This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/323830303a3266303a3a2f33322d3438203d3e203237363638.roa
File:                     323830303a3266303a3a2f33322d3438203d3e203237363638.roa (raw, json)
Hash identifier:          6740gLhQMTG5oelVEgFRWQrk3YFJ+FM9tCXbphUtkto=
Subject key identifier:   FC:DB:E2:0F:49:91:46:B6:59:AB:4E:16:0D:C1:30:9C:0C:9F:BA:5D
Certificate issuer:       /CN=61672627CE7E727EFF60A56D0A466F15315B7FD0
Certificate serial:       6B449BE68B2643272AB6486610713992F2C5C7FA
Authority key identifier: 61:67:26:27:CE:7E:72:7E:FF:60:A5:6D:0A:46:6F:15:31:5B:7F:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/323830303a3266303a3a2f33322d3438203d3e203237363638.roa
Signing time:             Tue 06 Jan 2026 20:49:24 +0000
ROA not before:           Tue 06 Jan 2026 20:44:24 +0000
ROA not after:            Tue 05 Jan 2027 20:49:24 +0000
asID:                     27668
IP address blocks:        2800:2f0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 09:36:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:44:9b:e6:8b:26:43:27:2a:b6:48:66:10:71:39:92:f2:c5:c7:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61672627CE7E727EFF60A56D0A466F15315B7FD0
        Validity
            Not Before: Jan  6 20:44:24 2026 GMT
            Not After : Jan  5 20:49:24 2027 GMT
        Subject: CN=FCDBE20F499146B659AB4E160DC1309C0C9FBA5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cb:55:3c:03:19:8b:2c:0d:db:34:e0:45:46:
                    4d:a2:0d:b1:ac:2b:c2:fd:6d:13:05:51:52:c3:72:
                    41:9b:99:a1:19:a7:76:36:5d:bb:2e:3b:de:d5:88:
                    4f:39:11:3b:49:c4:ef:ea:19:20:48:96:3a:86:84:
                    a3:a0:a7:d9:6e:5e:fd:bb:f0:39:70:f7:a7:4f:22:
                    fd:be:ac:ab:34:6e:c1:1e:ac:f3:a0:92:c9:f2:b3:
                    f9:67:61:2f:cd:34:83:0b:1a:57:e4:eb:c9:76:6c:
                    3d:b3:aa:49:74:40:54:d5:16:f6:eb:91:e2:55:24:
                    5d:71:a4:d8:b7:41:65:b8:49:f4:e2:13:4d:60:10:
                    d2:e4:61:a3:92:4b:30:62:a0:12:6e:3c:96:0d:85:
                    50:3b:04:93:72:d3:ea:25:22:13:20:64:cc:ef:a0:
                    6a:ed:fe:92:7d:b1:7b:34:54:68:89:90:3c:a1:ce:
                    8b:fa:de:d9:28:e0:78:2b:e9:75:df:31:57:f9:e7:
                    47:2b:96:4a:f5:9a:c6:27:3b:ff:b5:26:6f:b8:5b:
                    80:a5:f0:b0:c9:b7:e3:46:f5:bc:b0:b6:eb:69:1b:
                    ba:9f:62:b4:16:52:dd:06:65:ab:71:16:ef:69:0b:
                    f0:7c:d8:58:18:ff:e7:f1:12:23:b2:53:50:82:1a:
                    ca:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:DB:E2:0F:49:91:46:B6:59:AB:4E:16:0D:C1:30:9C:0C:9F:BA:5D
            X509v3 Authority Key Identifier:
                keyid:61:67:26:27:CE:7E:72:7E:FF:60:A5:6D:0A:46:6F:15:31:5B:7F:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/323830303a3266303a3a2f33322d3438203d3e203237363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:2f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:86:99:67:92:83:4d:e2:97:14:83:8d:65:ce:1b:66:e5:b2:
         b1:96:fd:fb:01:e2:12:aa:2c:86:ec:29:a6:7c:c8:0c:5a:cc:
         b2:06:b3:e2:fa:25:75:a6:f1:9a:a9:3e:4a:81:00:b3:25:7e:
         c0:9a:a4:93:4f:04:7c:d5:85:61:a2:72:31:dd:4b:f6:07:70:
         c3:1c:31:5d:af:34:07:e0:76:b6:a9:a3:34:10:35:03:98:fe:
         e1:62:f6:6e:a2:cb:24:6b:aa:92:30:b8:d6:83:cd:0d:b1:2b:
         c3:be:ec:78:a1:1e:03:d7:04:d8:1f:07:62:b4:40:b3:f3:23:
         dd:08:6e:5a:2b:ff:f2:4f:18:7a:a9:04:6a:e0:9a:9d:a3:5d:
         3e:00:7c:76:f8:6d:5e:ff:eb:23:ee:bf:3a:fa:06:c4:ef:49:
         02:1b:4b:5f:47:17:58:f4:a4:79:2d:c4:43:f5:44:6f:31:64:
         0a:1b:37:e7:c1:2d:21:b0:28:d7:cc:dd:d0:e8:eb:8b:50:75:
         25:49:b4:73:b5:5b:76:f6:fe:54:5a:e6:56:9d:5a:50:28:0b:
         59:a6:08:fa:ae:38:ee:cd:73:14:07:d8:54:5b:96:79:8a:69:
         0e:7f:a7:c7:0b:50:16:cf:f0:47:cb:d5:8d:f0:04:a0:66:9b:
         8e:b2:47:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:26:24 2026 by rpki-client