This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6F4F140D6E4683A9647618C3CAF81FE081E709FF9FCAE46347E7281AA87E32AC/0/323830313a3165363a3a2f34382d3438203d3e20323731383236.roa
File:                     323830313a3165363a3a2f34382d3438203d3e20323731383236.roa (raw, json)
Hash identifier:          ZAi2T/XiOL5RoU/Q7bGRAr7RPnjRrDQPOT0WlX/L7ZE=
Subject key identifier:   55:8C:F7:57:EF:73:66:AB:1F:4E:31:FF:36:01:EA:79:42:99:C6:51
Certificate issuer:       /CN=A4FF2D4F4EDFD21B3C6471DD71ADA60176FC80ED
Certificate serial:       0FAC98A0B45D178D194C96C6292AA91A58D5C6C7
Authority key identifier: A4:FF:2D:4F:4E:DF:D2:1B:3C:64:71:DD:71:AD:A6:01:76:FC:80:ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4FF2D4F4EDFD21B3C6471DD71ADA60176FC80ED.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6F4F140D6E4683A9647618C3CAF81FE081E709FF9FCAE46347E7281AA87E32AC/0/323830313a3165363a3a2f34382d3438203d3e20323731383236.roa
Signing time:             Tue 13 Jan 2026 15:00:15 +0000
ROA not before:           Tue 13 Jan 2026 14:55:15 +0000
ROA not after:            Tue 12 Jan 2027 15:00:15 +0000
asID:                     271826
IP address blocks:        2801:1e6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6F4F140D6E4683A9647618C3CAF81FE081E709FF9FCAE46347E7281AA87E32AC/0/A4FF2D4F4EDFD21B3C6471DD71ADA60176FC80ED.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6F4F140D6E4683A9647618C3CAF81FE081E709FF9FCAE46347E7281AA87E32AC/0/A4FF2D4F4EDFD21B3C6471DD71ADA60176FC80ED.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4FF2D4F4EDFD21B3C6471DD71ADA60176FC80ED.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ac:98:a0:b4:5d:17:8d:19:4c:96:c6:29:2a:a9:1a:58:d5:c6:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4FF2D4F4EDFD21B3C6471DD71ADA60176FC80ED
        Validity
            Not Before: Jan 13 14:55:15 2026 GMT
            Not After : Jan 12 15:00:15 2027 GMT
        Subject: CN=558CF757EF7366AB1F4E31FF3601EA794299C651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ee:9f:ad:b4:ee:12:1e:3e:af:ba:c4:d2:01:
                    cf:37:ef:09:9c:f8:a6:ba:69:79:63:8f:40:c4:14:
                    f0:38:9b:6e:0e:6e:98:d3:e3:69:94:d0:a2:0d:7f:
                    ed:d8:0e:8c:07:c5:b9:ae:a1:a0:d4:29:93:6c:eb:
                    46:71:1b:45:98:a2:85:ea:a7:20:a3:b4:cd:3b:11:
                    4d:25:b6:85:10:d1:86:3d:86:9d:b8:f8:e9:15:ca:
                    e1:52:af:8d:2d:71:92:25:58:2f:3b:4f:7f:da:2f:
                    0d:5d:ee:bb:48:b1:ef:a2:e0:c8:e9:d1:f1:f2:22:
                    2a:bb:7c:10:01:4a:90:e9:c5:97:a4:d9:7e:cb:40:
                    f6:a6:cf:db:ca:5a:6d:f2:02:f0:75:30:a8:06:c2:
                    20:42:57:c1:a8:eb:12:36:2f:d9:57:f7:f1:b9:02:
                    e6:5a:01:b4:f8:e6:92:58:69:79:3a:cf:73:92:90:
                    47:77:1a:18:0b:4d:44:7c:f2:f0:f8:a6:bf:be:fb:
                    81:4f:e0:3c:ab:8a:05:56:e3:0c:7d:0d:4e:5e:3c:
                    e3:cd:1a:57:d9:e1:62:3a:5e:83:d5:7a:78:e6:5d:
                    67:ae:46:ff:1b:4a:32:d7:b0:19:9a:58:c2:a2:19:
                    a2:86:59:04:6a:d4:f8:40:dd:6f:4c:16:0c:05:62:
                    15:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:8C:F7:57:EF:73:66:AB:1F:4E:31:FF:36:01:EA:79:42:99:C6:51
            X509v3 Authority Key Identifier:
