This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a38623a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a38623a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          C0P9Eeoe/CC+WiKDGKF32etaZsy+6vMmqRUXBvTkyyQ=
Subject key identifier:   DD:03:33:C3:4F:92:44:95:7E:19:F4:A2:21:C5:94:55:F7:37:C3:34
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       6149DB112332ADC5D924F7969A50F2613494EDB6
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a38623a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 06 Jan 2026 19:38:13 +0000
ROA not before:           Tue 06 Jan 2026 19:33:13 +0000
ROA not after:            Tue 05 Jan 2027 19:38:13 +0000
asID:                     271891
IP address blocks:        2801:151:8b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:49:db:11:23:32:ad:c5:d9:24:f7:96:9a:50:f2:61:34:94:ed:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Jan  6 19:33:13 2026 GMT
            Not After : Jan  5 19:38:13 2027 GMT
        Subject: CN=DD0333C34F9244957E19F4A221C59455F737C334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6a:ed:c5:30:4c:42:a7:2d:be:56:60:09:85:
                    8b:71:4a:d3:48:37:10:91:5b:a6:1f:1b:a1:95:1f:
                    33:5b:73:bb:c3:2c:2d:55:88:4d:4e:03:8a:3c:af:
                    05:4a:ce:62:db:2e:03:81:71:65:17:e6:37:0c:74:
                    d8:7e:c9:3c:f9:c1:33:89:c9:6b:02:81:fa:05:f4:
                    86:4f:46:cd:db:3f:a1:02:7c:24:f0:d0:44:63:a0:
                    1f:df:f4:dc:61:97:25:c4:8e:e3:4d:22:23:aa:b9:
                    4c:6e:3a:8e:0f:86:b8:d9:6a:5a:ad:7b:14:d8:af:
                    32:61:f3:e8:32:79:00:7c:ae:88:8c:2e:12:51:ee:
                    1c:42:67:33:c7:17:fc:fb:4f:7f:89:d3:28:c0:f0:
                    44:e0:44:41:86:e2:d5:0e:e6:5f:c4:13:b1:5b:f4:
                    e1:b3:d0:40:2d:f2:86:85:bd:52:b5:c0:cc:48:ee:
                    b5:ea:83:62:45:6e:55:d0:49:08:a5:d6:e9:44:7e:
                    8e:1d:76:94:88:ef:b5:f9:25:19:14:32:94:9a:a4:
                    89:3c:ba:98:8b:03:82:7c:9a:dd:c2:06:3d:14:c3:
                    a8:c0:71:95:de:54:db:6a:39:bd:fd:f0:26:26:93:
                    6a:75:09:c5:4a:ef:de:37:c3:76:6a:3d:7d:82:b5:
                    cd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:03:33:C3:4F:92:44:95:7E:19:F4:A2:21:C5:94:55:F7:37:C3:34
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a38623a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:8b::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:dd:74:1a:54:45:cf:ac:a2:05:f4:69:2d:8a:51:95:42:39:
         9e:63:7c:c7:df:fb:59:bc:4a:12:de:c7:3b:f3:54:2d:d9:15:
         12:2d:d0:88:fe:db:81:b8:b4:dc:d3:51:be:c5:27:c4:6f:f7:
         61:10:40:c2:8d:09:d5:41:73:61:f9:5c:37:48:ef:95:dd:b9:
         73:d3:37:e0:5e:68:4e:ff:25:ce:16:4e:58:aa:87:27:db:06:
         27:3a:0b:89:9d:10:6b:1a:ad:af:1e:89:19:8f:81:cb:f0:f1:
         12:d1:a8:e9:3d:6f:6b:e4:b9:e2:83:8b:1f:b0:3c:90:3d:c9:
         bb:0a:fc:cc:60:0a:b1:2a:30:fd:86:b7:dc:0d:83:55:b5:6e:
         27:e2:5d:8c:d4:04:77:c1:f6:c4:3b:42:b8:32:9c:08:c8:be:
         ec:dc:7c:cc:36:db:e1:91:65:44:0e:bc:e1:80:f7:24:f4:b0:
         d7:f7:2f:25:f9:3f:ae:ba:5e:c1:a1:81:d8:ad:91:f9:b8:7c:
         78:bb:82:ba:00:5d:92:1c:2f:68:b7:71:e7:c1:e5:f5:93:3a:
         88:eb:95:02:e3:1e:93:64:29:02:30:4f:00:e4:12:4c:0b:f6:
         fa:31:b3:f2:d5:73:c4:4b:ab:5e:f7:78:58:12:23:85:c4:a8:
         df:e2:cc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 09:29:07 2026 by rpki-client