This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a313a3a2f34382d3438203d3e2033373930.roa
File:                     323830313a3135313a313a3a2f34382d3438203d3e2033373930.roa (raw, json)
Hash identifier:          3LnTmsgYgbovQwqFkh4NdhrBs7qhgzoOumYiBxU+VOs=
Subject key identifier:   1A:0B:A7:0C:B5:4F:5B:9B:5D:D6:F3:63:65:45:0A:48:28:53:BA:AF
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       35084B8FFF6F5D6EB61432B66900D7CA9F770473
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a313a3a2f34382d3438203d3e2033373930.roa
Signing time:             Tue 06 Jan 2026 19:38:07 +0000
ROA not before:           Tue 06 Jan 2026 19:33:07 +0000
ROA not after:            Tue 05 Jan 2027 19:38:07 +0000
asID:                     3790
IP address blocks:        2801:151:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:08:4b:8f:ff:6f:5d:6e:b6:14:32:b6:69:00:d7:ca:9f:77:04:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Jan  6 19:33:07 2026 GMT
            Not After : Jan  5 19:38:07 2027 GMT
        Subject: CN=1A0BA70CB54F5B9B5DD6F36365450A482853BAAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d8:59:00:93:08:9d:c1:db:95:c0:05:d9:67:
                    36:64:08:25:f5:16:0b:81:ac:16:64:2e:18:1e:75:
                    89:61:01:2a:38:e3:a7:81:2f:b2:4a:53:e0:81:11:
                    3b:fa:94:c7:58:cf:27:f2:64:99:eb:b2:82:98:24:
                    3b:38:b8:b4:97:58:c1:a6:81:86:f1:44:30:4d:15:
                    7f:09:65:30:fc:1b:fb:49:e3:18:ef:cd:ee:a2:5e:
                    13:dc:03:4d:66:c5:ae:0a:12:07:4c:3b:44:7e:98:
                    67:4e:b1:48:20:c3:ab:68:3c:9a:bc:55:51:38:d5:
                    6f:e5:7b:13:de:14:c0:e8:a1:4f:10:88:88:96:38:
                    be:cd:05:21:e6:2c:5d:03:04:9d:c3:13:b6:35:35:
                    49:55:2f:4d:8a:84:99:64:8e:8e:25:e3:08:42:d6:
                    07:eb:04:ae:2d:62:dd:5e:47:bc:a1:86:56:4b:64:
                    08:e9:06:fe:33:c4:64:a1:49:fe:b6:15:cf:13:57:
                    9b:7b:1e:7f:3f:e6:b2:05:0b:28:f7:b3:c9:e3:80:
                    eb:00:de:c3:1b:fb:e7:0e:f2:f4:e6:49:4f:47:28:
                    64:e8:4c:82:2d:86:de:f3:26:d8:4a:75:09:a1:c3:
                    d6:9a:7e:cc:b4:2d:22:c7:49:40:4e:fc:d3:21:2c:
                    0a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:0B:A7:0C:B5:4F:5B:9B:5D:D6:F3:63:65:45:0A:48:28:53:BA:AF
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a313a3a2f34382d3438203d3e2033373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:ca:4c:6c:f4:28:77:e5:08:bd:18:21:66:8d:6e:97:66:34:
         e9:f0:cd:4a:89:c4:0e:dc:2b:62:82:17:7a:02:41:5c:47:df:
