This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8606A5E55C1D8EADA3893361029E902790C80D9EA24D31A13BE5F3C7425458D6/0/323830313a31613a363830303a3a2f34382d3438203d3e203133343839.roa
File:                     323830313a31613a363830303a3a2f34382d3438203d3e203133343839.roa (raw, json)
Hash identifier:          lUYTanAvFgjxkI1fj69sdYgOKxOnzMuFbCyIXud2k+g=
Subject key identifier:   9C:DE:53:D1:25:58:91:F8:55:21:45:67:07:08:9E:92:A3:1F:91:69
Certificate issuer:       /CN=C12CA30082FA43FC79525F6B312CCF4D05E1AE0E
Certificate serial:       2AFC1AD4D9F284999D0105770EBBEF0D32ED91AE
Authority key identifier: C1:2C:A3:00:82:FA:43:FC:79:52:5F:6B:31:2C:CF:4D:05:E1:AE:0E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12CA30082FA43FC79525F6B312CCF4D05E1AE0E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8606A5E55C1D8EADA3893361029E902790C80D9EA24D31A13BE5F3C7425458D6/0/323830313a31613a363830303a3a2f34382d3438203d3e203133343839.roa
Signing time:             Tue 06 Jan 2026 19:28:16 +0000
ROA not before:           Tue 06 Jan 2026 19:23:16 +0000
ROA not after:            Tue 05 Jan 2027 19:28:16 +0000
asID:                     13489
IP address blocks:        2801:1a:6800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8606A5E55C1D8EADA3893361029E902790C80D9EA24D31A13BE5F3C7425458D6/0/C12CA30082FA43FC79525F6B312CCF4D05E1AE0E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8606A5E55C1D8EADA3893361029E902790C80D9EA24D31A13BE5F3C7425458D6/0/C12CA30082FA43FC79525F6B312CCF4D05E1AE0E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12CA30082FA43FC79525F6B312CCF4D05E1AE0E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 11:11:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:fc:1a:d4:d9:f2:84:99:9d:01:05:77:0e:bb:ef:0d:32:ed:91:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C12CA30082FA43FC79525F6B312CCF4D05E1AE0E
        Validity
            Not Before: Jan  6 19:23:16 2026 GMT
            Not After : Jan  5 19:28:16 2027 GMT
        Subject: CN=9CDE53D1255891F85521456707089E92A31F9169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:37:7c:be:50:f8:46:67:4a:fb:80:19:bc:68:
                    71:06:b8:ab:36:59:8b:e6:37:a3:62:0c:07:a6:b9:
                    0f:cc:25:23:55:e3:ee:f9:96:6e:8d:0c:cb:0f:34:
                    ad:e3:35:0e:ec:cb:d8:0f:d5:b2:2b:26:7e:15:39:
                    dd:c7:f5:71:da:79:f4:ba:16:c1:08:db:99:07:d5:
                    d1:1c:79:53:fb:b9:a2:af:1e:ff:78:b1:e4:8b:ed:
                    8e:9f:b8:9d:4b:8c:62:67:98:1d:f9:56:a4:7c:f6:
                    99:5a:05:a2:ec:d4:46:1c:b6:b2:be:64:25:a5:4c:
                    3a:8a:03:5d:e0:b9:37:a6:f2:db:bd:83:0b:08:fc:
                    49:28:49:5b:cb:5a:6d:25:18:66:98:dc:98:c5:96:
                    2d:3b:ab:f9:7e:8c:6e:f6:7d:64:89:a6:0a:0c:d9:
                    19:7b:10:05:54:0f:fb:b1:33:64:85:13:bb:04:da:
                    fe:b9:c6:df:87:2e:46:02:09:ae:d9:07:78:65:4e:
                    9f:3a:ff:39:41:07:07:bb:ff:61:9f:5b:3e:13:aa:
                    c8:2a:9a:c9:04:32:e3:ed:b8:d6:90:e0:54:b4:da:
                    5e:6c:f5:05:10:ec:90:cf:19:ec:9d:31:d9:fe:bc:
                    eb:3e:cd:e3:00:30:a9:ac:f7:b4:a7:67:93:c1:b9:
                    dd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:DE:53:D1:25:58:91:F8:55:21:45:67:07:08:9E:92:A3:1F:91:69
            X509v3 Authority Key Identifier:
