This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31643a3a2f34382d3438203d3e20323632313931.roa
File:                     323830303a6237303a31643a3a2f34382d3438203d3e20323632313931.roa (raw, json)
Hash identifier:          9fqhcOZZAKHXDGTnXMlq8yzPMu1muU5N7TbdeKsg9Ck=
Subject key identifier:   CD:6E:87:A8:94:F5:0D:70:B6:DC:71:D7:58:33:20:99:03:3B:87:D7
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       6391559C5C0FB5BE33881DAF4C04CA3AB25B0AEA
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31643a3a2f34382d3438203d3e20323632313931.roa
Signing time:             Tue 06 Jan 2026 20:55:29 +0000
ROA not before:           Tue 06 Jan 2026 20:50:29 +0000
ROA not after:            Tue 05 Jan 2027 20:55:29 +0000
asID:                     262191
IP address blocks:        2800:b70:1d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 00:41:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:91:55:9c:5c:0f:b5:be:33:88:1d:af:4c:04:ca:3a:b2:5b:0a:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Jan  6 20:50:29 2026 GMT
            Not After : Jan  5 20:55:29 2027 GMT
        Subject: CN=CD6E87A894F50D70B6DC71D758332099033B87D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:31:36:e7:78:92:f1:d9:80:d5:a0:57:f1:28:
                    ab:97:ae:f8:56:02:b2:f0:4a:55:6b:df:e6:3b:b7:
                    14:f5:39:c8:1d:c8:9b:b7:85:38:31:eb:c1:6c:bd:
                    c4:b1:db:fc:52:e7:b8:ee:6a:49:30:bc:64:9e:0f:
                    cc:a0:d4:a6:ce:68:5f:dc:13:07:87:d6:20:a5:73:
                    a1:ec:ef:67:bb:f3:e9:6c:91:63:1f:0d:a5:07:ea:
                    4c:16:85:72:0f:5f:ed:63:e3:b0:18:a9:b6:b8:92:
                    f3:01:ba:d1:77:86:da:65:1a:41:ae:01:b3:5d:ea:
                    03:74:6b:bf:b4:46:aa:80:c8:c7:17:c8:d2:fa:5e:
                    d1:10:8b:25:27:a4:a3:29:35:1d:49:c8:18:04:de:
                    93:aa:22:97:1a:86:f7:51:54:e3:84:8b:60:ea:ef:
                    f7:33:9e:4e:6b:87:e5:34:25:47:aa:90:8d:fa:c3:
                    83:76:3a:6b:c9:c5:c8:08:9a:e3:69:98:be:b5:06:
                    2d:6b:27:ea:f1:05:60:75:5a:cc:fc:06:0e:94:4e:
                    51:8e:bd:6f:e0:8c:ce:20:95:a2:01:4f:88:9f:56:
                    e8:1d:3c:11:5e:30:1e:52:0c:10:8e:4f:5a:f3:13:
                    d5:73:c8:0d:71:e2:01:59:ca:f0:5d:a8:13:56:58:
                    a2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:6E:87:A8:94:F5:0D:70:B6:DC:71:D7:58:33:20:99:03:3B:87:D7
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31643a3a2f34382d3438203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:1d::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:1f:18:ac:cb:d5:fa:70:99:c2:df:28:51:f9:bf:62:fa:8e:
