This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/323830303a36383a33333a3a2f34382d3438203d3e20323639383434.roa
File:                     323830303a36383a33333a3a2f34382d3438203d3e20323639383434.roa (raw, json)
Hash identifier:          hi+bvX1SHbr7wTKBgxshlTL7Vo5JDdFcDoKMPamPVpQ=
Subject key identifier:   F1:87:98:25:D5:61:07:04:41:7A:6B:DF:B6:1C:E3:7B:A5:7B:18:3D
Certificate issuer:       /CN=12608F449BBF3F86819F95307654EF5D740A9084
Certificate serial:       0F14436F8830D534CB38098578CB092A89AF7EF6
Authority key identifier: 12:60:8F:44:9B:BF:3F:86:81:9F:95:30:76:54:EF:5D:74:0A:90:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/323830303a36383a33333a3a2f34382d3438203d3e20323639383434.roa
Signing time:             Tue 06 Jan 2026 19:12:36 +0000
ROA not before:           Tue 06 Jan 2026 19:07:36 +0000
ROA not after:            Tue 05 Jan 2027 19:12:36 +0000
asID:                     269844
IP address blocks:        2800:68:33::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 13:36:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:14:43:6f:88:30:d5:34:cb:38:09:85:78:cb:09:2a:89:af:7e:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12608F449BBF3F86819F95307654EF5D740A9084
        Validity
            Not Before: Jan  6 19:07:36 2026 GMT
            Not After : Jan  5 19:12:36 2027 GMT
        Subject: CN=F1879825D5610704417A6BDFB61CE37BA57B183D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:75:e6:4b:fa:25:ea:14:ea:81:88:67:b8:5f:
                    85:ce:7b:70:7e:9f:d0:bd:16:b2:25:90:4c:b6:fa:
                    1f:d5:49:1a:d8:87:9e:1f:0b:8c:d6:3c:cb:ad:9e:
                    dc:61:27:4d:a9:1f:7d:9e:8e:12:75:47:ba:8e:d0:
                    29:37:48:f2:a0:cd:80:63:66:2c:d4:2b:c0:d8:7f:
                    c8:20:c4:04:4b:54:1b:11:2a:b6:0c:f0:a3:9b:9a:
                    41:02:5d:37:b8:4f:7a:96:5c:80:c3:90:92:63:4b:
                    ce:cd:96:29:fd:47:80:14:a2:3c:3c:03:5e:2e:fa:
                    a7:d0:6e:aa:f4:1c:13:c3:ff:8d:1a:03:08:ab:48:
                    65:7e:71:74:e7:9f:5e:5b:e1:08:10:c9:cf:ff:28:
                    bf:49:8a:f7:b1:72:ed:b4:08:46:de:52:85:73:e3:
                    95:8e:63:96:8f:5c:30:dd:5e:71:d5:cb:b7:77:cf:
                    ab:0e:0a:ae:00:61:20:42:af:0a:2a:72:0f:72:71:
                    12:24:24:7f:73:74:ee:f8:6b:e5:7b:be:c0:de:7a:
                    f4:62:6a:dc:04:af:ec:0f:7e:0a:5c:05:20:c6:02:
                    2b:68:03:32:12:93:ca:32:2d:52:d3:0e:f5:5e:74:
                    f5:cc:60:81:1e:04:34:47:b4:84:5f:3d:1e:95:7e:
                    34:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:87:98:25:D5:61:07:04:41:7A:6B:DF:B6:1C:E3:7B:A5:7B:18:3D
            X509v3 Authority Key Identifier:
                keyid:12:60:8F:44:9B:BF:3F:86:81:9F:95:30:76:54:EF:5D:74:0A:90:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/323830303a36383a33333a3a2f34382d3438203d3e20323639383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:68:33::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:0d:88:48:83:4f:66:99:e1:f8:37:d6:32:e0:37:53:f2:61:
