This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a35313a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a35313a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          W54+RQO91oTKHbijEMmri3jWdrVCfpkFwu1SFOZEnWI=
Subject key identifier:   F5:F1:57:0B:29:A0:3F:68:61:55:44:5B:2D:C8:9B:EC:8E:64:81:2B
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       4B366D0115CB90CA3AD354D90ABA886F8F51B9E2
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a35313a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 06 Jan 2026 19:38:16 +0000
ROA not before:           Tue 06 Jan 2026 19:33:16 +0000
ROA not after:            Tue 05 Jan 2027 19:38:16 +0000
asID:                     271891
IP address blocks:        2801:151:51::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:36:6d:01:15:cb:90:ca:3a:d3:54:d9:0a:ba:88:6f:8f:51:b9:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Jan  6 19:33:16 2026 GMT
            Not After : Jan  5 19:38:16 2027 GMT
        Subject: CN=F5F1570B29A03F686155445B2DC89BEC8E64812B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:88:58:e9:5c:75:2c:93:56:f8:46:17:49:5d:
                    72:0b:70:a2:58:0d:34:67:1a:ec:f6:c1:7e:88:db:
                    34:5c:ed:c4:d0:67:f2:c8:44:a2:fd:a1:03:fd:a6:
                    bd:07:ab:8c:3a:a9:71:a1:d1:4c:b0:60:19:4b:0f:
                    69:6b:5f:1f:80:47:07:33:80:ee:78:0d:fe:3b:47:
                    e3:5b:11:3e:cb:63:3c:6c:b1:0b:2f:83:a2:ac:b3:
                    8f:7a:24:4e:2f:d7:b1:06:22:01:c5:dd:e5:fc:8f:
                    68:e8:91:67:8b:6c:1d:dc:f5:24:9c:72:62:96:b4:
                    db:eb:a5:92:bc:87:c5:c6:b7:f1:17:3d:ea:ac:2e:
                    64:cf:8e:71:e1:97:f4:e2:9c:13:c8:51:a9:d4:ce:
                    20:11:21:10:4d:83:a3:9e:15:02:d8:df:61:98:7e:
                    7a:29:3d:99:c3:f5:4c:59:ce:fd:4f:6c:1c:ac:1e:
                    d0:84:8b:ef:8b:d5:82:3e:d2:5c:c6:7b:c3:46:ef:
                    59:1d:a3:e1:e0:fa:11:8d:ce:82:55:cc:c0:af:4d:
                    09:53:30:f0:d0:d3:83:06:b3:11:a1:ff:4a:a3:b6:
                    14:09:52:40:74:99:2a:66:ed:9e:e8:08:f1:29:d5:
                    c4:64:4b:30:77:04:91:04:46:ae:62:0b:d8:74:b4:
                    1a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F1:57:0B:29:A0:3F:68:61:55:44:5B:2D:C8:9B:EC:8E:64:81:2B
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a35313a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:51::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:ab:8c:d9:4d:ef:e8:9e:65:ae:3a:18:0e:c5:76:32:3f:a9:
         14:da:fc:de:aa:8b:78:0e:68:39:88:04:60:46:9c:a4:f0:82:
