This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F30A48C56AA62874863852B6922DD67019C81AAF14AA58DBB95B9A4762F3FDDD/0/323830313a31623a383830303a3a2f34382d3438203d3e203139343239.roa
File:                     323830313a31623a383830303a3a2f34382d3438203d3e203139343239.roa (raw, json)
Hash identifier:          z1IgzoMbRxxyfXp/6FZ+glqXuKKRYfocnsXXjCzvBPE=
Subject key identifier:   64:7A:0D:8F:D9:26:D4:3A:D5:62:41:31:32:23:4A:95:4D:37:38:5A
Certificate issuer:       /CN=BADCEDF8ED0B8CD69BE9EA779E6EDC9570E7959C
Certificate serial:       289EB8EE198D64B339730976528B2AFDF3B26115
Authority key identifier: BA:DC:ED:F8:ED:0B:8C:D6:9B:E9:EA:77:9E:6E:DC:95:70:E7:95:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BADCEDF8ED0B8CD69BE9EA779E6EDC9570E7959C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F30A48C56AA62874863852B6922DD67019C81AAF14AA58DBB95B9A4762F3FDDD/0/323830313a31623a383830303a3a2f34382d3438203d3e203139343239.roa
Signing time:             Tue 06 Jan 2026 19:37:49 +0000
ROA not before:           Tue 06 Jan 2026 19:32:49 +0000
ROA not after:            Tue 05 Jan 2027 19:37:49 +0000
asID:                     19429
IP address blocks:        2801:1b:8800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F30A48C56AA62874863852B6922DD67019C81AAF14AA58DBB95B9A4762F3FDDD/0/BADCEDF8ED0B8CD69BE9EA779E6EDC9570E7959C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F30A48C56AA62874863852B6922DD67019C81AAF14AA58DBB95B9A4762F3FDDD/0/BADCEDF8ED0B8CD69BE9EA779E6EDC9570E7959C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BADCEDF8ED0B8CD69BE9EA779E6EDC9570E7959C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:9e:b8:ee:19:8d:64:b3:39:73:09:76:52:8b:2a:fd:f3:b2:61:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BADCEDF8ED0B8CD69BE9EA779E6EDC9570E7959C
        Validity
            Not Before: Jan  6 19:32:49 2026 GMT
            Not After : Jan  5 19:37:49 2027 GMT
        Subject: CN=647A0D8FD926D43AD562413132234A954D37385A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:09:95:3c:7e:7e:51:66:23:bb:2b:10:51:51:
                    37:a1:73:c0:4f:f4:3f:e3:1c:3e:f3:39:63:e1:a6:
                    c8:24:f0:78:0b:25:97:a9:70:6a:ee:bf:fa:5e:8c:
                    2d:13:84:d0:e4:33:0f:db:a6:46:cd:b1:b9:ef:43:
                    49:af:a2:68:48:e9:7f:bb:5f:be:17:90:42:b8:e7:
                    34:0d:07:6d:b7:7e:24:96:be:93:e1:30:bd:35:35:
                    cf:8a:56:0a:75:69:3f:8f:0a:bf:dd:8c:07:88:c7:
                    64:08:1d:39:3d:df:b2:f3:81:4e:fa:7f:30:e8:d7:
                    6e:e4:59:c5:65:98:9b:c8:a6:98:14:a1:53:1d:1b:
                    d5:e0:ab:36:d9:1c:2b:77:6c:6b:f7:ee:02:d8:dd:
                    9b:4a:d8:fe:03:d9:68:0c:5f:80:ce:b0:86:c6:36:
                    7c:0f:58:58:00:ea:d8:f3:42:94:18:4b:01:1f:19:
                    48:51:0f:60:00:1d:3c:4a:8a:20:1e:3e:f6:bb:34:
                    62:ee:6a:8b:4e:f5:cb:31:c3:b7:20:47:33:38:72:
                    24:2f:9b:32:1d:d2:06:97:d6:7e:df:46:2a:7c:0d:
                    51:24:78:89:54:08:1d:be:a0:ba:4c:fa:86:36:5b:
                    7b:8d:c1:81:48:7c:72:4b:6e:92:f8:d3:d8:00:37:
                    3d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:7A:0D:8F:D9:26:D4:3A:D5:62:41:31:32:23:4A:95:4D:37:38:5A
            X509v3 Authority Key Identifier:
                keyid:BA:DC:ED:F8:ED:0B:8C:D6:9B:E9:EA:77:9E:6E:DC:95:70:E7:95:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F30A48C56AA62874863852B6922DD67019C81AAF14AA58DBB95B9A4762F3FDDD/0/BADCEDF8ED0B8CD69BE9EA779E6EDC9570E7959C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BADCEDF8ED0B8CD69BE9EA779E6EDC9570E7959C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F30A48C56AA62874863852B6922DD67019C81AAF14AA58DBB95B9A4762F3FDDD/0/323830313a31623a383830303a3a2f34382d3438203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b:8800::/48

    Signature Algorithm: sha256WithRSAEncryption
         cf:87:62:27:47:a0:9c:d3:86:75:8d:57:f9:47:6d:42:e0:12:
         09:7c:3b:9b:4e:01:32:78:e5:9a:36:b8:84:dc:de:c1:b8:61:
         a3:27:90:c0:3d:46:88:50:77:04:b4:09:57:68:63:88:88:b1:
         36:8b:c4:d0:13:f2:77:b3:9f:2e:58:a4:df:69:a5:f3:24:59:
         3f:15:b5:6a:9d:ab:2e:24:46:a3:95:4b:6a:37:a6:43:85:b7:
         dd:67:fa:cc:c8:b4:29:c5:a6:99:3a:94:80:e9:03:33:45:5e:
         0e:d1:54:76:6d:75:a6:4e:62:42:dd:bb:41:bc:fc:ab:2f:41:
         26:7e:1a:c0:96:3a:12:1f:d4:f1:f9:6c:ed:51:b3:18:94:86:
         41:72:9f:44:ec:96:25:2a:15:8a:77:e2:9c:6f:35:dc:dc:ee:
         68:cc:b2:2d:b6:b9:27:8e:2a:ca:fd:13:fe:ac:a8:52:e1:e6:
         4f:46:05:cb:ca:e3:c4:93:22:31:df:c1:58:36:fe:36:a1:1d:
         8e:9c:0e:21:4b:ac:47:d2:5f:1b:81:71:5d:b6:57:38:28:2b:
         ed:fd:ba:76:66:27:d3:49:66:de:82:89:f4:9c:a5:71:2a:c5:
         aa:dc:0b:5c:74:0f:cd:40:ec:9e:6e:b0:aa:9f:da:39:0c:52:
         6f:45:85:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:37 2026 by rpki-client