This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a663a3a2f34382d3438203d3e20323733303431.roa
File:                     323830313a3161353a663a3a2f34382d3438203d3e20323733303431.roa (raw, json)
Hash identifier:          Rz4RoZXa5kK9Q17XlybWvpNxAoF6/3Yo7w/FTISQQR8=
Subject key identifier:   9E:F5:A1:2C:99:A2:14:78:6C:9C:F6:BE:37:50:E8:F9:82:6E:E5:50
Certificate issuer:       /CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
Certificate serial:       0587EB60B10E7EDDEAF5AB0204F6A4087543FEC1
Authority key identifier: D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a663a3a2f34382d3438203d3e20323733303431.roa
Signing time:             Tue 06 Jan 2026 19:47:42 +0000
ROA not before:           Tue 06 Jan 2026 19:42:42 +0000
ROA not after:            Tue 05 Jan 2027 19:47:42 +0000
asID:                     273041
IP address blocks:        2801:1a5:f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 14:46:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:87:eb:60:b1:0e:7e:dd:ea:f5:ab:02:04:f6:a4:08:75:43:fe:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
        Validity
            Not Before: Jan  6 19:42:42 2026 GMT
            Not After : Jan  5 19:47:42 2027 GMT
        Subject: CN=9EF5A12C99A214786C9CF6BE3750E8F9826EE550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:36:07:4e:e0:4a:b6:d6:81:6e:05:30:8d:25:
                    05:7d:ab:5f:6e:a1:1b:fb:92:0a:fb:0b:c1:18:f4:
                    a4:82:48:e7:70:73:d3:89:4b:53:7d:af:46:dd:a5:
                    79:54:7e:ac:0e:64:7e:9b:8c:cf:e2:c7:8e:97:d1:
                    f4:a9:9d:4d:f7:ec:a7:4f:58:e0:9b:75:ac:82:54:
                    a9:e8:33:b3:1a:08:cd:f5:a6:1c:78:e3:3b:cf:9c:
                    55:46:84:1a:31:ba:0d:c5:0a:24:df:e6:05:4c:3e:
                    2e:13:8e:08:15:7f:d7:b4:c8:af:e5:71:13:66:f1:
                    cc:20:16:f4:c5:61:5a:34:ca:1d:38:7c:52:42:bc:
                    60:a7:89:7b:3c:bb:dc:92:52:c0:f2:3e:05:17:67:
                    10:01:b8:6c:53:17:6c:e2:12:2e:8b:f0:4a:a3:9b:
                    b4:ac:bf:a8:6a:8b:10:51:d1:93:bc:28:35:70:04:
                    73:61:87:61:0d:f4:40:12:e3:e4:ec:aa:65:9a:52:
                    2f:e3:2d:f2:9f:07:05:a4:2a:14:85:1e:e2:ba:bf:
                    56:a2:cb:f1:f8:ea:e5:fc:48:30:bb:a8:bb:dc:6a:
                    55:fc:ce:2f:53:1e:fc:b1:d2:3a:8f:41:ff:04:b9:
                    d9:f8:3a:19:08:5c:e6:4c:d3:06:a0:22:ed:ba:ae:
                    86:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F5:A1:2C:99:A2:14:78:6C:9C:F6:BE:37:50:E8:F9:82:6E:E5:50
            X509v3 Authority Key Identifier:
                keyid:D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a663a3a2f34382d3438203d3e20323733303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a5:f::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:1d:71:23:2a:dd:64:88:7e:a5:db:81:3d:22:01:84:63:a3:
