This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/79F564028EB529CDD82C025FC5AB4DC02E0CD3CEDCF996330523DAA5E253256D/0/323830313a31663a313830303a3a2f34382d3438203d3e20323732303238.roa
File:                     323830313a31663a313830303a3a2f34382d3438203d3e20323732303238.roa (raw, json)
Hash identifier:          S0Kr4RfGgbOWi5N8B/Ma0uzunZJKTSmpw1C6XNBo/7U=
Subject key identifier:   2A:33:62:5B:54:87:2B:45:B7:D6:EA:FD:EF:6E:28:3E:94:28:05:1F
Certificate issuer:       /CN=A9F940AE06C32D0ACDBF321EB9CA4A0B9988DC81
Certificate serial:       71E0F9B12A4E29CED81DC62EBB958143051B3C90
Authority key identifier: A9:F9:40:AE:06:C3:2D:0A:CD:BF:32:1E:B9:CA:4A:0B:99:88:DC:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A9F940AE06C32D0ACDBF321EB9CA4A0B9988DC81.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/79F564028EB529CDD82C025FC5AB4DC02E0CD3CEDCF996330523DAA5E253256D/0/323830313a31663a313830303a3a2f34382d3438203d3e20323732303238.roa
Signing time:             Tue 06 Jan 2026 20:55:12 +0000
ROA not before:           Tue 06 Jan 2026 20:50:12 +0000
ROA not after:            Tue 05 Jan 2027 20:55:12 +0000
asID:                     272028
IP address blocks:        2801:1f:1800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/79F564028EB529CDD82C025FC5AB4DC02E0CD3CEDCF996330523DAA5E253256D/0/A9F940AE06C32D0ACDBF321EB9CA4A0B9988DC81.crl
                          rsync://repository.lacnic.net/rpki/lacnic/79F564028EB529CDD82C025FC5AB4DC02E0CD3CEDCF996330523DAA5E253256D/0/A9F940AE06C32D0ACDBF321EB9CA4A0B9988DC81.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A9F940AE06C32D0ACDBF321EB9CA4A0B9988DC81.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:e0:f9:b1:2a:4e:29:ce:d8:1d:c6:2e:bb:95:81:43:05:1b:3c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9F940AE06C32D0ACDBF321EB9CA4A0B9988DC81
        Validity
            Not Before: Jan  6 20:50:12 2026 GMT
            Not After : Jan  5 20:55:12 2027 GMT
        Subject: CN=2A33625B54872B45B7D6EAFDEF6E283E9428051F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d7:31:0b:fc:d8:f9:ac:8e:d8:4f:4d:20:0c:
                    86:82:b3:57:e5:d2:80:bb:69:23:a6:a4:9f:13:fa:
                    d1:7e:18:2e:16:85:48:3a:a8:95:ca:d8:bb:5c:21:
                    60:ad:61:7e:78:6f:6b:57:8d:06:2e:e6:3b:05:9e:
                    20:0c:4f:69:6c:ce:96:22:a1:18:5e:90:4b:65:81:
                    0f:b6:b4:d7:c3:81:48:5a:30:1c:80:15:13:c1:ca:
                    4f:b7:57:e5:6b:af:23:d0:25:50:01:92:47:1c:c5:
                    de:2a:a8:ad:53:51:57:3d:4d:8f:62:d1:4d:c8:5f:
                    ea:86:7a:0e:00:54:ac:30:d7:32:66:f0:47:d0:2d:
                    9f:39:9f:cf:89:9e:05:38:db:32:1a:cc:09:fc:54:
                    23:98:d4:21:a6:02:d5:16:82:c7:8d:bc:39:e2:44:
                    ff:bd:bc:36:63:41:d8:a1:5a:5c:f2:e2:7a:e8:8a:
                    7e:b6:97:b2:1b:9a:fd:a5:2a:9a:75:a7:48:4b:14:
                    42:e2:ef:48:36:22:c9:de:6c:31:c0:70:b0:42:32:
                    c1:c9:ca:72:c2:e5:22:b1:72:4b:c0:71:e1:95:66:
                    74:8d:40:6a:f6:f9:6b:cf:8f:f8:ab:d4:6b:12:4b:
                    a0:ca:08:4e:7f:c8:64:3a:94:95:9c:a5:17:db:67:
                    fc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:33:62:5B:54:87:2B:45:B7:D6:EA:FD:EF:6E:28:3E:94:28:05:1F
            X509v3 Authority Key Identifier:
                keyid:A9:F9:40:AE:06:C3:2D:0A:CD:BF:32:1E:B9:CA:4A:0B:99:88:DC:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/79F564028EB529CDD82C025FC5AB4DC02E0CD3CEDCF996330523DAA5E253256D/0/A9F940AE06C32D0ACDBF321EB9CA4A0B9988DC81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A9F940AE06C32D0ACDBF321EB9CA4A0B9988DC81.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79F564028EB529CDD82C025FC5AB4DC02E0CD3CEDCF996330523DAA5E253256D/0/323830313a31663a313830303a3a2f34382d3438203d3e20323732303238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f:1800::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:cf:03:0a:ea:b3:99:a6:72:67:51:da:de:85:49:43:a1:19:
         c5:df:db:a0:52:f8:11:bf:b5:8e:7f:c5:bd:e3:c5:ca:d5:8c:
         ea:30:68:db:02:ee:b0:dc:ba:6e:5a:62:50:b2:16:f3:08:48:
         03:d7:62:3f:ba:59:2a:93:65:ae:41:34:88:73:55:9a:24:51:
         b2:9b:d1:69:39:7c:00:f9:31:ca:66:5f:e0:89:f5:81:5e:45:
         1d:12:61:31:3c:5c:35:d3:1c:b3:96:80:f0:4f:89:23:3a:0b:
         bd:51:3a:2f:02:21:c5:73:ac:bb:6f:d7:0a:4a:b2:e9:44:52:
         d1:37:38:39:b3:83:d1:66:74:3d:fc:de:71:02:5c:7d:dd:15:
         8b:90:0e:e7:e9:6d:27:45:53:53:6b:d3:59:3d:f7:06:6d:6a:
         5c:7d:29:e7:ab:ba:fb:95:99:9b:c8:29:71:3d:ed:cf:a6:61:
         9e:2b:98:ac:05:1b:18:a6:75:20:16:24:f5:aa:3c:a5:45:ba:
         48:a6:ba:0b:1c:33:2e:58:4d:95:c6:48:9d:97:c8:a5:02:fd:
         3b:42:52:9b:6b:ba:bc:c6:bb:4d:3f:8b:ec:02:7e:5d:2c:1d:
         23:9d:02:6d:cf:19:a0:c4:20:5b:6d:a6:d0:9c:09:9a:62:5c:
         95:5c:b0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 16:45:51 2026 by rpki-client