This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B0D64BDC7279FC0769B802F098DE27992435F7BFFFBF22BADD826A5AE884DCFA/0/323830313a31393a343830303a3a2f34382d3438203d3e2033333536.roa
File:                     323830313a31393a343830303a3a2f34382d3438203d3e2033333536.roa (raw, json)
Hash identifier:          Nys7q6EowxhuA2d8jhFtrVRt1QmhT333hFVBOOjWiMc=
Subject key identifier:   45:4C:87:C6:E6:C9:65:9B:4B:76:B2:25:65:78:1C:30:62:C6:BA:19
Certificate issuer:       /CN=16801C6CB7A9588FAE9720CC164C99F5DD8BE74B
Certificate serial:       35C65A257F0667781A464EA5D43BBA4E125A69C4
Authority key identifier: 16:80:1C:6C:B7:A9:58:8F:AE:97:20:CC:16:4C:99:F5:DD:8B:E7:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16801C6CB7A9588FAE9720CC164C99F5DD8BE74B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B0D64BDC7279FC0769B802F098DE27992435F7BFFFBF22BADD826A5AE884DCFA/0/323830313a31393a343830303a3a2f34382d3438203d3e2033333536.roa
Signing time:             Tue 06 Jan 2026 19:40:34 +0000
ROA not before:           Tue 06 Jan 2026 19:35:34 +0000
ROA not after:            Tue 05 Jan 2027 19:40:34 +0000
asID:                     3356
IP address blocks:        2801:19:4800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B0D64BDC7279FC0769B802F098DE27992435F7BFFFBF22BADD826A5AE884DCFA/0/16801C6CB7A9588FAE9720CC164C99F5DD8BE74B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B0D64BDC7279FC0769B802F098DE27992435F7BFFFBF22BADD826A5AE884DCFA/0/16801C6CB7A9588FAE9720CC164C99F5DD8BE74B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16801C6CB7A9588FAE9720CC164C99F5DD8BE74B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 19:49:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:c6:5a:25:7f:06:67:78:1a:46:4e:a5:d4:3b:ba:4e:12:5a:69:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16801C6CB7A9588FAE9720CC164C99F5DD8BE74B
        Validity
            Not Before: Jan  6 19:35:34 2026 GMT
            Not After : Jan  5 19:40:34 2027 GMT
        Subject: CN=454C87C6E6C9659B4B76B22565781C3062C6BA19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1e:f5:e2:3f:0a:bb:cc:2b:73:38:22:2f:96:
                    a4:c0:a2:6d:f0:48:64:ff:97:e4:48:35:f4:90:a1:
                    e2:d3:29:55:c4:17:4f:0e:ed:43:16:68:ac:60:9c:
                    b5:9f:6b:01:6f:8c:cd:5c:94:c3:3c:63:04:ff:d8:
                    09:da:31:03:af:03:17:7d:19:77:dd:03:a2:8f:c6:
                    36:56:c6:82:f5:22:36:24:3f:42:a8:52:ac:bd:86:
                    6a:d1:6c:2a:72:75:4d:f9:cc:44:37:76:d4:3c:73:
                    74:c3:f3:e3:36:8e:65:c4:21:e0:20:73:07:22:4e:
                    1c:4d:e1:48:08:f5:b0:ad:17:4a:bb:23:7f:87:5e:
                    24:70:d7:5a:a7:0b:1d:0d:23:b5:63:bb:fd:8b:6f:
                    d4:98:a9:ee:09:30:88:ab:ae:e4:99:0a:1e:07:b1:
                    1c:ee:a1:d7:30:39:a0:bd:ee:73:60:66:50:1a:3e:
                    4f:8c:0a:5d:ff:9f:17:1e:e4:fa:ec:8e:79:bb:76:
                    36:82:1b:57:6c:06:90:a3:2b:74:7d:ba:f1:dd:11:
                    5d:d6:56:fd:03:2a:76:59:29:9b:8b:8c:81:d2:88:
                    1b:c2:f9:f6:61:1d:2f:2d:2a:0a:be:4f:96:df:9d:
                    90:27:c1:0d:64:0c:3d:5f:e0:6d:ad:20:cb:22:06:
                    72:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:4C:87:C6:E6:C9:65:9B:4B:76:B2:25:65:78:1C:30:62:C6:BA:19
            X509v3 Authority Key Identifier:
                keyid:16:80:1C:6C:B7:A9:58:8F:AE:97:20:CC:16:4C:99:F5:DD:8B:E7:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B0D64BDC7279FC0769B802F098DE27992435F7BFFFBF22BADD826A5AE884DCFA/0/16801C6CB7A9588FAE9720CC164C99F5DD8BE74B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16801C6CB7A9588FAE9720CC164C99F5DD8BE74B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B0D64BDC7279FC0769B802F098DE27992435F7BFFFBF22BADD826A5AE884DCFA/0/323830313a31393a343830303a3a2f34382d3438203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:19:4800::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:d7:01:ae:3d:d8:fa:74:66:19:04:9a:33:a2:3d:21:4a:e2:
         3a:22:1e:b1:28:7f:b5:98:d0:e7:d7:22:6d:98:69:a1:f7:78:
         de:96:2b:24:32:6c:13:fb:cf:70:86:13:41:70:0f:97:54:25:
         29:4d:6d:7f:23:b8:bf:90:e4:50:cb:64:2b:77:9f:73:62:76:
         27:d1:97:b0:21:0b:40:1e:ef:28:10:73:de:2d:52:a2:56:fd:
         a9:07:79:fc:81:82:dd:b8:33:5d:74:a4:5c:67:94:5c:50:04:
         9e:a7:16:7f:6a:1a:0c:61:05:d7:e8:db:a0:61:2e:1d:6e:0d:
         77:f0:97:e9:09:6a:29:20:26:b4:63:60:7c:1d:24:48:96:22:
         db:b1:71:37:a3:ec:13:71:9b:07:47:59:6c:c7:76:05:fb:5e:
         bd:a8:91:5c:89:12:56:7d:82:07:e0:68:7a:e5:6d:85:95:47:
         da:87:bb:61:37:3f:8f:fb:09:e7:8c:59:a2:65:37:89:06:ac:
         6a:2b:2a:53:a3:7b:bc:71:3a:60:19:1a:bb:cc:e1:6b:68:d3:
         48:4a:70:69:bb:a9:6d:20:68:51:73:77:74:33:9e:70:7a:c0:
         20:61:d4:06:29:4c:9d:85:19:a8:c0:f2:42:57:32:58:b3:09:
         2b:30:03:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:19:12 2026 by rpki-client