This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/323830313a3136353a3a2f34392d3634203d3e203631343938.roa
File:                     323830313a3136353a3a2f34392d3634203d3e203631343938.roa (raw, json)
Hash identifier:          +4YdrALy+MihiAjwOmVHlW6yvpiamWbuIUy06TZ+hrk=
Subject key identifier:   52:82:F3:56:12:FA:DA:01:04:62:42:AE:DA:A5:DB:9C:78:BC:CA:60
Certificate issuer:       /CN=A709D75E0BD0199002C071D36971A09E6D5E5F48
Certificate serial:       0A25CA51137E4769E04E88CD4DF4B99C89FDF9A1
Authority key identifier: A7:09:D7:5E:0B:D0:19:90:02:C0:71:D3:69:71:A0:9E:6D:5E:5F:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/323830313a3136353a3a2f34392d3634203d3e203631343938.roa
Signing time:             Sat 08 Nov 2025 14:10:00 +0000
ROA not before:           Sat 08 Nov 2025 14:05:00 +0000
ROA not after:            Sat 07 Nov 2026 14:10:00 +0000
asID:                     61498
IP address blocks:        2801:165::/49 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 07:39:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:25:ca:51:13:7e:47:69:e0:4e:88:cd:4d:f4:b9:9c:89:fd:f9:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A709D75E0BD0199002C071D36971A09E6D5E5F48
        Validity
            Not Before: Nov  8 14:05:00 2025 GMT
            Not After : Nov  7 14:10:00 2026 GMT
        Subject: CN=5282F35612FADA01046242AEDAA5DB9C78BCCA60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:dd:46:e8:9b:31:a1:a7:8b:7d:e0:fe:86:a4:
                    b9:89:16:25:ab:88:a6:54:b3:1c:09:e9:8f:87:43:
                    74:30:d6:ee:0a:c3:0f:51:3f:e9:7b:53:19:97:df:
                    8a:7c:eb:45:0f:9c:c8:65:cd:5c:6c:64:45:37:9a:
                    06:bc:e0:34:73:73:4b:fc:a5:a7:f9:f8:5a:5c:da:
                    3d:6c:99:bb:db:40:50:42:f3:db:1b:f3:3e:94:0d:
                    68:63:bf:9a:65:53:65:40:22:95:7d:37:3d:ef:70:
                    b2:7b:a6:89:80:79:22:50:88:bb:34:8a:29:91:a3:
                    32:5e:9f:5e:38:62:a3:77:16:4d:ac:a9:02:10:78:
                    d1:ca:67:5f:dc:d8:3d:ab:03:45:76:b2:b3:58:0e:
                    94:1f:32:a7:ad:79:57:98:5e:1c:44:8d:79:1f:67:
                    fb:48:16:4a:9c:23:93:39:3b:1d:d4:f4:44:68:b7:
                    51:b6:be:10:a2:77:0f:c1:a9:af:0d:d0:64:dc:58:
                    1b:04:f4:9a:d1:d7:1d:02:ae:e2:e2:ea:b3:68:b3:
                    4c:f6:00:42:eb:ef:18:49:15:65:69:0f:7b:5e:53:
                    c0:c0:4a:18:68:02:1b:48:7f:a0:16:18:62:c3:f8:
                    c2:a9:d2:4a:f8:0c:93:47:fc:63:7d:ec:a8:9a:f0:
                    8f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:82:F3:56:12:FA:DA:01:04:62:42:AE:DA:A5:DB:9C:78:BC:CA:60
            X509v3 Authority Key Identifier:
                keyid:A7:09:D7:5E:0B:D0:19:90:02:C0:71:D3:69:71:A0:9E:6D:5E:5F:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/323830313a3136353a3a2f34392d3634203d3e203631343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:165::/49

    Signature Algorithm: sha256WithRSAEncryption
         c2:9d:6b:77:a9:b0:06:00:91:be:0e:c5:82:eb:da:37:96:f1:
         99:6b:2b:2b:e3:a1:a6:d9:36:2b:05:aa:b4:b9:d4:6f:30:04:
         d8:6f:85:2e:94:91:99:c8:ba:7e:f2:f1:fd:88:0c:27:1d:6a:
         16:78:9d:b3:ed:6e:c7:9b:54:b3:58:b9:99:02:09:c1:b7:ae:
         ef:5c:34:62:bd:64:fc:63:c8:bf:d0:e5:ff:9a:85:37:0e:cc:
         8d:ba:e2:4d:9a:ea:df:b6:f2:2c:4d:64:13:99:6f:50:87:42:
         69:61:54:a5:34:04:3d:16:78:b3:4f:b7:01:a8:46:a9:63:78:
         e1:9b:ae:e5:25:63:50:3f:85:8e:a9:2a:b4:16:65:36:e3:4d:
         d0:62:6f:65:20:12:a0:9f:65:24:27:de:97:32:d8:bd:bf:bb:
         a1:9a:98:ef:f6:a1:b0:d8:17:eb:22:ea:7d:c9:8d:9a:f0:d1:
         4c:1c:ab:0f:48:fc:06:1e:55:26:e7:14:af:2d:3b:61:b1:9e:
         52:cf:4c:3d:b3:90:98:6c:9a:77:84:24:22:03:40:c4:73:1e:
         bf:7b:d6:41:af:ad:54:c2:a6:38:c7:52:45:7b:02:80:7c:e8:
         98:07:cc:f6:3f:28:eb:9f:23:8c:ef:93:a0:ca:53:d8:59:46:
         94:7f:e9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 10:04:54 2025 by rpki-client