This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/323830313a31343a393030303a3a2f36342d3634203d3e203631353232.roa
File:                     323830313a31343a393030303a3a2f36342d3634203d3e203631353232.roa (raw, json)
Hash identifier:          Ncj51iwrSKyfA3I3LEyXsSIEY6/QR6Qdo9VLWLVeNcI=
Subject key identifier:   4C:D5:5F:E1:CE:21:C7:50:CD:45:4B:7E:B6:95:70:63:75:BB:D3:6F
Certificate issuer:       /CN=B156B92173159B61E3CBF80FA51A1B58E6218261
Certificate serial:       476C26C4CC3B94D919155CB2A4172AF3E7B80EA8
Authority key identifier: B1:56:B9:21:73:15:9B:61:E3:CB:F8:0F:A5:1A:1B:58:E6:21:82:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B156B92173159B61E3CBF80FA51A1B58E6218261.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/323830313a31343a393030303a3a2f36342d3634203d3e203631353232.roa
Signing time:             Tue 06 Jan 2026 20:57:39 +0000
ROA not before:           Tue 06 Jan 2026 20:52:39 +0000
ROA not after:            Tue 05 Jan 2027 20:57:39 +0000
asID:                     61522
IP address blocks:        2801:14:9000::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/B156B92173159B61E3CBF80FA51A1B58E6218261.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/B156B92173159B61E3CBF80FA51A1B58E6218261.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B156B92173159B61E3CBF80FA51A1B58E6218261.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 07:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:6c:26:c4:cc:3b:94:d9:19:15:5c:b2:a4:17:2a:f3:e7:b8:0e:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B156B92173159B61E3CBF80FA51A1B58E6218261
        Validity
            Not Before: Jan  6 20:52:39 2026 GMT
            Not After : Jan  5 20:57:39 2027 GMT
        Subject: CN=4CD55FE1CE21C750CD454B7EB695706375BBD36F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e2:f1:f3:32:5d:ef:88:5d:36:36:28:86:7e:
                    f5:22:88:9a:da:8e:b8:4c:51:90:09:38:d2:a6:fd:
                    ac:e7:ce:b2:5b:3a:71:d8:1c:5b:b7:25:cb:ce:bd:
                    5b:91:cd:9e:61:58:8c:c6:7f:ae:e9:dd:e5:b7:a6:
                    66:80:66:a5:3b:70:cd:6c:8a:c6:9f:b2:86:f3:2f:
                    00:24:ff:4e:d4:23:b5:34:2e:7f:d6:7e:57:3c:bf:
                    f6:fd:64:49:77:64:fa:7c:ee:9d:b3:b5:12:b2:d8:
                    27:9f:55:bb:7f:b4:00:f9:d4:04:e6:8f:48:41:be:
                    d5:75:e5:c2:a1:04:de:10:b9:0a:49:8c:67:a4:a5:
                    c2:bb:bb:38:96:e8:32:7d:6a:67:30:d6:61:5d:60:
                    61:c5:7e:8d:39:3b:56:fb:8c:0a:d1:51:ed:3b:e7:
                    b4:18:22:0d:73:11:2f:d7:bf:14:b7:09:85:e3:77:
                    dd:28:75:d5:47:e6:3f:9e:69:76:32:f5:9b:cc:1f:
                    36:23:54:6d:fc:cb:bb:72:e3:47:56:44:b7:1c:ac:
                    81:24:48:15:f0:cf:d7:06:55:f1:a7:38:83:ff:98:
                    f5:fc:cd:15:69:55:31:70:10:4e:a0:a9:da:32:b0:
                    7b:0e:97:4e:4b:c8:20:70:b2:6f:bd:d1:1f:9d:8d:
                    86:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D5:5F:E1:CE:21:C7:50:CD:45:4B:7E:B6:95:70:63:75:BB:D3:6F
            X509v3 Authority Key Identifier:
                keyid:B1:56:B9:21:73:15:9B:61:E3:CB:F8:0F:A5:1A:1B:58:E6:21:82:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/B156B92173159B61E3CBF80FA51A1B58E6218261.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B156B92173159B61E3CBF80FA51A1B58E6218261.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/323830313a31343a393030303a3a2f36342d3634203d3e203631353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:14:9000::/64

    Signature Algorithm: sha256WithRSAEncryption
         22:b4:cd:08:4c:20:f3:e0:c7:d4:4d:b0:bc:b8:d9:0f:73:84:
         03:16:1d:03:93:e1:89:b8:e8:28:a0:5b:13:5d:6b:81:b8:78:
         01:ca:06:5c:b6:6e:11:7a:84:80:5d:01:76:20:4d:aa:c6:15:
         b5:d8:55:f7:7d:2d:ed:e7:53:06:35:4c:94:dc:f3:32:4d:00:
         15:f0:d2:fb:c9:18:6e:cf:b3:be:23:47:da:0f:4d:77:7b:ae:
         83:94:92:b2:43:99:84:fc:bd:d6:b2:1d:7e:5b:09:23:8d:90:
         24:62:cf:73:cb:57:c2:89:9c:37:9c:46:20:9f:d1:14:bd:78:
         5b:9e:b6:c1:3b:0f:dc:42:4f:4b:dc:2d:c1:e7:bf:3d:94:5c:
         99:70:a2:97:65:39:7c:03:4e:75:c8:95:e4:a8:8d:2d:99:2d:
         2e:11:e9:4c:5d:8d:cb:1e:b3:39:6c:f1:ac:12:7e:09:c5:94:
         95:57:17:66:21:36:44:e0:91:06:c9:88:d1:13:31:d1:e3:e2:
         73:39:a6:ba:39:16:8c:b1:fe:be:ab:2f:68:17:90:48:e7:83:
         19:2d:bb:ec:7b:94:cd:7f:42:af:35:a8:76:cd:47:50:02:33:
         ce:13:4c:b4:61:5b:87:14:82:83:21:b2:de:b0:88:a6:76:32:
         b7:ff:5a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 06:47:47 2026 by rpki-client