This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A115815F39AB3B661CE8D33DC635EC7326A4AD9FB203D8396D5666ED67BA6F76/0/323830313a31373a643030303a3a2f34382d3438203d3e20323635363936.roa
File:                     323830313a31373a643030303a3a2f34382d3438203d3e20323635363936.roa (raw, json)
Hash identifier:          wU+uIHo1x1dS5erWSkZnbq1rBf43pso0Z2NE2fT65Rk=
Subject key identifier:   83:8F:97:57:80:9D:88:F2:0B:78:BE:A2:CE:C7:35:69:A5:98:C6:02
Certificate issuer:       /CN=1D745EBF35F5EB9C70C42D5392DC9776A7ED2FC2
Certificate serial:       65D9EDEA8ACB0E2F4D7468ABB6654110C6C9BE31
Authority key identifier: 1D:74:5E:BF:35:F5:EB:9C:70:C4:2D:53:92:DC:97:76:A7:ED:2F:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D745EBF35F5EB9C70C42D5392DC9776A7ED2FC2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A115815F39AB3B661CE8D33DC635EC7326A4AD9FB203D8396D5666ED67BA6F76/0/323830313a31373a643030303a3a2f34382d3438203d3e20323635363936.roa
Signing time:             Tue 06 Jan 2026 19:41:20 +0000
ROA not before:           Tue 06 Jan 2026 19:36:20 +0000
ROA not after:            Tue 05 Jan 2027 19:41:20 +0000
asID:                     265696
IP address blocks:        2801:17:d000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A115815F39AB3B661CE8D33DC635EC7326A4AD9FB203D8396D5666ED67BA6F76/0/1D745EBF35F5EB9C70C42D5392DC9776A7ED2FC2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A115815F39AB3B661CE8D33DC635EC7326A4AD9FB203D8396D5666ED67BA6F76/0/1D745EBF35F5EB9C70C42D5392DC9776A7ED2FC2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D745EBF35F5EB9C70C42D5392DC9776A7ED2FC2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 09:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:d9:ed:ea:8a:cb:0e:2f:4d:74:68:ab:b6:65:41:10:c6:c9:be:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D745EBF35F5EB9C70C42D5392DC9776A7ED2FC2
        Validity
            Not Before: Jan  6 19:36:20 2026 GMT
            Not After : Jan  5 19:41:20 2027 GMT
        Subject: CN=838F9757809D88F20B78BEA2CEC73569A598C602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:08:01:8d:f3:1c:a2:18:4b:13:71:22:31:65:
                    79:13:76:ac:d9:90:ef:8f:28:39:a4:16:f3:93:9e:
                    66:4f:3a:53:7a:26:09:eb:db:ca:3d:2c:94:ba:51:
                    e2:84:9d:5f:10:7e:31:ba:61:a6:b7:cc:06:c5:68:
                    c8:55:c3:98:ac:a5:73:06:2b:75:01:04:a9:b0:53:
                    f3:03:e5:30:cb:94:48:6b:d1:33:1a:35:a9:76:22:
                    16:68:84:32:54:91:9a:5b:29:6d:c2:04:02:10:18:
                    23:fd:d1:e4:ad:c4:f9:ba:98:3c:b7:77:c1:26:2c:
                    bf:ac:d4:61:c0:d7:f2:c0:79:9b:01:28:a2:7a:6b:
                    82:ee:65:ed:46:c2:d9:f4:13:5d:46:6e:1e:e7:a8:
                    38:0d:b2:9d:f0:eb:1f:a9:89:39:09:e8:cf:54:84:
                    97:ee:9c:36:d6:d0:8b:da:b5:a3:79:cb:17:8e:49:
                    51:93:24:d1:9a:b3:2b:79:ea:77:40:13:bc:28:a8:
                    2e:80:24:32:59:06:18:bc:c5:67:d7:1f:41:f1:0e:
                    db:d1:2b:ee:88:14:fa:71:28:b9:b2:0a:7b:9e:c6:
                    8c:5a:81:ae:9b:a4:91:f9:49:8e:ce:18:77:29:88:
                    9c:cd:70:97:f8:8b:c2:d6:b5:5e:d3:7d:39:78:3e:
                    23:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:8F:97:57:80:9D:88:F2:0B:78:BE:A2:CE:C7:35:69:A5:98:C6:02
            X509v3 Authority Key Identifier:
                keyid:1D:74:5E:BF:35:F5:EB:9C:70:C4:2D:53:92:DC:97:76:A7:ED:2F:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A115815F39AB3B661CE8D33DC635EC7326A4AD9FB203D8396D5666ED67BA6F76/0/1D745EBF35F5EB9C70C42D5392DC9776A7ED2FC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D745EBF35F5EB9C70C42D5392DC9776A7ED2FC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A115815F39AB3B661CE8D33DC635EC7326A4AD9FB203D8396D5666ED67BA6F76/0/323830313a31373a643030303a3a2f34382d3438203d3e20323635363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17:d000::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:ee:0b:ca:cb:c6:82:e7:f9:7d:c5:3b:00:07:78:3a:52:11:
         22:44:10:34:b6:eb:4c:c6:e5:83:08:b4:73:69:68:53:d0:11:
         eb:50:12:61:19:a5:e3:24:b5:bd:f7:ba:3b:23:f6:22:6c:71:
         0d:ea:ee:78:46:04:01:d3:ae:a0:6f:67:0b:b3:d6:ab:2c:8d:
         cd:09:b6:f9:41:ba:21:45:be:6a:f7:ff:8f:a1:24:a4:50:1b:
         40:6a:25:cd:1b:2b:ad:14:36:59:6c:f0:c4:b4:48:74:75:30:
         4a:0c:77:07:6c:c4:14:f2:d5:15:3f:11:2b:af:85:21:40:04:
         d4:07:1e:74:46:9d:78:ab:08:ca:8f:39:3b:9e:52:d5:b8:a9:
         15:f7:ec:a0:f6:a0:8c:11:8a:5a:f9:30:83:81:d2:cb:c8:a9:
         c6:ed:ca:aa:3d:20:e9:81:13:7c:0e:0d:ad:96:57:ce:ea:b5:
         52:33:c2:18:81:87:4a:16:a7:3c:61:e7:94:e6:d5:13:17:aa:
         ac:0d:70:58:08:02:05:98:6c:84:a3:8b:6b:44:62:a0:4e:8a:
         e6:15:e7:e4:41:d8:7f:9c:41:5e:6a:82:f5:3b:f6:18:f3:64:
         1e:b2:fb:2c:ff:e4:04:3f:fb:0f:0c:06:66:99:b4:2e:41:84:
         df:4d:72:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 02:58:44 2026 by rpki-client