This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/45DC43168E681ADAFAC9918BF75A08D95B8555C3A72DF498317CCEEF7753AD66/0/323830313a31343a643030303a3a2f34342d3434203d3e20323634383433.roa
File:                     323830313a31343a643030303a3a2f34342d3434203d3e20323634383433.roa (raw, json)
Hash identifier:          +Nxx9DSp0Cj+Akk+bGKjfZsilOQE1HFh5l6Ra3nOksY=
Subject key identifier:   19:F9:2C:6B:2B:E3:CF:FB:A3:5D:EE:F6:DF:92:40:7C:CD:44:3C:A5
Certificate issuer:       /CN=816EC1F9E069407800183BB75F557CA6DBF5A3AA
Certificate serial:       5C49D6A4042DC0C88F3B68514B3570DF5BCCE318
Authority key identifier: 81:6E:C1:F9:E0:69:40:78:00:18:3B:B7:5F:55:7C:A6:DB:F5:A3:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/816EC1F9E069407800183BB75F557CA6DBF5A3AA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/45DC43168E681ADAFAC9918BF75A08D95B8555C3A72DF498317CCEEF7753AD66/0/323830313a31343a643030303a3a2f34342d3434203d3e20323634383433.roa
Signing time:             Tue 06 Jan 2026 19:03:14 +0000
ROA not before:           Tue 06 Jan 2026 18:58:14 +0000
ROA not after:            Tue 05 Jan 2027 19:03:14 +0000
asID:                     264843
IP address blocks:        2801:14:d000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/45DC43168E681ADAFAC9918BF75A08D95B8555C3A72DF498317CCEEF7753AD66/0/816EC1F9E069407800183BB75F557CA6DBF5A3AA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/45DC43168E681ADAFAC9918BF75A08D95B8555C3A72DF498317CCEEF7753AD66/0/816EC1F9E069407800183BB75F557CA6DBF5A3AA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/816EC1F9E069407800183BB75F557CA6DBF5A3AA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 05:15:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:49:d6:a4:04:2d:c0:c8:8f:3b:68:51:4b:35:70:df:5b:cc:e3:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816EC1F9E069407800183BB75F557CA6DBF5A3AA
        Validity
            Not Before: Jan  6 18:58:14 2026 GMT
            Not After : Jan  5 19:03:14 2027 GMT
        Subject: CN=19F92C6B2BE3CFFBA35DEEF6DF92407CCD443CA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:62:a5:5f:34:68:1e:a7:04:8c:10:6a:cf:8c:
                    1f:7a:50:82:4e:25:c1:2d:4d:cb:de:6c:d2:b8:18:
                    ff:43:10:fd:98:17:92:40:8a:de:45:f0:32:5b:e2:
                    72:51:fd:d5:58:43:d7:a3:65:0d:3e:e6:3d:12:2c:
                    25:88:52:7d:23:be:30:0d:dd:a2:a8:a0:33:8c:29:
                    fe:3b:52:a4:c8:f2:ba:4d:61:98:6b:82:1c:e7:ed:
                    ef:19:87:51:41:4b:1a:cb:ca:20:cb:cc:98:5c:91:
                    da:ef:72:ac:dd:94:33:0b:0f:61:0c:69:17:1e:e7:
                    80:16:ff:18:4c:e9:40:76:f6:03:88:c5:14:f5:41:
                    de:0b:f2:78:bc:ab:3c:3a:1c:95:8d:da:0f:88:4c:
                    92:0d:d5:a6:6b:fc:7e:61:ef:84:64:e1:a0:9a:0a:
                    77:68:51:94:16:92:3d:c2:d0:0a:cc:0f:08:cb:64:
                    5a:a8:ae:28:ee:c4:36:bb:25:d6:78:88:ae:7e:bf:
                    31:6b:29:6c:84:c2:0f:8f:b3:d4:05:bf:9e:fe:cb:
                    30:87:65:ce:c2:ae:f7:b9:9d:0b:94:12:1f:4d:07:
                    1e:6a:04:9c:e0:a8:2c:26:6d:0f:74:b2:70:13:b1:
                    8f:4e:68:11:39:b1:42:97:40:33:35:6e:a3:7b:d4:
                    b4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F9:2C:6B:2B:E3:CF:FB:A3:5D:EE:F6:DF:92:40:7C:CD:44:3C:A5
            X509v3 Authority Key Identifier:
