This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/323830313a31383a353830303a3a2f34382d3438203d3e203631343638.roa
File:                     323830313a31383a353830303a3a2f34382d3438203d3e203631343638.roa (raw, json)
Hash identifier:          tjNL+LYDnk38haF5VsiHEUF4TO8T6GShRfdB52MRHbw=
Subject key identifier:   7E:CF:F4:1D:6A:DF:81:1B:33:4E:2E:61:AA:58:D6:5B:DC:B6:77:C2
Certificate issuer:       /CN=3249F9F2D0369FF06E9B2651663EFA2423E42AFC
Certificate serial:       33C17E21F89B795F506227AD789C6C8502AB63CA
Authority key identifier: 32:49:F9:F2:D0:36:9F:F0:6E:9B:26:51:66:3E:FA:24:23:E4:2A:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/323830313a31383a353830303a3a2f34382d3438203d3e203631343638.roa
Signing time:             Tue 06 Jan 2026 19:07:48 +0000
ROA not before:           Tue 06 Jan 2026 19:02:48 +0000
ROA not after:            Tue 05 Jan 2027 19:07:48 +0000
asID:                     61468
IP address blocks:        2801:18:5800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 12:56:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:c1:7e:21:f8:9b:79:5f:50:62:27:ad:78:9c:6c:85:02:ab:63:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3249F9F2D0369FF06E9B2651663EFA2423E42AFC
        Validity
            Not Before: Jan  6 19:02:48 2026 GMT
            Not After : Jan  5 19:07:48 2027 GMT
        Subject: CN=7ECFF41D6ADF811B334E2E61AA58D65BDCB677C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:94:e2:f3:eb:85:77:65:bf:f0:85:17:8b:2c:
                    6b:84:30:40:87:32:69:eb:13:85:63:5b:86:39:02:
                    b8:55:e8:f2:a6:0e:13:5d:4d:00:c1:97:e9:85:94:
                    10:1d:a3:ab:0d:b7:d1:84:63:98:3a:af:01:66:f3:
                    12:93:46:f5:44:f7:3c:a8:3a:2f:02:80:5d:03:a1:
                    f4:38:99:bf:6e:ac:00:a7:89:70:4d:59:d5:71:91:
                    de:24:c3:43:28:14:67:ad:16:70:86:7c:7d:e4:55:
                    db:28:af:25:88:ca:31:3f:19:7f:00:4c:af:2a:47:
                    66:7d:ff:dc:a2:06:6c:ad:78:b9:7d:03:4d:be:48:
                    88:7e:55:e6:b3:e5:cc:85:ef:4d:82:a0:4a:53:0e:
                    89:0e:76:0b:61:97:eb:5a:98:4c:0e:c6:df:93:67:
                    fe:1e:61:50:23:ac:7b:b5:29:2b:fd:50:0b:7c:b9:
                    4e:cb:75:f7:e1:0e:1c:8c:c3:30:d1:75:5e:52:5a:
                    4e:02:bf:5b:94:77:76:6a:b0:e5:24:87:4f:e2:c4:
                    41:77:da:ed:84:9c:8d:4f:7d:dc:f4:13:db:c0:8a:
                    d2:f5:37:56:89:33:c2:7d:36:9a:da:36:62:6c:bf:
                    c1:4d:67:eb:b0:e4:bc:d6:d3:8c:e6:16:82:b4:b2:
                    dd:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:CF:F4:1D:6A:DF:81:1B:33:4E:2E:61:AA:58:D6:5B:DC:B6:77:C2
            X509v3 Authority Key Identifier:
                keyid:32:49:F9:F2:D0:36:9F:F0:6E:9B:26:51:66:3E:FA:24:23:E4:2A:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/323830313a31383a353830303a3a2f34382d3438203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:18:5800::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:28:24:20:ee:37:60:29:b9:c1:01:47:7a:c3:55:28:72:66:
         88:3f:42:d3:54:a9:02:eb:92:8a:05:f0:d7:62:eb:e8:8c:3f:
         d1:a2:4f:78:dd:5a:b9:74:ad:2c:f5:a9:69:9b:d9:9b:e1:5c:
         e7:6e:d5:ab:2f:ed:57:15:f9:31:a2:ec:23:9b:0a:ba:a8:b1:
         9c:cb:90:fa:81:96:fc:58:e4:79:34:34:fd:6b:56:36:0e:96:
         6b:27:95:d9:9f:23:ec:c3:84:e9:64:98:35:71:0f:e7:a8:ba:
         d5:27:0b:5c:2b:1a:46:4d:9d:19:fb:2d:1f:6f:90:23:7c:0f:
         85:5b:e3:b3:2c:19:03:05:04:49:8d:2c:37:eb:82:d6:80:5a:
         c3:5b:97:4a:a1:74:8a:95:df:e7:ca:b4:b4:a1:17:5e:49:0c:
         5f:17:87:54:42:6f:9a:90:b3:74:5b:c4:bb:7b:e5:45:54:c7:
         28:e2:b9:c0:9a:8f:be:3f:42:fb:c0:ad:38:0c:cd:c1:b2:41:
         7a:f3:0b:ea:6c:41:54:bd:bc:a5:c5:25:83:44:d5:3e:bf:5e:
         81:be:62:07:df:46:33:3e:72:f6:36:e3:f5:83:db:d5:10:53:
         c7:64:94:70:3c:9e:5a:8c:ed:c8:55:1f:36:40:0c:6a:ca:10:
         ac:46:d7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:19:01 2026 by rpki-client