This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/323830303a3135303a363a3a2f34382d3438203d3e203230393430.roa
File:                     323830303a3135303a363a3a2f34382d3438203d3e203230393430.roa (raw, json)
Hash identifier:          xH8q5X1KlGOSbF0NKZV5Wjn5jMg/1Q2ys+VPfdutgNI=
Subject key identifier:   86:5B:19:F8:CD:DA:29:91:99:C8:3F:D3:56:DB:CB:6D:A4:A3:A4:67
Certificate issuer:       /CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
Certificate serial:       04A698C4D84732D7EC17E2C4D4B626C325A4A53C
Authority key identifier: F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/323830303a3135303a363a3a2f34382d3438203d3e203230393430.roa
Signing time:             Tue 06 Jan 2026 19:15:15 +0000
ROA not before:           Tue 06 Jan 2026 19:10:15 +0000
ROA not after:            Tue 05 Jan 2027 19:15:15 +0000
asID:                     20940
IP address blocks:        2800:150:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 11:25:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:a6:98:c4:d8:47:32:d7:ec:17:e2:c4:d4:b6:26:c3:25:a4:a5:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
        Validity
            Not Before: Jan  6 19:10:15 2026 GMT
            Not After : Jan  5 19:15:15 2027 GMT
        Subject: CN=865B19F8CDDA299199C83FD356DBCB6DA4A3A467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2b:8c:3c:d9:11:34:dd:80:63:b8:ee:ec:76:
                    49:d6:1c:cd:3f:1c:f8:9e:40:31:08:69:4f:d8:56:
                    d1:35:8b:65:af:a8:ee:ff:a0:51:8d:4d:98:b5:cd:
                    19:01:dd:9f:3e:d8:20:ea:f7:cf:c0:44:6e:be:e7:
                    95:f1:26:fa:8d:65:bb:37:d3:58:48:ba:3f:65:a6:
                    e9:a9:f9:e9:bb:fb:5b:93:dc:bb:89:df:b1:90:24:
                    3a:c8:39:67:af:ad:e4:29:08:7d:bc:77:92:d5:5d:
                    b5:cb:01:fa:f9:49:a8:e8:85:c3:6b:21:f3:82:e7:
                    88:fd:09:17:df:c2:73:40:1e:a6:fd:0d:0f:38:54:
                    62:30:c3:94:6e:a3:ea:17:d0:c1:02:ac:f9:17:68:
                    9b:b8:c7:dd:4d:6d:7f:05:a0:ee:8f:57:6a:1f:90:
                    a7:ea:84:1f:7a:72:1c:a4:0f:22:fa:f0:16:9b:12:
                    1f:bf:6f:b7:4e:ed:f0:d4:97:0e:c3:64:af:d9:69:
                    db:de:ef:18:38:b7:91:b2:55:71:1f:40:c0:dc:15:
                    6f:ad:4f:ef:ed:dd:f8:8b:d3:cb:fe:b1:59:62:6c:
                    b6:0d:a6:e6:97:d4:b8:8c:97:18:ed:3b:ba:6b:79:
                    24:61:42:5f:38:36:d9:8f:06:c4:94:7e:bd:7b:b8:
                    d2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:5B:19:F8:CD:DA:29:91:99:C8:3F:D3:56:DB:CB:6D:A4:A3:A4:67
            X509v3 Authority Key Identifier:
                keyid:F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/323830303a3135303a363a3a2f34382d3438203d3e203230393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:150:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:d9:35:8a:84:02:de:6d:0d:5d:49:af:8d:f2:ac:07:21:7a:
