This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B0D64BDC7279FC0769B802F098DE27992435F7BFFFBF22BADD826A5AE884DCFA/0/323830313a31393a343830303a3a2f34382d3438203d3e203138373437.roa
File:                     323830313a31393a343830303a3a2f34382d3438203d3e203138373437.roa (raw, json)
Hash identifier:          gZACL+0+P+3ulMNiNRXfbCIx3eEDndjBgv5yTt79vns=
Subject key identifier:   B4:B3:67:4C:BE:4B:ED:06:39:D2:1C:82:32:8E:6F:7A:F8:E8:73:67
Certificate issuer:       /CN=16801C6CB7A9588FAE9720CC164C99F5DD8BE74B
Certificate serial:       7AFF69658C74A9B8F4FEE2DFD22E6674BE98FC95
Authority key identifier: 16:80:1C:6C:B7:A9:58:8F:AE:97:20:CC:16:4C:99:F5:DD:8B:E7:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16801C6CB7A9588FAE9720CC164C99F5DD8BE74B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B0D64BDC7279FC0769B802F098DE27992435F7BFFFBF22BADD826A5AE884DCFA/0/323830313a31393a343830303a3a2f34382d3438203d3e203138373437.roa
Signing time:             Mon 05 Jan 2026 20:57:18 +0000
ROA not before:           Mon 05 Jan 2026 20:52:18 +0000
ROA not after:            Mon 04 Jan 2027 20:57:18 +0000
asID:                     18747
IP address blocks:        2801:19:4800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B0D64BDC7279FC0769B802F098DE27992435F7BFFFBF22BADD826A5AE884DCFA/0/16801C6CB7A9588FAE9720CC164C99F5DD8BE74B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B0D64BDC7279FC0769B802F098DE27992435F7BFFFBF22BADD826A5AE884DCFA/0/16801C6CB7A9588FAE9720CC164C99F5DD8BE74B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16801C6CB7A9588FAE9720CC164C99F5DD8BE74B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 19:49:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ff:69:65:8c:74:a9:b8:f4:fe:e2:df:d2:2e:66:74:be:98:fc:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16801C6CB7A9588FAE9720CC164C99F5DD8BE74B
        Validity
            Not Before: Jan  5 20:52:18 2026 GMT
            Not After : Jan  4 20:57:18 2027 GMT
        Subject: CN=B4B3674CBE4BED0639D21C82328E6F7AF8E87367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:38:39:4a:f5:f4:86:c7:c2:86:9b:30:02:2a:
                    16:1c:58:51:8e:36:9f:24:b4:e4:cd:1c:9d:ca:02:
                    19:06:ce:79:b6:b6:f2:02:19:a6:83:2d:1b:e4:a0:
                    9d:df:5b:8d:17:68:b9:fd:d6:f3:11:06:2c:c3:fa:
                    3f:ff:4d:ea:4b:a1:c3:ed:eb:2e:27:d4:2a:e0:9d:
                    37:a6:0e:a3:26:68:94:2a:10:24:4a:1a:3f:d9:7d:
                    40:58:dc:25:8c:d7:bc:2f:9b:74:84:fa:e8:43:c4:
                    2d:e9:a7:09:7e:03:47:b6:40:a6:ed:e2:35:9d:4f:
                    b4:b4:89:d2:92:09:76:6a:18:0a:1d:c9:f5:4e:29:
                    8c:e3:5e:3e:5d:db:36:cb:ec:e6:b5:9f:c3:91:c8:
                    e4:c7:3c:58:70:b6:8c:ce:72:d0:02:1a:5b:88:a8:
                    5c:fd:73:af:0f:86:30:1d:09:c4:a2:37:04:d5:96:
                    7e:4c:51:f8:71:35:dc:37:b6:84:77:2c:d6:44:64:
                    d1:19:2d:c1:3d:db:35:fa:10:10:8f:34:d0:7d:4f:
                    4d:70:0b:99:4a:d7:5c:08:ba:41:82:7c:a9:85:6f:
                    7b:a3:29:47:68:13:67:d3:19:fd:fe:36:ef:e9:f0:
                    bf:7b:dd:05:0c:10:60:3a:12:bd:a1:e4:75:9c:f5:
                    3d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B3:67:4C:BE:4B:ED:06:39:D2:1C:82:32:8E:6F:7A:F8:E8:73:67
            X509v3 Authority Key Identifier:
