This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/323830313a31383a353830303a3a2f34382d3438203d3e20323732313430.roa
File:                     323830313a31383a353830303a3a2f34382d3438203d3e20323732313430.roa (raw, json)
Hash identifier:          lf3oVJ9LlNdtglrx6z7KxASTJCwokXvnNhC1VS59eN8=
Subject key identifier:   63:3C:4F:F2:E3:B4:78:84:73:98:5D:DC:27:D9:4D:2B:AD:02:E9:6A
Certificate issuer:       /CN=3249F9F2D0369FF06E9B2651663EFA2423E42AFC
Certificate serial:       61806E218A54A4BF64448677FEDB5A8B734FF011
Authority key identifier: 32:49:F9:F2:D0:36:9F:F0:6E:9B:26:51:66:3E:FA:24:23:E4:2A:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/323830313a31383a353830303a3a2f34382d3438203d3e20323732313430.roa
Signing time:             Tue 06 Jan 2026 19:07:48 +0000
ROA not before:           Tue 06 Jan 2026 19:02:48 +0000
ROA not after:            Tue 05 Jan 2027 19:07:48 +0000
asID:                     272140
IP address blocks:        2801:18:5800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 12:56:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:80:6e:21:8a:54:a4:bf:64:44:86:77:fe:db:5a:8b:73:4f:f0:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3249F9F2D0369FF06E9B2651663EFA2423E42AFC
        Validity
            Not Before: Jan  6 19:02:48 2026 GMT
            Not After : Jan  5 19:07:48 2027 GMT
        Subject: CN=633C4FF2E3B4788473985DDC27D94D2BAD02E96A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:35:38:7e:bd:a8:0d:14:b3:5b:e0:a1:8e:b3:
                    a4:1b:fe:b1:1e:d0:8e:e4:ca:c8:c2:71:b3:5c:4a:
                    e8:4b:a2:2b:2a:ac:26:4d:f6:88:bb:5d:ca:5c:bd:
                    38:20:39:7c:79:6d:c9:03:18:f4:05:01:63:2a:3d:
                    80:cf:42:21:26:df:50:c4:62:9c:50:48:2b:48:c7:
                    78:a2:22:75:92:32:b9:aa:27:d2:9a:f5:b5:4b:b4:
                    4c:ff:75:c3:7a:68:75:77:b5:1f:2c:7f:ed:42:ca:
                    93:fc:d2:93:01:1c:6e:1c:f8:a3:b4:e9:67:ca:c4:
                    8b:0c:15:25:0a:39:13:20:99:c4:f9:47:98:3c:ae:
                    61:ca:7c:9b:94:8d:66:d2:31:7e:71:e1:09:98:ac:
                    b5:11:86:02:f6:34:d5:7a:da:bd:6d:cf:b9:db:24:
                    36:48:53:9a:ee:2e:88:c5:78:da:ba:b9:1c:c4:3f:
                    80:89:f0:b7:cf:6b:1f:09:54:f3:d3:e6:13:9f:df:
                    79:ca:61:da:15:a3:fb:cb:37:f2:77:81:23:30:5a:
                    28:e6:88:69:f7:6c:2e:91:c4:b3:7e:61:1a:4d:d8:
                    f9:80:5d:36:2b:16:57:c5:72:30:22:df:9b:67:a5:
                    7b:41:a1:be:bb:03:c6:07:a6:f9:aa:c4:4c:6c:c4:
                    6d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:3C:4F:F2:E3:B4:78:84:73:98:5D:DC:27:D9:4D:2B:AD:02:E9:6A
            X509v3 Authority Key Identifier:
                keyid:32:49:F9:F2:D0:36:9F:F0:6E:9B:26:51:66:3E:FA:24:23:E4:2A:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/323830313a31383a353830303a3a2f34382d3438203d3e20323732313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:18:5800::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:89:7d:c8:61:68:1b:ea:38:34:ef:9d:f1:a4:dc:19:e9:58:
         56:e5:d0:bb:27:25:e6:d2:54:d8:db:ef:23:ab:84:11:17:04:
         74:6f:e9:26:40:79:56:de:5e:d9:e9:45:a0:d1:65:e9:9e:99:
         37:04:7f:16:8f:e9:c8:c2:34:05:71:90:cf:42:75:01:31:3c:
         2a:16:c0:67:b4:dc:89:56:6a:94:e3:69:6c:f0:ed:d9:46:b9:
         53:e3:71:10:4c:58:39:31:da:d3:ac:7d:8b:7a:d7:4f:39:07:
         b7:c2:2c:60:94:5a:fb:db:ca:b9:dc:1c:56:1a:ad:c2:68:5e:
         d2:88:3a:dd:47:98:31:61:eb:6b:af:dd:0c:aa:46:87:c3:c1:
         fe:4a:25:26:7a:76:84:c4:80:81:6c:98:ea:1c:c0:e2:4f:05:
         0c:6e:05:90:9e:75:8b:c3:e1:f7:1f:4f:c5:87:50:c5:30:f7:
         89:7c:ce:07:8b:59:f2:34:6e:2f:63:96:70:5e:b9:a6:5c:a6:
         d0:61:06:ab:96:13:b4:67:3f:8c:37:d6:68:2d:15:70:ed:3d:
         1a:63:e5:1b:1e:34:26:80:25:c2:62:d7:42:be:c2:b3:fe:87:
         88:a2:f9:f2:da:9f:92:29:88:33:5d:c8:cc:16:0c:f7:a4:fa:
         ee:28:69:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:40 2026 by rpki-client