This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BF9F051410575ACCCCAE92F9A4CE082A11A8172C79F9F63E2963ED7ACC2786CB/0/323830313a31643a383830303a3a2f34382d3438203d3e203133343839.roa
File:                     323830313a31643a383830303a3a2f34382d3438203d3e203133343839.roa (raw, json)
Hash identifier:          H+UzLJ+JwLP/Qp64A25TAGp/JXg9vWhmm6j2UyxvZsM=
Subject key identifier:   DA:F0:E1:0E:39:AF:40:25:DC:F2:22:08:D1:70:C1:83:D5:7F:38:77
Certificate issuer:       /CN=9E00446F94CC33DA37B373FAFF13F7E5B22B8813
Certificate serial:       6DBDBE66428A73B4748891924360CB9D5FDD5E70
Authority key identifier: 9E:00:44:6F:94:CC:33:DA:37:B3:73:FA:FF:13:F7:E5:B2:2B:88:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E00446F94CC33DA37B373FAFF13F7E5B22B8813.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BF9F051410575ACCCCAE92F9A4CE082A11A8172C79F9F63E2963ED7ACC2786CB/0/323830313a31643a383830303a3a2f34382d3438203d3e203133343839.roa
Signing time:             Mon 15 Dec 2025 14:55:02 +0000
ROA not before:           Mon 15 Dec 2025 14:50:02 +0000
ROA not after:            Mon 14 Dec 2026 14:55:02 +0000
asID:                     13489
IP address blocks:        2801:1d:8800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BF9F051410575ACCCCAE92F9A4CE082A11A8172C79F9F63E2963ED7ACC2786CB/0/9E00446F94CC33DA37B373FAFF13F7E5B22B8813.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BF9F051410575ACCCCAE92F9A4CE082A11A8172C79F9F63E2963ED7ACC2786CB/0/9E00446F94CC33DA37B373FAFF13F7E5B22B8813.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E00446F94CC33DA37B373FAFF13F7E5B22B8813.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 04:07:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:bd:be:66:42:8a:73:b4:74:88:91:92:43:60:cb:9d:5f:dd:5e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E00446F94CC33DA37B373FAFF13F7E5B22B8813
        Validity
            Not Before: Dec 15 14:50:02 2025 GMT
            Not After : Dec 14 14:55:02 2026 GMT
        Subject: CN=DAF0E10E39AF4025DCF22208D170C183D57F3877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2f:7e:83:10:a0:3a:ae:46:aa:73:44:39:ec:
                    35:79:0f:9c:86:17:1b:b4:6f:40:e2:57:bc:3a:a1:
                    d3:e1:d4:98:e3:ff:9b:7b:b6:a2:a8:00:5a:75:66:
                    b8:83:8b:48:3f:ab:d7:ce:4f:33:d1:53:97:42:7a:
                    7c:1f:d8:25:fd:aa:6d:e0:67:80:00:c8:a9:f7:bf:
                    e4:31:be:f0:9f:e9:d0:50:1b:70:d9:ea:6d:50:e0:
                    04:ed:68:1a:ad:18:83:08:b4:84:bd:57:2c:fc:30:
                    8c:1d:b1:76:11:4c:37:9c:36:68:58:56:78:6e:21:
                    c6:ac:54:ea:27:3b:d9:a1:44:48:c5:52:4a:6e:29:
                    b9:47:d2:2c:fe:59:f8:b2:51:e2:a0:d6:fb:a1:1a:
                    68:39:e1:68:12:49:fd:4c:c7:fd:ec:b7:a0:de:26:
                    6c:3a:07:31:23:9c:c3:ae:6b:b4:58:c8:e1:ca:7a:
                    67:c5:f9:fa:b6:9b:57:2d:4a:ef:3f:c4:c0:c2:c1:
                    c2:4d:22:e2:07:79:d9:70:ca:13:61:cd:b8:db:30:
                    44:d9:1e:de:9b:9a:98:85:f7:c1:84:29:93:bf:e0:
                    27:98:15:0c:43:c2:ca:dc:34:8f:af:2a:84:f9:65:
                    de:80:d3:d4:26:d2:ff:90:c8:68:80:84:d7:76:77:
                    77:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F0:E1:0E:39:AF:40:25:DC:F2:22:08:D1:70:C1:83:D5:7F:38:77
            X509v3 Authority Key Identifier:
