This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/323830313a303a3434303a3a2f34382d3438203d3e20323131383636.roa
File:                     323830313a303a3434303a3a2f34382d3438203d3e20323131383636.roa (raw, json)
Hash identifier:          tzWsROKaMHP4RyUTMuzk2cBd2LQ2eTMVUyYYyLAYXXE=
Subject key identifier:   55:77:69:FC:D8:59:E1:09:B9:45:9C:21:F0:C1:A3:AA:42:90:08:20
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       4D6CE6C397B644E67CEB02A29492C3C88406E4B1
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/323830313a303a3434303a3a2f34382d3438203d3e20323131383636.roa
Signing time:             Tue 06 Jan 2026 19:31:20 +0000
ROA not before:           Tue 06 Jan 2026 19:26:20 +0000
ROA not after:            Tue 05 Jan 2027 19:31:20 +0000
asID:                     211866
IP address blocks:        2801:0:440::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 03:47:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:6c:e6:c3:97:b6:44:e6:7c:eb:02:a2:94:92:c3:c8:84:06:e4:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Jan  6 19:26:20 2026 GMT
            Not After : Jan  5 19:31:20 2027 GMT
        Subject: CN=557769FCD859E109B9459C21F0C1A3AA42900820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:dc:d9:2d:2d:42:3a:dd:b6:83:c0:c6:85:27:
                    21:55:97:81:9c:d0:12:fe:4e:2e:55:dd:52:ac:e0:
                    fa:6b:f2:86:0b:62:7c:06:70:1b:3f:fd:aa:f1:72:
                    a6:f5:2d:b9:44:8f:46:a6:52:82:87:da:0e:40:37:
                    95:27:d5:35:ea:af:b1:3a:77:7a:55:76:d5:b6:dd:
                    ed:e9:22:df:5b:cd:9a:a3:48:76:26:79:61:3b:74:
                    91:41:9a:36:de:01:06:21:90:9b:19:96:75:13:68:
                    fe:e6:19:cc:76:87:ed:94:ee:35:42:14:34:8b:9c:
                    4f:fe:b6:cf:bf:1d:79:7d:ed:13:bc:33:b3:c7:6d:
                    a1:f0:f9:61:4c:37:27:15:7d:5e:6d:45:5d:84:82:
                    d4:15:ea:1d:56:46:af:b5:72:f0:9f:fd:65:7e:0e:
                    ae:24:7d:df:0e:fd:6f:5d:c8:40:6b:0d:4e:b0:44:
                    58:f1:19:49:a0:2f:f6:a8:24:af:00:e5:50:0e:ed:
                    3c:3e:46:46:1a:74:12:de:1c:06:ca:59:76:df:10:
                    c5:1b:d6:1f:d7:15:90:08:ca:67:b2:f2:0f:f0:51:
                    5f:96:21:9b:8f:bb:75:db:27:c8:b2:2a:74:a9:13:
                    7c:9b:2a:f7:a6:f3:e1:21:78:b6:e9:85:5a:8b:0c:
                    f6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:77:69:FC:D8:59:E1:09:B9:45:9C:21:F0:C1:A3:AA:42:90:08:20
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/323830313a303a3434303a3a2f34382d3438203d3e20323131383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:440::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:05:6f:d5:74:d7:cd:58:7e:b4:c3:0a:9d:5a:2e:b9:36:30:
         49:a9:02:3f:14:a9:dd:0b:4d:ac:a2:62:90:1c:68:53:01:cc:
         7f:f7:de:10:97:f5:01:28:03:7d:91:d4:ec:6a:0a:22:72:1a:
         e9:f1:2a:93:0f:a8:f3:b2:d9:3e:53:9b:99:79:9e:aa:e4:dc:
         6e:ae:c7:e5:f8:11:44:d8:b1:c1:05:52:04:74:89:b5:0c:55:
         4c:a1:85:22:fc:74:ab:06:1e:c3:76:7f:f9:28:95:1a:22:d5:
         b5:39:33:19:a9:48:6b:60:45:46:6c:12:15:ed:5e:40:5a:9d:
         a8:ec:bc:0d:06:6d:d0:3e:57:1c:d6:5b:c2:8a:a3:1e:d9:bd:
         a9:67:c4:b9:d7:ee:8a:3a:50:b5:26:31:3b:39:1a:e1:84:da:
         a8:93:06:be:80:82:31:4b:ab:00:12:89:70:67:92:ff:2d:f6:
         ef:8f:eb:e0:b5:9d:8b:2b:62:c7:3e:c1:b4:84:7b:22:96:4d:
         fa:8c:3f:7f:2e:b3:b9:17:d4:f4:25:e9:e5:6f:45:11:f7:9f:
         8e:81:ca:33:28:94:0e:2f:fc:f0:da:3e:de:29:56:27:9c:25:
         87:fd:06:92:88:85:90:b2:bf:24:ee:f4:0b:63:2a:e5:4b:7b:
         23:09:50:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:28:48 2026 by rpki-client