This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a34653a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a34653a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          IdxB7ECYG9SBLOEb1uV7zFkxClB64cgnl5EqewwvfHQ=
Subject key identifier:   4E:39:50:E2:FE:38:02:B4:EC:6B:24:83:94:29:5F:1B:CB:B1:F6:0C
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       34A598C91D888A169FECC232C265B04CADD52B7D
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a34653a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 06 Jan 2026 19:38:13 +0000
ROA not before:           Tue 06 Jan 2026 19:33:13 +0000
ROA not after:            Tue 05 Jan 2027 19:38:13 +0000
asID:                     271891
IP address blocks:        2801:151:4e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:a5:98:c9:1d:88:8a:16:9f:ec:c2:32:c2:65:b0:4c:ad:d5:2b:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Jan  6 19:33:13 2026 GMT
            Not After : Jan  5 19:38:13 2027 GMT
        Subject: CN=4E3950E2FE3802B4EC6B248394295F1BCBB1F60C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:06:b7:99:6c:e3:5c:33:11:80:5b:8a:6e:f7:
                    1b:3c:ef:7a:b6:0f:fa:7d:3f:9c:ec:da:5f:2d:c3:
                    4d:8e:12:89:6b:43:d2:b2:80:2c:0a:54:a5:70:8c:
                    0c:9f:01:14:a1:a2:37:4b:db:2d:e1:29:03:85:a3:
                    f4:72:24:ee:82:da:74:a1:3c:55:c9:99:d8:bf:d0:
                    dd:7e:ec:f8:69:de:92:a7:7c:0d:31:5a:80:83:a2:
                    64:6c:35:be:0c:fb:36:39:78:e3:98:5b:2b:e2:8d:
                    a4:bd:b2:16:c6:00:b0:db:3b:f5:4b:eb:5f:fb:c7:
                    e6:9e:e9:c5:5e:90:d0:59:07:8b:85:63:7d:cf:6d:
                    ae:06:1e:68:99:66:4c:bb:f2:5c:aa:ad:f2:1d:08:
                    92:bd:d7:27:9b:fc:b9:1f:07:4e:0b:c7:8f:c8:d8:
                    01:66:7f:fd:fe:e8:5d:07:cb:40:77:cc:a8:1e:6e:
                    90:11:49:ea:66:df:e3:9c:ae:43:4a:ce:1b:0b:0c:
                    e3:6d:44:a1:f0:44:34:1e:f1:d2:39:ab:2a:31:be:
                    88:22:d4:ec:00:bb:fd:8d:47:d6:a8:14:34:83:06:
                    69:d5:ca:3b:5c:e5:d3:36:e4:10:fa:c0:9d:76:b0:
                    f5:0d:b8:a8:5b:61:7c:7f:9a:53:98:a8:e2:d6:02:
                    9d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:39:50:E2:FE:38:02:B4:EC:6B:24:83:94:29:5F:1B:CB:B1:F6:0C
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a34653a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:4e::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:5f:c5:10:82:2b:1e:b1:7f:51:f0:6e:f7:64:ba:2c:a7:e9:
         65:ee:7e:11:1d:a3:2d:53:6a:c2:71:75:61:dd:00:b7:ae:4a:
         57:67:28:6b:ad:63:a5:76:97:50:a0:1f:78:6d:e8:ba:54:fb:
         76:90:f1:dc:6e:d9:40:1f:0e:45:02:a8:87:ec:9d:c6:f2:31:
         46:af:7c:8a:2b:90:ea:75:03:11:3d:79:1f:d1:4e:c1:49:3a:
         98:72:2b:d7:cf:ee:de:db:d9:d8:90:9b:01:1a:5b:e4:25:ce:
         f9:60:38:01:69:17:e5:95:36:af:1f:d5:f5:70:2d:7c:d5:ab:
         14:46:17:10:18:6c:b8:e2:9c:0a:86:f8:af:45:70:b1:5a:4b:
         35:de:8a:14:5d:4b:a8:c3:c2:c8:95:7d:f3:b8:6c:00:6d:dd:
         d7:32:09:9f:4e:a7:a5:56:92:f7:34:4d:86:7f:0d:5b:28:3c:
         7e:01:36:b8:f9:f0:0e:91:ba:f0:4f:d1:01:19:6e:25:34:86:
         d3:3c:b8:55:a6:61:bb:62:e2:5c:a4:99:3b:1e:d7:02:97:62:
         76:72:fd:9d:e7:63:d2:45:89:46:db:30:87:a0:02:c7:ba:a1:
         f9:31:03:a9:62:a1:56:b6:ef:cb:e7:60:fd:e2:72:10:74:62:
         0f:c2:2a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 07:16:47 2026 by rpki-client