This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/323830303a38383a31323a3a2f34372d3438203d3e203236323130.roa
File:                     323830303a38383a31323a3a2f34372d3438203d3e203236323130.roa (raw, json)
Hash identifier:          ERKkcUpMSEmYHHzBSYfdD4JcwJpzgZVZphqDUfR6lTU=
Subject key identifier:   5A:68:15:40:7D:ED:6B:5E:E3:14:99:E9:C6:15:75:2E:A9:8E:94:B1
Certificate issuer:       /CN=0E2398E228CAF8263D654C1F35A155213634B840
Certificate serial:       7CC33A6D648F19A98E4737EF0747456D0E5827DB
Authority key identifier: 0E:23:98:E2:28:CA:F8:26:3D:65:4C:1F:35:A1:55:21:36:34:B8:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E2398E228CAF8263D654C1F35A155213634B840.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/323830303a38383a31323a3a2f34372d3438203d3e203236323130.roa
Signing time:             Tue 06 Jan 2026 19:13:57 +0000
ROA not before:           Tue 06 Jan 2026 19:08:57 +0000
ROA not after:            Tue 05 Jan 2027 19:13:57 +0000
asID:                     26210
IP address blocks:        2800:88:12::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/0E2398E228CAF8263D654C1F35A155213634B840.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/0E2398E228CAF8263D654C1F35A155213634B840.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E2398E228CAF8263D654C1F35A155213634B840.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 06:06:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c3:3a:6d:64:8f:19:a9:8e:47:37:ef:07:47:45:6d:0e:58:27:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E2398E228CAF8263D654C1F35A155213634B840
        Validity
            Not Before: Jan  6 19:08:57 2026 GMT
            Not After : Jan  5 19:13:57 2027 GMT
        Subject: CN=5A6815407DED6B5EE31499E9C615752EA98E94B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b2:46:71:37:2f:ae:62:31:a0:90:4b:80:a0:
                    51:08:7e:36:ff:81:3a:6c:75:ef:f9:e1:e5:19:6c:
                    56:67:77:eb:c0:1f:b8:f9:9a:9c:0b:c7:79:60:ab:
                    76:1a:e1:b2:33:82:07:e1:81:c5:c9:fb:6b:79:22:
                    91:b4:8d:26:e6:13:6e:94:1c:44:ec:3e:9e:1c:15:
                    c2:0b:d1:19:e2:6a:5b:4e:15:02:69:d5:8a:9b:17:
                    87:94:2d:61:0e:28:47:53:2d:c3:ff:80:7f:32:97:
                    af:74:7b:15:0d:ea:17:4d:f2:c4:e7:c5:20:d3:3e:
                    be:a4:a1:06:de:9e:13:d8:95:49:27:66:1c:01:42:
                    ad:0f:0c:34:12:c6:ff:6b:26:4f:94:f4:32:df:fc:
                    47:cd:86:f1:84:7f:09:06:2a:97:c6:e4:af:3c:b6:
                    80:7e:1b:ac:a8:a7:22:68:33:ba:6d:21:43:41:5c:
                    7c:37:f2:a4:b1:06:ed:d0:a9:8b:1d:84:e5:4b:00:
                    d5:21:ad:a0:59:38:2c:7b:32:63:9f:3f:b3:7b:62:
                    73:52:97:b4:8a:68:a6:3a:e8:39:3b:e2:50:f4:20:
                    03:5b:5e:8d:eb:19:07:56:6d:21:cf:70:b2:cb:29:
                    19:f1:bc:81:e6:72:a0:05:3d:dc:fd:8f:0a:1a:f2:
                    bd:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:68:15:40:7D:ED:6B:5E:E3:14:99:E9:C6:15:75:2E:A9:8E:94:B1
            X509v3 Authority Key Identifier:
                keyid:0E:23:98:E2:28:CA:F8:26:3D:65:4C:1F:35:A1:55:21:36:34:B8:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/0E2398E228CAF8263D654C1F35A155213634B840.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E2398E228CAF8263D654C1F35A155213634B840.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/323830303a38383a31323a3a2f34372d3438203d3e203236323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:88:12::/47

    Signature Algorithm: sha256WithRSAEncryption
         55:9a:59:d7:14:a8:24:23:13:1e:50:94:ec:bb:e7:74:73:0a:
         46:ad:f2:72:56:b4:b5:99:67:28:e8:2b:ae:c2:ff:9f:e4:8b:
         ae:7d:26:4e:d9:8d:ac:63:29:5b:97:3a:b8:92:0d:e7:b9:12:
         41:a5:dd:90:0a:19:24:e5:ae:b8:b2:96:88:ee:db:45:b9:74:
         ee:61:b4:88:14:05:fd:e8:64:c8:8f:69:3b:b1:ff:e0:20:cc:
         f9:78:72:f3:bf:a0:bf:19:ec:0d:29:ed:b8:72:97:e1:5d:f1:
         cc:98:9d:76:1c:bc:4f:20:34:fd:98:b4:ac:18:21:ba:9f:c3:
         f2:61:34:13:be:97:61:2e:0e:cf:c8:d2:16:a8:7a:44:a0:99:
         fe:5e:78:30:27:75:20:b1:c1:a1:81:69:74:3f:73:5a:5d:6c:
         5f:3f:ab:8a:22:30:34:42:76:d8:6c:3f:14:5e:4d:35:38:3d:
         80:0e:35:2e:b6:e8:7b:4c:c5:1f:6d:f6:54:1a:13:87:33:08:
         84:c3:0c:78:fe:73:ec:4e:0a:c1:b4:72:6e:b8:36:2f:d6:d9:
         3b:3d:9a:2d:86:61:46:9f:c0:21:df:d9:fc:b3:47:59:29:23:
         c4:11:84:88:0a:0b:e0:35:8d:31:dc:94:86:d9:7b:d8:61:0b:
         f2:3c:b8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 20:02:04 2026 by rpki-client