This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a33353a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a33353a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          kVwFRFIW5dTAOgU9hpLl95RIgfAcib0In9jJf3SoQcY=
Subject key identifier:   0B:34:D8:39:55:FF:AA:E6:D1:22:D5:D1:F7:CE:69:BE:F1:82:D0:4A
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       5A0579E6A175A349508A17CB1DCD6951D0AF8753
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a33353a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 06 Jan 2026 19:38:05 +0000
ROA not before:           Tue 06 Jan 2026 19:33:05 +0000
ROA not after:            Tue 05 Jan 2027 19:38:05 +0000
asID:                     271891
IP address blocks:        2801:151:35::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:05:79:e6:a1:75:a3:49:50:8a:17:cb:1d:cd:69:51:d0:af:87:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Jan  6 19:33:05 2026 GMT
            Not After : Jan  5 19:38:05 2027 GMT
        Subject: CN=0B34D83955FFAAE6D122D5D1F7CE69BEF182D04A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8b:3c:14:71:5b:c3:9b:fa:01:1a:93:47:0b:
                    ed:db:8a:13:87:f8:47:11:ac:62:11:f3:24:a3:8b:
                    4a:98:4e:30:6f:4c:6e:36:2d:f2:64:d3:f5:d4:e7:
                    b8:98:cc:1c:ef:88:55:35:37:af:cb:99:93:e2:b4:
                    e1:04:7a:43:67:ce:59:12:19:2f:a1:b8:86:ed:d1:
                    fe:d0:a7:fe:c4:c5:4c:86:2a:a3:c7:7f:d9:a7:f1:
                    a6:90:ba:5d:82:89:52:37:40:b2:d6:31:58:f7:c1:
                    6e:a7:22:ee:ab:05:64:69:da:29:c6:a4:95:81:4a:
                    d8:e4:6f:cf:31:e9:38:0b:76:a7:a9:d0:bf:46:11:
                    55:5f:af:09:57:3a:02:fb:1a:64:6f:ce:77:f8:5f:
                    23:43:94:d0:bd:ac:94:60:02:a9:d2:b4:27:4a:c5:
                    9f:c1:80:5d:b0:2e:ca:58:3f:98:24:4b:cf:c5:c3:
                    91:46:20:12:b9:a1:34:9b:14:c1:37:be:5c:c1:c5:
                    f1:f3:7c:dc:b0:6f:8f:fe:88:c6:26:ac:6c:9d:9d:
                    23:7b:72:6b:5f:d1:58:a3:64:fe:99:85:03:ab:f1:
                    43:d6:81:f6:f4:97:21:e5:8c:3c:55:99:93:ad:2e:
                    a5:eb:24:59:90:21:7f:08:51:5e:4d:6c:0e:03:92:
                    d0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:34:D8:39:55:FF:AA:E6:D1:22:D5:D1:F7:CE:69:BE:F1:82:D0:4A
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a33353a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:35::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:11:6a:95:58:8e:11:85:a0:f9:56:ab:67:78:f4:fb:9c:92:
         ab:41:19:ce:bb:69:bb:48:4d:b4:a9:33:8b:d7:17:f0:04:6a:
         4c:7b:23:6e:2a:aa:ed:f6:1c:42:21:27:d0:3d:bf:4d:b7:0c:
         5e:fe:92:00:cf:f1:e5:5c:bf:88:81:c9:53:2e:bf:d3:79:c3:
         5d:60:73:45:cf:a9:5f:79:8f:7f:61:e1:c2:a6:b5:d2:b8:26:
         bc:2e:0c:33:55:7e:0a:38:c0:e2:ea:cc:b1:30:6f:85:3c:b6:
         5d:8a:2f:42:9f:1e:be:e4:d4:dc:0a:08:20:4d:33:e0:21:98:
         44:d0:e9:c3:3a:14:4c:14:36:95:89:3b:9c:57:a1:50:ab:7f:
         31:a6:27:93:01:68:9b:4c:28:e7:1a:55:58:ad:26:c4:1e:c1:
         83:8e:c5:f5:0c:76:05:68:cc:89:81:17:73:c1:4a:03:9a:99:
         45:4f:6c:5b:f6:f6:95:16:c0:52:a4:8a:c5:8a:17:74:c3:79:
         db:f9:bd:44:4f:0b:f3:16:26:b7:09:17:06:fa:d1:f3:54:75:
         35:15:41:c7:fe:ce:1c:a8:9a:c1:6b:8a:0b:50:ad:e1:c1:f2:
         16:b5:ca:93:c6:48:4f:e6:75:8f:57:84:7f:3e:f1:36:23:ce:
         8e:9e:61:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 08:01:51 2026 by rpki-client