This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/323830313a31303a363830303a3a2f34382d3438203d3e20323731383231.roa
File:                     323830313a31303a363830303a3a2f34382d3438203d3e20323731383231.roa (raw, json)
Hash identifier:          fd/HhJWouPlTi+Zt5bURsA85n8jC/vtith/BWIoHcQA=
Subject key identifier:   7A:0B:E8:11:43:09:66:EC:0E:C1:2E:ED:05:E4:89:12:49:D1:C7:ED
Certificate issuer:       /CN=B59FE64A7A5CEC130FFE578645806708FE6955A2
Certificate serial:       7180936F8510303D3CBBA05A82C3B2ECA19AEEBF
Authority key identifier: B5:9F:E6:4A:7A:5C:EC:13:0F:FE:57:86:45:80:67:08:FE:69:55:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/323830313a31303a363830303a3a2f34382d3438203d3e20323731383231.roa
Signing time:             Tue 06 Jan 2026 19:22:00 +0000
ROA not before:           Tue 06 Jan 2026 19:17:00 +0000
ROA not after:            Tue 05 Jan 2027 19:22:00 +0000
asID:                     271821
IP address blocks:        2801:10:6800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 09:28:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:80:93:6f:85:10:30:3d:3c:bb:a0:5a:82:c3:b2:ec:a1:9a:ee:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B59FE64A7A5CEC130FFE578645806708FE6955A2
        Validity
            Not Before: Jan  6 19:17:00 2026 GMT
            Not After : Jan  5 19:22:00 2027 GMT
        Subject: CN=7A0BE811430966EC0EC12EED05E4891249D1C7ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d3:46:5e:56:5f:78:f1:3b:e1:7a:a3:5d:de:
                    be:b0:5a:ed:ac:9c:d0:44:4c:b5:6d:79:53:a7:2b:
                    0d:06:cf:c2:53:31:6b:f6:16:82:33:a7:c7:7e:44:
                    4f:c2:ec:10:f4:15:76:2e:c3:b7:4c:d2:67:06:17:
                    52:57:38:83:be:aa:da:1e:7a:0d:b4:6d:56:77:d6:
                    69:dd:7a:a1:55:8a:91:cb:76:8b:d4:d1:b7:4e:e3:
                    ff:f5:fa:4f:d0:bd:48:5d:ae:12:04:a2:9f:ef:e1:
                    4d:f6:ed:99:80:c7:99:b7:3f:ad:f1:d1:55:a5:fe:
                    3c:39:fc:0d:8d:4d:ad:85:2c:4a:d2:02:fb:9c:b5:
                    82:3e:4b:b2:06:31:1d:3c:26:b2:2f:a0:59:04:a0:
                    c4:0a:0e:96:26:62:6f:2e:d6:78:31:87:1b:9f:b7:
                    c4:6c:8b:a1:8d:fb:53:ec:68:bf:2a:33:25:ed:bf:
                    6a:79:22:db:fa:93:55:26:68:ca:d1:16:75:bf:af:
                    ba:63:2c:41:34:34:c5:16:b9:17:04:3a:4b:9b:56:
                    4c:ee:2c:c8:5f:68:3c:ca:56:c1:f6:43:05:4d:ba:
                    81:d2:b1:d9:e4:08:f4:f7:8f:e4:11:dc:38:e0:f3:
                    1d:65:fb:23:10:85:2a:14:55:9c:a4:2d:8a:77:a9:
                    48:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:0B:E8:11:43:09:66:EC:0E:C1:2E:ED:05:E4:89:12:49:D1:C7:ED
            X509v3 Authority Key Identifier:
                keyid:B5:9F:E6:4A:7A:5C:EC:13:0F:FE:57:86:45:80:67:08:FE:69:55:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/323830313a31303a363830303a3a2f34382d3438203d3e20323731383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:10:6800::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:62:79:93:1d:a6:dc:9d:18:7c:55:c8:c6:17:cd:bc:f2:92:
         a7:a7:e7:d3:6f:d1:ff:47:51:aa:40:88:8e:48:01:4e:df:c6:
         45:97:72:f4:20:92:19:90:75:ea:34:b7:52:af:79:e2:cf:84:
         d5:bb:b3:0f:33:10:b0:31:d9:88:31:49:ea:07:cb:c1:33:e0:
         fa:4a:b2:bf:7f:66:fd:f8:97:6f:21:47:67:42:b9:84:6e:c3:
         5a:63:a2:80:6d:38:9f:01:8b:13:22:15:e4:e7:4c:83:04:89:
         f3:28:3a:45:1d:4b:ec:ce:76:cf:49:ba:a5:36:42:fa:36:ea:
         81:3f:75:06:78:5a:ee:bc:eb:37:56:d0:3f:06:85:9a:8c:80:
         f9:cc:d6:d8:20:0d:32:e8:ef:b9:aa:3f:84:33:26:60:05:7d:
         82:00:7f:77:ed:e2:ce:15:59:b4:b0:cb:6f:6d:9d:2e:ef:4c:
         0f:46:cc:fb:85:8a:f9:5e:ce:7f:50:72:05:ae:59:2a:ce:a7:
         5f:d7:2b:a4:7b:1a:09:af:ec:9a:01:6b:80:9d:37:e7:5f:16:
         58:95:17:9c:b7:57:6d:6c:29:9e:ca:97:b6:eb:82:57:20:55:
         95:cf:5e:09:5e:bb:b9:10:3e:d0:c7:2e:3c:76:81:b3:89:02:
         28:13:e6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 09:27:04 2026 by rpki-client