This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CC7B8B67FC9035FBFD716483FDF51A00A3313488054A4C87D78E1FC52D083B9F/0/323830313a3131353a3a2f34382d3438203d3e203138373437.roa
File:                     323830313a3131353a3a2f34382d3438203d3e203138373437.roa (raw, json)
Hash identifier:          v7f6yNrV34gn7H7qM9fFfMbteU+SVM+e9/YthfcUTIc=
Subject key identifier:   A7:3F:B6:50:8D:BD:16:26:08:0E:63:E4:45:C6:6B:D5:55:F1:12:B3
Certificate issuer:       /CN=058ED2B8DD99952E31AFDA2164E1A23A82FB8FAF
Certificate serial:       408E0E3B747D6EFD788D1DBAC5A3D9312FB81CF1
Authority key identifier: 05:8E:D2:B8:DD:99:95:2E:31:AF:DA:21:64:E1:A2:3A:82:FB:8F:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/058ED2B8DD99952E31AFDA2164E1A23A82FB8FAF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CC7B8B67FC9035FBFD716483FDF51A00A3313488054A4C87D78E1FC52D083B9F/0/323830313a3131353a3a2f34382d3438203d3e203138373437.roa
Signing time:             Tue 06 Jan 2026 20:53:39 +0000
ROA not before:           Tue 06 Jan 2026 20:48:39 +0000
ROA not after:            Tue 05 Jan 2027 20:53:39 +0000
asID:                     18747
IP address blocks:        2801:115::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CC7B8B67FC9035FBFD716483FDF51A00A3313488054A4C87D78E1FC52D083B9F/0/058ED2B8DD99952E31AFDA2164E1A23A82FB8FAF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CC7B8B67FC9035FBFD716483FDF51A00A3313488054A4C87D78E1FC52D083B9F/0/058ED2B8DD99952E31AFDA2164E1A23A82FB8FAF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/058ED2B8DD99952E31AFDA2164E1A23A82FB8FAF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:8e:0e:3b:74:7d:6e:fd:78:8d:1d:ba:c5:a3:d9:31:2f:b8:1c:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=058ED2B8DD99952E31AFDA2164E1A23A82FB8FAF
        Validity
            Not Before: Jan  6 20:48:39 2026 GMT
            Not After : Jan  5 20:53:39 2027 GMT
        Subject: CN=A73FB6508DBD1626080E63E445C66BD555F112B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f8:f0:0b:0b:dd:ed:63:24:36:60:d6:9e:87:
                    a8:29:dd:38:b4:f1:72:36:f6:68:de:a6:21:50:c4:
                    18:b3:95:d4:e3:50:ee:31:ee:4d:5a:0a:91:e3:95:
                    d8:b3:6a:8c:65:c5:3c:00:3f:59:f2:68:71:e7:73:
                    11:24:b8:0b:dc:11:df:0f:7c:84:c5:a4:30:11:88:
                    59:27:e1:fa:ac:4a:c2:10:2e:02:d6:59:55:c5:11:
                    a0:b6:76:be:0e:84:35:78:6b:06:c6:fc:3a:08:c9:
                    38:ee:a6:14:ea:f3:d0:f5:c2:97:f7:7c:9a:49:3b:
                    66:ee:48:c1:45:4e:ef:58:c1:31:57:d5:bb:d5:92:
                    ca:b2:26:f2:32:06:d5:b7:49:50:06:df:99:c2:5e:
                    bc:1c:99:62:2a:12:8e:d6:cc:55:aa:62:04:5e:ff:
                    dc:7a:94:aa:80:ef:25:56:25:21:ef:7a:7c:20:69:
                    6c:0a:d0:99:d8:81:13:d3:15:c1:83:5f:96:8e:b7:
                    c9:86:e6:8c:e7:d2:e0:46:39:9d:d7:c0:0d:7c:9f:
                    5a:38:79:e7:1b:2d:a8:70:3f:10:cf:d7:3c:38:bf:
                    ee:91:c0:cb:06:03:2c:7e:ce:3c:84:9c:67:c6:7d:
                    ec:30:c0:5e:15:07:bb:96:16:e0:5e:e0:f5:15:fe:
                    ad:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:3F:B6:50:8D:BD:16:26:08:0E:63:E4:45:C6:6B:D5:55:F1:12:B3
            X509v3 Authority Key Identifier:
                keyid:05:8E:D2:B8:DD:99:95:2E:31:AF:DA:21:64:E1:A2:3A:82:FB:8F:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CC7B8B67FC9035FBFD716483FDF51A00A3313488054A4C87D78E1FC52D083B9F/0/058ED2B8DD99952E31AFDA2164E1A23A82FB8FAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/058ED2B8DD99952E31AFDA2164E1A23A82FB8FAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CC7B8B67FC9035FBFD716483FDF51A00A3313488054A4C87D78E1FC52D083B9F/0/323830313a3131353a3a2f34382d3438203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:115::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:9e:be:c6:99:f9:cc:3e:d8:76:44:68:dd:99:1e:df:28:95:
         e0:e3:a4:71:82:7f:98:bd:6e:80:8c:90:5a:dd:c1:77:eb:ad:
         65:23:e4:9f:53:a8:ba:a1:65:76:c8:46:f3:e1:58:1b:83:ee:
         f9:f4:ab:46:8b:99:01:ec:af:e2:c0:f1:fd:5a:9c:91:c7:10:
         b6:88:88:21:51:db:cc:16:a3:4e:30:c7:66:75:78:08:86:78:
         20:64:f1:78:53:f5:0a:00:c9:57:fc:0d:e7:36:59:2d:af:56:
         a1:7a:a6:b2:03:7e:59:3a:77:ad:37:79:17:a4:5a:17:26:42:
         63:07:95:56:1a:bd:8c:a1:e8:55:b8:ae:25:1f:c1:fe:f8:ed:
         e1:32:7e:8c:8d:f6:f7:14:bd:3d:44:b8:85:c7:1f:d1:e6:b2:
         90:f9:ee:96:2b:a6:05:3f:90:b1:15:a6:1f:4b:e7:16:ce:c8:
         f7:cc:1d:bf:a0:89:c6:b3:35:6c:04:02:75:52:b7:4b:bb:12:
         62:64:c3:28:09:36:0c:37:b2:7f:be:8e:6e:5e:f4:f5:f1:c0:
         ca:29:e9:9d:2d:f6:32:10:35:fe:8e:da:9b:75:d1:c7:cf:06:
         85:73:c4:c3:97:fa:35:86:15:73:cb:d5:6b:b1:d0:d5:ff:4d:
         4c:cc:f7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:58:29 2026 by rpki-client