This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a323a3a2f34382d3438203d3e203131383330.roa
File:                     323830313a3135313a323a3a2f34382d3438203d3e203131383330.roa (raw, json)
Hash identifier:          OkeRoQoDvzidhcb7wGC56clGyEfDHGe8eG48np1lYfM=
Subject key identifier:   63:AF:23:69:B1:2A:84:AD:88:0B:57:4E:95:90:2B:DC:15:2B:C1:C2
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       3E09738D0B63AB93F8BBA574425862522124DAB8
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a323a3a2f34382d3438203d3e203131383330.roa
Signing time:             Tue 06 Jan 2026 19:38:19 +0000
ROA not before:           Tue 06 Jan 2026 19:33:19 +0000
ROA not after:            Tue 05 Jan 2027 19:38:19 +0000
asID:                     11830
IP address blocks:        2801:151:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 19:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:09:73:8d:0b:63:ab:93:f8:bb:a5:74:42:58:62:52:21:24:da:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Jan  6 19:33:19 2026 GMT
            Not After : Jan  5 19:38:19 2027 GMT
        Subject: CN=63AF2369B12A84AD880B574E95902BDC152BC1C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4a:79:d8:b9:6b:08:a6:1e:1f:3b:e7:ab:b0:
                    a5:a7:88:ef:75:86:a5:ea:c3:3b:26:0c:21:81:5d:
                    9e:d8:5e:e9:dd:d0:7b:b4:ec:33:d8:ef:ec:13:e4:
                    87:8a:88:20:68:b7:49:78:ef:9b:52:bc:8a:64:11:
                    77:5e:50:9d:bc:97:01:c0:e6:6a:e2:66:33:a5:b0:
                    7e:c4:4f:b8:4f:f2:70:34:d7:ec:c7:5b:e3:d5:27:
                    72:00:da:52:35:92:7b:29:6a:fb:7a:06:76:64:f8:
                    1c:5d:7e:ad:42:e5:23:9b:73:9f:92:a3:dc:68:42:
                    8d:33:83:2d:19:28:89:87:83:d1:c3:4e:c2:55:8b:
                    89:4c:69:26:9b:bf:69:a5:8a:8d:40:3e:47:c0:4d:
                    02:86:07:a1:2f:e7:ba:cc:da:03:0c:18:df:cb:82:
                    cb:55:cb:3f:3d:26:0c:bb:af:8b:ca:d0:02:4e:6b:
                    9c:28:7a:39:3a:2d:a9:4b:32:d1:ce:dc:37:c9:3d:
                    47:92:bf:78:19:79:6b:c5:a3:c7:fe:fa:b7:3a:db:
                    f8:89:6c:58:b7:2c:31:1a:b7:2c:8c:a4:41:e6:02:
                    2e:f0:7d:b1:ff:95:95:55:e2:4d:6b:16:f1:cd:74:
                    f5:bf:f3:be:50:b4:dd:36:bd:9a:f3:0c:79:08:97:
                    b4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:AF:23:69:B1:2A:84:AD:88:0B:57:4E:95:90:2B:DC:15:2B:C1:C2
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a323a3a2f34382d3438203d3e203131383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:8f:36:24:72:32:9e:28:e5:2b:c1:02:6f:25:ac:7e:53:6a:
         9c:c8:15:a4:ab:d9:3c:41:b5:12:8f:2f:97:c3:a8:73:1d:86:
         e9:cb:23:5e:8c:cf:91:90:37:be:40:85:6b:e7:d9:03:fc:3d:
         9c:1b:77:3f:95:e2:c5:8a:6c:ba:cb:a4:b8:d9:45:de:03:49:
         fa:56:b5:f2:eb:74:af:11:49:19:50:07:80:1d:b5:e4:cd:7d:
         dd:59:23:d7:b7:d1:37:a5:d3:6a:9e:9f:fb:c2:25:04:c9:aa:
         ca:ab:65:ed:07:56:1c:fb:33:31:1f:53:d9:e1:58:26:d0:ec:
         09:83:85:5c:19:e2:55:3d:09:d5:07:33:36:b7:a1:93:92:40:
         93:e0:5b:6f:ec:a9:33:23:a4:cf:15:f5:d7:59:d3:bc:b5:ea:
         2c:f2:90:fd:0a:54:04:73:25:7c:14:b6:4b:c6:d8:94:91:f4:
         db:37:44:81:b6:a3:da:66:1c:88:64:18:3e:3f:78:e9:07:cc:
         d6:ef:44:a6:70:f7:b8:87:89:9e:21:dd:18:01:f6:1b:1b:04:
         72:27:cd:65:c4:56:77:4b:d9:93:32:9d:08:88:67:aa:a5:9d:
         2f:80:59:55:7c:8f:e6:4c:82:c5:cb:2c:5a:9b:e0:08:61:73:
         f7:4d:7a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:41:32 2026 by rpki-client