This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3850C845AA8B21ABF52CFEE2238FD8AA0F02FDE56896A532259F1D20A4AD01A2/0/323830303a6133303a3a2f33322d3438203d3e20323632313837.roa
File:                     323830303a6133303a3a2f33322d3438203d3e20323632313837.roa (raw, json)
Hash identifier:          1tKS9tPgHTa74CJ+gxilRz8Vh/Ql3OgJPq89QaAaWL8=
Subject key identifier:   8C:C1:A8:53:97:95:FF:80:6E:33:C1:2C:E8:C2:B9:A7:BD:9B:2D:90
Certificate issuer:       /CN=6C7F5FF558448E94BE5C9035CCB3AACE6543C218
Certificate serial:       261B60364BB0576DDE253E0B2CCD07110DFAB2D3
Authority key identifier: 6C:7F:5F:F5:58:44:8E:94:BE:5C:90:35:CC:B3:AA:CE:65:43:C2:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C7F5FF558448E94BE5C9035CCB3AACE6543C218.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3850C845AA8B21ABF52CFEE2238FD8AA0F02FDE56896A532259F1D20A4AD01A2/0/323830303a6133303a3a2f33322d3438203d3e20323632313837.roa
Signing time:             Tue 06 Jan 2026 19:33:40 +0000
ROA not before:           Tue 06 Jan 2026 19:28:40 +0000
ROA not after:            Tue 05 Jan 2027 19:33:40 +0000
asID:                     262187
IP address blocks:        2800:a30::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3850C845AA8B21ABF52CFEE2238FD8AA0F02FDE56896A532259F1D20A4AD01A2/0/6C7F5FF558448E94BE5C9035CCB3AACE6543C218.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3850C845AA8B21ABF52CFEE2238FD8AA0F02FDE56896A532259F1D20A4AD01A2/0/6C7F5FF558448E94BE5C9035CCB3AACE6543C218.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C7F5FF558448E94BE5C9035CCB3AACE6543C218.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:1b:60:36:4b:b0:57:6d:de:25:3e:0b:2c:cd:07:11:0d:fa:b2:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C7F5FF558448E94BE5C9035CCB3AACE6543C218
        Validity
            Not Before: Jan  6 19:28:40 2026 GMT
            Not After : Jan  5 19:33:40 2027 GMT
        Subject: CN=8CC1A8539795FF806E33C12CE8C2B9A7BD9B2D90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:75:43:7c:8b:0a:3f:56:3c:d3:24:1e:97:c8:
                    8f:4b:cc:86:38:81:73:3f:81:1c:3a:5a:59:78:af:
                    b1:67:75:b1:f5:73:27:87:7c:65:33:c3:0b:fc:56:
                    01:6d:41:97:e6:90:f1:cd:af:7e:a2:fb:39:3c:53:
                    50:91:d1:b8:6e:6f:fa:a4:2d:2e:88:62:a6:a9:74:
                    7f:36:a4:7c:80:7e:b5:13:75:d2:df:40:aa:8c:9b:
                    57:a0:34:e0:34:04:5c:b8:89:75:c8:53:b0:cd:4f:
                    a4:21:07:2a:e1:05:47:84:62:9a:a2:28:a0:6a:00:
                    74:f1:52:42:bf:8f:68:70:21:a5:5e:20:33:12:13:
                    4a:28:fe:39:58:60:ab:50:32:45:05:91:62:f1:1f:
                    2e:07:a8:8e:7d:1f:d1:77:69:f0:b5:c1:0f:c0:2f:
                    9e:28:f4:de:d1:5f:85:74:70:7a:3b:aa:49:fc:14:
                    67:f9:d7:0b:50:24:69:99:91:98:c9:dd:a0:ed:2f:
                    a2:ff:61:ca:6b:75:c5:c3:77:11:ca:27:c8:6b:d5:
                    99:5b:ba:b6:f9:44:b0:08:97:20:c1:88:35:77:d3:
                    ce:18:ad:1a:09:6d:7b:c6:75:f6:b1:e4:25:20:2a:
                    68:22:72:f2:80:5b:24:90:38:f0:a5:46:e5:45:86:
                    d2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C1:A8:53:97:95:FF:80:6E:33:C1:2C:E8:C2:B9:A7:BD:9B:2D:90
            X509v3 Authority Key Identifier:
                keyid:6C:7F:5F:F5:58:44:8E:94:BE:5C:90:35:CC:B3:AA:CE:65:43:C2:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3850C845AA8B21ABF52CFEE2238FD8AA0F02FDE56896A532259F1D20A4AD01A2/0/6C7F5FF558448E94BE5C9035CCB3AACE6543C218.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C7F5FF558448E94BE5C9035CCB3AACE6543C218.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3850C845AA8B21ABF52CFEE2238FD8AA0F02FDE56896A532259F1D20A4AD01A2/0/323830303a6133303a3a2f33322d3438203d3e20323632313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:a30::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:14:57:bd:7a:be:b3:d9:f3:1b:15:b0:6a:73:9e:7f:10:e2:
         f5:38:34:57:1c:91:e7:e4:d9:de:d6:db:9d:8b:c3:71:0e:4a:
         1f:69:f6:fe:e9:66:f3:b4:12:55:c7:33:b9:b8:0d:ad:85:c6:
         16:5d:7e:95:a0:79:fe:12:68:40:5a:97:70:da:91:08:a9:6b:
         ed:8b:2c:78:87:33:81:7c:cb:b6:5c:3a:7f:4c:b6:2a:fa:b2:
         72:df:02:03:48:de:db:a3:90:05:d0:c5:8d:f9:9c:da:91:b8:
         c9:9d:0a:5f:60:36:b4:dd:d1:d3:35:23:a1:8d:f4:d5:94:7a:
         a2:8a:7c:0e:08:2f:92:a2:72:64:93:c8:fb:df:b7:c7:84:94:
         3b:28:ac:36:e5:06:03:fb:e9:26:7d:d0:20:9f:54:0d:3f:96:
         8c:2f:f6:fe:af:4c:b6:3d:07:ad:e6:f8:16:b6:e5:df:69:5d:
         98:79:50:7e:c7:2f:33:fa:f3:e0:f0:84:1f:a7:74:06:ba:14:
         cf:e7:16:2f:c2:06:cc:73:bc:8f:44:f7:78:c1:6c:bc:b5:2a:
         26:b4:6d:56:2b:1d:1a:49:22:a7:6a:6c:09:13:4e:de:5b:6d:
         ba:1a:b9:5d:5e:b4:92:48:78:72:cb:3e:0c:96:6f:56:dc:01:
         9b:c3:a3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 11:01:23 2026 by rpki-client