This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/323830313a31333a373030303a3a2f34382d3438203d3e203631343638.roa
File:                     323830313a31333a373030303a3a2f34382d3438203d3e203631343638.roa (raw, json)
Hash identifier:          dHcdUxd6yQkx6SUEbmyh7GYz5z3QuK7vLFGUgh7rzO0=
Subject key identifier:   C1:3C:77:4A:D3:19:B6:97:DC:00:15:BE:4C:05:81:41:DF:4B:8D:DB
Certificate issuer:       /CN=851D006BBDF702AC914FD79F2055A11E9699775D
Certificate serial:       147C792CBDF74FDA6208B6BE724997158A92EF33
Authority key identifier: 85:1D:00:6B:BD:F7:02:AC:91:4F:D7:9F:20:55:A1:1E:96:99:77:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/851D006BBDF702AC914FD79F2055A11E9699775D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/323830313a31333a373030303a3a2f34382d3438203d3e203631343638.roa
Signing time:             Tue 06 Jan 2026 19:03:25 +0000
ROA not before:           Tue 06 Jan 2026 18:58:25 +0000
ROA not after:            Tue 05 Jan 2027 19:03:25 +0000
asID:                     61468
IP address blocks:        2801:13:7000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/851D006BBDF702AC914FD79F2055A11E9699775D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/851D006BBDF702AC914FD79F2055A11E9699775D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/851D006BBDF702AC914FD79F2055A11E9699775D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:7c:79:2c:bd:f7:4f:da:62:08:b6:be:72:49:97:15:8a:92:ef:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=851D006BBDF702AC914FD79F2055A11E9699775D
        Validity
            Not Before: Jan  6 18:58:25 2026 GMT
            Not After : Jan  5 19:03:25 2027 GMT
        Subject: CN=C13C774AD319B697DC0015BE4C058141DF4B8DDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d1:e4:42:44:c2:2c:21:d9:62:48:be:3d:60:
                    7e:65:fd:aa:dd:eb:4b:35:94:11:ae:ce:bb:1f:cb:
                    33:0b:1e:ec:3c:63:75:55:02:ec:a0:c7:d3:37:5f:
                    a4:58:94:f5:56:d2:d9:3f:49:45:00:09:39:e2:a5:
                    df:02:41:ed:4b:6a:c3:bd:87:b3:2e:6c:08:ab:ae:
                    a3:f3:c4:f9:53:95:23:b6:6a:ba:01:50:27:c6:c5:
                    0d:e2:a8:18:7e:8a:24:1a:9e:56:1e:3a:13:82:ad:
                    78:44:a7:ac:42:64:5c:3d:9e:b2:0e:0d:06:d1:01:
                    bc:a2:a7:19:c2:c6:83:08:0b:51:ad:39:a9:a2:26:
                    04:7f:9d:35:e9:df:4e:b4:79:af:0b:cb:69:77:ab:
                    f1:5b:35:1f:e5:6a:ed:97:da:ba:a1:1f:bd:1b:96:
                    12:f6:22:68:a5:6f:82:3a:2a:89:18:c9:13:ca:fa:
                    30:15:76:43:b5:38:c4:4d:7f:3b:06:71:a5:3e:9f:
                    13:62:2f:45:e0:f5:f9:01:cb:71:bd:3d:c9:0e:1a:
                    29:f4:c3:62:90:d2:b8:c4:9a:4b:4d:9e:58:b1:30:
                    3f:a1:7a:29:d1:30:b5:5e:b4:10:6e:56:3f:08:76:
                    26:62:53:b1:8f:27:f6:66:ea:00:75:d3:f1:21:25:
                    98:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:3C:77:4A:D3:19:B6:97:DC:00:15:BE:4C:05:81:41:DF:4B:8D:DB
            X509v3 Authority Key Identifier:
                keyid:85:1D:00:6B:BD:F7:02:AC:91:4F:D7:9F:20:55:A1:1E:96:99:77:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/851D006BBDF702AC914FD79F2055A11E9699775D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/851D006BBDF702AC914FD79F2055A11E9699775D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/323830313a31333a373030303a3a2f34382d3438203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:13:7000::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:c0:ff:b1:05:4f:4c:d3:76:95:05:bf:51:aa:14:39:80:83:
         c1:25:91:06:8f:51:cf:e0:50:e5:70:dd:80:1c:78:2b:d0:e9:
         ce:1c:0d:c8:6b:4b:95:84:7c:3e:e2:17:33:23:fb:09:2c:11:
         6b:a8:e5:26:1e:3c:3c:87:cb:cc:44:1b:4b:1f:15:7f:5f:f1:
         47:42:bb:f3:fd:74:4c:da:ea:d5:32:72:03:08:07:5d:3a:0f:
         76:56:b8:d2:01:2f:c8:10:f6:30:bb:d5:5a:ed:73:bd:5d:ce:
         5c:1e:03:26:9e:04:38:21:56:ba:0e:d4:6b:01:f8:f7:da:79:
         16:f3:56:b4:8d:24:55:c9:48:da:c2:ff:6b:13:8e:17:79:cb:
         94:ac:e9:45:28:2f:3c:63:b8:e1:1e:b6:e9:43:59:a3:4c:88:
         57:31:44:18:0b:cf:e4:a0:5a:a2:40:e2:26:54:91:c0:a2:18:
         89:de:1d:d8:b1:8a:ec:f8:e6:f6:49:e5:cc:ee:7b:75:01:44:
         ca:14:8e:8a:2f:f5:64:c5:d1:bb:cb:96:78:a3:00:68:c0:b6:
         e5:94:3b:0d:9c:0b:47:89:98:f8:22:f0:35:c6:74:cc:32:2d:
         32:ac:59:c4:7f:45:45:d6:27:ed:12:a6:4e:4e:17:f1:d8:21:
         36:f9:8f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:30:37 2026 by rpki-client