This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8FC20B0AB4EF8F2EE6321C9E35EAC5D4D707EF175C0DBA0A55FD779C32AAEF6/0/323830313a31373a333030303a3a2f34382d3438203d3e203231373635.roa
File:                     323830313a31373a333030303a3a2f34382d3438203d3e203231373635.roa (raw, json)
Hash identifier:          GV6LhCa2NeqjNjAtIGrw5JGK6M9JgdgH1G4yc76433k=
Subject key identifier:   51:B5:6A:1B:04:7B:06:63:E4:FE:9B:94:94:EF:FF:7B:9E:52:81:0F
Certificate issuer:       /CN=F773F00E96D59598ACBF0AE55485A2D0F09AC3EE
Certificate serial:       2328BD223FF98C7BB3C45E3CF21BCDF923687483
Authority key identifier: F7:73:F0:0E:96:D5:95:98:AC:BF:0A:E5:54:85:A2:D0:F0:9A:C3:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F773F00E96D59598ACBF0AE55485A2D0F09AC3EE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C8FC20B0AB4EF8F2EE6321C9E35EAC5D4D707EF175C0DBA0A55FD779C32AAEF6/0/323830313a31373a333030303a3a2f34382d3438203d3e203231373635.roa
Signing time:             Tue 06 Jan 2026 19:00:25 +0000
ROA not before:           Tue 06 Jan 2026 18:55:25 +0000
ROA not after:            Tue 05 Jan 2027 19:00:25 +0000
asID:                     21765
IP address blocks:        2801:17:3000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C8FC20B0AB4EF8F2EE6321C9E35EAC5D4D707EF175C0DBA0A55FD779C32AAEF6/0/F773F00E96D59598ACBF0AE55485A2D0F09AC3EE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C8FC20B0AB4EF8F2EE6321C9E35EAC5D4D707EF175C0DBA0A55FD779C32AAEF6/0/F773F00E96D59598ACBF0AE55485A2D0F09AC3EE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F773F00E96D59598ACBF0AE55485A2D0F09AC3EE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 17:45:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:28:bd:22:3f:f9:8c:7b:b3:c4:5e:3c:f2:1b:cd:f9:23:68:74:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F773F00E96D59598ACBF0AE55485A2D0F09AC3EE
        Validity
            Not Before: Jan  6 18:55:25 2026 GMT
            Not After : Jan  5 19:00:25 2027 GMT
        Subject: CN=51B56A1B047B0663E4FE9B9494EFFF7B9E52810F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cb:21:81:08:62:0a:ff:8e:3e:4b:9e:ee:a5:
                    5d:e4:67:59:f5:13:94:9d:77:0e:91:01:47:7f:3a:
                    1f:a3:16:7b:37:ad:d6:bd:5a:67:6c:a2:14:e9:c8:
                    c0:9e:97:5d:b6:49:5f:6c:0c:ed:da:b9:94:fd:5a:
                    cf:5f:75:fb:21:b9:73:f9:f4:59:79:fd:84:9e:0a:
                    c5:be:84:d3:3c:f6:34:52:05:5a:5a:0b:e2:f3:11:
                    10:1a:99:dd:3f:94:70:70:3c:89:76:14:69:c2:7c:
                    d9:71:4d:fc:11:b1:68:f3:13:43:81:db:2d:ba:f9:
                    84:4c:52:28:d5:c5:46:0f:a8:2a:50:8c:45:b1:3a:
                    6a:a7:85:77:4c:af:4e:12:15:73:bb:5c:5f:53:ea:
                    67:f2:25:f8:63:c5:81:c9:6a:56:6d:fd:8a:28:05:
                    d0:49:40:3a:30:1b:58:b8:ba:84:c0:e6:90:3d:29:
                    77:0b:11:03:12:04:83:6d:f1:fb:82:03:14:d0:3f:
                    fe:16:74:cd:2d:c6:89:0d:e3:fc:84:89:e8:23:a1:
                    66:ef:86:ef:d2:f9:43:1e:d9:4f:13:5d:e7:a8:40:
                    12:ce:a6:e8:61:c7:ae:fa:e6:8f:f7:5e:93:31:b7:
                    b6:fd:d1:9f:57:27:91:47:a3:50:aa:6d:6f:88:21:
                    c8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B5:6A:1B:04:7B:06:63:E4:FE:9B:94:94:EF:FF:7B:9E:52:81:0F
            X509v3 Authority Key Identifier:
                keyid:F7:73:F0:0E:96:D5:95:98:AC:BF:0A:E5:54:85:A2:D0:F0:9A:C3:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C8FC20B0AB4EF8F2EE6321C9E35EAC5D4D707EF175C0DBA0A55FD779C32AAEF6/0/F773F00E96D59598ACBF0AE55485A2D0F09AC3EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F773F00E96D59598ACBF0AE55485A2D0F09AC3EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8FC20B0AB4EF8F2EE6321C9E35EAC5D4D707EF175C0DBA0A55FD779C32AAEF6/0/323830313a31373a333030303a3a2f34382d3438203d3e203231373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:e0:90:84:48:c1:1b:35:05:4b:d6:e6:3f:80:a1:78:6e:a5:
         42:6b:f1:a2:a8:13:7a:ed:ff:0b:4b:7d:6d:21:e0:68:74:62:
         65:d8:1e:82:38:dc:b6:c1:b7:f3:fd:56:62:57:f0:5e:38:f2:
         48:8c:b6:be:f4:95:e7:94:97:69:d7:e8:38:e5:53:9d:fd:ce:
         56:e8:33:a0:6c:0b:eb:79:8d:51:d0:1f:dc:59:f5:31:f7:73:
         9c:e3:3d:8c:9f:9e:94:14:75:17:6e:16:6e:bc:9a:3f:9d:cd:
         de:84:96:6a:65:ce:61:f1:e6:e8:48:8d:55:1d:62:36:96:99:
         c8:8d:fa:78:26:98:7a:77:08:b2:8f:82:1d:66:3b:a0:b1:a0:
         a7:76:94:12:7e:73:2b:56:ab:8a:26:9d:4a:58:8f:5b:19:4c:
         af:55:65:ad:66:ca:3c:f2:f6:c2:37:5d:28:ee:4e:42:4a:58:
         aa:d5:7e:74:0a:ed:11:8e:dc:bb:d5:1c:c2:80:88:b1:84:b7:
         31:eb:73:3a:8b:9d:f4:af:88:36:63:61:e4:7a:29:13:77:d3:
         60:52:6e:08:aa:56:04:c9:60:13:91:fc:40:03:a7:ca:c5:fc:
         79:00:5f:87:75:6e:ea:59:07:c4:55:af:2f:4f:a1:30:4f:5a:
         d8:5e:28:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:06:42 2026 by rpki-client