                keyid:C1:2C:A3:00:82:FA:43:FC:79:52:5F:6B:31:2C:CF:4D:05:E1:AE:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8606A5E55C1D8EADA3893361029E902790C80D9EA24D31A13BE5F3C7425458D6/0/C12CA30082FA43FC79525F6B312CCF4D05E1AE0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12CA30082FA43FC79525F6B312CCF4D05E1AE0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8606A5E55C1D8EADA3893361029E902790C80D9EA24D31A13BE5F3C7425458D6/0/323830313a31613a363830303a3a2f34382d3438203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a:6800::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:55:a7:d7:dc:e9:27:df:2e:87:a2:fe:25:aa:d0:8c:ee:ae:
         f1:a5:63:50:cf:61:1c:83:61:55:9b:8c:57:bf:9f:a2:aa:eb:
         cb:34:d5:8d:c7:07:de:42:a1:8c:c2:17:5a:aa:45:9a:a3:41:
         0d:75:37:8f:81:5f:07:68:65:dd:d0:30:f4:3a:57:bb:96:3f:
         fe:fd:39:32:f7:07:91:ce:96:8b:9d:72:7b:0f:f4:7a:5d:45:
         d1:0f:51:d1:a9:ed:2f:3c:4f:73:7d:ff:db:5c:c1:87:2d:a5:
         33:7e:3b:cb:1a:14:41:20:95:ed:88:a4:26:28:dd:bd:c1:da:
         17:00:64:ee:c6:e2:40:71:c3:01:14:61:a2:81:63:96:2e:bc:
         e7:b5:e9:ae:96:c0:29:96:d1:59:4b:d5:44:93:b7:d4:83:db:
         c4:05:70:4c:3f:01:88:fe:4b:90:69:ff:de:8c:36:40:13:21:
         21:7a:4f:6d:a5:9b:d5:10:28:3f:f4:f4:3c:06:83:6f:b5:a2:
         23:9e:b8:d4:60:0f:7d:0f:d6:38:e4:7e:33:2f:1a:92:8b:1a:
         3b:30:df:76:b2:3e:55:a0:33:c2:2e:65:56:a0:fc:15:34:eb:
         94:34:0c:c1:20:e2:12:30:27:ed:d8:ab:ad:f7:ee:41:4a:55:
         da:57:3d:f0
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUKvwa1NnyhJmdAQV3DrvvDTLtka4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzEyQ0EzMDA4MkZBNDNGQzc5NTI1RjZCMzEyQ0NGNEQw
NUUxQUUwRTAeFw0yNjAxMDYxOTIzMTZaFw0yNzAxMDUxOTI4MTZaMDMxMTAvBgNV
BAMTKDlDREU1M0QxMjU1ODkxRjg1NTIxNDU2NzA3MDg5RTkyQTMxRjkxNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIN3y+UPhGZ0r7gBm8aHEGuKs2
WYvmN6NiDAemuQ/MJSNV4+75lm6NDMsPNK3jNQ7sy9gP1bIrJn4VOd3H9XHaefS6
FsEI25kH1dEceVP7uaKvHv94seSL7Y6fuJ1LjGJnmB35VqR89plaBaLs1EYctrK+
ZCWlTDqKA13guTem8tu9gwsI/EkoSVvLWm0lGGaY3JjFli07q/l+jG72fWSJpgoM
2Rl7EAVUD/uxM2SFE7sE2v65xt+HLkYCCa7ZB3hlTp86/zlBBwe7/2GfWz4Tqsgq
mskEMuPtuNaQ4FS02l5s9QUQ7JDPGeydMdn+vOs+zeMAMKms97SnZ5PBud3xAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUnN5T0SVYkfhVIUVnBwiekqMfkWkwHwYDVR0j
BBgwFoAUwSyjAIL6Q/x5Ul9rMSzPTQXhrg4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84NjA2QTVFNTVDMUQ4RUFEQTM4OTMzNjEwMjlFOTAyNzkw
QzgwRDlFQTI0RDMxQTEzQkU1RjNDNzQyNTQ1OEQ2LzAvQzEyQ0EzMDA4MkZBNDNG
Qzc5NTI1RjZCMzEyQ0NGNEQwNUUxQUUwRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMTJDQTMwMDgyRkE0M0ZDNzk1
MjVGNkIzMTJDQ0Y0RDA1RTFBRTBFLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODYwNkE1RTU1QzFEOEVBREEzODkzMzYxMDI5RTkwMjc5MEM4MEQ5RUEy
NEQzMUExM0JFNUYzQzc0MjU0NThENi8wLzMyMzgzMDMxM2EzMTYxM2EzNjM4MzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzNDM4Mzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AQAaaAAwDQYJKoZIhvcNAQELBQADggEBAEVVp9fc6SffLoei/iWq0IzurvGlY1DP
YRyDYVWbjFe/n6Kq68s01Y3HB95CoYzCF1qqRZqjQQ11N4+BXwdoZd3QMPQ6V7uW
P/79OTL3B5HOloudcnsP9HpdRdEPUdGp7S88T3N9/9tcwYctpTN+O8saFEEgle2I
pCYo3b3B2hcAZO7G4kBxwwEUYaKBY5YuvOe16a6WwCmW0VlL1USTt9SD28QFcEw/
AYj+S5Bp/96MNkATISF6T22lm9UQKD/09DwGg2+1oiOeuNRgD30P1jjkfjMvGpKL
Gjsw33ayPlWgM8IuZVag/BU065Q0DMEg4hIwJ+3Yq6337kFKVdpXPfA=
-----END CERTIFICATE-----
Generated at Tue Jan 13 22:13:56 2026 by rpki-client