This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23CF7BCF3FD63282E1D70369DF92D59DA09BA872CB25EF30AAAD8D94B9FC4A0C/0/323830313a3137393a313a3a2f34382d3438203d3e203139343239.roa
File:                     323830313a3137393a313a3a2f34382d3438203d3e203139343239.roa (raw, json)
Hash identifier:          RAWxHdFbwTdYTEU1UH7HzeC6PjBM63b9Nd5huhae2cE=
Subject key identifier:   C6:C6:F3:A3:C5:C9:66:00:05:F3:DA:CF:0E:4A:40:3C:B0:FB:E0:47
Certificate issuer:       /CN=AF6194751787595EA94DB6C60FC31E072349AB64
Certificate serial:       761627746DFFD5FD425D807FB65160FA25FC3165
Authority key identifier: AF:61:94:75:17:87:59:5E:A9:4D:B6:C6:0F:C3:1E:07:23:49:AB:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF6194751787595EA94DB6C60FC31E072349AB64.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23CF7BCF3FD63282E1D70369DF92D59DA09BA872CB25EF30AAAD8D94B9FC4A0C/0/323830313a3137393a313a3a2f34382d3438203d3e203139343239.roa
Signing time:             Tue 06 Jan 2026 19:00:05 +0000
ROA not before:           Tue 06 Jan 2026 18:55:05 +0000
ROA not after:            Tue 05 Jan 2027 19:00:05 +0000
asID:                     19429
IP address blocks:        2801:179:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23CF7BCF3FD63282E1D70369DF92D59DA09BA872CB25EF30AAAD8D94B9FC4A0C/0/AF6194751787595EA94DB6C60FC31E072349AB64.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23CF7BCF3FD63282E1D70369DF92D59DA09BA872CB25EF30AAAD8D94B9FC4A0C/0/AF6194751787595EA94DB6C60FC31E072349AB64.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF6194751787595EA94DB6C60FC31E072349AB64.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:16:27:74:6d:ff:d5:fd:42:5d:80:7f:b6:51:60:fa:25:fc:31:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF6194751787595EA94DB6C60FC31E072349AB64
        Validity
            Not Before: Jan  6 18:55:05 2026 GMT
            Not After : Jan  5 19:00:05 2027 GMT
        Subject: CN=C6C6F3A3C5C9660005F3DACF0E4A403CB0FBE047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7a:bb:8e:83:75:dd:60:1d:b3:e8:b0:db:e5:
                    fb:b0:62:ed:0c:1e:68:de:59:a5:f2:8f:fa:cd:45:
                    2b:f8:f5:5f:f0:70:fa:c9:14:47:8c:79:cd:01:34:
                    c3:ee:5b:21:a2:61:bf:99:01:3d:2e:6b:50:c4:63:
                    27:3d:9b:90:f3:c1:d2:e5:0b:05:b4:ff:b5:6b:92:
                    3f:dc:0e:0e:c4:11:a8:c5:f0:96:01:b0:89:3f:7e:
                    55:f8:52:e3:9c:3b:cd:84:23:95:60:02:04:37:67:
                    cc:08:ad:01:42:a9:ee:3f:67:e0:1c:5a:f6:f3:9c:
                    74:82:b0:47:fa:99:55:8b:3c:19:80:f5:4c:35:86:
                    4f:ad:27:6f:cd:ee:a6:30:1f:f5:25:03:42:08:6a:
                    11:cc:77:34:5d:64:9f:8d:9c:be:71:51:17:db:1a:
                    d1:e0:3e:17:c8:09:e2:c4:3d:6b:16:d9:dd:ae:d2:
                    e9:89:03:4b:d2:d6:84:c7:e0:4d:0f:d5:eb:bb:30:
                    8d:fc:8e:33:60:96:33:dd:a2:3f:40:02:61:95:ea:
                    4c:31:53:2f:5a:88:9f:7e:9f:b2:fe:30:b6:49:ed:
                    0a:b0:93:a3:9d:99:80:da:76:a1:06:db:74:96:f0:
                    97:ad:a0:bf:4d:12:cc:7c:9a:fd:1e:d3:cd:d0:b5:
                    f5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C6:F3:A3:C5:C9:66:00:05:F3:DA:CF:0E:4A:40:3C:B0:FB:E0:47
            X509v3 Authority Key Identifier:
                keyid:AF:61:94:75:17:87:59:5E:A9:4D:B6:C6:0F:C3:1E:07:23:49:AB:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23CF7BCF3FD63282E1D70369DF92D59DA09BA872CB25EF30AAAD8D94B9FC4A0C/0/AF6194751787595EA94DB6C60FC31E072349AB64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF6194751787595EA94DB6C60FC31E072349AB64.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23CF7BCF3FD63282E1D70369DF92D59DA09BA872CB25EF30AAAD8D94B9FC4A0C/0/323830313a3137393a313a3a2f34382d3438203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:179:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:0f:7f:78:89:07:f5:7d:60:a5:6b:a5:85:b7:37:f3:ba:01:
         e7:bd:2b:7e:c5:76:43:9d:70:8f:41:02:b7:fc:66:85:94:fa:
         60:58:98:4a:96:5c:f3:87:c7:26:ec:9c:ee:c7:b1:42:87:b5:
         02:65:7e:76:15:25:87:87:e3:19:97:64:3a:eb:93:af:7d:56:
         15:e0:0b:3a:8b:55:ae:04:63:67:0a:82:4c:ac:e9:f2:d0:76:
         f7:7e:d3:1d:0a:46:58:3a:c0:16:63:49:55:a7:dd:e0:84:6c:
         7a:a6:67:4d:c2:00:4a:ba:23:dc:b7:5d:f8:9f:13:a4:91:51:
         28:31:00:7f:99:7d:0c:7f:3a:52:2e:56:9d:af:c8:d0:47:bf:
         dd:f9:71:5f:4f:96:31:ea:95:ee:22:0c:c5:e1:d8:89:d4:96:
         5b:31:c2:89:7c:30:d4:a1:30:84:65:2f:20:b0:4f:07:00:ac:
         d3:0c:50:00:8f:7e:06:f0:41:23:74:be:a3:c0:2a:b1:09:c9:
         b8:13:e6:cf:11:f3:88:ad:b1:f2:1a:5a:6c:46:85:da:1a:6d:
         d1:53:bd:ec:8d:8f:00:5f:f6:60:9c:14:1d:b1:a1:41:cd:48:
         76:95:cc:c6:cb:ec:c9:1d:66:7b:ea:14:99:2f:3d:c3:e1:31:
         87:de:ff:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 08:16:07 2026 by rpki-client