This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CC7B8B67FC9035FBFD716483FDF51A00A3313488054A4C87D78E1FC52D083B9F/0/323830313a3131353a323a3a2f34382d3438203d3e203138373437.roa
File:                     323830313a3131353a323a3a2f34382d3438203d3e203138373437.roa (raw, json)
Hash identifier:          3WGRSg2HAiA0N1YyaSpPT8W2JopyveDf2iyWfOupRNQ=
Subject key identifier:   C4:A4:7D:E6:12:FD:E7:9C:E1:BD:4C:E5:29:CC:21:7B:C8:94:EE:3F
Certificate issuer:       /CN=058ED2B8DD99952E31AFDA2164E1A23A82FB8FAF
Certificate serial:       44D6D1B34950F5CA5996B0A47B5E05FAD2A1DDA3
Authority key identifier: 05:8E:D2:B8:DD:99:95:2E:31:AF:DA:21:64:E1:A2:3A:82:FB:8F:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/058ED2B8DD99952E31AFDA2164E1A23A82FB8FAF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CC7B8B67FC9035FBFD716483FDF51A00A3313488054A4C87D78E1FC52D083B9F/0/323830313a3131353a323a3a2f34382d3438203d3e203138373437.roa
Signing time:             Tue 06 Jan 2026 20:53:39 +0000
ROA not before:           Tue 06 Jan 2026 20:48:39 +0000
ROA not after:            Tue 05 Jan 2027 20:53:39 +0000
asID:                     18747
IP address blocks:        2801:115:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CC7B8B67FC9035FBFD716483FDF51A00A3313488054A4C87D78E1FC52D083B9F/0/058ED2B8DD99952E31AFDA2164E1A23A82FB8FAF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CC7B8B67FC9035FBFD716483FDF51A00A3313488054A4C87D78E1FC52D083B9F/0/058ED2B8DD99952E31AFDA2164E1A23A82FB8FAF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/058ED2B8DD99952E31AFDA2164E1A23A82FB8FAF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Jan 2026 21:55:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:d6:d1:b3:49:50:f5:ca:59:96:b0:a4:7b:5e:05:fa:d2:a1:dd:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=058ED2B8DD99952E31AFDA2164E1A23A82FB8FAF
        Validity
            Not Before: Jan  6 20:48:39 2026 GMT
            Not After : Jan  5 20:53:39 2027 GMT
        Subject: CN=C4A47DE612FDE79CE1BD4CE529CC217BC894EE3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f6:6a:c4:98:09:f9:fe:c3:a8:d5:21:26:11:
                    87:df:56:b9:4b:d5:0a:6c:0a:15:4a:98:59:20:41:
                    4a:60:12:58:ae:d6:45:90:05:bc:d6:83:a3:f4:20:
                    d1:85:7a:37:a2:ed:3d:f8:72:e2:da:2b:6b:fd:9a:
                    d0:0d:cc:aa:8a:2a:88:9e:6b:0c:99:53:b7:1f:b6:
                    f5:25:d2:75:67:be:b1:fc:6e:f4:0b:0d:af:21:a8:
                    7f:c6:c1:80:d2:99:bf:28:cd:14:66:fa:56:c3:da:
                    02:79:1a:ad:1a:2f:86:c2:3e:ce:82:52:9e:31:d5:
                    f5:52:c1:43:cf:4b:38:54:dd:09:43:3a:7d:84:4d:
                    c1:e9:50:6d:fe:fa:34:be:15:5d:43:c6:2c:3f:34:
                    4f:b5:59:07:6c:92:05:65:59:7d:61:63:c2:b1:bf:
                    5c:d8:29:67:54:aa:96:06:49:48:36:2f:a3:59:20:
                    50:fc:24:05:35:a2:94:df:cd:88:74:c9:18:23:ad:
                    94:2b:af:2f:36:86:99:fc:d5:8a:45:be:1b:34:f7:
                    83:ba:9e:3e:14:c0:22:f1:52:3a:5d:1b:8b:d2:fa:
                    55:8f:19:9b:3a:17:28:f3:ab:ce:16:36:be:27:47:
                    f8:f5:5a:ee:78:38:db:9f:a5:2c:45:23:49:1a:85:
                    7d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A4:7D:E6:12:FD:E7:9C:E1:BD:4C:E5:29:CC:21:7B:C8:94:EE:3F
            X509v3 Authority Key Identifier:
