This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a623934313a3a2f34382d3438203d3e20323632323439.roa
File:                     323830313a3134303a623934313a3a2f34382d3438203d3e20323632323439.roa (raw, json)
Hash identifier:          VW9mKOaCp77kg9eLJOAeOc6Fo5fPOgtaMx2bWHxIgnk=
Subject key identifier:   CA:48:35:F7:85:14:9C:E4:A2:8E:16:71:19:D5:3F:53:C9:E7:10:CA
Certificate issuer:       /CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Certificate serial:       7FE6EF53C5AE317014B3A0D26264401A4920928F
Authority key identifier: D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a623934313a3a2f34382d3438203d3e20323632323439.roa
Signing time:             Fri 14 Nov 2025 13:52:34 +0000
ROA not before:           Fri 14 Nov 2025 13:47:34 +0000
ROA not after:            Fri 13 Nov 2026 13:52:34 +0000
asID:                     262249
IP address blocks:        2801:140:b941::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 03:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:e6:ef:53:c5:ae:31:70:14:b3:a0:d2:62:64:40:1a:49:20:92:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
        Validity
            Not Before: Nov 14 13:47:34 2025 GMT
            Not After : Nov 13 13:52:34 2026 GMT
        Subject: CN=CA4835F785149CE4A28E167119D53F53C9E710CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b0:85:98:49:dc:3a:97:2d:c0:60:60:ca:16:
                    98:85:3e:ec:e1:9f:32:fe:a0:64:42:92:2b:62:a7:
                    7a:03:c0:69:43:d4:7f:91:d5:4b:14:fa:27:12:6a:
                    d5:d7:82:fc:c0:85:8c:76:0d:e2:0a:f3:ae:a8:d2:
                    e0:c7:90:d8:ef:dd:f0:62:a3:9f:a6:ef:aa:54:c1:
                    27:50:ff:85:67:46:96:e7:f7:b5:21:43:1d:82:60:
                    20:cc:0e:37:69:5a:56:46:10:a3:cd:f4:82:16:4f:
                    9d:62:78:34:cd:8e:26:2b:73:c2:09:27:4a:3e:5e:
                    43:7e:e2:3d:c6:e4:54:35:4b:fb:0e:73:06:7a:4e:
                    46:59:36:fe:29:2e:cf:64:31:c4:20:25:24:0a:05:
                    ce:72:33:66:e1:c5:9b:5b:52:75:52:88:35:1e:b5:
                    83:8a:46:75:00:bf:fc:52:8a:c6:fd:87:92:3b:0a:
                    47:2a:15:d1:b5:44:97:c5:0e:b7:a1:e2:00:c8:7e:
                    fc:2d:bf:81:4c:bd:c7:cc:13:89:10:08:4b:f2:7f:
                    62:62:5d:b4:40:d8:8f:e2:f3:c6:d1:e4:de:ae:01:
                    7d:64:96:fd:47:9a:85:b9:b7:e6:ee:c3:f2:a6:e6:
                    54:9c:09:49:d1:1e:bd:99:fe:7a:fc:f6:55:b2:81:
                    23:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:48:35:F7:85:14:9C:E4:A2:8E:16:71:19:D5:3F:53:C9:E7:10:CA
            X509v3 Authority Key Identifier:
                keyid:D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a623934313a3a2f34382d3438203d3e20323632323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:140:b941::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:7e:d5:dc:95:25:6f:66:4f:76:68:77:9c:77:f6:2a:e7:f2:
         bb:fd:df:8d:4f:7d:0d:2a:69:b8:c9:2d:01:18:16:98:c7:2d:
         e2:ea:b7:2a:52:fc:29:45:87:ff:d1:ed:32:1b:02:16:c1:2b:
         38:3b:00:c2:5f:c7:52:3b:ab:60:42:0a:55:ff:6e:fc:1a:2b:
         26:42:cc:84:a6:fb:11:55:13:05:4a:9d:9f:97:4f:65:2a:b7:
         3e:06:fc:0b:ec:a6:78:97:45:19:11:64:90:ce:9b:24:bc:bb:
         e1:5b:a4:1f:cb:54:80:7a:e7:7e:cb:5a:d9:2e:2e:b0:05:84:
         b4:8a:b3:de:ff:06:e2:da:92:0b:16:0e:9f:7c:cd:e9:f1:b8:
         0b:56:1d:8b:0f:e3:d1:75:e2:8e:54:7f:e1:85:e5:f1:54:35:
         14:ac:01:03:d5:58:f5:e4:3a:dd:5d:e4:4c:5d:de:f8:52:10:
         33:ab:48:c4:c6:db:a7:ec:80:99:76:b8:89:6a:27:7c:90:97:
         79:fc:6d:51:86:2e:90:26:f7:db:e3:48:78:5d:b2:45:ca:84:
         da:62:81:db:3a:01:ae:5c:a9:96:4a:c9:a0:24:58:ce:df:da:
         f6:0c:1d:b6:c5:d8:b9:10:4b:94:2f:38:fe:2e:e1:34:1f:d6:
         c5:e3:92:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:41:45 2025 by rpki-client