                keyid:9E:00:44:6F:94:CC:33:DA:37:B3:73:FA:FF:13:F7:E5:B2:2B:88:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BF9F051410575ACCCCAE92F9A4CE082A11A8172C79F9F63E2963ED7ACC2786CB/0/9E00446F94CC33DA37B373FAFF13F7E5B22B8813.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E00446F94CC33DA37B373FAFF13F7E5B22B8813.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BF9F051410575ACCCCAE92F9A4CE082A11A8172C79F9F63E2963ED7ACC2786CB/0/323830313a31643a383830303a3a2f34382d3438203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1d:8800::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:48:f8:18:36:84:37:e5:cd:b2:67:dd:bd:1b:ff:dd:39:fd:
         47:16:bd:57:5a:41:06:45:26:c7:eb:66:5e:40:b6:f2:bf:48:
         c9:f0:8e:df:2d:62:31:c0:b2:bc:e0:b3:d7:cb:86:93:92:9d:
         f3:39:66:2a:4b:8b:21:d3:82:f4:77:3b:95:a4:19:bb:36:f6:
         cf:d0:10:a7:62:c0:06:64:c6:33:27:26:d7:72:a7:ef:dc:55:
         00:99:cb:a2:3d:c4:1e:d6:f2:26:38:e5:18:02:9e:30:27:83:
         dc:a1:99:c6:82:9e:58:3b:39:38:4f:2b:6c:e0:fe:80:31:af:
         e4:a5:8b:96:38:57:ae:f3:f5:4d:a1:2a:6f:14:b0:7d:f3:b8:
         be:75:14:7b:c9:8f:ff:84:55:9f:3e:87:7b:68:a7:f0:56:9a:
         11:1b:f2:b4:6c:c0:d9:7b:b2:9d:09:d4:39:50:34:02:55:29:
         54:a1:34:ac:87:f8:8f:8f:6a:7a:0a:c2:cd:93:85:5c:79:b3:
         c7:fb:38:c3:76:ed:2a:56:f9:03:b0:35:32:17:e5:e7:13:4e:
         79:44:d4:3e:e9:1e:9a:9e:8e:d2:16:17:36:4a:f2:43:6e:11:
         7c:97:ad:cc:85:bb:fd:81:4c:75:ac:8c:2e:ca:58:64:a4:1f:
         81:3e:80:30
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUbb2+ZkKKc7R0iJGSQ2DLnV/dXnAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUUwMDQ0NkY5NENDMzNEQTM3QjM3M0ZBRkYxM0Y3RTVC
MjJCODgxMzAeFw0yNTEyMTUxNDUwMDJaFw0yNjEyMTQxNDU1MDJaMDMxMTAvBgNV
BAMTKERBRjBFMTBFMzlBRjQwMjVEQ0YyMjIwOEQxNzBDMTgzRDU3RjM4NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChL36DEKA6rkaqc0Q57DV5D5yG
Fxu0b0DiV7w6odPh1Jjj/5t7tqKoAFp1ZriDi0g/q9fOTzPRU5dCenwf2CX9qm3g
Z4AAyKn3v+QxvvCf6dBQG3DZ6m1Q4ATtaBqtGIMItIS9Vyz8MIwdsXYRTDecNmhY
VnhuIcasVOonO9mhREjFUkpuKblH0iz+WfiyUeKg1vuhGmg54WgSSf1Mx/3st6De
Jmw6BzEjnMOua7RYyOHKemfF+fq2m1ctSu8/xMDCwcJNIuIHedlwyhNhzbjbMETZ
Ht6bmpiF98GEKZO/4CeYFQxDwsrcNI+vKoT5Zd6A09Qm0v+QyGiAhNd2d3eTAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQU2vDhDjmvQCXc8iII0XDBg9V/OHcwHwYDVR0j
BBgwFoAUngBEb5TMM9o3s3P6/xP35bIriBMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CRjlGMDUxNDEwNTc1QUNDQ0NBRTkyRjlBNENFMDgyQTEx
QTgxNzJDNzlGOUY2M0UyOTYzRUQ3QUNDMjc4NkNCLzAvOUUwMDQ0NkY5NENDMzNE
QTM3QjM3M0ZBRkYxM0Y3RTVCMjJCODgxMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RTAwNDQ2Rjk0Q0MzM0RBMzdC
MzczRkFGRjEzRjdFNUIyMkI4ODEzLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkY5RjA1MTQxMDU3NUFDQ0NDQUU5MkY5QTRDRTA4MkExMUE4MTcyQzc5
RjlGNjNFMjk2M0VEN0FDQzI3ODZDQi8wLzMyMzgzMDMxM2EzMTY0M2EzODM4MzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzNDM4Mzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AQAdiAAwDQYJKoZIhvcNAQELBQADggEBAI1I+Bg2hDflzbJn3b0b/905/UcWvVda
QQZFJsfrZl5AtvK/SMnwjt8tYjHAsrzgs9fLhpOSnfM5ZipLiyHTgvR3O5WkGbs2
9s/QEKdiwAZkxjMnJtdyp+/cVQCZy6I9xB7W8iY45RgCnjAng9yhmcaCnlg7OThP
K2zg/oAxr+Sli5Y4V67z9U2hKm8UsH3zuL51FHvJj/+EVZ8+h3top/BWmhEb8rRs
wNl7sp0J1DlQNAJVKVShNKyH+I+PanoKws2ThVx5s8f7OMN27SpW+QOwNTIX5ecT
TnlE1D7pHpqejtIWFzZK8kNuEXyXrcyFu/2BTHWsjC7KWGSkH4E+gDA=
-----END CERTIFICATE-----
Generated at Sat Dec 20 23:16:30 2025 by rpki-client