This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a3830313a3a2f34382d3438203d3e20323632313931.roa
File:                     323830303a6237303a3830313a3a2f34382d3438203d3e20323632313931.roa (raw, json)
Hash identifier:          Q7tlsN1Ex9KF2OmbiVwYe4VKOGNXKYjXPa6sNr3r2K4=
Subject key identifier:   57:DE:48:4A:2E:80:E1:AD:9F:91:B8:F5:39:94:3F:EC:5F:D3:37:34
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       333C478FE8A826B61377064603AA26CE323F07E7
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a3830313a3a2f34382d3438203d3e20323632313931.roa
Signing time:             Tue 06 Jan 2026 20:55:23 +0000
ROA not before:           Tue 06 Jan 2026 20:50:23 +0000
ROA not after:            Tue 05 Jan 2027 20:55:23 +0000
asID:                     262191
IP address blocks:        2800:b70:801::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Jan 2026 04:14:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:3c:47:8f:e8:a8:26:b6:13:77:06:46:03:aa:26:ce:32:3f:07:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Jan  6 20:50:23 2026 GMT
            Not After : Jan  5 20:55:23 2027 GMT
        Subject: CN=57DE484A2E80E1AD9F91B8F539943FEC5FD33734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:30:52:ca:ac:1e:07:ed:a0:c0:4e:c3:c3:cb:
                    4f:4f:e9:45:ed:eb:d1:94:d9:3f:a9:dc:0a:f5:b8:
                    98:64:41:1b:7c:73:9f:2d:2a:54:88:d4:ad:7b:77:
                    7f:2e:f6:54:7f:aa:bd:88:1c:24:ca:6c:45:53:58:
                    65:f4:6f:2e:22:26:c6:22:ab:72:5a:c0:67:d6:94:
                    8c:d1:9b:d5:c1:75:57:43:27:d6:12:83:d1:a4:13:
                    6a:76:a7:47:fc:b4:71:44:7e:a2:6d:ed:0b:12:54:
                    db:87:db:a2:45:5e:de:b3:05:80:45:06:5a:2c:b4:
                    ce:4a:56:39:c7:46:e5:c6:14:d8:ca:f9:f9:fc:65:
                    d1:11:4a:d9:41:ca:f4:c2:1c:42:f9:92:15:09:c7:
                    59:5f:a4:8e:49:8c:94:bb:45:82:b4:ff:67:f3:6c:
                    2f:a3:9c:43:14:52:a5:f9:9d:c0:56:2f:e2:9d:0a:
                    22:0f:a0:20:d7:27:83:b1:3e:ee:67:1a:51:dc:3c:
                    a0:9b:b5:b0:76:65:43:33:72:05:fe:d2:37:e6:57:
                    36:56:4a:0d:dc:1a:bc:6f:16:85:42:cc:36:54:36:
                    a6:34:69:d8:1e:96:fe:26:de:0e:41:4e:e7:52:4b:
                    5f:31:bc:c4:d1:44:34:ad:4a:d2:a6:19:51:6d:f6:
                    aa:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:DE:48:4A:2E:80:E1:AD:9F:91:B8:F5:39:94:3F:EC:5F:D3:37:34
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a3830313a3a2f34382d3438203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:801::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:5a:2d:31:46:03:08:48:b7:f0:db:b8:cb:4d:c9:9d:45:57:
         f6:96:30:bc:92:6f:e6:ce:0c:54:05:7d:b7:07:db:b1:f0:e6:
         34:60:d1:68:04:a4:25:dd:19:83:be:ad:a6:b4:06:99:59:0c:
         79:d1:61:86:9a:88:2e:d1:45:61:66:7a:ad:f4:04:46:bb:b2:
         1a:fb:08:84:94:13:9f:2b:e1:d3:7a:29:12:c8:d0:90:3e:b0:
         34:a8:42:68:9b:e2:07:a7:35:3e:ae:de:40:e8:00:60:82:36:
         be:d7:38:d5:59:75:5e:bc:d2:fc:f2:91:8c:02:ab:8a:94:ef:
         87:c8:c8:d2:a2:4a:ec:c4:31:d3:a0:31:e1:00:38:c0:71:58:
         86:6c:a6:ec:da:65:52:8b:2c:e5:de:ba:fe:c9:80:d6:4d:ad:
         62:98:a4:6a:b1:95:a3:b7:c9:18:03:b6:e4:81:cc:4a:8f:bf:
         78:45:29:46:05:45:21:6d:cd:b9:0d:c3:6c:64:39:bb:f5:ea:
         1c:5a:c7:30:7e:93:88:60:11:83:e0:27:62:43:0d:64:95:e3:
         7a:f3:52:70:09:dc:d6:39:81:c6:93:51:5a:e8:2c:58:c4:4c:
         4c:16:8a:8f:bb:53:ba:d3:4a:cc:bf:c8:0c:2f:c1:6b:fc:e9:
         cc:49:0a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 15:54:37 2026 by rpki-client