         ea:fb:a8:8d:2b:db:77:cd:ca:17:ee:0f:67:62:dd:a1:8f:78:
         34:b9:19:11:b4:b2:ee:dd:ad:d1:90:e6:63:97:73:0d:74:5a:
         43:b2:43:ae:a8:c4:b8:14:fb:07:89:47:8a:25:c0:87:6b:b9:
         da:8b:81:8d:0a:02:6b:b6:84:8e:4e:07:ea:03:fd:86:cc:c3:
         74:c3:4d:3b:32:a0:9d:30:3b:be:bf:c3:ba:8d:39:8f:39:ca:
         9a:3e:72:ca:21:18:dc:3b:47:e1:0b:d2:1f:a6:53:06:23:9a:
         8a:19:7f:ec:8c:df:66:50:30:06:e9:0a:48:02:40:61:a3:3c:
         8a:de:61:78:04:bc:a7:1f:8f:38:f0:60:0e:90:2e:ac:64:9a:
         95:ee:f4:b3:90:26:e6:b5:a9:20:6c:f3:d4:1a:82:fe:12:75:
         3e:7c:94:0e:50:ae:2f:27:9d:86:e4:88:3b:12:2b:e6:ac:4d:
         f1:4a:bb:37:58:72:06:bc:f8:86:47:a0:41:37:31:15:05:51:
         ff:72:f9:3c:c1:51:82:68:37:8e:b4:dc:ef:dd:fd:5b:80:5a:
         8a:51:3e:46:71:49:a5:a4:fc:04:dc:37:3d:b6:47:b0:c8:d9:
         ca:c0:90:66
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUY5FVnFwPtb4ziB2vTATKOrJbCuowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODVEOUU3RDlCRUVGRUQwQjlFMTg4REI3RThDQzNCNjQ4
OTA2NkRDRDAeFw0yNjAxMDYyMDUwMjlaFw0yNzAxMDUyMDU1MjlaMDMxMTAvBgNV
BAMTKENENkU4N0E4OTRGNTBENzBCNkRDNzFENzU4MzMyMDk5MDMzQjg3RDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaMTbneJLx2YDVoFfxKKuXrvhW
ArLwSlVr3+Y7txT1OcgdyJu3hTgx68FsvcSx2/xS57juakkwvGSeD8yg1KbOaF/c
EweH1iClc6Hs72e78+lskWMfDaUH6kwWhXIPX+1j47AYqba4kvMButF3htplGkGu
AbNd6gN0a7+0RqqAyMcXyNL6XtEQiyUnpKMpNR1JyBgE3pOqIpcahvdRVOOEi2Dq
7/cznk5rh+U0JUeqkI36w4N2OmvJxcgImuNpmL61Bi1rJ+rxBWB1Wsz8Bg6UTlGO
vW/gjM4glaIBT4ifVugdPBFeMB5SDBCOT1rzE9VzyA1x4gFZyvBdqBNWWKJZAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUzW6HqJT1DXC23HHXWDMgmQM7h9cwHwYDVR0j
BBgwFoAUhdnn2b7v7QueGI236Mw7ZIkGbc0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQUQ3MjYxQzdGRDFFNEVGRUNFQkU2RjM2MkZDRDBDNzU2
OTdFMDZCNDE0NzRCRUE4Q0FCQzcwNkY3OUVDRjNELzAvODVEOUU3RDlCRUVGRUQw
QjlFMTg4REI3RThDQzNCNjQ4OTA2NkRDRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NUQ5RTdEOUJFRUZFRDBCOUUx
ODhEQjdFOENDM0I2NDg5MDY2RENELmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUFENzI2MUM3RkQxRTRFRkVDRUJFNkYzNjJGQ0QwQzc1Njk3RTA2QjQx
NDc0QkVBOENBQkM3MDZGNzlFQ0YzRC8wLzMyMzgzMDMwM2E2MjM3MzAzYTMxNjQz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzIzMTM5MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AAtwAB0wDQYJKoZIhvcNAQELBQADggEBAG8fGKzL1fpwmcLfKFH5v2L6jur7qI0r
23fNyhfuD2di3aGPeDS5GRG0su7drdGQ5mOXcw10WkOyQ66oxLgU+weJR4olwIdr
udqLgY0KAmu2hI5OB+oD/YbMw3TDTTsyoJ0wO76/w7qNOY85ypo+csohGNw7R+EL
0h+mUwYjmooZf+yM32ZQMAbpCkgCQGGjPIreYXgEvKcfjzjwYA6QLqxkmpXu9LOQ
Jua1qSBs89Qagv4SdT58lA5Qri8nnYbkiDsSK+asTfFKuzdYcga8+IZHoEE3MRUF
Uf9y+TzBUYJoN4603O/d/VuAWopRPkZxSaWk/ATcNz22R7DI2crAkGY=
-----END CERTIFICATE-----
Generated at Sun Jan 11 20:46:26 2026 by rpki-client