This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62DF6504FFDA7601362C0BC3611109D6B935B3E5F07043E2659DAC64752DABFF/0/323830313a31353a333830303a3a2f34382d3438203d3e20323732313337.roa
File:                     323830313a31353a333830303a3a2f34382d3438203d3e20323732313337.roa (raw, json)
Hash identifier:          4IX+uVWbiTiMOXNWA0vGUr0FDnNlnoSR93KKCmUcp7U=
Subject key identifier:   CF:9B:FD:50:F9:1D:85:5F:CE:63:2B:5F:1C:26:E0:C2:57:47:33:94
Certificate issuer:       /CN=2C9D167009E76DD836E1D87197E06CE80F77DEC8
Certificate serial:       03E13A32CF67A4CEB8BA7FC07898BC0C8CC441DE
Authority key identifier: 2C:9D:16:70:09:E7:6D:D8:36:E1:D8:71:97:E0:6C:E8:0F:77:DE:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C9D167009E76DD836E1D87197E06CE80F77DEC8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62DF6504FFDA7601362C0BC3611109D6B935B3E5F07043E2659DAC64752DABFF/0/323830313a31353a333830303a3a2f34382d3438203d3e20323732313337.roa
Signing time:             Tue 06 Jan 2026 19:41:17 +0000
ROA not before:           Tue 06 Jan 2026 19:36:17 +0000
ROA not after:            Tue 05 Jan 2027 19:41:17 +0000
asID:                     272137
IP address blocks:        2801:15:3800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62DF6504FFDA7601362C0BC3611109D6B935B3E5F07043E2659DAC64752DABFF/0/2C9D167009E76DD836E1D87197E06CE80F77DEC8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62DF6504FFDA7601362C0BC3611109D6B935B3E5F07043E2659DAC64752DABFF/0/2C9D167009E76DD836E1D87197E06CE80F77DEC8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C9D167009E76DD836E1D87197E06CE80F77DEC8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 10:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:e1:3a:32:cf:67:a4:ce:b8:ba:7f:c0:78:98:bc:0c:8c:c4:41:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C9D167009E76DD836E1D87197E06CE80F77DEC8
        Validity
            Not Before: Jan  6 19:36:17 2026 GMT
            Not After : Jan  5 19:41:17 2027 GMT
        Subject: CN=CF9BFD50F91D855FCE632B5F1C26E0C257473394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a6:7d:bc:34:79:de:f1:a6:36:2a:27:27:5b:
                    10:a0:a6:b1:b7:9e:2d:62:3b:e5:38:c1:f2:28:00:
                    ed:92:5b:e8:cb:b7:dd:fd:26:62:42:42:50:1b:07:
                    6d:57:91:b4:10:54:f2:ce:0e:85:94:f1:5a:83:3c:
                    2b:a9:ae:c8:89:67:f3:f9:3b:03:5e:95:59:9e:45:
                    96:0a:09:fc:b7:a2:90:5a:04:e7:9c:1c:62:bc:76:
                    c3:ac:cc:f6:ab:a4:f8:a4:90:82:58:87:c8:f8:dc:
                    37:ef:55:9e:1e:42:c0:ee:f3:c7:83:62:53:03:d8:
                    d0:41:4c:dd:3f:f4:ae:11:90:a4:3b:b6:2b:a4:29:
                    af:e1:85:f5:7c:c4:98:c4:d7:d7:7d:23:c5:d6:a7:
                    ef:3c:2b:5a:ab:ef:d5:ab:f6:18:ac:59:64:2d:3d:
                    4c:6a:de:28:a9:ba:5b:7a:50:5c:9d:1e:37:81:bc:
                    b4:fa:05:96:44:08:2c:22:b7:8c:b9:59:7a:7a:a8:
                    3c:36:85:b6:5a:00:74:89:e9:a0:c6:04:f7:c3:3c:
                    ee:49:3e:8c:fc:e0:b6:f3:ce:6f:4d:7b:1a:ce:19:
                    15:0c:8b:59:46:42:b3:a6:c5:24:1b:2b:e7:ea:0c:
                    18:24:df:b7:a8:ae:71:1b:4e:1a:dd:bb:14:28:be:
                    61:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:9B:FD:50:F9:1D:85:5F:CE:63:2B:5F:1C:26:E0:C2:57:47:33:94
            X509v3 Authority Key Identifier:
                keyid:2C:9D:16:70:09:E7:6D:D8:36:E1:D8:71:97:E0:6C:E8:0F:77:DE:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62DF6504FFDA7601362C0BC3611109D6B935B3E5F07043E2659DAC64752DABFF/0/2C9D167009E76DD836E1D87197E06CE80F77DEC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C9D167009E76DD836E1D87197E06CE80F77DEC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62DF6504FFDA7601362C0BC3611109D6B935B3E5F07043E2659DAC64752DABFF/0/323830313a31353a333830303a3a2f34382d3438203d3e20323732313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:15:3800::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:c4:cc:c4:65:78:e9:fa:50:2a:54:19:b9:96:8d:01:1a:7c:
         e7:ed:32:16:2f:b7:fc:48:96:cb:49:96:fc:15:21:f3:9c:ea:
         3e:b4:30:67:aa:a2:e8:f5:87:a8:f1:3d:a8:01:7d:75:cb:28:
         75:74:bb:49:c8:3d:a5:cc:a3:b8:4c:89:38:b2:da:b4:74:35:
         0e:bb:7b:9b:3d:e7:6f:1a:e4:45:c9:30:8e:87:2e:6b:26:9d:
         9e:b4:4b:7d:22:f2:4e:73:36:55:41:b5:68:19:91:21:71:bb:
         0b:8c:b3:de:b5:69:4a:6e:a5:12:2e:da:8b:aa:bd:8f:fe:6b:
         b6:42:92:31:bf:55:31:32:79:30:d8:f8:9b:be:9c:f1:ff:97:
         95:4e:99:d8:96:c4:94:32:e0:88:98:73:54:f2:cd:7f:49:73:
         15:3c:b0:19:37:01:e8:a8:fc:e2:95:fb:f4:b4:51:9f:ed:a5:
         f4:50:a9:55:4a:98:ff:5d:93:16:ca:51:05:8e:cf:09:bd:30:
         55:bf:20:76:79:b2:dc:b9:c6:eb:73:84:b0:4f:44:24:db:3b:
         44:49:54:b0:3d:8a:c1:ec:bc:6b:1f:9f:41:22:90:5f:cb:29:
         a2:48:f3:e5:d3:aa:85:e3:c7:a3:52:4b:00:f0:17:6e:63:d8:
         7f:27:1d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:05:18 2026 by rpki-client