This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/323830303a3635303a343a3a2f34382d3438203d3e203238303332.roa
File:                     323830303a3635303a343a3a2f34382d3438203d3e203238303332.roa (raw, json)
Hash identifier:          F0epdizptD5/byDTzw4g0sYp3ZhaAMvofYn3JOappaE=
Subject key identifier:   E5:73:58:1B:DF:98:3F:A7:87:39:5F:2D:D9:D1:16:60:47:AF:71:FB
Certificate issuer:       /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial:       03FAE7C88E8BB6A3661765404C1FEA136A15764F
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/323830303a3635303a343a3a2f34382d3438203d3e203238303332.roa
Signing time:             Tue 06 Jan 2026 19:26:15 +0000
ROA not before:           Tue 06 Jan 2026 19:21:15 +0000
ROA not after:            Tue 05 Jan 2027 19:26:15 +0000
asID:                     28032
IP address blocks:        2800:650:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 19:06:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:fa:e7:c8:8e:8b:b6:a3:66:17:65:40:4c:1f:ea:13:6a:15:76:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
        Validity
            Not Before: Jan  6 19:21:15 2026 GMT
            Not After : Jan  5 19:26:15 2027 GMT
        Subject: CN=E573581BDF983FA787395F2DD9D1166047AF71FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:45:f5:3a:5b:6c:87:51:09:ea:47:a8:5d:fc:
                    67:2e:06:16:c8:60:7b:1f:56:e1:c2:a8:2d:13:3f:
                    04:00:1d:6a:27:1b:50:5a:4e:fe:60:2b:34:b1:8e:
                    55:6e:68:52:26:8d:13:ad:f1:f7:1d:45:be:16:73:
                    dc:6f:d7:36:f2:55:c9:59:bf:67:c6:4f:ca:e2:41:
                    68:32:a8:a1:8d:b3:75:55:15:bd:b9:ae:ab:00:53:
                    82:ab:d6:bd:a8:21:3e:84:bc:d2:a7:24:3c:8e:ff:
                    01:d7:87:49:09:73:5b:5a:22:0e:fb:71:bc:d7:e9:
                    a4:18:91:f1:ab:7b:d0:10:51:61:f8:a7:5f:08:b9:
                    ff:48:e6:e8:30:44:d5:20:a7:c1:21:d6:e4:f3:7d:
                    c1:e9:e1:02:db:02:74:75:9d:c2:cc:ea:a4:66:f6:
                    af:c9:a1:07:ae:3f:be:be:fb:b1:69:9a:15:31:8b:
                    34:c9:79:15:b1:c6:f3:85:aa:6a:70:9b:15:f4:30:
                    2b:e8:fb:48:38:2f:d3:11:a6:29:98:e6:68:63:79:
                    55:35:7d:22:10:e0:7e:c7:e7:ac:0f:c0:83:80:d3:
                    d9:9d:4c:9c:f8:d5:1b:03:60:3e:89:09:e9:f2:e8:
                    32:2e:58:af:b7:01:76:48:32:e5:d6:5a:bd:5c:93:
                    8a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:73:58:1B:DF:98:3F:A7:87:39:5F:2D:D9:D1:16:60:47:AF:71:FB
            X509v3 Authority Key Identifier:
                keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/323830303a3635303a343a3a2f34382d3438203d3e203238303332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:650:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:03:09:a6:73:3f:98:68:50:12:2a:01:92:ed:59:ae:f2:11:
         c9:8e:00:12:b3:74:2d:b2:3c:0d:d4:f8:ea:d5:f8:2e:ac:27:
         97:df:38:8d:de:36:6a:37:3e:bd:53:ca:65:05:ec:b1:3a:b8:
         13:95:f1:cc:3c:0e:ff:26:40:9c:e9:5d:c0:01:4e:eb:b9:b3:
         d3:f4:44:ba:f9:6c:9b:43:49:72:94:69:1c:28:6f:3f:8a:88:
         8c:9e:4f:e2:18:ee:07:cd:f7:0b:77:45:64:34:f5:6d:06:66:
         99:55:6f:e2:02:63:0b:70:d8:fa:3b:b5:d5:b3:20:a7:84:5f:
         50:d8:c7:9b:8a:e1:a2:b2:a6:ed:ba:b9:dc:f5:31:f5:59:64:
         ce:39:61:4e:a3:4e:f0:bf:a2:ab:93:f9:25:2f:3e:79:31:12:
         ba:a0:86:2d:97:8f:a5:29:6c:a2:fe:bd:1e:4b:23:66:76:57:
         70:ae:b0:81:50:25:b2:08:4c:29:b2:24:48:0d:6b:0f:e6:d1:
         fd:ab:58:c7:46:dc:66:c4:0f:2c:af:75:73:2e:60:4c:bb:6c:
         d8:db:e7:e5:d6:a0:9d:6d:7c:42:b2:04:39:93:99:2c:ae:12:
         92:92:cb:05:d6:3a:65:cf:3e:dc:1b:e2:77:82:0c:f3:6b:9d:
         cc:64:70:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:51:15 2026 by rpki-client