         e1:2c:9a:e2:32:6f:21:d6:0c:0a:df:2e:ab:b4:e5:5d:91:1e:
         e0:d5:ce:06:eb:50:2a:2a:ed:f3:b4:f7:7c:a5:99:71:e3:1d:
         cd:b1:ff:9f:e4:49:f3:4b:9b:d7:1d:f2:ca:dd:76:1a:85:2b:
         2b:cb:19:a9:eb:77:8f:c9:f3:97:c4:bf:7f:36:fc:1c:60:ea:
         3f:fd:55:1a:96:87:22:52:a9:93:d8:8e:14:eb:42:43:67:16:
         d5:af:f8:27:1e:17:2e:1c:0a:e3:04:72:04:23:ce:a1:97:57:
         57:a5:70:22:47:c6:e2:9c:4a:ed:c3:12:16:cc:47:53:86:7d:
         82:f7:ca:51:44:78:c1:22:71:4f:be:66:da:53:4d:cb:6f:d1:
         07:1f:94:9a:fd:3f:d4:01:43:96:60:d5:59:1c:cb:18:62:58:
         80:7e:96:90:a6:06:99:75:3e:ce:de:ab:81:58:9d:0e:9d:35:
         ad:39:2f:16:b2:0b:4d:05:50:ea:8a:59:dc:d6:53:99:ef:50:
         7e:96:5d:cf:a1:ff:79:1e:e5:75:34:3e:35:09:0a:cd:1c:55:
         45:bf:d5:bc
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUNQhLj/9vXW62FDK2aQDXyp93BHMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDMxMkFDQjIyMjZGOEI4OEU1RTg5RUYyRjE0NDJCOEVF
RkIzQjI3OTAeFw0yNjAxMDYxOTMzMDdaFw0yNzAxMDUxOTM4MDdaMDMxMTAvBgNV
BAMTKDFBMEJBNzBDQjU0RjVCOUI1REQ2RjM2MzY1NDUwQTQ4Mjg1M0JBQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC2FkAkwidwduVwAXZZzZkCCX1
FguBrBZkLhgedYlhASo446eBL7JKU+CBETv6lMdYzyfyZJnrsoKYJDs4uLSXWMGm
gYbxRDBNFX8JZTD8G/tJ4xjvze6iXhPcA01mxa4KEgdMO0R+mGdOsUggw6toPJq8
VVE41W/lexPeFMDooU8QiIiWOL7NBSHmLF0DBJ3DE7Y1NUlVL02KhJlkjo4l4whC
1gfrBK4tYt1eR7yhhlZLZAjpBv4zxGShSf62Fc8TV5t7Hn8/5rIFCyj3s8njgOsA
3sMb++cO8vTmSU9HKGToTIItht7zJthKdQmhw9aafsy0LSLHSUBO/NMhLAp3AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUGgunDLVPW5td1vNjZUUKSChTuq8wHwYDVR0j
BBgwFoAUQxKssiJvi4jl6J7y8UQrju+zsnkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQjgxNUM3OERERDQwQjQ5MjdEOTgwRkE5NEU4RDA3QUQz
NEMzNDNBQTFGMjNDRDVEREU5NUZFRjlGQkNGMUE0LzAvNDMxMkFDQjIyMjZGOEI4
OEU1RTg5RUYyRjE0NDJCOEVFRkIzQjI3OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MzEyQUNCMjIyNkY4Qjg4RTVF
ODlFRjJGMTQ0MkI4RUVGQjNCMjc5LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUI4MTVDNzhEREQ0MEI0OTI3RDk4MEZBOTRFOEQwN0FEMzRDMzQzQUEx
RjIzQ0Q1RERFOTVGRUY5RkJDRjFBNC8wLzMyMzgzMDMxM2EzMTM1MzEzYTMxM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzMzNzM5MzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoAQFRAAEw
DQYJKoZIhvcNAQELBQADggEBAAbKTGz0KHflCL0YIWaNbpdmNOnwzUqJxA7cK2KC
F3oCQVxH3+EsmuIybyHWDArfLqu05V2RHuDVzgbrUCoq7fO093ylmXHjHc2x/5/k
SfNLm9cd8srddhqFKyvLGanrd4/J85fEv382/Bxg6j/9VRqWhyJSqZPYjhTrQkNn
FtWv+CceFy4cCuMEcgQjzqGXV1elcCJHxuKcSu3DEhbMR1OGfYL3ylFEeMEicU++
ZtpTTctv0QcflJr9P9QBQ5Zg1VkcyxhiWIB+lpCmBpl1Ps7eq4FYnQ6dNa05Lxay
C00FUOqKWdzWU5nvUH6WXc+h/3ke5XU0PjUJCs0cVUW/1bw=
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:53:48 2026 by rpki-client