         5a:26:aa:e8:2c:89:6f:02:80:1f:6c:ca:59:ce:82:ec:3a:6a:
         c0:d6:f9:39:63:0c:a9:04:d7:40:8b:84:13:99:c3:e2:d4:ec:
         46:83:ea:da:08:5c:6d:3e:8a:9e:10:76:bb:ac:36:d6:19:ff:
         83:4a:43:66:a5:17:1b:50:34:55:76:2e:48:cd:40:39:0b:0c:
         bd:6e:ed:29:cc:6e:cc:9a:1d:96:9b:f7:46:ea:ae:73:05:e8:
         6f:74:ef:dd:29:5f:f5:6d:15:cf:d9:f4:79:00:28:6b:2e:7a:
         e7:ad:1d:cd:3a:e7:dd:07:26:d7:ff:8a:37:f3:a9:4f:04:65:
         5b:07:4a:79:bf:dc:46:46:92:f6:b6:84:da:07:f0:f0:16:72:
         fd:d9:41:cf:e0:7e:7f:ce:ae:9d:04:59:b1:00:54:f0:d6:95:
         1c:12:56:74:84:21:28:c6:a6:57:ec:63:7c:80:15:26:b9:9e:
         b1:40:33:06:01:06:55:5c:26:4f:58:d9:48:ba:4d:3f:b8:0e:
         3b:07:89:86:6d:d8:b6:6e:63:44:d0:ee:bd:2b:47:78:22:06:
         32:df:d7:02:55:d2:d2:b7:4f:1d:29:63:05:50:ef:0b:43:d8:
         f8:fc:e0:bc
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUBYfrYLEOft3q9asCBPakCHVD/sEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhCMjJGMDMzM0I4RjY0QUVGNEY5NUQ3NkEyM0U0NUQ5
RDUzMEQxRTAeFw0yNjAxMDYxOTQyNDJaFw0yNzAxMDUxOTQ3NDJaMDMxMTAvBgNV
BAMTKDlFRjVBMTJDOTlBMjE0Nzg2QzlDRjZCRTM3NTBFOEY5ODI2RUU1NTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnNgdO4Eq21oFuBTCNJQV9q19u
oRv7kgr7C8EY9KSCSOdwc9OJS1N9r0bdpXlUfqwOZH6bjM/ix46X0fSpnU337KdP
WOCbdayCVKnoM7MaCM31phx44zvPnFVGhBoxug3FCiTf5gVMPi4TjggVf9e0yK/l
cRNm8cwgFvTFYVo0yh04fFJCvGCniXs8u9ySUsDyPgUXZxABuGxTF2ziEi6L8Eqj
m7Ssv6hqixBR0ZO8KDVwBHNhh2EN9EAS4+TsqmWaUi/jLfKfBwWkKhSFHuK6v1ai
y/H46uX8SDC7qLvcalX8zi9THvyx0jqPQf8Eudn4OhkIXOZM0wagIu26robzAgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQUnvWhLJmiFHhsnPa+N1Do+YJu5VAwHwYDVR0j
BBgwFoAU2LIvAzO49krvT5XXaiPkXZ1TDR4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QjRBQTY4QjE4MUFBMTI0RTI4MzNEODZCMEFCQzE2MEMy
Q0U3NkM4MUM2OTU2OEFCMEU3ODRGQkY2NDRFNDg2LzAvRDhCMjJGMDMzM0I4RjY0
QUVGNEY5NUQ3NkEyM0U0NUQ5RDUzMEQxRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOEIyMkYwMzMzQjhGNjRBRUY0
Rjk1RDc2QTIzRTQ1RDlENTMwRDFFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0I0QUE2OEIxODFBQTEyNEUyODMzRDg2QjBBQkMxNjBDMkNFNzZDODFD
Njk1NjhBQjBFNzg0RkJGNjQ0RTQ4Ni8wLzMyMzgzMDMxM2EzMTYxMzUzYTY2M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNzMzMzAzNDMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAEB
pQAPMA0GCSqGSIb3DQEBCwUAA4IBAQCaHXEjKt1kiH6l24E9IgGEY6NaJqroLIlv
AoAfbMpZzoLsOmrA1vk5YwypBNdAi4QTmcPi1OxGg+raCFxtPoqeEHa7rDbWGf+D
SkNmpRcbUDRVdi5IzUA5Cwy9bu0pzG7Mmh2Wm/dG6q5zBehvdO/dKV/1bRXP2fR5
AChrLnrnrR3NOufdBybX/4o386lPBGVbB0p5v9xGRpL2toTaB/DwFnL92UHP4H5/
zq6dBFmxAFTw1pUcElZ0hCEoxqZX7GN8gBUmuZ6xQDMGAQZVXCZPWNlIuk0/uA47
B4mGbdi2bmNE0O69K0d4IgYy39cCVdLSt08dKWMFUO8LQ9j4/OC8
-----END CERTIFICATE-----
Generated at Mon Jan 12 22:17:35 2026 by rpki-client