         19:8f:4c:ca:f8:54:0a:dd:c0:71:66:41:7f:7b:a2:79:3f:18:
         9f:cf:13:8b:49:02:d1:66:a2:a2:28:5a:16:5f:4d:31:d5:92:
         a8:de:6a:d5:a1:f3:7e:08:02:bd:a1:97:99:c6:68:10:cb:94:
         d8:72:fd:a5:5e:5b:7b:28:d7:37:44:84:22:b0:ac:8f:6b:b7:
         fe:3c:4e:07:e6:98:64:b2:9a:48:46:c3:1c:e2:5b:1a:89:ef:
         d5:63:c0:ba:e1:9e:2c:ae:b6:48:6d:dc:3b:23:d9:a5:71:3a:
         2c:2c:e8:dd:93:44:4c:8d:11:fb:6e:86:b8:ff:39:09:6a:4c:
         2d:77:5f:5d:e2:94:bc:aa:1a:e0:9b:32:92:ae:85:a0:89:f2:
         dc:f9:dd:4f:40:82:ee:b2:f9:19:1e:fa:87:4f:35:33:94:d8:
         3a:0d:3b:2d:12:86:be:f4:cc:9f:c1:7d:be:03:b2:6b:67:4f:
         73:0f:22:bb:09:d4:d3:c9:2b:d2:7b:c5:a7:c0:a0:f5:ec:5f:
         bf:b5:4f:f5:f1:3c:91:98:f9:b8:e6:6b:d1:79:81:7e:61:3f:
         36:24:5b:99:1a:82:da:3d:78:85:5d:29:63:04:40:c0:fd:bc:
         db:cd:6c:ea
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIUBKaYxNhHMtfsF+LE1LYmwyWkpTwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjVDODVBN0I3MkJCMzg1RTlDQkQxNDRBNTg1ODMxMkUw
Nzk3MDM2RjAeFw0yNjAxMDYxOTEwMTVaFw0yNzAxMDUxOTE1MTVaMDMxMTAvBgNV
BAMTKDg2NUIxOUY4Q0REQTI5OTE5OUM4M0ZEMzU2REJDQjZEQTRBM0E0NjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuK4w82RE03YBjuO7sdknWHM0/
HPieQDEIaU/YVtE1i2WvqO7/oFGNTZi1zRkB3Z8+2CDq98/ARG6+55XxJvqNZbs3
01hIuj9lpump+em7+1uT3LuJ37GQJDrIOWevreQpCH28d5LVXbXLAfr5SajohcNr
IfOC54j9CRffwnNAHqb9DQ84VGIww5Ruo+oX0MECrPkXaJu4x91NbX8FoO6PV2of
kKfqhB96chykDyL68BabEh+/b7dO7fDUlw7DZK/Zadve7xg4t5GyVXEfQMDcFW+t
T+/t3fiL08v+sVlibLYNpuaX1LiMlxjtO7preSRhQl84NtmPBsSUfr17uNLbAgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQUhlsZ+M3aKZGZyD/TVtvLbaSjpGcwHwYDVR0j
BBgwFoAU9chae3K7OF6cvRRKWFgxLgeXA28wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83OTQ0MTgzNjVEMzM0MDc0QTU0ODgzNkMxMUMwNjdBMzEy
Rjk5Q0E4NEMzMENDMjkzQUZGQTUyNjI1QjM1ODVELzAvRjVDODVBN0I3MkJCMzg1
RTlDQkQxNDRBNTg1ODMxMkUwNzk3MDM2Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNUM4NUE3QjcyQkIzODVFOUNC
RDE0NEE1ODU4MzEyRTA3OTcwMzZGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzk0NDE4MzY1RDMzNDA3NEE1NDg4MzZDMTFDMDY3QTMxMkY5OUNBODRD
MzBDQzI5M0FGRkE1MjYyNUIzNTg1RC8wLzMyMzgzMDMwM2EzMTM1MzAzYTM2M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMDM5MzQzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgAAVAA
BjANBgkqhkiG9w0BAQsFAAOCAQEAXdk1ioQC3m0NXUmvjfKsByF6GY9MyvhUCt3A
cWZBf3uieT8Yn88Ti0kC0WaioihaFl9NMdWSqN5q1aHzfggCvaGXmcZoEMuU2HL9
pV5beyjXN0SEIrCsj2u3/jxOB+aYZLKaSEbDHOJbGonv1WPAuuGeLK62SG3cOyPZ
pXE6LCzo3ZNETI0R+26GuP85CWpMLXdfXeKUvKoa4Jsykq6FoIny3PndT0CC7rL5
GR76h081M5TYOg07LRKGvvTMn8F9vgOya2dPcw8iuwnU08kr0nvFp8Cg9exfv7VP
9fE8kZj5uOZr0XmBfmE/NiRbmRqC2j14hV0pYwRAwP28281s6g==
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:04:46 2026 by rpki-client