This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B8488B37E30618A1B5C7A3B5EEAA5401A4A4F7FB58DE8439D26B66EBD2A2683A/0/323830303a66303a3a2f33322d3332203d3e203237383736.roa
File:                     323830303a66303a3a2f33322d3332203d3e203237383736.roa (raw, json)
Hash identifier:          y8S0IQC2xmGLwbuxqVDNDMDy0fjrjbrfT9MK9vX52Vw=
Subject key identifier:   22:E6:0F:42:9C:EF:D2:2C:40:EF:6E:CC:D6:21:F1:B5:32:0B:46:48
Certificate issuer:       /CN=4CC0F6F55E2D8EC17B0131A07FA2E8C05DE62E31
Certificate serial:       656652FADAD02818459A6B5900BE51832B1723ED
Authority key identifier: 4C:C0:F6:F5:5E:2D:8E:C1:7B:01:31:A0:7F:A2:E8:C0:5D:E6:2E:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC0F6F55E2D8EC17B0131A07FA2E8C05DE62E31.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B8488B37E30618A1B5C7A3B5EEAA5401A4A4F7FB58DE8439D26B66EBD2A2683A/0/323830303a66303a3a2f33322d3332203d3e203237383736.roa
Signing time:             Wed 14 Jan 2026 23:20:00 +0000
ROA not before:           Wed 14 Jan 2026 23:15:00 +0000
ROA not after:            Wed 13 Jan 2027 23:20:00 +0000
asID:                     27876
IP address blocks:        2800:f0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B8488B37E30618A1B5C7A3B5EEAA5401A4A4F7FB58DE8439D26B66EBD2A2683A/0/4CC0F6F55E2D8EC17B0131A07FA2E8C05DE62E31.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B8488B37E30618A1B5C7A3B5EEAA5401A4A4F7FB58DE8439D26B66EBD2A2683A/0/4CC0F6F55E2D8EC17B0131A07FA2E8C05DE62E31.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC0F6F55E2D8EC17B0131A07FA2E8C05DE62E31.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 14:24:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:66:52:fa:da:d0:28:18:45:9a:6b:59:00:be:51:83:2b:17:23:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC0F6F55E2D8EC17B0131A07FA2E8C05DE62E31
        Validity
            Not Before: Jan 14 23:15:00 2026 GMT
            Not After : Jan 13 23:20:00 2027 GMT
        Subject: CN=22E60F429CEFD22C40EF6ECCD621F1B5320B4648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c6:8d:60:aa:e5:7a:16:d3:d0:48:bf:cf:70:
                    9e:65:a1:6e:f9:a6:11:89:11:48:01:31:0a:98:e8:
                    ef:d0:e0:af:18:62:85:39:11:3b:dc:44:fb:b1:f0:
                    14:69:84:fd:bd:e3:e9:bd:99:14:f7:6d:2b:b6:56:
                    19:c2:fa:e8:69:59:46:48:b5:ef:fa:0a:4b:ec:39:
                    b7:11:8b:41:c0:67:78:29:ae:f5:57:f2:fd:cc:fc:
                    18:f2:cc:68:b5:55:ae:f8:91:45:9f:14:a8:3d:fe:
                    e2:56:85:a6:bc:6c:4b:ec:26:39:9c:d2:2b:31:67:
                    67:14:f4:2e:c9:47:36:8e:56:e7:37:75:28:4a:ed:
                    ec:95:6c:81:18:93:40:18:74:e9:ec:dd:46:47:e7:
                    82:5d:b3:f4:03:e1:0d:18:45:3f:54:c4:36:d5:62:
                    16:58:1a:16:85:85:ce:b8:9d:fb:3c:98:70:9d:84:
                    7c:20:66:62:e1:82:bb:51:00:02:aa:83:04:47:de:
                    91:d8:35:3a:f6:ce:7b:35:af:43:2e:0e:c5:f1:63:
                    49:df:8c:d2:61:09:cb:e2:8d:6f:06:ab:41:8f:b8:
                    2e:aa:8b:03:ca:2c:2b:6c:d5:88:de:f1:5d:0d:cc:
                    9e:1e:8c:24:68:19:c0:4f:87:c3:71:04:4d:a3:99:
                    41:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E6:0F:42:9C:EF:D2:2C:40:EF:6E:CC:D6:21:F1:B5:32:0B:46:48
            X509v3 Authority Key Identifier:
                keyid:4C:C0:F6:F5:5E:2D:8E:C1:7B:01:31:A0:7F:A2:E8:C0:5D:E6:2E:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B8488B37E30618A1B5C7A3B5EEAA5401A4A4F7FB58DE8439D26B66EBD2A2683A/0/4CC0F6F55E2D8EC17B0131A07FA2E8C05DE62E31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC0F6F55E2D8EC17B0131A07FA2E8C05DE62E31.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B8488B37E30618A1B5C7A3B5EEAA5401A4A4F7FB58DE8439D26B66EBD2A2683A/0/323830303a66303a3a2f33322d3332203d3e203237383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:54:e6:e1:e0:e7:c3:a1:af:aa:ee:60:db:cb:7c:aa:14:96:
         6d:f1:66:da:04:08:aa:9e:34:84:52:4e:00:f6:59:d4:4b:e8:
         b8:1a:e4:43:d3:6a:89:34:4b:45:43:5d:5a:70:4f:b0:94:49:
         37:be:3e:b2:ac:26:85:63:00:08:06:68:32:23:62:69:97:4e:
         0c:c7:5c:9b:55:0c:91:76:ed:92:a1:f4:7a:d3:53:ec:0c:81:
         f7:13:b5:eb:7a:dd:54:3a:4e:97:16:4e:f6:52:b3:b4:e1:72:
         f6:46:c6:e3:ed:7b:2f:d7:7e:01:0e:18:c5:fc:6e:03:f9:9d:
         27:96:24:9d:33:2e:79:86:21:a1:c2:10:ea:17:45:0f:c7:71:
         10:af:d3:81:7b:b1:bc:ad:b8:6d:b6:01:28:7a:28:88:0d:d5:
         da:91:bf:32:c0:84:37:38:59:a3:f9:cb:f1:91:f1:00:4a:61:
         3c:54:87:99:ce:e5:ef:6f:2f:7a:b3:26:1f:8d:44:e7:81:10:
         09:3e:60:30:df:42:2b:e1:c7:16:23:03:ad:ab:a6:22:c5:5f:
         9e:74:3e:b0:b7:d6:81:d4:05:76:89:2f:d8:6d:bb:fc:dd:c5:
         55:e7:44:41:6f:df:86:f8:97:de:dd:c2:51:35:1d:23:bf:ea:
         6a:76:3c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:46:45 2026 by rpki-client