                keyid:16:80:1C:6C:B7:A9:58:8F:AE:97:20:CC:16:4C:99:F5:DD:8B:E7:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B0D64BDC7279FC0769B802F098DE27992435F7BFFFBF22BADD826A5AE884DCFA/0/16801C6CB7A9588FAE9720CC164C99F5DD8BE74B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16801C6CB7A9588FAE9720CC164C99F5DD8BE74B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B0D64BDC7279FC0769B802F098DE27992435F7BFFFBF22BADD826A5AE884DCFA/0/323830313a31393a343830303a3a2f34382d3438203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:19:4800::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:fb:62:37:9e:8f:60:b6:20:86:61:1c:e7:d6:a3:ad:ac:30:
         d1:fe:e7:94:2e:be:02:a0:f2:ad:82:f5:54:af:c3:69:3c:cc:
         70:41:77:6e:6d:20:b5:59:2f:a0:4e:93:d1:58:27:c0:74:d3:
         95:1b:80:16:4c:3f:01:00:dc:70:5a:ff:61:bc:76:27:44:f8:
         84:f2:74:a7:e1:3e:08:b8:4e:f4:20:6c:16:b9:89:96:90:1f:
         18:c4:89:84:b4:8e:3b:68:6f:32:25:cc:cf:ed:70:9e:68:fa:
         10:74:cf:e0:8d:ad:15:76:3c:be:e2:74:f3:12:f4:27:79:bc:
         36:f4:c0:fc:a9:5d:1a:8b:48:37:bb:27:be:ca:6c:e1:4e:a4:
         9c:53:50:ce:4b:95:a5:20:de:3d:a5:7f:79:d9:50:5a:f6:71:
         47:f7:07:21:77:7e:91:fc:51:5b:f3:26:ac:10:50:31:99:1e:
         9b:00:37:ee:60:a7:41:b7:b8:a1:c1:0f:50:3b:16:5a:6b:96:
         d1:93:8e:e1:a9:c3:9a:62:5f:cc:84:ef:9a:bc:26:e9:4c:c1:
         3f:7c:b0:a2:0c:e5:ec:10:1e:c4:31:4f:91:4c:c4:36:61:8e:
         3b:8e:eb:27:11:17:dd:b0:b4:59:b3:53:f6:82:30:37:d1:6c:
         04:bb:39:48
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUev9pZYx0qbj0/uLf0i5mdL6Y/JUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY4MDFDNkNCN0E5NTg4RkFFOTcyMENDMTY0Qzk5RjVE
RDhCRTc0QjAeFw0yNjAxMDUyMDUyMThaFw0yNzAxMDQyMDU3MThaMDMxMTAvBgNV
BAMTKEI0QjM2NzRDQkU0QkVEMDYzOUQyMUM4MjMyOEU2RjdBRjhFODczNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ODlK9fSGx8KGmzACKhYcWFGO
Np8ktOTNHJ3KAhkGznm2tvICGaaDLRvkoJ3fW40XaLn91vMRBizD+j//TepLocPt
6y4n1CrgnTemDqMmaJQqECRKGj/ZfUBY3CWM17wvm3SE+uhDxC3ppwl+A0e2QKbt
4jWdT7S0idKSCXZqGAodyfVOKYzjXj5d2zbL7Oa1n8ORyOTHPFhwtozOctACGluI
qFz9c68PhjAdCcSiNwTVln5MUfhxNdw3toR3LNZEZNEZLcE92zX6EBCPNNB9T01w
C5lK11wIukGCfKmFb3ujKUdoE2fTGf3+Nu/p8L973QUMEGA6Er2h5HWc9T2hAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUtLNnTL5L7QY50hyCMo5vevjoc2cwHwYDVR0j
BBgwFoAUFoAcbLepWI+ulyDMFkyZ9d2L50swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CMEQ2NEJEQzcyNzlGQzA3NjlCODAyRjA5OERFMjc5OTI0
MzVGN0JGRkZCRjIyQkFERDgyNkE1QUU4ODREQ0ZBLzAvMTY4MDFDNkNCN0E5NTg4
RkFFOTcyMENDMTY0Qzk5RjVERDhCRTc0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNjgwMUM2Q0I3QTk1ODhGQUU5
NzIwQ0MxNjRDOTlGNUREOEJFNzRCLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjBENjRCREM3Mjc5RkMwNzY5QjgwMkYwOThERTI3OTkyNDM1RjdCRkZG
QkYyMkJBREQ4MjZBNUFFODg0RENGQS8wLzMyMzgzMDMxM2EzMTM5M2EzNDM4MzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzgzNzM0Mzcucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AQAZSAAwDQYJKoZIhvcNAQELBQADggEBAEv7Yjeej2C2IIZhHOfWo62sMNH+55Qu
vgKg8q2C9VSvw2k8zHBBd25tILVZL6BOk9FYJ8B005UbgBZMPwEA3HBa/2G8didE
+ITydKfhPgi4TvQgbBa5iZaQHxjEiYS0jjtobzIlzM/tcJ5o+hB0z+CNrRV2PL7i
dPMS9Cd5vDb0wPypXRqLSDe7J77KbOFOpJxTUM5LlaUg3j2lf3nZUFr2cUf3ByF3
fpH8UVvzJqwQUDGZHpsAN+5gp0G3uKHBD1A7FlprltGTjuGpw5piX8yE75q8JulM
wT98sKIM5ewQHsQxT5FMxDZhjjuO6ycRF92wtFmzU/aCMDfRbAS7OUg=
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:29:29 2026 by rpki-client