         59:d3:31:1d:28:e4:14:59:fa:6d:07:d4:42:1b:b1:a2:4c:4f:
         b0:de:0a:5c:e8:ae:bf:87:d4:b0:8b:0c:a0:f1:a2:a5:41:34:
         b0:c7:e0:20:9c:c2:56:22:ce:aa:09:51:6b:ce:36:9f:53:1d:
         74:e2:34:92:86:d4:9b:91:93:1b:d9:c0:e6:24:59:ff:28:4e:
         18:c7:ad:d8:40:d2:f2:5b:c5:43:9a:bf:6a:c4:76:a0:61:62:
         a0:37:82:55:bb:30:96:ea:6c:5d:07:22:23:8a:f5:f2:22:a0:
         5d:e7:bb:92:20:b9:11:4f:14:b1:9c:ae:fa:76:31:e9:0f:9e:
         56:27:19:d0:fa:60:96:a6:6b:9f:18:15:a3:f4:b6:98:b7:ec:
         2a:10:40:f7:51:fb:dc:3c:45:f1:b3:6a:f1:73:ec:45:1a:a1:
         ee:e3:8c:90:1e:2c:80:b2:1c:31:c8:de:7c:2f:51:47:25:86:
         56:12:83:2d:2b:95:26:c7:2b:ac:f0:9e:4c:de:12:fd:8f:84:
         6b:c8:9e:0f:71:fe:c8:0e:13:c7:bf:7d:c8:8d:7c:be:c4:54:
         c6:22:1e:34:68:5f:cb:17:9f:09:8d:3b:27:cd:13:fe:d1:bf:
         f2:34:69:f6
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUDxRDb4gw1TTLOAmFeMsJKomvfvYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI2MDhGNDQ5QkJGM0Y4NjgxOUY5NTMwNzY1NEVGNUQ3
NDBBOTA4NDAeFw0yNjAxMDYxOTA3MzZaFw0yNzAxMDUxOTEyMzZaMDMxMTAvBgNV
BAMTKEYxODc5ODI1RDU2MTA3MDQ0MTdBNkJERkI2MUNFMzdCQTU3QjE4M0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCadeZL+iXqFOqBiGe4X4XOe3B+
n9C9FrIlkEy2+h/VSRrYh54fC4zWPMutntxhJ02pH32ejhJ1R7qO0Ck3SPKgzYBj
ZizUK8DYf8ggxARLVBsRKrYM8KObmkECXTe4T3qWXIDDkJJjS87Nlin9R4AUojw8
A14u+qfQbqr0HBPD/40aAwirSGV+cXTnn15b4QgQyc//KL9Jivexcu20CEbeUoVz
45WOY5aPXDDdXnHVy7d3z6sOCq4AYSBCrwoqcg9ycRIkJH9zdO74a+V7vsDeevRi
atwEr+wPfgpcBSDGAitoAzISk8oyLVLTDvVedPXMYIEeBDRHtIRfPR6VfjTRAgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQU8YeYJdVhBwRBemvfthzje6V7GD0wHwYDVR0j
BBgwFoAUEmCPRJu/P4aBn5UwdlTvXXQKkIQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DRDI0OUE2MzhEREYyNkZDQ0E0RTMyM0I3QTM2QjdFQTI4
MjkwRDQzMTMzNjkwMzZGNDJEQjU0OTc2NzIyRTQ5LzAvMTI2MDhGNDQ5QkJGM0Y4
NjgxOUY5NTMwNzY1NEVGNUQ3NDBBOTA4NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMjYwOEY0NDlCQkYzRjg2ODE5
Rjk1MzA3NjU0RUY1RDc0MEE5MDg0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0QyNDlBNjM4RERGMjZGQ0NBNEUzMjNCN0EzNkI3RUEyODI5MEQ0MzEz
MzY5MDM2RjQyREI1NDk3NjcyMkU0OS8wLzMyMzgzMDMwM2EzNjM4M2EzMzMzM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNjM5MzgzNDM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAAA
aAAzMA0GCSqGSIb3DQEBCwUAA4IBAQCBDYhIg09mmeH4N9Yy4DdT8mFZ0zEdKOQU
WfptB9RCG7GiTE+w3gpc6K6/h9Swiwyg8aKlQTSwx+AgnMJWIs6qCVFrzjafUx10
4jSShtSbkZMb2cDmJFn/KE4Yx63YQNLyW8VDmr9qxHagYWKgN4JVuzCW6mxdByIj
ivXyIqBd57uSILkRTxSxnK76djHpD55WJxnQ+mCWpmufGBWj9LaYt+wqEED3Ufvc
PEXxs2rxc+xFGqHu44yQHiyAshwxyN58L1FHJYZWEoMtK5Umxyus8J5M3hL9j4Rr
yJ4Pcf7IDhPHv33IjXy+xFTGIh40aF/LF58JjTsnzRP+0b/yNGn2
-----END CERTIFICATE-----
Generated at Mon Jan 12 23:38:17 2026 by rpki-client