This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/323830313a303a36303a3a2f34382d3438203d3e203532323734.roa
File:                     323830313a303a36303a3a2f34382d3438203d3e203532323734.roa (raw, json)
Hash identifier:          /UvuDVQ0pvUfkh8/MkcXFYSrh1L2FptChdVSfIGH8GQ=
Subject key identifier:   32:BA:A0:BB:FF:BE:F5:83:24:34:CE:94:C4:9F:51:1F:A2:36:93:EC
Certificate issuer:       /CN=3F60989A0240421B9E62F93B598BE390FD6CDCC6
Certificate serial:       465576D8A2614F3588376D6C5C8B3787F1D3502B
Authority key identifier: 3F:60:98:9A:02:40:42:1B:9E:62:F9:3B:59:8B:E3:90:FD:6C:DC:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/323830313a303a36303a3a2f34382d3438203d3e203532323734.roa
Signing time:             Tue 06 Jan 2026 19:03:22 +0000
ROA not before:           Tue 06 Jan 2026 18:58:22 +0000
ROA not after:            Tue 05 Jan 2027 19:03:22 +0000
asID:                     52274
IP address blocks:        2801:0:60::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 09:59:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:55:76:d8:a2:61:4f:35:88:37:6d:6c:5c:8b:37:87:f1:d3:50:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F60989A0240421B9E62F93B598BE390FD6CDCC6
        Validity
            Not Before: Jan  6 18:58:22 2026 GMT
            Not After : Jan  5 19:03:22 2027 GMT
        Subject: CN=32BAA0BBFFBEF5832434CE94C49F511FA23693EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a4:1e:f8:2d:5e:f2:11:55:14:7a:27:5a:fb:
                    a5:c1:57:ec:9f:60:ff:86:8e:c4:b3:61:99:b4:b3:
                    ed:29:65:40:8e:4e:fd:e8:8e:f9:74:39:da:55:e2:
                    c0:0a:4f:9d:64:1d:68:41:66:ef:78:77:fb:db:cb:
                    2c:dc:3a:01:6d:1c:d5:2f:ee:85:ca:2b:1f:65:0d:
                    72:c7:46:e0:e8:d2:b2:a1:d0:c6:e5:e4:de:b1:05:
                    c8:c0:33:7e:59:a4:92:51:90:2a:0a:69:bf:e5:b3:
                    cd:73:97:15:58:9e:6e:a3:dd:b2:b1:9f:a2:b6:6e:
                    8c:f3:d2:60:85:4b:eb:ba:f1:3c:02:9a:1b:2f:e2:
                    26:bc:ae:04:59:00:02:f3:8b:9f:68:86:8f:10:fb:
                    26:0b:0f:7b:08:b1:4e:b6:85:d5:57:12:6a:f2:f4:
                    c5:c4:17:ff:e8:0f:71:68:19:84:09:6b:e7:43:ca:
                    f8:b0:2d:61:e1:58:56:91:97:7d:55:9c:8c:d6:21:
                    8f:b8:6f:6c:d4:8c:29:d0:12:43:aa:b4:0b:cc:1f:
                    00:86:01:64:59:bc:d4:b7:a1:c3:31:6d:d3:af:22:
                    64:82:f7:12:96:7f:a0:e1:d7:63:62:d3:ca:bf:04:
                    0e:84:eb:20:b0:8a:84:30:e1:98:b6:f7:0d:a4:cf:
                    51:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:BA:A0:BB:FF:BE:F5:83:24:34:CE:94:C4:9F:51:1F:A2:36:93:EC
            X509v3 Authority Key Identifier:
                keyid:3F:60:98:9A:02:40:42:1B:9E:62:F9:3B:59:8B:E3:90:FD:6C:DC:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/323830313a303a36303a3a2f34382d3438203d3e203532323734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:60::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:89:a6:21:d8:fa:28:27:67:a2:5e:dd:a0:96:4e:a1:5b:22:
         98:28:d7:81:7a:0b:a3:56:2d:53:1a:d8:8d:7f:2d:9a:cd:7e:
         e1:0f:3e:db:82:0e:15:8d:b4:5b:4c:0a:88:e2:d4:43:04:e3:
         95:5d:e0:f7:72:67:7f:3a:48:c3:3d:70:50:12:ee:ce:7c:ab:
         53:4c:4f:13:bc:0e:77:b9:e8:9d:83:9c:32:79:6a:99:1b:72:
         ee:3a:1d:fd:7c:ac:62:b2:88:4d:21:00:36:42:a3:d9:71:f7:
         87:97:4c:fb:b1:97:fb:23:84:77:69:ef:20:dc:f5:da:ec:7a:
         c9:c8:88:c0:78:a1:05:04:99:25:a2:d4:5d:61:37:7f:cc:93:
         73:bd:93:2c:7b:79:20:bc:42:e6:4d:2a:93:f7:b9:c6:ab:af:
         b3:ba:27:9e:ef:a4:33:87:07:20:81:fd:04:f2:39:51:41:18:
         e7:e2:51:4e:8b:22:0a:ae:55:8c:34:23:68:0b:80:2b:12:29:
         e0:db:80:29:45:20:21:3d:44:fd:74:76:7e:a1:a9:9b:03:1c:
         fd:f6:11:8b:99:ca:db:26:fb:25:13:b6:c8:bc:de:a7:e9:c4:
         ba:72:5a:b5:7e:ee:d5:3f:28:06:98:c2:09:94:65:6a:ce:ab:
         21:99:3c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:30:24 2026 by rpki-client