This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/323830313a3131313a353a3a2f34382d3438203d3e203138373437.roa
File:                     323830313a3131313a353a3a2f34382d3438203d3e203138373437.roa (raw, json)
Hash identifier:          Wr2GP5jwS6ihOtLsVtCq6/G1BTqx0QtOqKs1XeAI2Vc=
Subject key identifier:   A1:C2:A1:7A:32:DF:FF:CF:7C:25:59:43:B2:4D:85:61:19:D9:00:D1
Certificate issuer:       /CN=0E48AFD9B71B883E7D0F953CC116B1F94E953785
Certificate serial:       6DBA19E2F4277648F6CE2051D8E1915E04115328
Authority key identifier: 0E:48:AF:D9:B7:1B:88:3E:7D:0F:95:3C:C1:16:B1:F9:4E:95:37:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/323830313a3131313a353a3a2f34382d3438203d3e203138373437.roa
Signing time:             Tue 06 Jan 2026 19:34:34 +0000
ROA not before:           Tue 06 Jan 2026 19:29:34 +0000
ROA not after:            Tue 05 Jan 2027 19:34:34 +0000
asID:                     18747
IP address blocks:        2801:111:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ba:19:e2:f4:27:76:48:f6:ce:20:51:d8:e1:91:5e:04:11:53:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E48AFD9B71B883E7D0F953CC116B1F94E953785
        Validity
            Not Before: Jan  6 19:29:34 2026 GMT
            Not After : Jan  5 19:34:34 2027 GMT
        Subject: CN=A1C2A17A32DFFFCF7C255943B24D856119D900D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e7:b6:35:83:c0:23:30:db:ee:9b:eb:d0:f7:
                    d2:97:79:c7:8e:66:d5:c2:04:cb:f1:f8:a3:ee:9f:
                    81:6d:28:bd:c4:5a:d3:ed:b8:60:44:c2:b4:e0:68:
                    bf:55:e0:e0:ce:10:30:f8:d6:8d:dd:33:07:cd:53:
                    a1:97:50:32:33:cd:46:14:75:b3:a4:19:eb:70:c7:
                    38:a0:59:74:12:71:21:46:12:02:b4:78:99:8a:63:
                    ca:f6:eb:95:4c:b8:14:6b:aa:80:de:fc:4e:b2:78:
                    88:be:a5:55:a3:1c:b4:fa:b7:93:d2:5a:fb:7e:9c:
                    90:d2:1d:0d:d4:f4:58:81:57:92:96:97:89:25:f0:
                    1a:db:bf:50:40:68:e9:e8:aa:bd:14:c2:5b:f2:fd:
                    70:55:c8:aa:a2:80:ee:d2:4b:41:fe:4e:b8:82:d8:
                    71:39:d8:d8:c9:4c:c5:8d:a1:00:79:bd:45:f4:11:
                    f8:62:e8:90:ad:5b:2b:c8:c1:b5:d9:d6:a3:2c:8b:
                    41:a7:9d:32:3b:34:2e:74:0c:ac:2e:c4:11:95:9e:
                    10:f7:93:95:55:f9:f3:21:71:07:54:0b:66:84:d6:
                    6f:62:0b:fd:42:39:5b:df:4b:b5:8b:af:42:e9:d5:
                    3a:78:8f:f7:6b:12:ba:3e:52:00:24:11:63:72:15:
                    d1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C2:A1:7A:32:DF:FF:CF:7C:25:59:43:B2:4D:85:61:19:D9:00:D1
            X509v3 Authority Key Identifier:
                keyid:0E:48:AF:D9:B7:1B:88:3E:7D:0F:95:3C:C1:16:B1:F9:4E:95:37:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/323830313a3131313a353a3a2f34382d3438203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:111:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:ca:bd:46:28:8a:06:ac:e4:2e:e5:a7:13:91:06:3f:ce:fe:
         d1:41:f6:db:9f:06:42:6a:51:a5:a4:32:7e:4f:89:0c:ec:e6:
         d9:01:9c:63:fa:d9:04:64:e3:65:cf:40:f4:1a:b0:f5:4c:19:
         4c:ba:5b:f5:45:ee:17:28:55:4d:ae:e8:b3:2a:b4:21:b2:e7:
         ef:76:e0:2f:59:de:82:f0:1b:c8:4b:ed:1e:fd:c6:1d:19:5c:
         96:d4:e6:4a:31:39:97:c6:c4:7c:1a:d7:97:13:ed:c4:07:da:
         a8:43:e6:79:27:de:8c:60:f8:5e:a0:64:a7:3a:8b:df:22:36:
         f2:00:e3:20:ed:6c:88:1e:04:ff:07:33:85:2b:0b:da:2b:a9:
         57:e5:0c:d5:f6:f6:75:2e:52:89:3d:40:e3:14:f8:26:24:06:
         1b:23:fc:13:f5:9e:94:ef:d3:4c:ae:3e:59:2c:da:e6:9a:ae:
         63:f0:77:2a:ca:e6:d9:5a:59:f5:e9:01:d4:0d:62:16:74:44:
         74:4e:50:51:4d:03:b2:68:63:a8:c8:fc:ce:e8:f7:85:51:2a:
         9e:08:15:b4:6e:79:80:db:78:b7:57:81:08:ff:05:8f:79:ac:
         ad:e0:19:ee:3e:78:c2:6e:99:3c:68:d1:74:36:82:76:03:53:
         11:64:73:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:28:15 2026 by rpki-client