This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a34353a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a34353a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          +2J2ondb1T7Jde7bJldlnp00BPLs5XdSjwarxhLseLw=
Subject key identifier:   D1:53:34:13:61:A2:D8:F4:62:FA:03:15:28:98:D0:D4:44:B4:EA:A5
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       147DCAE52DC5C9DFB7CD6FAF1434C36050911851
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a34353a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 06 Jan 2026 19:38:09 +0000
ROA not before:           Tue 06 Jan 2026 19:33:09 +0000
ROA not after:            Tue 05 Jan 2027 19:38:09 +0000
asID:                     271891
IP address blocks:        2801:151:45::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:7d:ca:e5:2d:c5:c9:df:b7:cd:6f:af:14:34:c3:60:50:91:18:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Jan  6 19:33:09 2026 GMT
            Not After : Jan  5 19:38:09 2027 GMT
        Subject: CN=D153341361A2D8F462FA03152898D0D444B4EAA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ef:52:7c:68:37:7f:32:5e:75:c0:64:d2:bc:
                    89:f6:61:fd:66:9f:05:09:7c:bb:c6:bd:8e:3c:e0:
                    18:de:d2:2a:1b:33:72:a2:76:3f:bc:e1:e3:a5:9d:
                    6c:6d:23:31:73:94:c3:ae:2e:2e:74:9b:b3:9b:f2:
                    24:37:72:dd:dd:02:ec:e2:20:76:be:60:dc:3d:91:
                    7b:c6:2c:80:00:ba:6f:02:20:56:14:ee:96:88:ab:
                    47:39:02:c6:98:26:ce:f6:6b:1d:cf:7a:d7:1f:5c:
                    fb:65:ae:17:9f:db:91:d4:b0:3c:34:93:c2:04:52:
                    ec:f5:1f:39:53:3f:7e:16:28:9f:81:1e:b0:c7:5e:
                    07:42:ba:fb:bd:7b:a5:39:fc:8e:c8:17:58:7e:9b:
                    28:12:8f:ed:8e:d4:dc:b2:6b:39:22:b0:7f:61:0f:
                    f5:dc:89:f4:6f:15:20:f5:b7:a2:4b:63:3b:df:cd:
                    e5:74:93:6d:46:40:b5:3a:48:af:fc:a3:84:31:63:
                    8e:75:08:dc:9e:c7:0c:f9:e2:fb:65:43:b3:f6:b5:
                    53:6d:e8:97:aa:14:0d:5e:03:75:5f:d6:da:a1:0d:
                    43:2f:fc:55:a8:a8:c2:90:63:f1:7d:db:5d:11:88:
                    9d:eb:43:c2:d5:f6:fd:7d:7d:c6:2a:06:9c:4e:5b:
                    97:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:53:34:13:61:A2:D8:F4:62:FA:03:15:28:98:D0:D4:44:B4:EA:A5
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a34353a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:45::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:74:a8:50:ef:52:1d:4a:3f:5c:1a:8d:36:9d:53:9e:06:8f:
         f1:27:0d:ea:e8:5f:0e:12:cf:8a:7b:e4:01:da:c2:b9:ff:db:
         a8:5c:ad:ef:96:d2:56:4a:a0:b7:46:94:94:46:4d:6d:07:f0:
         b8:29:02:1e:8e:b0:88:d1:44:9c:75:58:92:4c:59:bd:34:87:
         83:b7:ed:8c:85:1f:70:14:be:07:8b:ca:61:0e:29:32:3e:5d:
         36:78:23:10:28:76:6a:cb:e6:44:8b:aa:17:c0:d7:aa:ab:bf:
         1b:cb:34:68:6f:3c:20:eb:26:e8:22:fd:2c:8a:27:74:95:4f:
         59:46:f6:8f:d2:24:86:95:e3:0e:a2:79:ab:ab:2f:97:ca:80:
         52:16:b2:2d:77:d9:26:36:08:40:9b:22:20:7b:b2:ef:a8:71:
         b0:88:e7:11:d7:b4:30:ba:39:14:69:ae:f2:6b:89:6d:45:e2:
         16:c6:60:af:37:fb:5e:e8:18:76:a2:9a:26:2b:97:bd:06:d0:
         ed:ad:d2:7b:9c:86:2c:b4:5d:11:59:ce:9f:92:67:64:e1:28:
         9e:fb:a6:64:df:d3:99:06:4a:72:85:73:cd:05:f1:f6:d9:ce:
         26:90:12:8a:97:ba:1f:df:ea:38:b4:c7:0f:3f:56:d0:0b:24:
         3d:20:5b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 09:29:34 2026 by rpki-client