This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a343a3a2f34382d3438203d3e20323733303431.roa
File:                     323830313a3161353a343a3a2f34382d3438203d3e20323733303431.roa (raw, json)
Hash identifier:          BTfEGiqUAHhWLZzF4u4LCWwAdQOL4X3OfCL8Hh2ObW0=
Subject key identifier:   69:36:35:43:B1:52:C2:E6:41:61:72:DD:76:8B:7B:87:BF:95:E6:4D
Certificate issuer:       /CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
Certificate serial:       179A2C8961E1ECA97AEB699D1AA5F1A6956E13D9
Authority key identifier: D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a343a3a2f34382d3438203d3e20323733303431.roa
Signing time:             Tue 06 Jan 2026 19:47:42 +0000
ROA not before:           Tue 06 Jan 2026 19:42:42 +0000
ROA not after:            Tue 05 Jan 2027 19:47:42 +0000
asID:                     273041
IP address blocks:        2801:1a5:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:9a:2c:89:61:e1:ec:a9:7a:eb:69:9d:1a:a5:f1:a6:95:6e:13:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
        Validity
            Not Before: Jan  6 19:42:42 2026 GMT
            Not After : Jan  5 19:47:42 2027 GMT
        Subject: CN=69363543B152C2E6416172DD768B7B87BF95E64D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:db:9a:e2:2f:a6:74:12:79:18:54:d8:49:89:
                    d0:c7:85:ca:dd:fb:ae:5f:84:b8:5b:ff:65:e6:b9:
                    1d:37:f6:13:f0:c3:a4:98:a8:f9:17:8e:86:f3:06:
                    e8:ea:37:8e:c4:10:40:e8:ea:e0:a7:28:cf:9f:a1:
                    44:8b:1b:67:a9:cc:9d:63:c0:09:ce:1c:e1:6d:d9:
                    e4:a0:41:b6:dd:1b:6d:ac:a8:c3:fc:eb:ee:9b:44:
                    20:c7:ec:77:30:9d:c2:5f:80:3e:c8:d5:e3:11:b6:
                    8b:c3:1c:d2:f8:26:3f:a5:1d:fc:57:4f:87:c1:42:
                    88:f6:ce:2e:89:7a:b6:97:d1:d8:23:29:ec:9a:88:
                    61:20:82:8c:88:36:25:46:5f:3a:32:67:84:1d:34:
                    98:c9:ad:b5:49:95:ac:54:4f:53:d5:c3:3d:e2:90:
                    a9:d2:cc:8b:1c:dc:d9:7d:4c:61:44:f5:a2:fe:ed:
                    7a:07:48:57:01:0a:80:48:70:c8:cb:f2:47:8f:d3:
                    35:81:10:f9:3e:ea:8c:59:a9:a7:aa:01:6f:d5:2a:
                    d8:19:04:82:2f:84:5f:c2:d3:68:2f:a2:b3:06:11:
                    0a:65:e9:62:3c:f8:bb:6e:c4:66:29:64:53:6c:1f:
                    f9:91:95:02:07:ea:49:cf:ec:bb:b2:b3:ab:63:e7:
                    ea:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:36:35:43:B1:52:C2:E6:41:61:72:DD:76:8B:7B:87:BF:95:E6:4D
            X509v3 Authority Key Identifier:
                keyid:D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a343a3a2f34382d3438203d3e20323733303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a5:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:95:9d:fd:a2:ca:8e:bf:5c:6b:4c:51:c0:1e:df:d4:5e:70:
         77:0e:e7:cd:75:94:98:04:11:52:d2:fa:c4:71:af:d7:51:f4:
         77:6d:95:44:88:33:05:bd:11:e7:12:c2:73:38:65:26:49:98:
         92:e3:4f:49:3b:ea:1f:fb:b0:75:75:62:7b:53:31:92:37:a9:
         f4:8d:1b:0b:ad:33:bc:21:c9:67:ac:38:43:3f:ba:60:f7:b4:
         ce:a9:eb:fd:ab:1f:5d:ae:43:6d:17:8a:2a:e1:58:0f:3d:db:
         06:d2:2b:88:20:bb:91:7e:11:20:be:06:bf:05:3c:1b:d3:9a:
         01:c6:e5:d8:ee:b0:80:5f:ba:52:4c:61:df:a9:e5:80:2f:2f:
         3d:a2:7e:d1:8b:49:e4:fe:dc:65:20:d4:f8:57:eb:10:18:56:
         d1:9b:3e:71:a3:f2:78:67:fa:46:bb:9b:45:2c:4b:da:dc:63:
         36:5c:ed:23:0c:f3:49:cb:e0:b8:12:e0:04:87:df:e2:4e:c4:
         6b:5e:71:10:68:0d:41:6c:e4:fc:f2:19:c6:93:e9:ac:74:60:
         ca:16:a6:db:f5:37:1b:44:cf:14:d4:82:72:09:e3:88:04:30:
         a9:86:40:ab:0e:a0:4e:8e:25:81:f8:b1:92:27:98:8f:1e:91:
         bd:47:33:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:58:06 2026 by rpki-client