This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2583954D10F857B35149AFFDF0098091E3885EFAD57EBE088477A4C4B18E5F8B/0/323830313a31393a633030303a3a2f34382d3438203d3e20323633323137.roa
File:                     323830313a31393a633030303a3a2f34382d3438203d3e20323633323137.roa (raw, json)
Hash identifier:          H4Jnc4O+n0kdi04yi2NyOA4WMFPutLo7RLeVkf7eKZ0=
Subject key identifier:   12:AF:0F:76:55:7F:66:9D:86:32:E5:26:A0:D2:9D:C8:FA:0C:35:DA
Certificate issuer:       /CN=F9704454BEEAA5607C017F2A685262F0B549B68B
Certificate serial:       6E1B8E600A2D3154CF59D78D70DB2018A33162F6
Authority key identifier: F9:70:44:54:BE:EA:A5:60:7C:01:7F:2A:68:52:62:F0:B5:49:B6:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9704454BEEAA5607C017F2A685262F0B549B68B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2583954D10F857B35149AFFDF0098091E3885EFAD57EBE088477A4C4B18E5F8B/0/323830313a31393a633030303a3a2f34382d3438203d3e20323633323137.roa
Signing time:             Tue 06 Jan 2026 19:35:48 +0000
ROA not before:           Tue 06 Jan 2026 19:30:48 +0000
ROA not after:            Tue 05 Jan 2027 19:35:48 +0000
asID:                     263217
IP address blocks:        2801:19:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2583954D10F857B35149AFFDF0098091E3885EFAD57EBE088477A4C4B18E5F8B/0/F9704454BEEAA5607C017F2A685262F0B549B68B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2583954D10F857B35149AFFDF0098091E3885EFAD57EBE088477A4C4B18E5F8B/0/F9704454BEEAA5607C017F2A685262F0B549B68B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9704454BEEAA5607C017F2A685262F0B549B68B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 01:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:1b:8e:60:0a:2d:31:54:cf:59:d7:8d:70:db:20:18:a3:31:62:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9704454BEEAA5607C017F2A685262F0B549B68B
        Validity
            Not Before: Jan  6 19:30:48 2026 GMT
            Not After : Jan  5 19:35:48 2027 GMT
        Subject: CN=12AF0F76557F669D8632E526A0D29DC8FA0C35DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2b:85:e2:89:9f:82:a5:e5:79:e6:30:61:39:
                    b2:02:54:fb:ec:80:3a:4a:5c:d5:bd:31:ef:25:9f:
                    8a:a1:1d:44:f3:f4:34:74:39:0c:e3:39:cc:31:1f:
                    8b:e4:4c:75:35:c6:27:ed:bd:b7:bc:7c:b2:b6:93:
                    c5:83:eb:4e:c9:6b:16:73:e2:7c:b2:41:3b:fb:aa:
                    20:98:a2:0a:3d:61:17:62:8d:a6:99:42:62:89:a0:
                    ca:27:2d:0d:46:da:29:f8:c6:4c:02:da:cb:57:61:
                    e0:b4:2e:be:d6:bf:4c:94:37:49:93:e7:56:84:cb:
                    a3:4a:35:09:b0:a5:be:fd:11:a3:56:87:66:d1:19:
                    96:d8:db:ca:ac:86:98:52:94:3b:81:f0:cc:7f:46:
                    c3:75:9e:38:6e:9d:2a:58:83:f6:12:1e:8f:d3:57:
                    f9:22:c8:f9:d2:c4:47:f3:cd:3e:17:14:fe:6f:0b:
                    ac:39:b2:a9:4d:6a:65:14:23:3a:e7:bd:28:4c:b6:
                    f7:70:5f:a9:d5:d1:76:b7:fd:d9:8c:6d:33:db:ff:
                    f5:02:8d:0c:4d:0d:f6:84:cd:22:7f:2b:b7:0a:61:
                    91:09:dd:2d:29:0f:e8:59:fc:55:7f:fd:ea:81:ce:
                    5a:b5:6c:aa:ab:72:51:8a:e4:89:cd:e8:a6:d4:a0:
                    ad:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:AF:0F:76:55:7F:66:9D:86:32:E5:26:A0:D2:9D:C8:FA:0C:35:DA
            X509v3 Authority Key Identifier:
                keyid:F9:70:44:54:BE:EA:A5:60:7C:01:7F:2A:68:52:62:F0:B5:49:B6:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2583954D10F857B35149AFFDF0098091E3885EFAD57EBE088477A4C4B18E5F8B/0/F9704454BEEAA5607C017F2A685262F0B549B68B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9704454BEEAA5607C017F2A685262F0B549B68B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2583954D10F857B35149AFFDF0098091E3885EFAD57EBE088477A4C4B18E5F8B/0/323830313a31393a633030303a3a2f34382d3438203d3e20323633323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:19:c000::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:84:a3:82:08:1a:91:72:f8:f4:ae:ab:35:e8:23:d5:76:69:
         8e:3a:6a:02:04:6c:8e:63:20:fd:71:97:5b:25:51:8d:e5:c1:
         16:f5:0b:d1:11:00:30:1d:4f:58:37:de:ba:be:35:44:bc:0c:
         4a:a2:af:ac:64:78:7a:3e:f4:b5:5c:09:56:2a:5d:9c:e8:8b:
         05:4a:ad:5a:01:95:76:0d:67:1f:3d:4a:19:95:6e:29:80:ed:
         97:bb:59:1e:1f:99:10:39:68:6e:6f:fd:b9:89:ed:6d:c1:c9:
         f0:3a:5d:b2:b0:e9:b9:53:f7:44:bc:b9:3e:ba:62:76:2f:42:
         e5:f2:51:3e:d7:9f:07:a8:aa:7f:a4:8a:16:8c:bc:ba:14:4e:
         35:92:03:36:ca:e3:60:ab:eb:d5:e3:94:e4:0a:b2:fd:a3:d5:
         87:29:5d:f9:d4:fd:3e:cd:b4:ef:cb:36:e3:c3:c4:46:24:bc:
         8e:42:42:d8:96:83:76:65:79:4d:f2:31:0e:e2:5c:b0:11:75:
         4a:81:d3:6d:9c:ad:d8:59:00:c1:32:32:c2:35:c2:5c:6b:5a:
         4d:f8:31:f7:2d:13:92:3f:bf:f0:10:51:1d:0c:73:fc:38:a6:
         41:3b:2f:88:79:2e:1d:d0:7e:bc:da:c5:88:43:1b:27:fc:91:
         92:db:1f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 07:28:29 2026 by rpki-client