This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F24110CFB8EE0818D70EE66E175D28A6A71C2778464BC67C97214214BC0F41A/0/323830313a303a3237303a3a2f34382d3438203d3e20323632323132.roa
File:                     323830313a303a3237303a3a2f34382d3438203d3e20323632323132.roa (raw, json)
Hash identifier:          P+DlUdtUB/z4peVmAjIrsrOEOMtYNHVjOl/R68a+MS8=
Subject key identifier:   B2:17:AB:53:59:08:33:41:1A:6F:4E:63:2C:1F:82:C7:05:2B:15:0B
Certificate issuer:       /CN=C74171B033E063E7EA4A449BA4F4401ED0F4FFBF
Certificate serial:       43FD4A4F6C331FAE5209C7326FCA456F8AF3ECEF
Authority key identifier: C7:41:71:B0:33:E0:63:E7:EA:4A:44:9B:A4:F4:40:1E:D0:F4:FF:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C74171B033E063E7EA4A449BA4F4401ED0F4FFBF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F24110CFB8EE0818D70EE66E175D28A6A71C2778464BC67C97214214BC0F41A/0/323830313a303a3237303a3a2f34382d3438203d3e20323632323132.roa
Signing time:             Tue 06 Jan 2026 19:25:41 +0000
ROA not before:           Tue 06 Jan 2026 19:20:41 +0000
ROA not after:            Tue 05 Jan 2027 19:25:41 +0000
asID:                     262212
IP address blocks:        2801:0:270::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8F24110CFB8EE0818D70EE66E175D28A6A71C2778464BC67C97214214BC0F41A/0/C74171B033E063E7EA4A449BA4F4401ED0F4FFBF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8F24110CFB8EE0818D70EE66E175D28A6A71C2778464BC67C97214214BC0F41A/0/C74171B033E063E7EA4A449BA4F4401ED0F4FFBF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C74171B033E063E7EA4A449BA4F4401ED0F4FFBF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:fd:4a:4f:6c:33:1f:ae:52:09:c7:32:6f:ca:45:6f:8a:f3:ec:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C74171B033E063E7EA4A449BA4F4401ED0F4FFBF
        Validity
            Not Before: Jan  6 19:20:41 2026 GMT
            Not After : Jan  5 19:25:41 2027 GMT
        Subject: CN=B217AB53590833411A6F4E632C1F82C7052B150B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ca:39:a6:53:a5:a4:70:1d:3d:c3:84:dd:49:
                    34:01:50:3a:25:7c:ee:da:75:e6:c9:8e:c4:d2:f7:
                    4f:2e:12:cb:57:95:6b:ce:db:c0:21:19:a5:22:97:
                    fd:4c:56:c5:80:f0:00:6f:77:48:94:77:f3:cf:47:
                    70:05:fb:28:82:f1:13:d8:60:1f:05:ed:1a:50:98:
                    8a:ec:0f:cc:80:9c:70:16:e6:b3:6e:32:b2:59:7d:
                    95:9b:37:8b:eb:ce:46:6d:2d:4f:61:f8:bf:3b:89:
                    39:6e:75:fb:0c:48:d9:a4:11:4a:61:67:09:34:b3:
                    08:6f:00:b5:ed:81:fe:5b:b6:fe:ff:fc:d6:1b:cf:
                    91:ff:a3:f3:3c:42:3b:ab:ea:e4:76:16:93:f7:e7:
                    c2:58:9d:a5:0d:37:51:45:6b:a9:37:b9:4b:38:2d:
                    d9:cb:b7:6f:98:6d:59:d4:2e:77:97:d1:92:5c:05:
                    09:a7:a1:dc:1d:a8:e0:57:25:88:ef:43:5c:c0:46:
                    18:61:4a:4e:38:5f:b4:25:9e:50:e4:92:ac:36:71:
                    03:06:33:f7:3b:fd:a7:a0:a4:ea:7c:76:f9:1c:b7:
                    ac:95:bd:94:4a:59:27:c5:de:f1:51:b9:a2:29:1c:
                    89:b4:7a:c7:46:57:47:c8:da:78:58:ae:2d:b5:87:
                    a0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:17:AB:53:59:08:33:41:1A:6F:4E:63:2C:1F:82:C7:05:2B:15:0B
            X509v3 Authority Key Identifier:
                keyid:C7:41:71:B0:33:E0:63:E7:EA:4A:44:9B:A4:F4:40:1E:D0:F4:FF:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F24110CFB8EE0818D70EE66E175D28A6A71C2778464BC67C97214214BC0F41A/0/C74171B033E063E7EA4A449BA4F4401ED0F4FFBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C74171B033E063E7EA4A449BA4F4401ED0F4FFBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F24110CFB8EE0818D70EE66E175D28A6A71C2778464BC67C97214214BC0F41A/0/323830313a303a3237303a3a2f34382d3438203d3e20323632323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:270::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:19:e7:3e:dd:6f:39:b9:40:f9:97:98:80:4e:c4:3f:be:f6:
         95:6a:fa:89:63:f9:af:83:f5:b1:44:0d:fa:c8:75:33:95:b4:
         84:a2:9f:0f:10:16:e2:82:e8:fb:5e:85:f1:e1:ce:d9:1d:7a:
         f9:3f:21:4f:82:6c:9f:7f:c3:3c:bf:60:ad:12:4f:3b:94:37:
         d6:b7:cb:ae:d0:4f:10:0b:92:3f:6f:5d:01:17:50:3d:31:ac:
         b3:fb:1c:e2:bc:b7:26:9b:55:14:14:94:b5:c0:3a:c5:f2:99:
         5b:0c:9d:a8:72:95:cb:e5:be:2a:27:a3:81:4d:aa:f3:c1:66:
         d9:cb:3c:90:29:a3:df:c8:b5:de:2e:ab:6c:ab:f1:48:8a:67:
         48:45:84:ef:1b:1d:f9:32:85:0c:ec:bb:ee:17:b6:bb:cc:19:
         36:4e:77:e0:c5:5b:c7:ed:50:cb:1e:e9:20:ba:be:7d:93:e3:
         5d:6f:1c:c2:c5:29:8c:02:08:ea:02:b3:64:ba:c1:69:44:a0:
         ae:88:ad:c5:e3:b6:d8:2e:61:0d:bb:c2:d7:b8:0c:b0:ed:b3:
         5e:79:03:11:95:2a:66:65:09:46:4d:88:5f:4a:24:40:bf:30:
         73:dc:59:49:d2:35:86:54:57:f3:ab:ee:0a:0c:9f:d0:50:ed:
         e6:26:39:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 10:37:26 2026 by rpki-client