                keyid:81:6E:C1:F9:E0:69:40:78:00:18:3B:B7:5F:55:7C:A6:DB:F5:A3:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/45DC43168E681ADAFAC9918BF75A08D95B8555C3A72DF498317CCEEF7753AD66/0/816EC1F9E069407800183BB75F557CA6DBF5A3AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/816EC1F9E069407800183BB75F557CA6DBF5A3AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/45DC43168E681ADAFAC9918BF75A08D95B8555C3A72DF498317CCEEF7753AD66/0/323830313a31343a643030303a3a2f34342d3434203d3e20323634383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:14:d000::/44

    Signature Algorithm: sha256WithRSAEncryption
         d2:da:16:33:60:62:d8:8e:ad:aa:8e:e0:1c:59:0b:b2:9d:23:
         b4:24:2a:86:fe:5c:5b:76:95:10:f6:4c:1c:fe:30:2b:ed:74:
         04:16:65:74:e8:3d:c0:a8:04:6a:48:1a:2d:76:1d:fb:f9:c8:
         27:a6:c3:dd:70:d6:38:ff:fa:b2:d6:a6:a3:e7:5c:4d:a7:6e:
         a8:5c:b8:f7:0f:f7:00:ab:17:0a:92:56:89:bc:6d:2f:e1:4c:
         91:4b:a5:ee:3b:4e:16:ad:b9:01:18:58:44:8e:47:21:f3:3e:
         bd:05:eb:0f:7e:21:5d:41:2f:67:24:23:78:53:9b:24:be:d4:
         84:34:4e:9f:4c:bb:36:41:88:ea:aa:13:94:b5:ef:54:59:3f:
         2d:26:ea:16:f9:3b:bd:75:d0:2a:d5:ef:3c:00:06:89:02:7d:
         aa:37:6b:0a:23:41:07:df:b9:3c:a4:37:d5:9e:fa:7b:97:a9:
         cd:17:a2:fc:6b:e8:17:1c:0c:9b:d7:a1:20:48:b4:3b:50:69:
         ae:23:f9:bf:e2:ab:6b:7c:ca:b6:e9:86:ff:46:24:ef:5b:44:
         25:3e:35:55:d2:45:99:21:5f:01:83:56:93:5b:1f:48:e1:55:
         d0:24:71:cc:89:cf:df:26:29:bc:83:9c:ae:0d:e7:75:34:75:
         51:11:87:16
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUXEnWpAQtwMiPO2hRSzVw31vM4xgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE2RUMxRjlFMDY5NDA3ODAwMTgzQkI3NUY1NTdDQTZE
QkY1QTNBQTAeFw0yNjAxMDYxODU4MTRaFw0yNzAxMDUxOTAzMTRaMDMxMTAvBgNV
BAMTKDE5RjkyQzZCMkJFM0NGRkJBMzVERUVGNkRGOTI0MDdDQ0Q0NDNDQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3YqVfNGgepwSMEGrPjB96UIJO
JcEtTcvebNK4GP9DEP2YF5JAit5F8DJb4nJR/dVYQ9ejZQ0+5j0SLCWIUn0jvjAN
3aKooDOMKf47UqTI8rpNYZhrghzn7e8Zh1FBSxrLyiDLzJhckdrvcqzdlDMLD2EM
aRce54AW/xhM6UB29gOIxRT1Qd4L8ni8qzw6HJWN2g+ITJIN1aZr/H5h74Rk4aCa
CndoUZQWkj3C0ArMDwjLZFqorijuxDa7JdZ4iK5+vzFrKWyEwg+Ps9QFv57+yzCH
Zc7Crve5nQuUEh9NBx5qBJzgqCwmbQ90snATsY9OaBE5sUKXQDM1bqN71LSpAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUGfksayvjz/ujXe7235JAfM1EPKUwHwYDVR0j
BBgwFoAUgW7B+eBpQHgAGDu3X1V8ptv1o6owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80NURDNDMxNjhFNjgxQURBRkFDOTkxOEJGNzVBMDhEOTVC
ODU1NUMzQTcyREY0OTgzMTdDQ0VFRjc3NTNBRDY2LzAvODE2RUMxRjlFMDY5NDA3
ODAwMTgzQkI3NUY1NTdDQTZEQkY1QTNBQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MTZFQzFGOUUwNjk0MDc4MDAx
ODNCQjc1RjU1N0NBNkRCRjVBM0FBLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDVEQzQzMTY4RTY4MUFEQUZBQzk5MThCRjc1QTA4RDk1Qjg1NTVDM0E3
MkRGNDk4MzE3Q0NFRUY3NzUzQUQ2Ni8wLzMyMzgzMDMxM2EzMTM0M2E2NDMwMzAz
MDNhM2EyZjM0MzQyZDM0MzQyMDNkM2UyMDMyMzYzNDM4MzQzMy5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
BCgBABTQADANBgkqhkiG9w0BAQsFAAOCAQEA0toWM2Bi2I6tqo7gHFkLsp0jtCQq
hv5cW3aVEPZMHP4wK+10BBZldOg9wKgEakgaLXYd+/nIJ6bD3XDWOP/6stamo+dc
TaduqFy49w/3AKsXCpJWibxtL+FMkUul7jtOFq25ARhYRI5HIfM+vQXrD34hXUEv
ZyQjeFObJL7UhDROn0y7NkGI6qoTlLXvVFk/LSbqFvk7vXXQKtXvPAAGiQJ9qjdr
CiNBB9+5PKQ31Z76e5epzRei/GvoFxwMm9ehIEi0O1BpriP5v+Kra3zKtumG/0Yk
71tEJT41VdJFmSFfAYNWk1sfSOFV0CRxzInP3yYpvIOcrg3ndTR1URGHFg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:24:40 2026 by rpki-client