This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/323830303a6134303a3a2f33322d3634203d3e203232303830.roa
File:                     323830303a6134303a3a2f33322d3634203d3e203232303830.roa (raw, json)
Hash identifier:          Nbjs4I1NWUJGNMbzctQQt2t5uVu/zIBAdY9yiTN4SjA=
Subject key identifier:   D7:A4:FF:4D:A2:F5:6B:D9:CA:5C:A4:10:1A:57:EC:40:0D:C0:F7:7B
Certificate issuer:       /CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
Certificate serial:       0E6772ED00E2EB70565B472D2921FBCD62B7A699
Authority key identifier: FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/323830303a6134303a3a2f33322d3634203d3e203232303830.roa
Signing time:             Tue 06 Jan 2026 19:19:13 +0000
ROA not before:           Tue 06 Jan 2026 19:14:13 +0000
ROA not after:            Tue 05 Jan 2027 19:19:13 +0000
asID:                     22080
IP address blocks:        2800:a40::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:67:72:ed:00:e2:eb:70:56:5b:47:2d:29:21:fb:cd:62:b7:a6:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
        Validity
            Not Before: Jan  6 19:14:13 2026 GMT
            Not After : Jan  5 19:19:13 2027 GMT
        Subject: CN=D7A4FF4DA2F56BD9CA5CA4101A57EC400DC0F77B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c9:ce:55:38:65:31:1e:05:45:b0:51:ea:16:
                    ba:1a:b1:55:f2:fc:7d:61:4e:b4:83:3b:ec:8f:e2:
                    7c:1c:fb:03:d9:13:f8:a4:63:a5:67:53:2c:ff:a7:
                    61:74:d6:94:52:5d:90:04:2e:38:b6:0d:fd:d2:da:
                    b1:3e:bb:2d:52:7b:c5:3c:b0:14:a5:88:97:32:b2:
                    2a:9d:8c:2e:d0:99:db:d7:03:06:67:33:70:a4:97:
                    51:ec:2a:a1:e1:5e:8c:f0:65:72:bb:81:6c:78:6e:
                    83:8a:55:19:57:23:81:42:9c:66:64:2b:fd:ac:ec:
                    4a:88:37:41:fe:0b:69:d8:47:8c:44:08:e4:3e:f0:
                    78:a8:40:c8:96:c0:ba:bd:18:9b:6b:fb:48:4b:b1:
                    98:c4:64:b6:e6:79:89:43:38:17:2c:2c:ee:3f:a9:
                    2f:be:d3:5d:ca:b3:a8:b7:29:5e:0d:05:c1:94:9e:
                    92:31:6b:6d:fc:8a:b7:d9:da:df:4f:6f:ac:9c:c0:
                    60:e8:29:16:2b:75:04:1b:d8:dd:f7:cb:ba:ea:4e:
                    23:f1:1e:85:b3:e6:63:0e:07:8d:dd:24:dc:b7:82:
                    e0:7d:1a:02:eb:fc:05:f8:16:02:22:0e:6f:c6:56:
                    f5:e4:aa:b5:af:f7:8e:56:44:c7:ef:d1:54:f8:18:
                    21:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A4:FF:4D:A2:F5:6B:D9:CA:5C:A4:10:1A:57:EC:40:0D:C0:F7:7B
            X509v3 Authority Key Identifier:
                keyid:FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/323830303a6134303a3a2f33322d3634203d3e203232303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:6b:21:64:ac:d6:57:bf:c1:65:97:1f:79:e8:c3:5b:4e:8d:
