This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a35373a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a35373a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          Oa2cDZKVJpAD0YzkZlbRsA72pkzf6u/OB2vx/YwAyas=
Subject key identifier:   83:C1:D6:EC:79:03:E8:46:E2:8D:6F:42:73:85:91:5D:44:15:9B:7E
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       306F66645506664607CA8350DD35658ACEB95B2A
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a35373a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 06 Jan 2026 19:38:09 +0000
ROA not before:           Tue 06 Jan 2026 19:33:09 +0000
ROA not after:            Tue 05 Jan 2027 19:38:09 +0000
asID:                     271891
IP address blocks:        2801:151:57::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:6f:66:64:55:06:66:46:07:ca:83:50:dd:35:65:8a:ce:b9:5b:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Jan  6 19:33:09 2026 GMT
            Not After : Jan  5 19:38:09 2027 GMT
        Subject: CN=83C1D6EC7903E846E28D6F427385915D44159B7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:02:bc:f1:f7:ae:bd:72:ed:c5:a8:95:5b:75:
                    1c:55:17:8e:09:88:94:86:a3:d1:33:3e:58:15:1a:
                    18:ee:d7:46:d6:82:47:5f:ca:8f:1e:8c:fe:ab:bc:
                    a4:1b:03:32:3b:8f:c8:aa:5b:df:e0:19:30:83:a0:
                    92:c2:e3:f7:39:3a:fd:53:93:ca:b3:c1:7d:79:2a:
                    c0:19:7a:51:56:c1:53:00:52:e7:a7:bd:46:1c:37:
                    88:6e:40:81:65:7d:97:db:b4:ec:e0:53:a8:2c:b9:
                    f1:21:e8:df:df:1e:32:b8:53:68:df:32:17:37:38:
                    86:89:7c:c7:fb:e1:43:29:5e:24:f8:3d:29:ce:59:
                    cf:d2:35:86:7b:f3:f4:40:0a:74:fd:62:1c:a1:67:
                    c8:a7:ba:5a:14:90:88:bd:9b:70:1f:c0:94:2b:cc:
                    d3:76:3b:a4:1e:a0:77:7a:9d:13:f4:97:11:ad:2c:
                    02:8d:96:01:e7:31:5e:2a:3c:78:e2:7e:bd:7b:d0:
                    c7:62:d0:69:20:c7:31:7d:c8:ca:da:ba:2c:ec:98:
                    04:b3:1f:97:a9:73:33:a7:9e:e5:84:ce:63:75:84:
                    9b:73:8e:81:d9:57:f5:61:44:55:25:8c:92:c2:eb:
                    74:70:ce:06:96:3a:29:c2:a5:d8:b3:ed:dd:71:f5:
                    91:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C1:D6:EC:79:03:E8:46:E2:8D:6F:42:73:85:91:5D:44:15:9B:7E
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a35373a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:57::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:42:fa:1a:6c:46:33:9a:84:c0:e0:48:2e:92:57:f2:1f:0b:
         b1:46:88:81:b5:9a:85:6f:5e:3a:0d:fb:d5:a8:0d:4e:1c:88:
         5f:d4:57:b7:2a:c7:7b:d1:f2:03:89:96:71:9e:88:ee:99:ee:
         f7:b4:57:90:68:53:d8:43:89:e6:53:94:cf:54:ee:91:39:32:
         95:79:06:32:92:8b:23:2b:c3:e3:98:e4:39:94:e3:b7:21:be:
         26:69:ca:f4:72:5d:bf:0c:52:91:90:47:e9:0a:58:bb:69:d3:
         6e:ff:fe:9c:0f:3b:5d:d9:1f:f6:ba:c5:fc:f6:6b:00:f2:1c:
         69:a8:20:a1:3f:8d:9b:1c:3c:c8:f9:2c:f1:51:da:63:75:6c:
         09:93:e9:11:b6:3e:61:7e:23:ca:4a:7c:5c:96:e3:49:3b:df:
         ee:3c:51:ba:d8:c7:99:a4:b3:51:86:f4:10:ed:7e:03:4e:29:
         02:23:5c:94:12:40:25:62:d7:6f:c5:1f:2e:2a:fc:09:29:37:
         14:7b:47:70:b6:84:a2:cf:9e:59:70:be:2f:72:be:d2:c2:31:
         c2:ff:fb:24:51:f5:07:61:30:44:51:11:04:17:81:10:2f:50:
         51:26:f3:88:7a:1a:7f:50:5e:c8:fe:78:a3:20:88:cd:d5:22:
         f1:a9:c2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 16:23:33 2026 by rpki-client