This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a3a2f34342d3434203d3e20323733303431.roa
File:                     323830313a3161353a3a2f34342d3434203d3e20323733303431.roa (raw, json)
Hash identifier:          cJETtyWPOQRAW5b9idYGVwXAvsBMV+bGfwqXGJ7kqbo=
Subject key identifier:   36:3D:51:05:65:2B:0E:5C:C2:28:5B:DA:BB:42:67:68:B2:3B:A8:02
Certificate issuer:       /CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
Certificate serial:       0B6A735421C61D79A6C636AFDC029E592D83729C
Authority key identifier: D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a3a2f34342d3434203d3e20323733303431.roa
Signing time:             Tue 06 Jan 2026 19:47:42 +0000
ROA not before:           Tue 06 Jan 2026 19:42:42 +0000
ROA not after:            Tue 05 Jan 2027 19:47:42 +0000
asID:                     273041
IP address blocks:        2801:1a5::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:6a:73:54:21:c6:1d:79:a6:c6:36:af:dc:02:9e:59:2d:83:72:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
        Validity
            Not Before: Jan  6 19:42:42 2026 GMT
            Not After : Jan  5 19:47:42 2027 GMT
        Subject: CN=363D5105652B0E5CC2285BDABB426768B23BA802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:01:c5:bb:e6:80:05:f4:40:73:16:25:aa:79:
                    04:0c:fc:25:f7:c0:6e:33:7d:a4:38:73:b9:c8:4f:
                    8f:05:0c:37:a2:e0:35:81:d9:ee:e1:14:69:cc:c5:
                    08:dc:49:31:20:39:81:7c:e5:64:09:95:4d:8a:c5:
                    6b:9d:e7:a2:69:8b:bb:71:1c:c3:5c:ea:27:e5:29:
                    9f:c6:12:45:53:ae:16:34:0b:3c:93:8e:77:86:b2:
                    29:84:c5:03:29:25:4a:41:f3:f4:32:33:80:1e:f9:
                    38:4f:f5:8b:d3:b8:3c:97:e8:6a:5c:11:ec:03:d6:
                    69:0d:a4:5f:6f:c7:eb:dd:e3:a2:a4:b3:45:80:a2:
                    02:02:cc:4e:6d:70:5a:a4:84:75:de:32:f4:41:75:
                    03:89:e2:85:bc:d7:04:b7:a8:be:33:8e:35:3a:c2:
                    c3:d9:41:4a:82:d0:4b:bb:8c:ee:74:90:52:f1:08:
                    f7:60:64:ac:ed:30:ad:54:1c:9b:12:65:5b:5f:f1:
                    df:db:68:9f:4e:9b:63:be:7c:45:ab:e7:07:6f:8d:
                    02:e1:9e:e9:d9:98:81:da:0a:37:8d:65:6c:8c:af:
                    5c:73:42:b2:fa:e7:f7:d4:03:65:27:48:32:6b:b7:
                    01:bb:72:fe:f9:2d:4c:70:b3:bd:d7:0b:25:ec:0c:
                    db:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:3D:51:05:65:2B:0E:5C:C2:28:5B:DA:BB:42:67:68:B2:3B:A8:02
            X509v3 Authority Key Identifier:
                keyid:D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a3a2f34342d3434203d3e20323733303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a5::/44

    Signature Algorithm: sha256WithRSAEncryption
         2d:eb:3b:1a:09:91:8b:7e:90:4a:d5:f7:1f:49:b5:bd:7e:c0:
         dd:9f:7d:56:da:ec:c4:d0:0c:05:0a:29:1c:3b:28:71:21:db:
         04:09:4b:42:95:ce:2f:13:79:4e:62:13:67:ab:e9:6e:73:e4:
         96:50:59:f1:7f:f2:4a:b2:50:d8:d1:b1:01:ed:b8:31:d0:25:
         d8:f7:c9:47:41:49:4e:ad:b9:ef:4c:56:bf:81:fa:1b:d7:db:
         d0:b5:f4:41:7a:f9:bc:56:8e:13:56:0b:b0:22:91:8c:39:e0:
         40:38:98:7e:5b:da:d4:d4:ca:50:6a:7c:51:97:58:1a:9f:0a:
         a1:a3:10:d5:11:52:d9:ee:69:dc:f1:29:73:41:71:a4:08:ac:
         e9:6b:74:85:98:1c:07:5f:fc:f1:10:b5:57:9b:13:4b:b6:86:
         d6:10:53:be:59:ff:b4:ad:88:eb:03:3d:74:85:ef:35:b6:d0:
         db:83:72:5f:1b:0a:55:5c:10:15:ad:56:02:d4:ca:72:03:c4:
         c4:1e:c1:f6:71:b9:8c:02:0e:a2:17:27:5c:27:1d:f7:2b:76:
         a7:1b:7d:0c:8d:28:b4:95:c3:a2:65:e9:24:b9:f9:95:c5:7b:
         6f:54:94:19:47:06:f1:9f:a1:84:b2:52:e3:86:06:4a:7e:d8:
         cf:0d:98:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:25:58 2026 by rpki-client