This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/323830313a31363a393830303a3a2f34382d3438203d3e203237393437.roa
File:                     323830313a31363a393830303a3a2f34382d3438203d3e203237393437.roa (raw, json)
Hash identifier:          QTPMVPCZi6AkTV3WOJskUAYAoIoTDI03PQ8EbhcWE1w=
Subject key identifier:   56:F4:9B:E3:98:63:D1:39:9D:EE:DE:9C:63:04:13:4C:40:13:31:B7
Certificate issuer:       /CN=FA42334FD8ECA11B3B3779140D2E9FB302E2E545
Certificate serial:       2FC2B178E9235195889B715E4EDF171D56EB1CE7
Authority key identifier: FA:42:33:4F:D8:EC:A1:1B:3B:37:79:14:0D:2E:9F:B3:02:E2:E5:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/323830313a31363a393830303a3a2f34382d3438203d3e203237393437.roa
Signing time:             Tue 06 Jan 2026 19:45:47 +0000
ROA not before:           Tue 06 Jan 2026 19:40:47 +0000
ROA not after:            Tue 05 Jan 2027 19:45:47 +0000
asID:                     27947
IP address blocks:        2801:16:9800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c2:b1:78:e9:23:51:95:88:9b:71:5e:4e:df:17:1d:56:eb:1c:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA42334FD8ECA11B3B3779140D2E9FB302E2E545
        Validity
            Not Before: Jan  6 19:40:47 2026 GMT
            Not After : Jan  5 19:45:47 2027 GMT
        Subject: CN=56F49BE39863D1399DEEDE9C6304134C401331B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:53:c2:26:29:67:33:29:dd:d7:39:35:72:23:
                    e3:8e:5c:06:34:52:a4:37:cb:24:5d:fc:4c:31:ab:
                    0a:aa:c5:96:b1:be:64:1e:95:14:96:cf:b4:3d:8c:
                    23:8d:2d:b6:38:82:42:ac:a0:94:6b:6b:96:be:bd:
                    67:4b:16:3c:57:33:4a:ac:6a:25:e5:4a:e0:41:02:
                    0a:b8:5c:83:11:eb:b2:78:cc:a1:e3:4d:d2:63:eb:
                    4f:3e:e0:ae:6a:9b:71:91:50:15:10:03:59:a3:94:
                    db:77:b7:17:ca:88:25:e8:bf:6e:34:28:51:f6:f5:
                    ad:dc:cb:e1:7e:57:aa:02:b4:4f:21:8d:39:35:55:
                    d8:67:5c:da:13:09:51:c4:47:a3:ba:87:b6:ed:9d:
                    4f:c7:43:2f:0f:d8:e7:4e:2d:cf:42:80:45:66:92:
                    b8:8e:da:1f:d9:fa:5b:78:e7:6d:6e:14:b0:68:60:
                    f0:e5:8a:ec:d2:00:82:55:08:63:20:31:31:37:f9:
                    87:41:2e:c8:b0:2a:16:e2:43:93:b7:f6:28:25:b6:
                    7c:8c:df:14:ef:f5:8d:fa:d9:c7:3c:14:e0:4b:03:
                    fd:24:a1:4f:c5:d9:24:e3:6f:18:de:c7:e7:7c:a2:
                    43:48:ce:81:42:11:b2:77:bb:2f:8a:a5:45:a0:6b:
                    87:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F4:9B:E3:98:63:D1:39:9D:EE:DE:9C:63:04:13:4C:40:13:31:B7
            X509v3 Authority Key Identifier:
                keyid:FA:42:33:4F:D8:EC:A1:1B:3B:37:79:14:0D:2E:9F:B3:02:E2:E5:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/323830313a31363a393830303a3a2f34382d3438203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:16:9800::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:fa:3f:ef:17:08:d8:2e:62:14:d9:52:32:2c:9f:c4:ca:b1:
         6d:3d:19:1a:28:ae:ad:a3:7f:78:67:03:eb:26:4e:e0:78:18:
         ef:ec:5b:65:97:0a:66:2e:2d:d5:f5:17:e2:c7:43:70:6f:2c:
         8d:9d:25:17:4a:77:4a:23:e1:ea:8f:f7:7c:86:35:3e:28:f6:
         96:40:75:bb:b5:9b:55:0e:bf:9a:d4:13:35:db:23:f6:ad:cb:
         84:28:df:a1:d6:4d:ff:b6:26:aa:3b:98:65:84:4c:99:48:13:
         88:12:a4:28:4f:75:b2:d8:db:23:8a:de:1a:f7:5b:67:c2:fc:
         40:eb:56:02:bc:a3:d0:e6:f4:7c:c4:b8:21:d9:25:d8:b5:9c:
         e0:7b:26:79:5b:c5:ab:49:c2:41:12:cd:2c:d1:81:40:fc:5b:
         b5:ad:46:4f:41:c0:f3:24:28:7f:96:79:16:1c:0a:e2:b6:e3:
         e9:40:5a:3a:97:df:db:3c:4c:22:06:84:32:40:c5:73:20:8d:
         2d:8f:bf:2d:96:7c:7e:a7:e5:d7:52:c1:72:61:09:74:28:4c:
         a1:f4:c8:8c:ee:b8:7b:21:27:77:2c:b2:fe:c4:68:c0:67:da:
         e5:19:20:64:c4:6f:27:99:47:48:04:a7:6b:54:48:0f:07:82:
         42:bd:d0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:34:51 2026 by rpki-client