         5a:f4:2c:37:07:b8:01:09:1e:6b:70:44:9f:4d:51:ee:a1:c6:
         85:12:74:2e:d7:a6:2c:8c:44:e7:cd:ce:16:f1:02:ff:5c:db:
         8d:a7:85:68:81:f4:02:f7:6c:3b:33:8b:7b:4e:45:f6:87:74:
         aa:92:53:d0:af:13:6b:f0:76:06:7e:1d:97:be:a4:9a:e2:94:
         de:a5:4c:6e:d0:c9:94:98:2a:e2:8c:00:6d:e6:13:0d:9a:fb:
         85:6a:b7:12:5d:43:e8:3d:e7:9c:bf:57:6e:1b:51:05:d3:cd:
         4e:07:ac:1a:b0:eb:52:36:14:25:2e:57:6f:04:a9:df:56:3c:
         94:54:ac:f6:60:c8:79:69:e9:60:fc:6c:30:d8:9c:2f:a2:bf:
         71:c9:11:dd:2d:db:6f:09:3d:0f:0e:44:d4:56:05:82:a3:e0:
         b1:a5:bc:c9:70:f3:13:a5:c1:da:c0:33:49:8b:d7:97:63:17:
         6c:db:f3:2a:a1:20:e3:d2:d4:46:8b:5f:4e:b9:6c:4b:f2:e9:
         ef:41:e4:43:57:70:e0:63:3e:4b:45:89:d8:ea:c6:bd:56:0b:
         e2:7e:e6:1c
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUSzZtARXLkMo601TZCrqIb49RueIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDMxMkFDQjIyMjZGOEI4OEU1RTg5RUYyRjE0NDJCOEVF
RkIzQjI3OTAeFw0yNjAxMDYxOTMzMTZaFw0yNzAxMDUxOTM4MTZaMDMxMTAvBgNV
BAMTKEY1RjE1NzBCMjlBMDNGNjg2MTU1NDQ1QjJEQzg5QkVDOEU2NDgxMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxiFjpXHUsk1b4RhdJXXILcKJY
DTRnGuz2wX6I2zRc7cTQZ/LIRKL9oQP9pr0Hq4w6qXGh0UywYBlLD2lrXx+ARwcz
gO54Df47R+NbET7LYzxssQsvg6Kss496JE4v17EGIgHF3eX8j2jokWeLbB3c9SSc
cmKWtNvrpZK8h8XGt/EXPeqsLmTPjnHhl/TinBPIUanUziARIRBNg6OeFQLY32GY
fnopPZnD9UxZzv1PbBysHtCEi++L1YI+0lzGe8NG71kdo+Hg+hGNzoJVzMCvTQlT
MPDQ04MGsxGh/0qjthQJUkB0mSpm7Z7oCPEp1cRkSzB3BJEERq5iC9h0tBpjAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQU9fFXCymgP2hhVURbLcib7I5kgSswHwYDVR0j
BBgwFoAUQxKssiJvi4jl6J7y8UQrju+zsnkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQjgxNUM3OERERDQwQjQ5MjdEOTgwRkE5NEU4RDA3QUQz
NEMzNDNBQTFGMjNDRDVEREU5NUZFRjlGQkNGMUE0LzAvNDMxMkFDQjIyMjZGOEI4
OEU1RTg5RUYyRjE0NDJCOEVFRkIzQjI3OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MzEyQUNCMjIyNkY4Qjg4RTVF
ODlFRjJGMTQ0MkI4RUVGQjNCMjc5LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUI4MTVDNzhEREQ0MEI0OTI3RDk4MEZBOTRFOEQwN0FEMzRDMzQzQUEx
RjIzQ0Q1RERFOTVGRUY5RkJDRjFBNC8wLzMyMzgzMDMxM2EzMTM1MzEzYTM1MzEz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzEzODM5MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AQFRAFEwDQYJKoZIhvcNAQELBQADggEBAJGrjNlN7+ieZa46GA7FdjI/qRTa/N6q
i3gOaDmIBGBGnKTwglr0LDcHuAEJHmtwRJ9NUe6hxoUSdC7XpiyMROfNzhbxAv9c
242nhWiB9AL3bDszi3tORfaHdKqSU9CvE2vwdgZ+HZe+pJrilN6lTG7QyZSYKuKM
AG3mEw2a+4VqtxJdQ+g955y/V24bUQXTzU4HrBqw61I2FCUuV28Eqd9WPJRUrPZg
yHlp6WD8bDDYnC+iv3HJEd0t228JPQ8ORNRWBYKj4LGlvMlw8xOlwdrAM0mL15dj
F2zb8yqhIOPS1EaLX065bEvy6e9B5ENXcOBjPktFidjqxr1WC+J+5hw=
-----END CERTIFICATE-----
Generated at Mon Jan 12 09:28:15 2026 by rpki-client