This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D9887EB7602805A481E1F266FBE8A082634CF7625E143A97A8E169A01EA8CE1F/0/323830313a3163383a3330303a3a2f34302d3430203d3e203133343839.roa
File:                     323830313a3163383a3330303a3a2f34302d3430203d3e203133343839.roa (raw, json)
Hash identifier:          ZBmL+7NWZOHqOOwd4pHe/uBnAYFQVABg7/HVnKixe3E=
Subject key identifier:   C2:79:8C:B5:3C:E7:68:57:F2:55:10:8C:85:98:85:AC:3B:EB:38:8D
Certificate issuer:       /CN=EE696F80F79D5A040A78AEE92CD99FF107BE3183
Certificate serial:       705240ECB75C14983ABF50EF6014FAABB384FA17
Authority key identifier: EE:69:6F:80:F7:9D:5A:04:0A:78:AE:E9:2C:D9:9F:F1:07:BE:31:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE696F80F79D5A040A78AEE92CD99FF107BE3183.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D9887EB7602805A481E1F266FBE8A082634CF7625E143A97A8E169A01EA8CE1F/0/323830313a3163383a3330303a3a2f34302d3430203d3e203133343839.roa
Signing time:             Tue 06 Jan 2026 19:40:04 +0000
ROA not before:           Tue 06 Jan 2026 19:35:04 +0000
ROA not after:            Tue 05 Jan 2027 19:40:04 +0000
asID:                     13489
IP address blocks:        2801:1c8:300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D9887EB7602805A481E1F266FBE8A082634CF7625E143A97A8E169A01EA8CE1F/0/EE696F80F79D5A040A78AEE92CD99FF107BE3183.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D9887EB7602805A481E1F266FBE8A082634CF7625E143A97A8E169A01EA8CE1F/0/EE696F80F79D5A040A78AEE92CD99FF107BE3183.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE696F80F79D5A040A78AEE92CD99FF107BE3183.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:05:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:52:40:ec:b7:5c:14:98:3a:bf:50:ef:60:14:fa:ab:b3:84:fa:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE696F80F79D5A040A78AEE92CD99FF107BE3183
        Validity
            Not Before: Jan  6 19:35:04 2026 GMT
            Not After : Jan  5 19:40:04 2027 GMT
        Subject: CN=C2798CB53CE76857F255108C859885AC3BEB388D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6a:bf:f4:f2:5b:d2:27:fc:f9:2c:cd:55:ae:
                    e2:84:46:38:d1:96:22:8c:34:9b:1c:c9:94:8f:88:
                    44:07:f2:01:8e:04:7f:8b:d7:fe:3c:6c:34:37:a5:
                    8d:f4:2b:a9:78:37:d8:fb:f6:58:14:56:43:2e:7e:
                    cb:f6:c9:16:5b:77:8a:06:19:2b:45:4d:e6:0a:60:
                    29:aa:89:4e:a8:ac:1c:2b:f6:cb:6e:ea:1a:f0:16:
                    07:da:e0:0f:50:ca:24:5d:fc:96:f8:f4:ed:d3:7f:
                    5e:98:5f:5e:86:e4:6d:b2:9e:8b:7f:a3:a9:95:9e:
                    58:88:87:f6:b4:58:7b:34:92:ec:ab:47:a7:13:dd:
                    a4:09:b6:8e:e2:28:82:f5:7a:18:31:55:58:d0:df:
                    1e:d0:b6:e3:b7:93:d4:a8:be:e5:4b:65:6f:67:5b:
                    53:38:77:63:49:9e:14:27:0f:ab:7e:27:e5:d5:44:
                    b6:e3:1c:cb:ef:4e:1e:6a:2f:51:55:09:62:73:96:
                    4b:e2:85:66:90:71:9e:c8:2f:52:71:95:8b:ca:b3:
                    64:ee:08:8f:e5:3b:95:f2:95:bb:b1:35:95:9d:1e:
                    08:11:d2:c9:b3:d8:dc:83:bf:39:23:b3:56:c0:e9:
                    d0:00:1c:79:2c:98:b0:4c:ee:e9:3e:ee:dd:78:af:
                    28:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:79:8C:B5:3C:E7:68:57:F2:55:10:8C:85:98:85:AC:3B:EB:38:8D
            X509v3 Authority Key Identifier:
