This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/090546218E9321C949CA5DB7B29F5A997FB047519B3E67B5D3CABDB9B936B5D0/0/323830313a31353a333030303a3a2f34382d3438203d3e20323635363936.roa
File:                     323830313a31353a333030303a3a2f34382d3438203d3e20323635363936.roa (raw, json)
Hash identifier:          ZVKzVU75JWT7OUoyMbqkwtCWezWNvjWcIuGa+SJv37A=
Subject key identifier:   88:13:B0:B9:41:DB:AC:3F:86:7C:21:07:75:FC:9F:A8:30:F6:F7:48
Certificate issuer:       /CN=1B9066B2C8923ED70E1BBD9C8EE15F273D6716E9
Certificate serial:       665A78149AA50EB10CFB542E736FCF5C9AB1FA9F
Authority key identifier: 1B:90:66:B2:C8:92:3E:D7:0E:1B:BD:9C:8E:E1:5F:27:3D:67:16:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B9066B2C8923ED70E1BBD9C8EE15F273D6716E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/090546218E9321C949CA5DB7B29F5A997FB047519B3E67B5D3CABDB9B936B5D0/0/323830313a31353a333030303a3a2f34382d3438203d3e20323635363936.roa
Signing time:             Tue 06 Jan 2026 19:18:58 +0000
ROA not before:           Tue 06 Jan 2026 19:13:58 +0000
ROA not after:            Tue 05 Jan 2027 19:18:58 +0000
asID:                     265696
IP address blocks:        2801:15:3000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/090546218E9321C949CA5DB7B29F5A997FB047519B3E67B5D3CABDB9B936B5D0/0/1B9066B2C8923ED70E1BBD9C8EE15F273D6716E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/090546218E9321C949CA5DB7B29F5A997FB047519B3E67B5D3CABDB9B936B5D0/0/1B9066B2C8923ED70E1BBD9C8EE15F273D6716E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B9066B2C8923ED70E1BBD9C8EE15F273D6716E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 02:17:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:5a:78:14:9a:a5:0e:b1:0c:fb:54:2e:73:6f:cf:5c:9a:b1:fa:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B9066B2C8923ED70E1BBD9C8EE15F273D6716E9
        Validity
            Not Before: Jan  6 19:13:58 2026 GMT
            Not After : Jan  5 19:18:58 2027 GMT
        Subject: CN=8813B0B941DBAC3F867C210775FC9FA830F6F748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5a:f9:63:15:58:57:22:d1:aa:d9:fa:02:a7:
                    b1:8d:a7:40:6d:88:2c:db:83:a5:8d:22:30:76:88:
                    ac:3f:33:26:59:6f:1f:32:8f:0f:17:42:72:b4:92:
                    ab:22:e2:48:e5:ba:b7:a4:ac:70:f0:f3:3e:1b:a2:
                    29:b5:b0:ae:c8:3f:69:07:f9:e9:dd:b4:bb:ef:b6:
                    ee:fb:42:84:44:75:6c:32:ae:d6:b5:2b:a9:6e:09:
                    1b:4a:eb:52:d1:ca:93:d5:e7:03:f4:db:6b:69:af:
                    c4:0d:22:27:27:d1:9f:64:e2:ae:c7:dc:96:4e:38:
                    e2:ae:cc:45:b4:27:77:53:f6:7c:fd:5f:47:6a:ae:
                    ca:26:cf:16:c9:73:76:a3:15:e1:bb:9e:be:d2:49:
                    8d:5d:9d:bb:9d:35:dd:d4:50:28:63:1c:be:5f:8d:
                    37:94:d2:a7:e2:c9:e2:d3:66:67:ed:7d:a6:ec:5a:
                    46:4e:b4:bd:cb:de:69:18:ec:d5:cb:db:87:7b:04:
                    d7:bf:9e:c6:0f:fc:21:39:38:ad:40:69:11:3b:da:
                    8e:30:6c:b2:e5:05:c6:07:d8:fa:63:b5:09:38:f2:
                    7b:65:77:4c:f4:c3:74:ab:09:9d:44:59:9d:f7:8d:
                    35:0b:5a:56:a2:c6:5f:93:ef:79:f6:64:fd:a9:2a:
                    be:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:13:B0:B9:41:DB:AC:3F:86:7C:21:07:75:FC:9F:A8:30:F6:F7:48
            X509v3 Authority Key Identifier:
                keyid:1B:90:66:B2:C8:92:3E:D7:0E:1B:BD:9C:8E:E1:5F:27:3D:67:16:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/090546218E9321C949CA5DB7B29F5A997FB047519B3E67B5D3CABDB9B936B5D0/0/1B9066B2C8923ED70E1BBD9C8EE15F273D6716E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B9066B2C8923ED70E1BBD9C8EE15F273D6716E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/090546218E9321C949CA5DB7B29F5A997FB047519B3E67B5D3CABDB9B936B5D0/0/323830313a31353a333030303a3a2f34382d3438203d3e20323635363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:15:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:87:e8:d8:07:a9:41:7f:d4:c1:0b:3c:c4:d2:d9:62:eb:76:
         fc:f9:af:05:3c:f2:fd:03:8e:9e:24:2e:da:d5:2c:57:2f:2e:
         20:71:bb:b9:4f:9f:eb:ba:7f:9b:c6:d0:d6:f9:5e:37:72:a5:
         34:f3:c0:11:fb:41:91:4e:d8:25:3e:b2:71:68:2c:da:da:0c:
         c2:24:8a:77:93:21:34:8f:4b:14:80:b8:c2:12:59:ad:40:06:
         24:03:db:3e:93:c6:7c:33:5b:2a:0c:8f:c0:f0:fd:8a:e4:88:
         c1:63:af:67:9d:bd:ab:e6:bf:9e:92:bc:fe:8c:de:2a:7c:46:
         8b:90:22:7e:8f:53:51:ad:1c:e9:c9:0b:66:ed:86:e5:fe:e7:
         80:e6:e0:73:36:43:01:12:8b:62:75:75:4b:9b:f8:07:b8:56:
         95:b3:59:e9:87:c3:61:a3:be:d2:87:a3:9f:39:00:eb:93:a8:
         a1:a2:6d:4b:7d:92:5b:45:f3:27:7a:53:28:34:90:4b:98:12:
         3c:6e:44:b6:58:7f:c6:a7:54:7b:11:4a:08:19:38:2c:c7:93:
         f0:ac:46:51:bb:e6:4e:e7:9d:13:f7:54:1c:2a:e7:37:28:fa:
         30:0f:06:9a:06:a1:4b:f4:00:9a:22:34:8f:d2:94:48:08:c9:
         53:d7:70:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 20:00:40 2026 by rpki-client