                keyid:A4:FF:2D:4F:4E:DF:D2:1B:3C:64:71:DD:71:AD:A6:01:76:FC:80:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6F4F140D6E4683A9647618C3CAF81FE081E709FF9FCAE46347E7281AA87E32AC/0/A4FF2D4F4EDFD21B3C6471DD71ADA60176FC80ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4FF2D4F4EDFD21B3C6471DD71ADA60176FC80ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6F4F140D6E4683A9647618C3CAF81FE081E709FF9FCAE46347E7281AA87E32AC/0/323830313a3165363a3a2f34382d3438203d3e20323731383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e6::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:a4:01:33:67:a9:05:db:02:b1:80:44:b9:a9:a6:5f:84:7b:
         30:6e:1d:01:79:8d:36:37:6a:9a:d7:4c:4c:c0:87:1b:d3:ba:
         11:7a:ad:6d:b8:31:6d:78:4f:b6:db:11:4e:fe:f9:24:ee:42:
         d6:dd:f8:4b:e0:76:81:6c:cc:22:75:9d:5b:67:9f:da:6f:bf:
         40:e6:5a:f7:4f:41:bb:38:26:56:2f:19:0f:ec:c5:1c:a0:15:
         e4:94:37:62:c0:a5:c5:1e:44:c2:b3:13:82:cc:3d:fc:9a:c5:
         2f:4e:ea:c9:83:2c:08:41:40:3c:8e:f2:32:7e:f9:8f:84:3f:
         f8:60:a4:9b:87:a6:66:fe:d4:6b:b3:90:31:fd:d8:00:88:8c:
         07:71:6e:b4:29:8f:a8:72:9c:f9:73:cd:b0:c0:ef:10:4d:86:
         a9:74:da:d8:2e:fb:05:32:ad:ce:00:0f:02:a8:d0:29:fd:2f:
         aa:60:54:c4:41:53:29:47:29:30:bf:6f:a5:b2:9d:12:ca:9f:
         c0:5f:ec:93:66:f1:c9:fb:3c:6e:4c:f2:fd:85:d1:c4:6c:98:
         a8:10:39:6d:cf:d7:32:b7:71:2f:22:fb:5d:95:14:c6:d5:17:
         63:3b:8d:eb:9f:a6:9d:45:e0:68:ff:5d:ed:f1:a2:cc:3a:e2:
         34:a6:37:ce
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUD6yYoLRdF40ZTJbGKSqpGljVxscwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTRGRjJENEY0RURGRDIxQjNDNjQ3MURENzFBREE2MDE3
NkZDODBFRDAeFw0yNjAxMTMxNDU1MTVaFw0yNzAxMTIxNTAwMTVaMDMxMTAvBgNV
BAMTKDU1OENGNzU3RUY3MzY2QUIxRjRFMzFGRjM2MDFFQTc5NDI5OUM2NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ7p+ttO4SHj6vusTSAc837wmc
+Ka6aXljj0DEFPA4m24ObpjT42mU0KINf+3YDowHxbmuoaDUKZNs60ZxG0WYooXq
pyCjtM07EU0ltoUQ0YY9hp24+OkVyuFSr40tcZIlWC87T3/aLw1d7rtIse+i4Mjp
0fHyIiq7fBABSpDpxZek2X7LQPamz9vKWm3yAvB1MKgGwiBCV8Go6xI2L9lX9/G5
AuZaAbT45pJYaXk6z3OSkEd3GhgLTUR88vD4pr+++4FP4DyrigVW4wx9DU5ePOPN
GlfZ4WI6XoPVenjmXWeuRv8bSjLXsBmaWMKiGaKGWQRq1PhA3W9MFgwFYhVBAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUVYz3V+9zZqsfTjH/NgHqeUKZxlEwHwYDVR0j
BBgwFoAUpP8tT07f0hs8ZHHdca2mAXb8gO0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82RjRGMTQwRDZFNDY4M0E5NjQ3NjE4QzNDQUY4MUZFMDgx
RTcwOUZGOUZDQUU0NjM0N0U3MjgxQUE4N0UzMkFDLzAvQTRGRjJENEY0RURGRDIx
QjNDNjQ3MURENzFBREE2MDE3NkZDODBFRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNEZGMkQ0RjRFREZEMjFCM0M2
NDcxREQ3MUFEQTYwMTc2RkM4MEVELmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkY0RjE0MEQ2RTQ2ODNBOTY0NzYxOEMzQ0FGODFGRTA4MUU3MDlGRjlG
Q0FFNDYzNDdFNzI4MUFBODdFMzJBQy8wLzMyMzgzMDMxM2EzMTY1MzYzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMjM3MzEzODMyMzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoAQHmAAAw
DQYJKoZIhvcNAQELBQADggEBAI2kATNnqQXbArGARLmppl+EezBuHQF5jTY3aprX
TEzAhxvTuhF6rW24MW14T7bbEU7++STuQtbd+EvgdoFszCJ1nVtnn9pvv0DmWvdP
Qbs4JlYvGQ/sxRygFeSUN2LApcUeRMKzE4LMPfyaxS9O6smDLAhBQDyO8jJ++Y+E
P/hgpJuHpmb+1GuzkDH92ACIjAdxbrQpj6hynPlzzbDA7xBNhql02tgu+wUyrc4A
DwKo0Cn9L6pgVMRBUylHKTC/b6WynRLKn8Bf7JNm8cn7PG5M8v2F0cRsmKgQOW3P
1zK3cS8i+12VFMbVF2M7jeufpp1F4Gj/Xe3xosw64jSmN84=
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:01:59 2026 by rpki-client