         e5:5a:36:7f:0e:8a:18:4e:07:34:88:26:63:73:f7:0d:f6:60:
         5e:3d:9b:04:80:a5:b1:71:76:5a:6f:d5:35:28:46:43:f0:91:
         47:ae:ad:78:71:0d:35:e0:38:01:26:c9:4a:22:ba:07:ac:0b:
         0a:4d:74:18:dd:e2:b2:5c:fb:1b:2c:c1:67:78:03:0f:f7:6e:
         68:ec:af:29:e9:c4:a5:1d:31:f9:52:14:01:2f:f8:b6:4f:fa:
         fb:45:7f:52:67:0c:26:d7:e6:8a:3e:2c:62:4c:d6:36:48:ea:
         62:d0:29:94:01:d5:c3:e8:b1:09:42:5f:63:ef:08:e4:6d:c6:
         d1:da:ad:b1:c4:a3:2f:a3:5a:73:fd:b9:44:af:c2:a1:5b:e9:
         e7:7c:bf:33:0d:05:05:ff:db:ea:57:13:53:61:04:24:8d:45:
         73:f7:bc:00:ba:c2:f7:c1:fa:b2:e8:7f:20:bf:c8:3f:58:3e:
         ea:68:7e:ea:eb:24:a6:70:e5:ef:ba:90:f5:3e:50:13:88:cb:
         2c:f1:f7:81:a1:cb:4e:b8:53:d2:f6:d1:cc:c8:be:5d:b6:70:
         72:82:35:1d:40:26:94:2f:33:bb:25:b5:c5:c1:a9:25:9d:a5:
         de:96:a7:23
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUDmdy7QDi63BWW0ctKSH7zWK3ppkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkM4NzlGQTc4QTNGNkMxOUYwRDFERDIxRjE4MUI5OTMy
NkEwNUNFRTAeFw0yNjAxMDYxOTE0MTNaFw0yNzAxMDUxOTE5MTNaMDMxMTAvBgNV
BAMTKEQ3QTRGRjREQTJGNTZCRDlDQTVDQTQxMDFBNTdFQzQwMERDMEY3N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHyc5VOGUxHgVFsFHqFroasVXy
/H1hTrSDO+yP4nwc+wPZE/ikY6VnUyz/p2F01pRSXZAELji2Df3S2rE+uy1Se8U8
sBSliJcysiqdjC7QmdvXAwZnM3Ckl1HsKqHhXozwZXK7gWx4boOKVRlXI4FCnGZk
K/2s7EqIN0H+C2nYR4xECOQ+8HioQMiWwLq9GJtr+0hLsZjEZLbmeYlDOBcsLO4/
qS++013Ks6i3KV4NBcGUnpIxa238irfZ2t9Pb6ycwGDoKRYrdQQb2N33y7rqTiPx
HoWz5mMOB43dJNy3guB9GgLr/AX4FgIiDm/GVvXkqrWv945WRMfv0VT4GCFlAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQU16T/TaL1a9nKXKQQGlfsQA3A93swHwYDVR0j
BBgwFoAU/Iefp4o/bBnw0d0h8YG5kyagXO4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRDQ2Q0I3REZBMTYwQjk2NDY3RjdCREJFMjc2N0Q4NzQz
NDVDN0FDMDU1M0VDMDg1NUY0RjZBRTQ3NEZCMzRELzAvRkM4NzlGQTc4QTNGNkMx
OUYwRDFERDIxRjE4MUI5OTMyNkEwNUNFRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GQzg3OUZBNzhBM0Y2QzE5RjBE
MUREMjFGMTgxQjk5MzI2QTA1Q0VFLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0Q0NkNCN0RGQTE2MEI5NjQ2N0Y3QkRCRTI3NjdEODc0MzQ1QzdBQzA1
NTNFQzA4NTVGNEY2QUU0NzRGQjM0RC8wLzMyMzgzMDMwM2E2MTM0MzAzYTNhMmYz
MzMyMmQzNjM0MjAzZDNlMjAzMjMyMzAzODMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAAKQDANBgkq
hkiG9w0BAQsFAAOCAQEAZWshZKzWV7/BZZcfeejDW06N5Vo2fw6KGE4HNIgmY3P3
DfZgXj2bBIClsXF2Wm/VNShGQ/CRR66teHENNeA4ASbJSiK6B6wLCk10GN3islz7
GyzBZ3gDD/duaOyvKenEpR0x+VIUAS/4tk/6+0V/UmcMJtfmij4sYkzWNkjqYtAp
lAHVw+ixCUJfY+8I5G3G0dqtscSjL6Nac/25RK/CoVvp53y/Mw0FBf/b6lcTU2EE
JI1Fc/e8ALrC98H6suh/IL/IP1g+6mh+6uskpnDl77qQ9T5QE4jLLPH3gaHLTrhT
0vbRzMi+XbZwcoI1HUAmlC8zuyW1xcGpJZ2l3panIw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:17:36 2026 by rpki-client