This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2FFA0E0B6901FE40A8CA6DECFD5A8FAA5DD4CAA138A3D762280875E175B5ECBA/0/323830313a31393a613030303a3a2f34382d3438203d3e203631343735.roa
File:                     323830313a31393a613030303a3a2f34382d3438203d3e203631343735.roa (raw, json)
Hash identifier:          P3ZHIZYCM2hXq8r66QwIogLZ8HGjpGtEP5yppoe3wNI=
Subject key identifier:   FA:73:93:CA:E0:21:17:B8:EA:E2:A6:A1:B5:28:1F:56:0E:BD:5E:DB
Certificate issuer:       /CN=90FA89BC83FD94C22D83DE3D35F34FEFEF422C56
Certificate serial:       18A973B61832F0CC70EE15B46B9B2CB63FEA4F45
Authority key identifier: 90:FA:89:BC:83:FD:94:C2:2D:83:DE:3D:35:F3:4F:EF:EF:42:2C:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90FA89BC83FD94C22D83DE3D35F34FEFEF422C56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2FFA0E0B6901FE40A8CA6DECFD5A8FAA5DD4CAA138A3D762280875E175B5ECBA/0/323830313a31393a613030303a3a2f34382d3438203d3e203631343735.roa
Signing time:             Tue 06 Jan 2026 19:09:38 +0000
ROA not before:           Tue 06 Jan 2026 19:04:38 +0000
ROA not after:            Tue 05 Jan 2027 19:09:38 +0000
asID:                     61475
IP address blocks:        2801:19:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2FFA0E0B6901FE40A8CA6DECFD5A8FAA5DD4CAA138A3D762280875E175B5ECBA/0/90FA89BC83FD94C22D83DE3D35F34FEFEF422C56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2FFA0E0B6901FE40A8CA6DECFD5A8FAA5DD4CAA138A3D762280875E175B5ECBA/0/90FA89BC83FD94C22D83DE3D35F34FEFEF422C56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90FA89BC83FD94C22D83DE3D35F34FEFEF422C56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:a9:73:b6:18:32:f0:cc:70:ee:15:b4:6b:9b:2c:b6:3f:ea:4f:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90FA89BC83FD94C22D83DE3D35F34FEFEF422C56
        Validity
            Not Before: Jan  6 19:04:38 2026 GMT
            Not After : Jan  5 19:09:38 2027 GMT
        Subject: CN=FA7393CAE02117B8EAE2A6A1B5281F560EBD5EDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:39:d1:eb:34:c4:6a:79:de:3c:48:98:77:b8:
                    9f:fd:1b:8b:60:72:1f:e2:fe:13:59:ca:b7:0f:fa:
                    0c:0d:ab:82:ec:05:81:a1:d3:b2:c5:4f:88:ec:79:
                    32:86:06:36:27:12:ca:91:8e:51:9a:2c:68:d0:8f:
                    04:28:f2:7f:9f:73:2c:ce:4b:6f:c8:1d:33:53:6c:
                    fd:aa:4b:ab:b0:0b:a4:de:f2:87:6d:25:b3:6f:c6:
                    47:56:85:b2:13:02:15:a5:8e:f2:14:85:47:5d:c5:
                    8b:de:ca:0c:00:3e:ae:f5:7b:a9:26:06:da:e7:08:
                    27:e4:94:d0:60:a6:18:2f:7f:5b:b4:cf:dd:0a:4a:
                    53:e9:9b:3f:67:41:aa:95:02:93:f1:c4:1e:25:0e:
                    b0:74:69:0e:3a:f7:88:31:ce:09:96:a5:df:90:10:
                    33:ce:7e:a4:5d:26:cb:5e:f4:11:84:10:12:70:2c:
                    50:0c:e6:b4:e0:81:8e:0e:b5:52:ff:87:8c:2d:e2:
                    20:05:89:ff:d5:56:10:64:11:b3:04:31:cc:8d:04:
                    bc:27:c8:b0:6b:5d:42:9b:1b:4d:28:e3:6b:22:3a:
                    45:02:54:a2:ec:e7:9c:86:d9:44:eb:ed:2b:bd:14:
                    67:cc:21:36:76:ff:f6:72:9b:1a:43:07:a9:a8:ef:
                    3e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:73:93:CA:E0:21:17:B8:EA:E2:A6:A1:B5:28:1F:56:0E:BD:5E:DB
            X509v3 Authority Key Identifier:
                keyid:90:FA:89:BC:83:FD:94:C2:2D:83:DE:3D:35:F3:4F:EF:EF:42:2C:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2FFA0E0B6901FE40A8CA6DECFD5A8FAA5DD4CAA138A3D762280875E175B5ECBA/0/90FA89BC83FD94C22D83DE3D35F34FEFEF422C56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90FA89BC83FD94C22D83DE3D35F34FEFEF422C56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2FFA0E0B6901FE40A8CA6DECFD5A8FAA5DD4CAA138A3D762280875E175B5ECBA/0/323830313a31393a613030303a3a2f34382d3438203d3e203631343735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:19:a000::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:03:52:b1:f5:07:9a:09:14:a8:c3:37:c4:68:df:68:05:7a:
         e5:29:71:c3:00:e0:71:77:c8:44:e4:8e:91:a0:f4:6d:46:df:
         3e:4f:b5:23:65:0a:20:4d:7a:92:04:e8:46:16:77:4b:a9:7d:
         10:71:b8:00:92:79:5b:5e:a3:ed:05:e1:d3:48:ce:fb:78:fa:
         aa:61:57:6b:e5:fa:21:49:db:f8:90:a0:9e:3b:dc:3e:34:1a:
         82:fa:f4:2e:3f:1d:ff:3d:64:fe:16:19:05:e7:f4:0d:6b:4b:
         c8:03:42:a1:54:b5:93:9a:4b:07:69:ed:48:8f:96:24:73:ee:
         fe:d1:2d:82:44:e9:73:a6:2c:ed:3c:a2:30:42:5a:2c:68:19:
         32:79:15:7e:f7:83:17:7b:23:1a:1f:9d:a5:5a:f1:f5:a5:72:
         22:a6:72:42:2a:46:43:56:09:67:63:44:ae:91:3f:66:5f:1c:
         dd:38:0e:4a:83:e0:79:09:92:ab:35:cd:a8:cd:c7:00:dc:ec:
         71:a6:09:94:8b:95:66:fa:1a:e2:61:90:3a:e0:d1:ae:9d:d0:
         05:c1:d2:5a:12:75:5c:8a:a0:c2:79:a3:95:6c:f0:df:df:89:
         1e:ca:41:4b:46:45:31:a4:85:53:8b:11:9d:cd:c9:56:23:d3:
         39:b0:ff:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:58:04 2026 by rpki-client