This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a3430313a3a2f34382d3438203d3e20323632313931.roa
File:                     323830303a6237303a3430313a3a2f34382d3438203d3e20323632313931.roa (raw, json)
Hash identifier:          WC2QRMJLJAd7KNsKz0TwedMgw0Ex+ecoxXxo+ZpKmvE=
Subject key identifier:   1E:DF:A3:62:2D:A6:50:EB:5B:B4:43:58:78:B7:39:88:85:32:41:40
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       48291FB2160CB59EA841346BEF991682AE546CB4
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a3430313a3a2f34382d3438203d3e20323632313931.roa
Signing time:             Tue 06 Jan 2026 20:55:40 +0000
ROA not before:           Tue 06 Jan 2026 20:50:40 +0000
ROA not after:            Tue 05 Jan 2027 20:55:40 +0000
asID:                     262191
IP address blocks:        2800:b70:401::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 00:41:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:29:1f:b2:16:0c:b5:9e:a8:41:34:6b:ef:99:16:82:ae:54:6c:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Jan  6 20:50:40 2026 GMT
            Not After : Jan  5 20:55:40 2027 GMT
        Subject: CN=1EDFA3622DA650EB5BB4435878B7398885324140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fb:2b:f9:52:ce:a2:4a:24:fb:40:92:31:1c:
                    ff:e9:f0:e3:53:0d:6a:05:62:2d:5d:6d:7c:0b:c0:
                    47:e5:79:90:d9:21:aa:8c:c0:bd:2a:9a:52:0e:51:
                    b2:13:fc:1f:54:d7:57:e5:73:da:53:8c:bb:ef:6b:
                    88:9a:61:e5:ef:98:35:0a:ae:9c:d5:20:0c:7d:db:
                    20:23:33:c2:83:63:2a:fa:03:97:1d:e4:66:5d:1a:
                    06:80:3f:53:18:7c:45:53:50:f6:cc:25:d6:0e:4b:
                    ea:08:45:93:a2:a9:1c:ca:1d:75:49:84:24:9b:16:
                    06:fa:c7:6d:f4:59:00:57:7b:c3:e8:69:5f:75:76:
                    f9:45:db:e4:aa:d3:07:2c:5c:2f:de:e7:60:4a:ad:
                    83:5f:fe:92:cb:c6:38:36:f7:83:9f:e0:9e:4f:88:
                    40:51:46:48:43:cb:c2:8e:83:8d:9a:44:77:24:f1:
                    f8:6a:be:49:f1:c2:93:9e:f0:27:9e:71:0d:ba:ff:
                    b8:20:44:12:4e:04:14:ed:cc:73:7a:4a:36:8f:ee:
                    90:ce:c8:65:ea:99:6f:21:14:a8:fa:87:6b:5e:98:
                    54:4a:d1:f7:0f:54:07:7e:5f:df:ff:79:c5:23:79:
                    4b:8e:b2:6d:b3:ab:e9:ac:f6:0b:f2:76:6b:6f:56:
                    46:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:DF:A3:62:2D:A6:50:EB:5B:B4:43:58:78:B7:39:88:85:32:41:40
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a3430313a3a2f34382d3438203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:401::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:b3:30:31:98:b3:c8:3b:73:1f:ab:3e:11:fc:11:48:14:fe:
         a7:29:38:1e:d5:b6:32:8f:86:06:6a:17:f0:c0:e1:16:26:f5:
         2d:fd:0f:b4:b8:72:9e:5b:e1:01:0f:a8:49:fb:65:cd:56:c0:
         ac:a1:9b:fa:e4:e3:82:af:a5:d0:e1:9f:86:44:22:75:5d:90:
         a4:0b:64:5b:62:f2:8a:e0:82:34:9c:1b:ff:8e:33:fc:fa:5a:
         90:0f:24:38:96:34:7a:e5:79:13:83:31:21:7f:f6:f3:e4:ee:
         73:e4:c8:ef:15:47:47:f8:09:96:ac:b8:23:e5:bc:53:40:41:
         f7:e4:8b:0c:2d:6c:75:b3:6e:98:ca:9b:d6:9b:79:12:4a:79:
         d7:c6:a8:21:ec:d6:17:4f:6e:de:1a:be:51:8d:56:66:ff:92:
         16:3b:ba:a6:b2:39:46:f6:2b:0e:62:a9:52:26:51:47:f0:88:
         f0:c7:4a:94:ca:e9:6e:34:11:6b:a2:03:6c:0c:75:b5:1f:e7:
         36:cb:72:e6:20:ac:ef:e3:d1:c7:bc:43:2d:5d:d5:a7:8f:39:
         45:a2:c1:22:45:9f:f9:77:40:5f:d5:d1:6c:e7:14:98:3d:6a:
         57:8e:5e:aa:a0:fa:21:29:6a:69:d6:29:04:80:fc:52:7b:82:
         ac:08:db:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 20:00:16 2026 by rpki-client