This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a3a2f33322d3438203d3e20323632353839.roa
File:                     323830303a3331303a3a2f33322d3438203d3e20323632353839.roa (raw, json)
Hash identifier:          b7ddcWH0kJyPtX1nXMzGbYverIndgiauah46rWJTjQY=
Subject key identifier:   E9:8F:B8:A6:BF:7A:C4:58:65:1E:D7:22:4F:2D:F8:6F:7C:0F:17:C1
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       31F30B334AF0FF858F557A5D859EC96377E9A6F7
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a3a2f33322d3438203d3e20323632353839.roa
Signing time:             Tue 06 Jan 2026 19:13:36 +0000
ROA not before:           Tue 06 Jan 2026 19:08:36 +0000
ROA not after:            Tue 05 Jan 2027 19:13:36 +0000
asID:                     262589
IP address blocks:        2800:310::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 05:52:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:f3:0b:33:4a:f0:ff:85:8f:55:7a:5d:85:9e:c9:63:77:e9:a6:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Jan  6 19:08:36 2026 GMT
            Not After : Jan  5 19:13:36 2027 GMT
        Subject: CN=E98FB8A6BF7AC458651ED7224F2DF86F7C0F17C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6d:d0:03:75:61:36:c1:5a:cb:dd:ca:dd:b9:
                    92:04:fe:09:17:a2:93:6c:c1:98:d8:90:90:61:6a:
                    0c:3b:2a:91:a5:97:04:9a:b9:c6:59:5d:0d:0a:39:
                    f7:c7:ca:fb:e1:84:37:98:75:e6:48:72:9e:aa:64:
                    c1:2a:b0:12:17:41:e7:d5:b8:a5:7c:f1:8a:cc:3e:
                    7e:42:8b:2b:ec:ee:85:5d:6d:f3:16:e9:f3:d8:08:
                    09:6e:db:7f:ae:40:fa:9d:21:8f:e0:aa:bf:91:0a:
                    f7:ed:e9:5f:03:87:80:5f:40:94:d1:77:0d:a1:17:
                    7c:2f:56:9a:08:d3:a2:8b:a6:d0:10:f8:03:30:fd:
                    83:15:24:c5:c1:19:65:6f:d0:f2:74:a9:67:62:38:
                    ed:5c:36:c5:0d:b7:c8:70:87:f0:18:74:11:b9:69:
                    47:6d:28:46:b7:51:f5:cd:4c:14:da:aa:ea:72:a0:
                    e4:d7:0b:9e:ff:e9:0f:b9:f5:0a:4f:6d:5e:f1:60:
                    b5:9a:bf:60:e8:3f:88:7b:a3:ed:5d:fd:8f:3d:9e:
                    b6:90:2e:6a:21:d5:50:ff:aa:c8:45:eb:8d:71:14:
                    dd:cc:9a:72:4e:f9:74:1f:ad:4c:a6:20:a5:f0:fc:
                    3f:d0:e0:55:bb:50:3b:d7:89:b1:ef:18:96:a9:c8:
                    76:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:8F:B8:A6:BF:7A:C4:58:65:1E:D7:22:4F:2D:F8:6F:7C:0F:17:C1
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a3a2f33322d3438203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:310::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:4f:e1:fe:a6:c0:d0:d4:ad:3e:b5:b9:c8:18:7e:c6:e2:67:
         63:f5:eb:a8:b9:e0:f0:60:57:3c:aa:84:ea:1d:ff:45:ca:92:
         e2:88:65:36:0b:0f:48:79:df:2a:53:eb:71:fc:d5:95:13:cf:
         49:41:72:7b:6a:91:ee:40:cc:2c:7b:25:64:3a:74:a1:81:89:
         7d:7a:31:7a:b1:75:87:da:f8:28:27:d8:ea:4a:1b:84:b6:33:
         e5:34:d1:5e:ca:1b:4b:41:b7:e9:78:e2:2c:1c:2a:d6:cc:81:
         0b:2c:88:24:77:87:57:eb:bf:9a:a6:8d:56:d0:69:2d:7f:a0:
         76:8e:33:3e:84:89:79:52:72:81:06:4d:d1:4a:a7:a7:2a:dc:
         32:b7:63:4d:00:93:3b:6f:9e:dd:f6:84:d7:be:5f:89:b1:d3:
         f8:bd:2f:b5:08:e1:d6:86:a6:b2:c0:e2:9b:ec:d6:63:d0:a3:
         ed:50:32:c8:f4:bf:0f:ad:93:97:78:68:7b:ec:3c:cf:7d:c7:
         62:d4:fd:f7:03:8a:dc:ee:92:97:e9:c8:b8:80:b1:fe:5b:d8:
         30:19:6b:a9:9b:f0:0a:c4:95:2f:f9:1a:53:d3:57:21:63:5d:
         d7:0c:70:d4:a9:9a:06:b5:f5:87:1c:03:6c:8a:f0:55:22:fd:
         24:f0:7c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 22:15:05 2026 by rpki-client