This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/323830303a3265303a3a2f33322d3332203d3e203131303831.roa
File:                     323830303a3265303a3a2f33322d3332203d3e203131303831.roa (raw, json)
Hash identifier:          JnxFjvcqBQL+2/d8ora6B1i/thjCTbWth/qNSHCGmpI=
Subject key identifier:   B6:EA:A0:F9:B4:BE:2A:90:C5:93:98:E9:F7:BB:EB:1D:A6:72:14:D8
Certificate issuer:       /CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Certificate serial:       4E10AAA79DACA45CFF003661C938A11D83ADCAE8
Authority key identifier: 23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/323830303a3265303a3a2f33322d3332203d3e203131303831.roa
Signing time:             Tue 06 Jan 2026 19:43:22 +0000
ROA not before:           Tue 06 Jan 2026 19:38:22 +0000
ROA not after:            Tue 05 Jan 2027 19:43:22 +0000
asID:                     11081
IP address blocks:        2800:2e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 01:24:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:10:aa:a7:9d:ac:a4:5c:ff:00:36:61:c9:38:a1:1d:83:ad:ca:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237D63DAE61C3211909C89DEBD463B26F873E44B
        Validity
            Not Before: Jan  6 19:38:22 2026 GMT
            Not After : Jan  5 19:43:22 2027 GMT
        Subject: CN=B6EAA0F9B4BE2A90C59398E9F7BBEB1DA67214D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e5:f0:b2:43:32:d0:0f:38:1c:39:46:c0:04:
                    f0:fa:cf:d3:72:8a:51:c4:da:37:94:c0:4f:a2:79:
                    4a:f6:af:8e:ab:ae:e6:39:cf:ca:76:c1:c0:be:f1:
                    f6:6f:7f:a7:7c:a7:8b:d4:f7:b5:08:d9:76:0b:ae:
                    a4:9b:87:11:67:44:41:77:c3:54:1f:1c:60:0b:24:
                    ac:b5:2b:2e:a8:be:83:a8:07:37:d4:29:12:93:7f:
                    55:e4:04:e9:5d:2a:48:7c:8d:1c:d3:80:ea:a5:08:
                    9d:e0:c6:01:f9:bb:4c:dd:a9:70:33:65:ba:62:44:
                    b4:1b:19:ad:09:37:ee:ba:82:ed:72:e1:bb:a7:0d:
                    6f:5b:c5:db:51:04:a9:18:0f:0b:f0:35:e6:05:ad:
                    61:1a:4c:3f:4e:7a:b7:90:1e:54:66:40:3a:46:76:
                    71:2e:d7:6e:c1:9d:60:17:65:e5:8d:4c:c9:34:c6:
                    ea:93:ca:63:15:eb:bd:6d:34:24:9d:93:1b:da:91:
                    98:26:5c:24:e8:fc:65:6e:7d:e0:f8:14:3c:0b:cb:
                    58:46:da:eb:59:3b:77:ee:3e:3a:3d:11:1c:94:b3:
                    2d:1d:61:26:08:df:c0:17:41:5a:fe:03:e8:17:c5:
                    4a:3e:2c:57:aa:02:3c:c8:f8:be:65:63:28:55:e0:
                    0a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:EA:A0:F9:B4:BE:2A:90:C5:93:98:E9:F7:BB:EB:1D:A6:72:14:D8
            X509v3 Authority Key Identifier:
                keyid:23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/323830303a3265303a3a2f33322d3332203d3e203131303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:2e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:d8:61:09:fe:90:15:e1:9e:e8:95:99:0c:9c:40:e0:a8:81:
         9e:93:40:14:56:69:85:be:34:09:da:3e:4e:ea:67:bd:70:38:
         60:dc:95:19:27:f0:d1:fd:97:fb:9d:7f:f3:46:09:b3:4d:a9:
         a1:cb:bd:8f:1c:84:87:0b:6b:64:6c:b0:53:d2:4c:5a:ab:7a:
         6c:ce:25:e1:9a:55:e3:8b:3f:86:c2:da:44:f1:c1:df:ac:5e:
         6a:37:14:97:4a:47:67:33:0b:de:ce:a6:39:e1:74:18:f0:77:
         43:5b:b8:37:f5:ed:3e:6c:2d:88:18:4a:be:1f:3e:19:b0:46:
         f7:47:ba:c2:11:51:3c:71:64:fd:a1:98:46:8b:50:ea:53:23:
         72:95:16:51:a2:cb:ec:20:3b:c2:a5:62:5e:d8:2e:5b:78:ee:
         22:31:46:dc:78:fc:51:02:6d:14:2d:54:14:78:5b:50:dc:cc:
         d7:50:52:d2:21:50:b6:2d:0e:21:4f:71:13:ae:3f:59:9f:10:
         6b:5b:6b:b0:32:3b:24:64:fb:5f:ab:e9:1c:1f:6e:13:b4:b1:
         06:8a:2b:8d:42:3d:46:9d:8a:79:2a:ab:0a:76:99:8d:cd:cf:
         19:dc:d2:94:50:28:28:ef:3b:26:3c:e6:b6:7b:7d:17:3d:8d:
         5c:c9:d2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 02:57:00 2026 by rpki-client