This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/323830303a3361303a3139323a3a2f34382d3438203d3e203238303038.roa
File:                     323830303a3361303a3139323a3a2f34382d3438203d3e203238303038.roa (raw, json)
Hash identifier:          Zg8lzTynYc71Jef37pTnr7QIx90lLVfayDeCrat7k1I=
Subject key identifier:   22:F1:2C:C9:98:38:FD:E3:9F:FD:D8:4E:E6:40:E1:9D:9C:23:AE:E7
Certificate issuer:       /CN=9857400AE42A0A22A3E618304A1502E0E0C01DCA
Certificate serial:       36590FA89F8579A3C3B458F346C62A5A2CC4E01B
Authority key identifier: 98:57:40:0A:E4:2A:0A:22:A3:E6:18:30:4A:15:02:E0:E0:C0:1D:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/323830303a3361303a3139323a3a2f34382d3438203d3e203238303038.roa
Signing time:             Tue 06 Jan 2026 19:34:12 +0000
ROA not before:           Tue 06 Jan 2026 19:29:12 +0000
ROA not after:            Tue 05 Jan 2027 19:34:12 +0000
asID:                     28008
IP address blocks:        2800:3a0:192::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 15:49:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:59:0f:a8:9f:85:79:a3:c3:b4:58:f3:46:c6:2a:5a:2c:c4:e0:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9857400AE42A0A22A3E618304A1502E0E0C01DCA
        Validity
            Not Before: Jan  6 19:29:12 2026 GMT
            Not After : Jan  5 19:34:12 2027 GMT
        Subject: CN=22F12CC99838FDE39FFDD84EE640E19D9C23AEE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4e:fd:cf:eb:f3:23:d3:e9:9f:53:d3:9f:35:
                    2c:99:18:8d:fd:10:6e:2f:6b:05:8c:a3:56:f7:83:
                    57:9c:50:5d:55:8d:81:19:f2:2e:40:21:69:50:07:
                    b5:e2:0b:07:ca:ae:d6:fa:14:81:7f:9f:4f:a4:be:
                    8f:19:e3:45:06:9c:ea:a5:b8:1a:3c:fe:2f:2b:67:
                    4b:9d:c5:a0:a7:53:1f:fe:55:b4:4b:85:cc:cc:3f:
                    3e:68:fb:35:24:06:03:8a:a5:a9:d7:f5:af:1a:55:
                    97:ce:73:61:32:bb:8e:cb:a5:cc:eb:46:5f:66:c9:
                    21:ff:34:3d:18:8a:a4:de:55:56:08:e0:9b:1b:a3:
                    2e:c9:ad:ea:50:c2:97:7f:a0:de:21:89:b9:64:c1:
                    12:83:65:bf:42:fb:f6:1c:0d:fa:88:67:b0:14:40:
                    2f:0b:c1:24:eb:76:1e:37:31:c8:a8:7b:f8:88:83:
                    bc:16:49:fd:45:75:5a:c8:f5:41:26:dd:57:1b:95:
                    56:fb:c7:b9:ea:b6:b0:80:a4:ef:a5:86:d1:70:bd:
                    f5:de:ae:ee:d9:f2:16:6c:11:41:b8:71:6b:83:f1:
                    4f:1b:a6:c8:df:f4:9c:e3:de:57:80:05:5b:27:a4:
                    58:17:e4:48:4e:10:84:d5:40:44:fa:1b:4b:32:8b:
                    8e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F1:2C:C9:98:38:FD:E3:9F:FD:D8:4E:E6:40:E1:9D:9C:23:AE:E7
            X509v3 Authority Key Identifier:
                keyid:98:57:40:0A:E4:2A:0A:22:A3:E6:18:30:4A:15:02:E0:E0:C0:1D:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/323830303a3361303a3139323a3a2f34382d3438203d3e203238303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:3a0:192::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:02:31:8f:3e:54:93:37:6e:ad:8d:4a:7c:f8:a7:13:4e:eb:
         0e:31:1b:da:e5:e9:e7:f8:00:50:9d:d7:b8:1a:65:93:53:3e:
         49:4e:63:3b:d0:62:b8:3b:b1:9b:5f:72:27:18:a2:0a:60:c7:
         42:9c:6d:59:13:71:37:ca:a2:8b:36:13:72:7a:94:c6:26:43:
         ca:b3:7a:d2:06:63:4e:ff:eb:49:97:6a:4d:d6:cc:8f:37:22:
         76:07:fd:f5:3e:8a:72:87:e1:0e:23:c1:66:41:08:64:86:18:
         fc:94:c1:9f:f1:86:f2:33:41:b8:da:9d:6e:db:6e:dc:38:8e:
         9b:66:19:38:31:11:57:cb:8f:f7:57:c4:15:99:f2:05:f3:bc:
         01:f1:c3:fd:eb:6e:be:1c:91:06:18:0e:27:7e:ff:9a:5c:dd:
         d9:c4:a7:3b:2e:ef:96:9b:20:40:72:ff:f1:ee:45:9b:c6:8c:
         d4:bf:d8:07:54:de:66:61:ef:34:6a:f4:4a:77:df:d8:48:a3:
         2a:1b:61:9c:7e:c8:71:6c:1f:b7:0c:93:91:61:a3:27:9e:7d:
         b1:d6:0b:ed:1b:7a:be:0d:ae:d0:47:47:8a:70:ae:68:bf:e8:
         dd:be:42:22:82:b2:95:05:86:50:f8:26:78:61:52:d1:08:65:
         30:ae:c7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:26 2026 by rpki-client