05:7f:1c:e5:73:82:52:11:f8:0a:f8:93:d5:75:92:91:
         18:47:da:00:77:84:a1:4f:3b:4f:50:7f:ce:80:e2:af:bc:48:
         98:08:19:20:bc:2f:40:b0:73:b6:8a:f4:5b:7d:bc:8c:00:b3:
         09:13:5c:5a:42:9e:76:09:55:67:c1:04:05:bf:50:77:c3:1a:
         04:9d:27:70:a3:2a:2b:1e:f3:c0:56:1b:0f:68:9e:05:4d:ef:
         47:5c:34:ab:9f:a3:b1:15:3b:6a:a7:de:2a:eb:10:06:15:5e:
         7d:d0:d9:d4:c4:ce:4b:8b:d0:aa:a5:f8:94:34:83:c3:f5:dc:
         ee:e3:ab:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:41:46 2025 by rpki-client