                keyid:05:8E:D2:B8:DD:99:95:2E:31:AF:DA:21:64:E1:A2:3A:82:FB:8F:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CC7B8B67FC9035FBFD716483FDF51A00A3313488054A4C87D78E1FC52D083B9F/0/058ED2B8DD99952E31AFDA2164E1A23A82FB8FAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/058ED2B8DD99952E31AFDA2164E1A23A82FB8FAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CC7B8B67FC9035FBFD716483FDF51A00A3313488054A4C87D78E1FC52D083B9F/0/323830313a3131353a323a3a2f34382d3438203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:115:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:53:b9:2a:80:cc:ca:cd:45:87:d6:45:f4:24:3a:fe:83:8e:
         77:20:a1:b7:6b:07:48:c6:11:d4:51:5d:4e:2d:be:dd:fd:d3:
         e4:c1:ba:16:3e:84:c6:8e:53:16:f4:8e:8e:c8:48:4f:b0:dc:
         9c:33:4c:bb:d1:9a:0a:01:99:c9:74:0d:34:88:fa:ea:db:40:
         a6:d1:dd:9b:36:22:2c:9b:78:22:3a:45:af:45:f1:1f:aa:b2:
         24:39:81:f0:96:f1:2e:14:07:11:7d:f7:99:f3:8b:16:7b:97:
         8e:5f:c0:cf:b8:91:ea:d7:65:dc:56:a3:b8:52:cd:e2:2a:ea:
         f0:4c:ef:76:58:e4:c8:e5:5e:e1:59:48:96:25:39:9f:c9:2e:
         2b:80:63:4f:4e:a4:3f:47:54:be:a3:e8:cb:aa:f4:2c:48:41:
         e0:92:a0:7e:e2:b9:97:4f:5b:91:e1:e7:1d:16:47:65:60:a5:
         d5:26:73:d4:0e:cf:b6:f4:0c:74:a1:dd:02:9d:6b:b2:79:f6:
         76:3f:df:ee:dc:a5:b5:e3:18:1b:fb:f5:f0:6c:a0:e4:cf:65:
         49:e7:96:2a:8f:52:c7:bf:01:d7:47:0f:0a:83:ba:04:cb:ba:
         7b:5a:96:20:d1:23:6e:61:9e:58:bf:e5:5b:f6:f8:ac:ca:e4:
         27:e6:47:a3
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIURNbRs0lQ9cpZlrCke14F+tKh3aMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDU4RUQyQjhERDk5OTUyRTMxQUZEQTIxNjRFMUEyM0E4
MkZCOEZBRjAeFw0yNjAxMDYyMDQ4MzlaFw0yNzAxMDUyMDUzMzlaMDMxMTAvBgNV
BAMTKEM0QTQ3REU2MTJGREU3OUNFMUJENENFNTI5Q0MyMTdCQzg5NEVFM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC79mrEmAn5/sOo1SEmEYffVrlL
1QpsChVKmFkgQUpgEliu1kWQBbzWg6P0INGFejei7T34cuLaK2v9mtANzKqKKoie
awyZU7cftvUl0nVnvrH8bvQLDa8hqH/GwYDSmb8ozRRm+lbD2gJ5Gq0aL4bCPs6C
Up4x1fVSwUPPSzhU3QlDOn2ETcHpUG3++jS+FV1Dxiw/NE+1WQdskgVlWX1hY8Kx
v1zYKWdUqpYGSUg2L6NZIFD8JAU1opTfzYh0yRgjrZQrry82hpn81YpFvhs094O6
nj4UwCLxUjpdG4vS+lWPGZs6Fyjzq84WNr4nR/j1Wu54ONufpSxFI0kahX13AgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQUxKR95hL955zhvUzlKcwhe8iU7j8wHwYDVR0j
BBgwFoAUBY7SuN2ZlS4xr9ohZOGiOoL7j68wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DQzdCOEI2N0ZDOTAzNUZCRkQ3MTY0ODNGREY1MUEwMEEz
MzEzNDg4MDU0QTRDODdENzhFMUZDNTJEMDgzQjlGLzAvMDU4RUQyQjhERDk5OTUy
RTMxQUZEQTIxNjRFMUEyM0E4MkZCOEZBRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wNThFRDJCOEREOTk5NTJFMzFB
RkRBMjE2NEUxQTIzQTgyRkI4RkFGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0M3QjhCNjdGQzkwMzVGQkZENzE2NDgzRkRGNTFBMDBBMzMxMzQ4ODA1
NEE0Qzg3RDc4RTFGQzUyRDA4M0I5Ri8wLzMyMzgzMDMxM2EzMTMxMzUzYTMyM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzODM3MzQzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgBARUA
AjANBgkqhkiG9w0BAQsFAAOCAQEAe1O5KoDMys1Fh9ZF9CQ6/oOOdyCht2sHSMYR
1FFdTi2+3f3T5MG6Fj6Exo5TFvSOjshIT7DcnDNMu9GaCgGZyXQNNIj66ttAptHd
mzYiLJt4IjpFr0XxH6qyJDmB8JbxLhQHEX33mfOLFnuXjl/Az7iR6tdl3FajuFLN
4irq8EzvdljkyOVe4VlIliU5n8kuK4BjT06kP0dUvqPoy6r0LEhB4JKgfuK5l09b
keHnHRZHZWCl1SZz1A7PtvQMdKHdAp1rsnn2dj/f7tylteMYG/v18Gyg5M9lSeeW
Ko9Sx78B10cPCoO6BMu6e1qWINEjbmGeWL/lW/b4rMrkJ+ZHow==
-----END CERTIFICATE-----
Generated at Sun Jan 11 20:00:23 2026 by rpki-client