This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a3a2f34382d3438203d3e2033373930.roa
File:                     323830313a3135313a3a2f34382d3438203d3e2033373930.roa (raw, json)
Hash identifier:          jzbVyc6IgOFuWAn0DF3NG52s3vxUrHPpAKc0GIyGOZs=
Subject key identifier:   17:4A:E1:75:C6:75:CD:90:AD:F5:C0:10:84:91:46:6A:EB:E8:DD:4D
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       7B3E1D8F21CE8587133065F5E26E7ABA5A140B43
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a3a2f34382d3438203d3e2033373930.roa
Signing time:             Tue 06 Jan 2026 19:38:17 +0000
ROA not before:           Tue 06 Jan 2026 19:33:17 +0000
ROA not after:            Tue 05 Jan 2027 19:38:17 +0000
asID:                     3790
IP address blocks:        2801:151::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:3e:1d:8f:21:ce:85:87:13:30:65:f5:e2:6e:7a:ba:5a:14:0b:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Jan  6 19:33:17 2026 GMT
            Not After : Jan  5 19:38:17 2027 GMT
        Subject: CN=174AE175C675CD90ADF5C0108491466AEBE8DD4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0b:98:f1:e1:37:d9:29:e8:8c:90:67:8c:b0:
                    b7:33:70:6a:1f:31:ad:8c:13:e6:7d:81:f5:b2:6d:
                    d6:5e:8a:34:dc:93:1e:17:f2:3c:9f:bf:bd:c5:e6:
                    7c:35:50:c9:e5:cb:55:b0:a6:95:8a:8e:19:b5:b9:
                    25:0c:26:9b:dc:12:e4:da:41:03:64:99:d6:2b:2a:
                    f0:cb:c8:5b:70:f3:8b:fe:70:21:71:8d:8a:83:49:
                    5d:14:c3:b3:03:f4:80:95:3d:f3:46:7d:46:ab:b9:
                    d9:89:49:dd:ce:dd:12:16:ba:0a:80:21:5e:04:18:
                    9e:ab:46:53:a9:14:e6:6f:5d:c1:cd:62:4e:97:44:
                    73:37:bf:b4:e0:5c:27:5e:f2:9d:c7:13:e1:ad:9b:
                    4d:7b:7a:88:40:88:24:d3:e9:0e:1d:6c:f9:83:f5:
                    58:da:6f:48:16:e9:5e:d9:5a:f6:54:bc:31:f6:50:
                    dc:b4:a2:3d:dc:4d:06:99:05:f6:5e:22:99:a0:ac:
                    29:59:75:d5:1d:b8:f3:36:64:5e:3f:ed:9c:d5:d3:
                    0b:76:70:cb:66:ea:c6:96:40:c5:48:8a:ef:7d:14:
                    ee:0a:01:e6:16:c3:71:70:35:3d:b4:e4:c2:c2:43:
                    50:00:26:85:6a:46:72:b5:17:af:a9:f1:70:25:c3:
                    43:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:4A:E1:75:C6:75:CD:90:AD:F5:C0:10:84:91:46:6A:EB:E8:DD:4D
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a3a2f34382d3438203d3e2033373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:48:76:a3:6e:55:89:26:5d:1c:52:b8:62:bc:43:f8:09:82:
         1e:f5:af:07:60:ca:b5:3a:96:d4:ea:9f:c8:25:77:a9:04:4a:
         0e:8a:7f:6a:93:d0:36:bd:3b:6a:3a:71:33:01:d1:8b:73:a1:
         be:2c:cb:15:cf:df:a2:49:01:97:6f:e5:04:e2:53:44:32:65:
         a8:8e:41:41:ef:af:9e:53:f3:0a:2d:62:bc:76:2d:46:95:a9:
         38:68:a1:38:34:30:16:56:7f:52:74:17:28:e1:f9:7d:9f:ee:
         ff:0d:91:64:59:3d:5e:d7:ff:9a:ef:53:9a:15:b4:44:20:7b:
         8c:00:5e:0c:46:43:03:fc:51:df:63:a7:cb:c5:eb:42:42:50:
         db:fb:01:14:d7:ed:f2:8b:f4:8f:e9:20:4e:99:fc:a6:76:1d:
         7e:7f:d7:e1:37:83:1f:0a:b2:b7:64:9a:e2:43:0f:02:5c:b7:
         a5:d8:7f:3e:67:dd:d5:b2:9c:73:9f:9b:32:75:b5:eb:f4:2a:
         af:01:4c:f0:2e:4c:f2:e3:b3:dd:4f:5b:07:51:d8:ee:09:29:
         24:c7:2e:b2:34:a3:97:14:47:87:46:d0:de:af:fb:90:c4:c6:
         92:e8:03:d1:69:7c:9c:65:d6:fd:28:c3:41:c4:c3:cb:07:22:
         2c:06:12:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 02:38:26 2026 by rpki-client