This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/323830313a31663a343830303a3a2f34382d3438203d3e203232373234.roa
File:                     323830313a31663a343830303a3a2f34382d3438203d3e203232373234.roa (raw, json)
Hash identifier:          e+KRnUQCD5198Ct/AE76sHoduT03SWRkknB4cdNBlUo=
Subject key identifier:   90:22:DC:6C:45:4F:99:EE:AC:03:22:C2:96:54:75:50:7B:D2:5C:45
Certificate issuer:       /CN=C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E
Certificate serial:       285A82AFAE9B7600499BAF1AC1D1CF198F15B97C
Authority key identifier: C5:72:F5:F7:CC:01:4F:3E:CB:4A:B5:0F:D4:F6:C6:F8:7D:3A:93:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/323830313a31663a343830303a3a2f34382d3438203d3e203232373234.roa
Signing time:             Tue 06 Jan 2026 20:50:58 +0000
ROA not before:           Tue 06 Jan 2026 20:45:58 +0000
ROA not after:            Tue 05 Jan 2027 20:50:58 +0000
asID:                     22724
IP address blocks:        2801:1f:4800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 15:25:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:5a:82:af:ae:9b:76:00:49:9b:af:1a:c1:d1:cf:19:8f:15:b9:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E
        Validity
            Not Before: Jan  6 20:45:58 2026 GMT
            Not After : Jan  5 20:50:58 2027 GMT
        Subject: CN=9022DC6C454F99EEAC0322C2965475507BD25C45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:32:96:be:0f:a1:a4:8f:bc:95:68:d1:a2:c8:
                    b7:ad:6a:3d:38:2a:2b:20:74:d4:1d:3d:61:45:b9:
                    cc:54:3c:d4:35:ba:7d:40:e9:e5:c0:5b:73:ce:cb:
                    5e:ef:57:e2:f5:2e:19:02:2e:49:68:0a:08:28:2f:
                    60:a1:41:38:21:ed:1c:4e:bd:76:ff:76:30:3f:10:
                    53:c5:34:d5:66:d5:dd:d2:78:fc:39:33:c9:ec:d4:
                    ba:a7:f6:02:d6:e2:b6:24:16:0e:cf:70:0a:64:2a:
                    35:a1:03:da:2e:48:1f:94:1f:96:c3:90:e6:ff:c8:
                    a8:9d:7e:fe:15:99:3f:1f:2e:7f:00:6e:39:44:9c:
                    53:48:74:c7:4e:a5:9c:8b:38:9e:8b:0c:40:ba:9e:
                    46:4e:4d:a4:c5:53:5b:65:82:9a:cd:e7:a7:b8:fd:
                    7c:e9:03:3a:ac:78:51:92:e7:54:b2:30:9f:6d:f8:
                    37:a7:e6:6f:4d:03:97:c9:45:2c:58:8a:53:1b:69:
                    ce:79:34:64:8c:c6:b0:b1:1c:a7:35:eb:6a:0d:9c:
                    d9:ec:29:e4:5e:27:b9:ab:3a:2b:14:2d:ac:70:e4:
                    53:23:64:ef:8d:b0:54:2b:56:77:8e:50:54:72:f4:
                    dc:7a:79:3e:40:33:d6:97:ce:15:64:bf:9f:fc:43:
                    86:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:22:DC:6C:45:4F:99:EE:AC:03:22:C2:96:54:75:50:7B:D2:5C:45
            X509v3 Authority Key Identifier:
                keyid:C5:72:F5:F7:CC:01:4F:3E:CB:4A:B5:0F:D4:F6:C6:F8:7D:3A:93:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/323830313a31663a343830303a3a2f34382d3438203d3e203232373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f:4800::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:cd:a7:32:03:c3:c0:8a:3a:8d:34:0b:54:66:1f:d2:ff:81:
         7c:e1:25:a1:eb:96:b0:73:bc:92:6c:28:bb:42:66:f1:cf:db:
         ed:47:e8:43:11:d8:51:56:76:69:01:6a:7c:52:15:74:f4:c2:
         dc:ac:3d:b1:5d:ac:e3:89:55:51:36:ad:a2:88:94:8a:f0:3b:
         33:d1:74:9f:14:d2:f8:50:1d:c2:bb:6c:ff:36:20:fc:0f:bf:
         95:61:da:cf:24:eb:9b:93:ba:c7:95:51:47:36:d6:18:fa:93:
         00:0e:75:ec:da:37:10:31:50:a2:fa:e9:e1:36:3f:0f:ad:55:
         a1:12:a1:b7:64:23:ef:e2:e6:22:1e:ae:c8:f9:fe:8a:a5:b9:
         04:33:86:a9:61:dc:d7:0b:5b:69:4f:f7:3d:fd:d2:24:d4:16:
         bd:58:0e:07:da:9f:df:25:97:a5:72:ec:c2:fe:c9:74:4e:91:
         75:12:fe:29:bb:c6:63:d4:68:31:39:18:78:44:14:31:d9:41:
         03:cb:f6:ab:19:06:77:7a:e8:f3:4e:23:d2:48:0f:33:27:1c:
         35:f3:c5:e7:29:67:3a:45:71:72:93:7e:55:69:54:d1:23:79:
         d8:c8:86:f8:41:b3:e3:3e:97:c9:64:aa:02:bd:04:26:c9:a8:
         0c:9c:d5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 03:22:31 2026 by rpki-client