                keyid:EE:69:6F:80:F7:9D:5A:04:0A:78:AE:E9:2C:D9:9F:F1:07:BE:31:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D9887EB7602805A481E1F266FBE8A082634CF7625E143A97A8E169A01EA8CE1F/0/EE696F80F79D5A040A78AEE92CD99FF107BE3183.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE696F80F79D5A040A78AEE92CD99FF107BE3183.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D9887EB7602805A481E1F266FBE8A082634CF7625E143A97A8E169A01EA8CE1F/0/323830313a3163383a3330303a3a2f34302d3430203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c8:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         b7:08:f9:e9:d3:47:7a:1f:b2:75:d4:8a:43:11:f9:ee:38:a5:
         f7:66:97:a1:a5:ef:ed:e0:d5:32:56:0d:9a:15:4d:8b:67:93:
         a4:b0:99:71:07:ef:f4:9a:a9:12:5e:35:9a:95:43:c6:16:dc:
         3d:62:e8:57:40:af:f8:0e:6a:20:04:fa:22:d4:75:ea:61:72:
         d5:2d:e0:bd:da:fe:ce:24:91:4a:3f:c6:cf:59:db:fa:59:bd:
         1f:13:ce:22:ba:49:71:e3:a7:a8:f7:45:b6:63:2b:8b:c8:4e:
         91:5d:5e:95:b7:31:80:09:4c:b5:ab:87:0b:81:f5:50:06:8c:
         a2:47:ec:f1:0f:37:02:e2:ad:56:7c:43:a1:d7:b7:87:75:78:
         7f:c6:8f:3f:5a:10:1b:c9:1b:08:5c:42:0b:4f:14:00:90:33:
         ae:0b:31:7b:a8:28:97:ec:9a:6a:0a:77:3f:e5:b0:87:c0:0d:
         fc:87:c0:7a:7d:c2:a2:49:e2:fd:1f:0b:b3:b5:71:e6:8c:8e:
         bd:ea:12:59:cc:7e:2a:78:d2:57:c9:2a:05:f5:42:36:91:86:
         87:b4:cf:30:21:ed:a8:0c:b5:4d:3a:f1:24:fa:56:f9:a2:01:
         ca:a2:e8:7c:e7:84:48:c2:c7:ab:73:8d:71:3d:1d:8e:c9:ce:
         d2:6a:34:59
-----BEGIN CERTIFICATE-----
MIIFxDCCBKygAwIBAgIUcFJA7LdcFJg6v1DvYBT6q7OE+hcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU2OTZGODBGNzlENUEwNDBBNzhBRUU5MkNEOTlGRjEw
N0JFMzE4MzAeFw0yNjAxMDYxOTM1MDRaFw0yNzAxMDUxOTQwMDRaMDMxMTAvBgNV
BAMTKEMyNzk4Q0I1M0NFNzY4NTdGMjU1MTA4Qzg1OTg4NUFDM0JFQjM4OEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtar/08lvSJ/z5LM1VruKERjjR
liKMNJscyZSPiEQH8gGOBH+L1/48bDQ3pY30K6l4N9j79lgUVkMufsv2yRZbd4oG
GStFTeYKYCmqiU6orBwr9stu6hrwFgfa4A9QyiRd/Jb49O3Tf16YX16G5G2ynot/
o6mVnliIh/a0WHs0kuyrR6cT3aQJto7iKIL1ehgxVVjQ3x7QtuO3k9SovuVLZW9n
W1M4d2NJnhQnD6t+J+XVRLbjHMvvTh5qL1FVCWJzlkvihWaQcZ7IL1JxlYvKs2Tu
CI/lO5XylbuxNZWdHggR0smz2NyDvzkjs1bA6dAAHHksmLBM7uk+7t14ryhTAgMB
AAGjggLOMIICyjAdBgNVHQ4EFgQUwnmMtTznaFfyVRCMhZiFrDvrOI0wHwYDVR0j
BBgwFoAU7mlvgPedWgQKeK7pLNmf8Qe+MYMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EOTg4N0VCNzYwMjgwNUE0ODFFMUYyNjZGQkU4QTA4MjYz
NENGNzYyNUUxNDNBOTdBOEUxNjlBMDFFQThDRTFGLzAvRUU2OTZGODBGNzlENUEw
NDBBNzhBRUU5MkNEOTlGRjEwN0JFMzE4My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRTY5NkY4MEY3OUQ1QTA0MEE3
OEFFRTkyQ0Q5OUZGMTA3QkUzMTgzLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDk4ODdFQjc2MDI4MDVBNDgxRTFGMjY2RkJFOEEwODI2MzRDRjc2MjVF
MTQzQTk3QThFMTY5QTAxRUE4Q0UxRi8wLzMyMzgzMDMxM2EzMTYzMzgzYTMzMzAz
MDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMxMzMzNDM4Mzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAo
AQHIAzANBgkqhkiG9w0BAQsFAAOCAQEAtwj56dNHeh+yddSKQxH57jil92aXoaXv
7eDVMlYNmhVNi2eTpLCZcQfv9JqpEl41mpVDxhbcPWLoV0Cv+A5qIAT6ItR16mFy
1S3gvdr+ziSRSj/Gz1nb+lm9HxPOIrpJceOnqPdFtmMri8hOkV1elbcxgAlMtauH
C4H1UAaMokfs8Q83AuKtVnxDode3h3V4f8aPP1oQG8kbCFxCC08UAJAzrgsxe6go
l+yaagp3P+Wwh8AN/IfAen3Cokni/R8Ls7Vx5oyOveoSWcx+KnjSV8kqBfVCNpGG
h7TPMCHtqAy1TTrxJPpW+aIByqLofOeESMLHq3ONcT0djsnO0mo0WQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:30:33 2026 by rpki-client