This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/323830303a3839303a3a2f33322d3438203d3e203134373534.roa
File:                     323830303a3839303a3a2f33322d3438203d3e203134373534.roa (raw, json)
Hash identifier:          vnFGo6OYro2CwnjmizK25Uw1ZXLUO9rwb8f3KIfgStg=
Subject key identifier:   B3:D7:C0:D9:30:78:86:C7:68:DF:AF:15:B5:9E:A3:73:21:C0:18:5B
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       09B509187192CE058252441C6CE532D0754405ED
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/323830303a3839303a3a2f33322d3438203d3e203134373534.roa
Signing time:             Tue 06 Jan 2026 19:47:25 +0000
ROA not before:           Tue 06 Jan 2026 19:42:25 +0000
ROA not after:            Tue 05 Jan 2027 19:47:25 +0000
asID:                     14754
IP address blocks:        2800:890::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:b5:09:18:71:92:ce:05:82:52:44:1c:6c:e5:32:d0:75:44:05:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Jan  6 19:42:25 2026 GMT
            Not After : Jan  5 19:47:25 2027 GMT
        Subject: CN=B3D7C0D9307886C768DFAF15B59EA37321C0185B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6e:84:45:3f:dd:3c:a0:2f:93:e7:b0:d1:de:
                    67:7f:cd:03:d2:e6:01:cc:e0:00:a2:5a:89:cf:18:
                    b2:ea:40:46:d3:2e:8f:9d:6f:0c:ed:14:de:6c:e3:
                    08:66:2a:5a:71:06:de:51:6b:cf:62:c9:fa:1e:95:
                    b3:7e:7a:bf:8c:f2:23:62:8c:9a:ae:70:a0:c2:b7:
                    7c:75:7f:6c:12:76:d3:25:9b:9c:44:6e:ef:5c:72:
                    9f:09:13:06:4e:26:1b:e7:09:bc:d6:4b:42:6d:05:
                    51:55:70:31:c5:fc:4f:59:bf:66:06:72:1b:ec:95:
                    2f:f9:40:c9:e5:22:10:f1:63:55:36:22:0e:36:7f:
                    ed:e2:26:55:0f:87:b4:f8:31:e8:8f:5b:35:a9:45:
                    39:b6:c4:35:4b:cb:fa:d8:9a:2b:82:d2:24:d1:4d:
                    04:27:64:d7:dc:e0:4d:de:4d:63:3e:f4:8a:31:8b:
                    df:4b:09:f5:6f:d5:fc:a4:38:72:7a:5b:27:cd:16:
                    96:2d:7c:c9:4a:80:05:70:09:9a:75:dc:ec:ae:f0:
                    a6:03:45:d2:f3:2e:d0:2a:2a:f0:24:5c:cb:9c:58:
                    87:f1:02:75:cd:2d:e9:b6:73:64:76:b5:10:cb:98:
                    b7:bd:2b:93:09:08:0e:d1:43:54:24:df:58:5f:1d:
                    e0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D7:C0:D9:30:78:86:C7:68:DF:AF:15:B5:9E:A3:73:21:C0:18:5B
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/323830303a3839303a3a2f33322d3438203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:890::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:c1:af:d2:a1:26:c5:6f:e3:99:5c:6c:ce:fd:05:20:26:5e:
         fa:b1:7f:91:6b:d8:ba:90:18:bb:e2:2f:c6:29:61:d0:eb:7c:
         94:5b:ad:28:1c:27:0e:67:06:52:7b:78:ff:4d:bf:c1:a2:a9:
         ad:94:37:70:be:08:77:11:21:1d:07:bf:f2:71:70:a4:a7:ab:
         c6:16:5f:55:d8:49:d8:3a:b9:7b:7d:f1:8b:08:8e:eb:35:98:
         4d:5f:12:42:3e:32:7b:40:32:9b:10:f1:b3:c6:99:b1:8d:31:
         f3:bc:00:9b:d5:5d:b8:db:7a:3f:ec:ad:21:6e:dd:94:2d:cb:
         f0:eb:45:44:29:3a:ed:e2:31:69:4a:09:14:31:38:32:68:4d:
         2f:98:e1:f0:c2:72:3e:99:14:db:a2:6a:3a:77:c2:5e:6f:5a:
         5a:a4:40:7d:d2:9a:df:01:ae:b6:80:fb:b6:49:b0:9e:a9:fa:
         4f:c5:3d:02:a5:47:d5:03:79:e2:03:72:f3:35:97:f6:59:39:
         6a:25:46:5b:0f:f1:c4:7e:26:c6:b3:0b:59:ab:c2:d1:36:8d:
         ff:fa:bb:85:6b:7b:98:d2:ce:8a:c7:c3:3f:44:a4:f2:51:cf:
         1b:45:60:e8:c3:a1:73:c4:28:0b:b2:40:9d:22:1c:36:e6:ce:
         a0:89:66:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 17:25:02 2026 by rpki-client