This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6F4F140D6E4683A9647618C3CAF81FE081E709FF9FCAE46347E7281AA87E32AC/0/323830313a3165363a3a2f34342d3434203d3e20323731383236.roa
File:                     323830313a3165363a3a2f34342d3434203d3e20323731383236.roa (raw, json)
Hash identifier:          TsS5jIY6mII+w/6BCzOhN9hQ8zC0irDiaWB+hSDNdLA=
Subject key identifier:   49:C9:2F:A2:BC:AD:64:4E:1A:7C:43:DF:D3:49:0F:6C:7B:F5:19:BD
Certificate issuer:       /CN=A4FF2D4F4EDFD21B3C6471DD71ADA60176FC80ED
Certificate serial:       7370AE785B53F9DB4964E9049FC17A6BCC3E9F5F
Authority key identifier: A4:FF:2D:4F:4E:DF:D2:1B:3C:64:71:DD:71:AD:A6:01:76:FC:80:ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4FF2D4F4EDFD21B3C6471DD71ADA60176FC80ED.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6F4F140D6E4683A9647618C3CAF81FE081E709FF9FCAE46347E7281AA87E32AC/0/323830313a3165363a3a2f34342d3434203d3e20323731383236.roa
Signing time:             Tue 06 Jan 2026 19:07:47 +0000
ROA not before:           Tue 06 Jan 2026 19:02:47 +0000
ROA not after:            Tue 05 Jan 2027 19:07:47 +0000
asID:                     271826
IP address blocks:        2801:1e6::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6F4F140D6E4683A9647618C3CAF81FE081E709FF9FCAE46347E7281AA87E32AC/0/A4FF2D4F4EDFD21B3C6471DD71ADA60176FC80ED.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6F4F140D6E4683A9647618C3CAF81FE081E709FF9FCAE46347E7281AA87E32AC/0/A4FF2D4F4EDFD21B3C6471DD71ADA60176FC80ED.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4FF2D4F4EDFD21B3C6471DD71ADA60176FC80ED.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:70:ae:78:5b:53:f9:db:49:64:e9:04:9f:c1:7a:6b:cc:3e:9f:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4FF2D4F4EDFD21B3C6471DD71ADA60176FC80ED
        Validity
            Not Before: Jan  6 19:02:47 2026 GMT
            Not After : Jan  5 19:07:47 2027 GMT
        Subject: CN=49C92FA2BCAD644E1A7C43DFD3490F6C7BF519BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:51:9d:2b:6f:01:77:19:02:50:1b:16:e6:7f:
                    2c:b5:51:17:0a:7b:a0:b5:ec:49:c7:63:4b:56:ff:
                    3f:63:97:43:40:87:76:f3:b1:e0:00:82:45:13:0d:
                    d8:fe:58:68:f2:8d:33:50:66:4a:56:53:06:3e:48:
                    d1:c7:20:b1:2a:14:d8:b0:6b:74:1a:61:96:51:bf:
                    41:74:d5:d3:a3:d3:5f:5c:c6:3d:7f:59:10:48:74:
                    a6:c9:40:74:e9:dc:82:62:b5:af:04:88:7d:22:51:
                    07:2a:ff:2a:d1:0b:68:c3:40:36:b5:15:40:8b:10:
                    e4:f0:dc:54:9d:13:a4:61:f2:3d:7f:6e:7d:2b:b9:
                    02:a3:df:65:15:98:fa:3a:e0:d8:39:c1:ef:57:65:
                    cb:b9:6b:16:c7:cb:8c:cd:70:0d:c9:c2:2d:c7:73:
                    3c:03:9d:bd:64:c5:69:d9:2a:d4:b5:cb:11:dd:1b:
                    cc:4d:c2:ee:f9:bf:f4:c4:d6:70:ee:41:f6:ab:66:
                    e0:d0:35:66:ee:2a:e4:0c:66:a4:86:02:07:84:59:
                    a1:94:7f:67:41:91:35:0e:e8:29:c4:96:40:1f:51:
                    c6:3f:69:4d:4c:ce:07:ac:dc:2d:c1:fa:80:cc:48:
                    a0:5e:f1:2f:0c:5a:fb:23:ac:c8:5e:5d:3d:36:d5:
                    70:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C9:2F:A2:BC:AD:64:4E:1A:7C:43:DF:D3:49:0F:6C:7B:F5:19:BD
            X509v3 Authority Key Identifier:
                keyid:A4:FF:2D:4F:4E:DF:D2:1B:3C:64:71:DD:71:AD:A6:01:76:FC:80:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6F4F140D6E4683A9647618C3CAF81FE081E709FF9FCAE46347E7281AA87E32AC/0/A4FF2D4F4EDFD21B3C6471DD71ADA60176FC80ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4FF2D4F4EDFD21B3C6471DD71ADA60176FC80ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6F4F140D6E4683A9647618C3CAF81FE081E709FF9FCAE46347E7281AA87E32AC/0/323830313a3165363a3a2f34342d3434203d3e20323731383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e6::/44

    Signature Algorithm: sha256WithRSAEncryption
         23:38:71:b9:48:74:9c:27:c4:55:35:68:3c:ee:26:60:ff:d6:
         7c:86:a0:32:a1:d8:f1:5e:de:8e:9a:84:11:0c:fb:d7:71:d3:
         f8:b3:1f:fa:92:26:4e:69:1a:13:98:a8:74:17:fe:17:35:4d:
         fc:3d:2a:51:23:07:28:b4:37:ae:b4:43:a2:3f:3d:b8:77:4c:
         b5:3b:7e:05:2b:01:c1:38:21:25:20:d1:c6:12:21:76:ad:fd:
         0d:dc:4e:c9:f6:12:ea:18:72:d8:fc:33:6d:8c:c3:f3:91:db:
         ed:28:45:ee:af:0f:db:9c:a9:6e:18:fd:6b:eb:d1:8c:33:bf:
         ae:e1:d2:65:07:f3:68:3d:21:79:14:b0:a4:d7:21:f1:f8:0a:
         32:ef:ac:8f:da:f1:fb:22:21:32:e5:84:8c:cd:8f:13:d7:3e:
         6f:06:31:ff:86:f3:20:9c:7c:61:1b:b2:c0:2d:cb:5e:06:5a:
         2a:02:77:88:57:59:af:25:48:ba:2b:e6:04:ea:24:be:9a:aa:
         17:b7:6d:a1:7e:e6:03:a5:bf:8a:53:7a:93:c4:11:f9:1e:a4:
         54:f7:68:5f:22:be:8d:4c:d8:6d:fa:69:8c:a1:2f:9a:c0:95:
         84:62:6f:2f:85:b8:d6:65:53:30:e3:ec:5e:5f:62:aa:e2:8d:
         97:f7:e9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:17:58 2026 by rpki-client