This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/323830313a3166393a3a2f34382d3438203d3e203134303830.roa
File:                     323830313a3166393a3a2f34382d3438203d3e203134303830.roa (raw, json)
Hash identifier:          auYXIeuzaIuv23Twne6cS9oYO2+saIKb0BzSkSSQL6Q=
Subject key identifier:   F2:7A:B6:1E:82:B0:4C:A5:2E:D1:81:8B:64:42:85:90:6C:BC:85:64
Certificate issuer:       /CN=B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0
Certificate serial:       2CB50E789896E270D3E0F116538F47BDE5AD36E2
Authority key identifier: B9:1E:C1:9B:AC:53:1E:9C:D8:2F:3D:8F:0D:2B:BC:FB:E4:15:0B:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/323830313a3166393a3a2f34382d3438203d3e203134303830.roa
Signing time:             Tue 06 Jan 2026 19:10:59 +0000
ROA not before:           Tue 06 Jan 2026 19:05:59 +0000
ROA not after:            Tue 05 Jan 2027 19:10:59 +0000
asID:                     14080
IP address blocks:        2801:1f9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:b5:0e:78:98:96:e2:70:d3:e0:f1:16:53:8f:47:bd:e5:ad:36:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0
        Validity
            Not Before: Jan  6 19:05:59 2026 GMT
            Not After : Jan  5 19:10:59 2027 GMT
        Subject: CN=F27AB61E82B04CA52ED1818B644285906CBC8564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6f:5e:91:04:aa:da:9d:91:10:d5:aa:04:a3:
                    d3:6d:2d:32:12:32:33:5b:fb:7a:e5:a2:42:45:67:
                    37:a7:00:bd:f3:ec:86:48:a0:e7:37:93:59:d4:40:
                    4e:e0:a6:c2:89:50:06:de:44:f8:42:87:49:db:cf:
                    c5:72:84:ec:61:83:52:de:27:6a:73:6d:ae:5c:80:
                    87:fa:f4:b4:66:d2:e7:ea:74:d0:96:7f:8d:3f:f4:
                    72:df:d6:ea:d2:71:2a:92:b6:61:9f:f8:f5:9c:36:
                    d8:54:f7:ca:23:4a:10:48:8f:24:e9:4a:e4:15:e2:
                    2d:62:af:45:7e:00:a6:18:83:a0:33:43:e8:8c:b2:
                    aa:33:4e:fb:b3:25:62:d6:f9:79:de:a6:a2:a7:29:
                    0d:f7:56:8a:8b:19:a8:7a:a7:db:58:61:b4:b5:b6:
                    84:88:29:7d:52:6a:23:28:06:5d:47:17:aa:09:01:
                    11:f3:9a:60:d1:3a:e0:60:19:66:0a:f2:e0:57:8f:
                    2c:ac:36:e3:ef:72:a6:29:68:78:2c:e3:09:9b:54:
                    ac:50:2d:f6:84:50:09:93:6b:d8:ca:ef:ea:72:16:
                    51:c8:9a:c4:6a:63:4a:f3:51:a5:ce:5b:05:83:8a:
                    48:3d:57:86:7e:9b:25:49:0f:7a:8c:8e:56:ca:94:
                    23:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:7A:B6:1E:82:B0:4C:A5:2E:D1:81:8B:64:42:85:90:6C:BC:85:64
            X509v3 Authority Key Identifier:
                keyid:B9:1E:C1:9B:AC:53:1E:9C:D8:2F:3D:8F:0D:2B:BC:FB:E4:15:0B:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/323830313a3166393a3a2f34382d3438203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f9::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:a1:5d:08:72:29:b1:47:0f:51:e5:6f:01:72:a4:25:72:51:
         5a:b9:f5:d6:81:db:cf:7c:10:7d:20:ec:51:3d:86:a5:bd:51:
         5d:b5:c4:91:e6:8c:07:2e:6f:4d:36:ed:df:68:ab:68:4e:25:
         37:2b:92:d9:ab:6c:e7:d7:e0:45:ee:12:51:71:40:1c:a4:16:
         d7:4e:40:92:77:ce:53:7a:11:3d:49:81:5c:1a:6a:30:d6:3a:
         65:29:c3:5a:31:0a:81:1f:17:0e:6e:2d:d2:09:b7:3d:be:b0:
         d7:12:38:4c:fc:a7:76:3f:e1:d7:fc:10:df:f3:a9:fd:e1:eb:
         b0:25:66:dc:27:bd:b7:4f:e1:2a:cd:ca:9e:e9:9a:ef:78:e5:
         7d:cb:4d:0f:ee:e5:3e:52:b7:3e:8b:61:ef:79:0d:15:b2:69:
         01:17:21:41:f0:1a:f0:52:49:7e:95:b0:c2:b1:36:e6:3a:67:
         66:7a:ef:6a:cb:a2:4b:b2:81:a2:7a:e4:a0:b8:52:08:1c:a4:
         1d:17:13:63:0e:b8:48:d2:7e:4c:fb:a6:ef:7a:a9:c9:5b:54:
         43:0c:cc:e9:ab:d3:6c:fb:65:67:af:25:71:6a:6a:50:e2:4f:
         aa:98:5c:73:c5:b5:8c:f0:0e:2d:06:c5:e9:21:5e:1b:ee:d3:
         e6:d3:6f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:04:06 2026 by rpki-client