This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/786A57BFF17561B515F0F4CF93872615C81F0B3034DED55AD9D3C05F9A3CC642/0/323830313a31313a623030303a3a2f34382d3438203d3e20323636363539.roa
File:                     323830313a31313a623030303a3a2f34382d3438203d3e20323636363539.roa (raw, json)
Hash identifier:          QAGmOwpbV+hLdOEOujPg7h3zM0OfSdOWJysMaZDBcd0=
Subject key identifier:   35:0D:53:9D:1C:BF:93:70:30:CF:CE:6B:2C:F1:3E:53:C6:09:E9:EF
Certificate issuer:       /CN=7F5EE3DF741C9158DBF30C1761F6DABDBE6B99EF
Certificate serial:       23E2B645A8AB40E2BC3077994780671DD9356541
Authority key identifier: 7F:5E:E3:DF:74:1C:91:58:DB:F3:0C:17:61:F6:DA:BD:BE:6B:99:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F5EE3DF741C9158DBF30C1761F6DABDBE6B99EF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/786A57BFF17561B515F0F4CF93872615C81F0B3034DED55AD9D3C05F9A3CC642/0/323830313a31313a623030303a3a2f34382d3438203d3e20323636363539.roa
Signing time:             Tue 06 Jan 2026 19:45:52 +0000
ROA not before:           Tue 06 Jan 2026 19:40:52 +0000
ROA not after:            Tue 05 Jan 2027 19:45:52 +0000
asID:                     266659
IP address blocks:        2801:11:b000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/786A57BFF17561B515F0F4CF93872615C81F0B3034DED55AD9D3C05F9A3CC642/0/7F5EE3DF741C9158DBF30C1761F6DABDBE6B99EF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/786A57BFF17561B515F0F4CF93872615C81F0B3034DED55AD9D3C05F9A3CC642/0/7F5EE3DF741C9158DBF30C1761F6DABDBE6B99EF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F5EE3DF741C9158DBF30C1761F6DABDBE6B99EF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:e2:b6:45:a8:ab:40:e2:bc:30:77:99:47:80:67:1d:d9:35:65:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F5EE3DF741C9158DBF30C1761F6DABDBE6B99EF
        Validity
            Not Before: Jan  6 19:40:52 2026 GMT
            Not After : Jan  5 19:45:52 2027 GMT
        Subject: CN=350D539D1CBF937030CFCE6B2CF13E53C609E9EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:39:85:ff:9b:b2:24:bd:07:18:d5:ce:53:0c:
                    2a:cb:05:e6:7f:e7:51:9e:e8:31:bc:d7:9d:b3:5f:
                    27:65:7b:9c:d4:85:d3:ad:0f:97:65:9f:78:2b:2d:
                    c0:70:dc:da:1b:bb:f8:d8:d6:64:69:ce:5b:4b:39:
                    d6:28:fd:02:94:da:ce:3a:b2:6c:fa:00:91:94:05:
                    bd:72:4f:3c:b4:62:b6:b4:8a:47:e9:d0:b2:ae:19:
                    c0:1e:52:21:ee:e1:6f:67:7d:1e:b4:06:12:a7:5c:
                    58:17:23:6a:55:57:06:44:42:a6:66:3b:93:d0:3d:
                    fe:ca:16:67:ea:e3:14:c8:0e:ba:ef:b6:b4:e1:c1:
                    95:82:40:23:34:a4:b5:5f:d8:aa:05:aa:6f:b0:b0:
                    2f:32:c2:52:e7:30:51:f5:a4:ec:9d:a7:06:07:79:
                    31:f1:9d:a2:b4:e0:c4:7f:ff:c7:f0:8e:42:54:73:
                    8a:d2:50:44:99:3a:3e:d1:ff:95:32:d7:57:da:f2:
                    80:e0:cd:6c:9c:a2:40:81:13:5a:f0:f6:d7:e9:df:
                    2f:03:a5:3b:40:64:72:63:47:b1:6c:32:24:9e:ed:
                    ce:44:b8:1e:f7:65:aa:93:4a:b5:cb:26:e8:e9:87:
                    13:ca:87:14:28:c4:a3:81:63:ad:c7:b1:1d:28:e7:
                    93:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:0D:53:9D:1C:BF:93:70:30:CF:CE:6B:2C:F1:3E:53:C6:09:E9:EF
            X509v3 Authority Key Identifier:
                keyid:7F:5E:E3:DF:74:1C:91:58:DB:F3:0C:17:61:F6:DA:BD:BE:6B:99:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/786A57BFF17561B515F0F4CF93872615C81F0B3034DED55AD9D3C05F9A3CC642/0/7F5EE3DF741C9158DBF30C1761F6DABDBE6B99EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F5EE3DF741C9158DBF30C1761F6DABDBE6B99EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/786A57BFF17561B515F0F4CF93872615C81F0B3034DED55AD9D3C05F9A3CC642/0/323830313a31313a623030303a3a2f34382d3438203d3e20323636363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:11:b000::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:0b:ac:37:e6:8b:cd:9f:07:af:87:9b:03:fd:17:8f:34:0c:
         51:a8:12:e5:57:f1:6e:c5:95:4d:92:36:5b:c7:6d:0c:3a:ee:
         1d:c6:d4:c3:0d:7b:d6:f3:8f:0d:e4:f2:40:e1:14:1d:77:d2:
         53:a0:50:e2:f4:f4:e5:5e:55:33:c7:c2:4e:cb:61:5a:1e:59:
         d3:b9:f3:91:43:ee:3f:9a:43:0a:37:6f:97:55:8c:5d:7b:49:
         ad:f9:54:78:cf:f0:9a:03:e9:27:58:32:34:f5:df:14:da:f2:
         cf:b0:1f:43:60:3a:b7:e2:71:4b:67:34:b6:3f:84:90:1f:68:
         cb:74:2c:23:3f:e0:34:f8:54:ce:be:09:7a:18:20:bc:25:5d:
         2a:91:d0:3c:11:81:61:78:1f:9d:f9:0d:26:cf:6e:6a:bc:c9:
         57:a2:0d:70:17:b4:d3:ab:18:f7:49:42:0d:d3:a0:2b:8c:8e:
         ae:77:4a:c9:da:3a:e3:e3:02:76:63:43:44:d0:9b:1b:e9:3b:
         2e:20:f3:89:27:42:f2:26:89:ad:5d:42:78:ef:9d:35:ad:3d:
         b8:1b:10:e3:ce:6c:f4:5d:a2:24:c7:ac:a8:39:23:15:e1:7c:
         7d:41:e5:a0:b5:fc:1f:b0:89:03:97:49:cc:65:60:5b:61:b8:
         a1:c6:84:84
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUI+K2RairQOK8MHeZR4BnHdk1ZUEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Y1RUUzREY3NDFDOTE1OERCRjMwQzE3NjFGNkRBQkRC
RTZCOTlFRjAeFw0yNjAxMDYxOTQwNTJaFw0yNzAxMDUxOTQ1NTJaMDMxMTAvBgNV
BAMTKDM1MEQ1MzlEMUNCRjkzNzAzMENGQ0U2QjJDRjEzRTUzQzYwOUU5RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOOYX/m7IkvQcY1c5TDCrLBeZ/
51Ge6DG8152zXydle5zUhdOtD5dln3grLcBw3Nobu/jY1mRpzltLOdYo/QKU2s46
smz6AJGUBb1yTzy0Yra0ikfp0LKuGcAeUiHu4W9nfR60BhKnXFgXI2pVVwZEQqZm
O5PQPf7KFmfq4xTIDrrvtrThwZWCQCM0pLVf2KoFqm+wsC8ywlLnMFH1pOydpwYH
eTHxnaK04MR//8fwjkJUc4rSUESZOj7R/5Uy11fa8oDgzWycokCBE1rw9tfp3y8D
pTtAZHJjR7FsMiSe7c5EuB73ZaqTSrXLJujphxPKhxQoxKOBY63HsR0o55PDAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUNQ1TnRy/k3Awz85rLPE+U8YJ6e8wHwYDVR0j
BBgwFoAUf17j33QckVjb8wwXYfbavb5rme8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83ODZBNTdCRkYxNzU2MUI1MTVGMEY0Q0Y5Mzg3MjYxNUM4
MUYwQjMwMzRERUQ1NUFEOUQzQzA1RjlBM0NDNjQyLzAvN0Y1RUUzREY3NDFDOTE1
OERCRjMwQzE3NjFGNkRBQkRCRTZCOTlFRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83RjVFRTNERjc0MUM5MTU4REJG
MzBDMTc2MUY2REFCREJFNkI5OUVGLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzg2QTU3QkZGMTc1NjFCNTE1RjBGNENGOTM4NzI2MTVDODFGMEIzMDM0
REVENTVBRDlEM0MwNUY5QTNDQzY0Mi8wLzMyMzgzMDMxM2EzMTMxM2E2MjMwMzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzNjM2MzUzOS5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgBABGwADANBgkqhkiG9w0BAQsFAAOCAQEAjwusN+aLzZ8Hr4ebA/0XjzQMUagS
5VfxbsWVTZI2W8dtDDruHcbUww171vOPDeTyQOEUHXfSU6BQ4vT05V5VM8fCTsth
Wh5Z07nzkUPuP5pDCjdvl1WMXXtJrflUeM/wmgPpJ1gyNPXfFNryz7AfQ2A6t+Jx
S2c0tj+EkB9oy3QsIz/gNPhUzr4JehggvCVdKpHQPBGBYXgfnfkNJs9uarzJV6IN
cBe006sY90lCDdOgK4yOrndKydo64+MCdmNDRNCbG+k7LiDziSdC8iaJrV1CeO+d
Na09uBsQ485s9F2iJMesqDkjFeF8fUHloLX8H7CJA5dJzGVgW2G4ocaEhA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:05:58 2026 by rpki-client