This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/323830313a31323a653830303a3a2f34382d3438203d3e20323731383835.roa
File:                     323830313a31323a653830303a3a2f34382d3438203d3e20323731383835.roa (raw, json)
Hash identifier:          kukUTe2CFlyEfjKc7+AGEQT/W7SlDE6QIpk2njdli5k=
Subject key identifier:   57:77:E3:3B:29:E6:1A:56:AD:BD:97:B7:E3:A1:3D:18:18:64:73:C2
Certificate issuer:       /CN=AADC68CACCD7A12B6A019949E964F33953EF7228
Certificate serial:       7E6995890C2E86CD00DED3AAE368FE5F27C0251E
Authority key identifier: AA:DC:68:CA:CC:D7:A1:2B:6A:01:99:49:E9:64:F3:39:53:EF:72:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AADC68CACCD7A12B6A019949E964F33953EF7228.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/323830313a31323a653830303a3a2f34382d3438203d3e20323731383835.roa
Signing time:             Tue 06 Jan 2026 19:26:45 +0000
ROA not before:           Tue 06 Jan 2026 19:21:45 +0000
ROA not after:            Tue 05 Jan 2027 19:26:45 +0000
asID:                     271885
IP address blocks:        2801:12:e800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/AADC68CACCD7A12B6A019949E964F33953EF7228.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/AADC68CACCD7A12B6A019949E964F33953EF7228.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AADC68CACCD7A12B6A019949E964F33953EF7228.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 00:42:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:69:95:89:0c:2e:86:cd:00:de:d3:aa:e3:68:fe:5f:27:c0:25:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AADC68CACCD7A12B6A019949E964F33953EF7228
        Validity
            Not Before: Jan  6 19:21:45 2026 GMT
            Not After : Jan  5 19:26:45 2027 GMT
        Subject: CN=5777E33B29E61A56ADBD97B7E3A13D18186473C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:78:5a:c9:d7:46:96:16:05:cd:03:9c:c1:af:
                    54:49:83:0d:df:b1:31:1b:1e:cd:47:09:72:6c:85:
                    85:8d:ef:ab:04:d0:bc:db:5d:67:f6:29:af:26:15:
                    90:b7:17:2d:8f:0d:26:0e:a6:07:35:7a:1b:c9:2e:
                    85:f9:67:93:6f:21:46:be:cc:17:e8:0d:82:b1:99:
                    53:fb:f9:45:0a:db:d4:84:6a:52:04:35:b2:35:96:
                    7f:6c:7b:20:a1:bb:5d:50:3d:80:ef:c5:9d:50:77:
                    77:d2:ab:04:a9:7a:b9:17:7a:87:4a:5a:76:22:88:
                    28:f7:12:35:d5:26:5d:6c:14:24:b6:67:0b:9f:a4:
                    c4:e1:c2:6d:17:b0:14:bd:9f:bc:07:c8:7f:0e:66:
                    23:67:2a:48:df:d2:23:33:0e:8b:85:a2:3c:a3:fb:
                    bc:cf:af:d0:38:43:62:1c:b5:27:54:59:7e:a2:8d:
                    89:f2:7f:af:7d:4b:e9:88:30:e7:a2:a2:c7:82:06:
                    e9:be:b9:65:ba:9f:08:8b:77:c3:16:2b:bb:60:ce:
                    0f:30:57:f5:de:fe:52:1c:a8:d8:e0:30:59:d1:fa:
                    c0:06:db:6e:b0:e1:01:cb:fc:03:b7:de:d9:27:36:
                    ab:aa:8e:3c:c3:bc:2d:72:26:31:6e:01:97:63:45:
                    19:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:77:E3:3B:29:E6:1A:56:AD:BD:97:B7:E3:A1:3D:18:18:64:73:C2
            X509v3 Authority Key Identifier:
                keyid:AA:DC:68:CA:CC:D7:A1:2B:6A:01:99:49:E9:64:F3:39:53:EF:72:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/AADC68CACCD7A12B6A019949E964F33953EF7228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AADC68CACCD7A12B6A019949E964F33953EF7228.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/323830313a31323a653830303a3a2f34382d3438203d3e20323731383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:12:e800::/48

    Signature Algorithm: sha256WithRSAEncryption
         c9:8b:04:d0:fe:96:9a:04:9d:20:fa:b1:d8:e2:8f:9d:fd:e8:
         8f:4b:11:6a:25:04:97:ce:27:37:6a:7e:0e:89:a1:c5:bf:61:
         4f:fb:72:1d:71:df:0f:37:ec:b1:cb:fe:09:79:10:b3:ae:10:
         34:da:39:ef:c6:00:ee:f8:ad:d0:b7:16:d6:2d:3d:46:e5:b1:
         8e:c8:9a:bd:78:89:1a:f5:94:55:75:7e:98:91:ba:8e:a6:74:
         d6:b2:32:3b:1f:42:ab:00:fb:b8:b7:d2:88:5d:c4:11:3a:15:
         d1:87:db:30:99:0b:fd:bb:11:29:eb:80:ea:6f:27:01:8d:33:
         a2:80:9c:0f:7c:9d:b8:ab:ed:c3:88:bc:ae:47:fd:80:11:87:
         84:8a:6c:dc:30:d2:89:5b:6f:e9:bb:10:6c:b4:70:9a:45:da:
         ef:f2:f9:9d:7a:6e:ac:77:b8:4c:38:b7:44:92:14:a2:17:1c:
         d4:f4:65:2b:a0:77:43:2f:76:0b:7c:7c:06:10:5e:b5:4f:c4:
         77:2a:ad:5f:b2:6f:55:3c:61:1c:f3:63:8e:69:34:af:06:b6:
         0e:30:90:97:a5:87:84:50:d1:d3:b2:e8:1d:bb:4f:ea:44:fd:
         10:60:c0:0c:ef:24:a5:2f:33:7a:82:69:c5:94:08:0c:2d:e6:
         e0:fb:b9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:05:26 2026 by rpki-client