This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a663a3a2f34382d3438203d3e203131383330.roa
File:                     323830313a3135313a663a3a2f34382d3438203d3e203131383330.roa (raw, json)
Hash identifier:          WDqPohKClHpISOeKIOn2guNkdN+3dbr5RHHEtJ04IC0=
Subject key identifier:   CE:91:48:9F:E7:22:94:3E:14:3E:46:8B:CC:6C:85:55:45:25:57:F4
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       70AEB84521342CD47E6EEFC6126B99CA5A6B4260
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a663a3a2f34382d3438203d3e203131383330.roa
Signing time:             Tue 06 Jan 2026 19:38:22 +0000
ROA not before:           Tue 06 Jan 2026 19:33:22 +0000
ROA not after:            Tue 05 Jan 2027 19:38:22 +0000
asID:                     11830
IP address blocks:        2801:151:f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ae:b8:45:21:34:2c:d4:7e:6e:ef:c6:12:6b:99:ca:5a:6b:42:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Jan  6 19:33:22 2026 GMT
            Not After : Jan  5 19:38:22 2027 GMT
        Subject: CN=CE91489FE722943E143E468BCC6C8555452557F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e4:d2:4b:f6:65:90:40:a9:c5:c1:ff:ba:4f:
                    e0:a5:53:d9:ac:7b:99:50:94:27:3a:d0:c4:8a:d7:
                    34:b3:ed:57:0f:04:ce:24:a3:1a:9b:27:2b:dd:42:
                    57:27:e6:d2:4a:86:83:c0:10:5a:5c:93:da:b9:2d:
                    6a:2e:8c:10:f6:f6:3e:6e:fe:b0:ec:92:09:a8:2a:
                    b7:fc:c7:d6:51:ff:9d:9c:f5:14:11:69:a4:ec:5c:
                    d8:b1:9a:9c:fb:83:fd:14:fd:7d:a7:bf:81:e2:fa:
                    bc:ad:fb:97:7b:b5:9e:f0:77:be:59:2a:cf:bc:d6:
                    94:c6:c1:d8:88:5e:f4:0b:f4:70:cc:e3:94:16:93:
                    92:b2:68:b6:ef:c0:49:a4:54:66:24:46:67:66:f1:
                    71:b6:73:8e:57:88:55:be:11:a4:5a:13:31:c7:2d:
                    4b:44:20:3d:87:40:47:10:e9:0c:5b:d9:9b:0a:61:
                    c7:ca:08:a6:c4:b5:63:98:01:33:41:bd:e5:be:74:
                    1f:5f:70:bd:fe:57:38:82:5e:12:fb:ca:21:92:0b:
                    eb:ed:68:1f:31:7b:4d:7b:27:b7:29:08:fa:a6:bd:
                    56:15:51:94:95:53:a2:55:b1:95:2a:09:a5:7b:5d:
                    c9:f7:91:c3:e6:e9:5c:03:9e:0e:f3:f1:0d:4c:0a:
                    77:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:91:48:9F:E7:22:94:3E:14:3E:46:8B:CC:6C:85:55:45:25:57:F4
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a663a3a2f34382d3438203d3e203131383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:f::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:e1:ef:b8:fe:95:d2:89:fe:a7:67:a7:71:24:43:5a:a7:c2:
         7e:9f:a5:d0:2d:ac:f9:e5:3d:1f:70:39:30:14:c4:ad:e4:bc:
         88:60:cd:88:b0:0e:7e:b5:80:3b:12:8b:ad:c1:86:51:cc:be:
         72:14:bd:d3:64:94:bf:f8:fa:28:aa:e2:f0:d0:51:75:40:96:
         ce:7a:a1:ff:55:af:ae:34:b4:1f:1e:7f:93:9e:49:a9:1e:93:
         5b:f0:ca:34:14:b3:9d:d0:47:4e:41:2d:78:a5:7e:c0:a7:ff:
         d0:5c:f1:e1:d9:31:52:56:08:b8:e2:c0:2c:18:a6:81:e6:d6:
         41:c3:77:06:54:3d:01:36:78:32:b5:90:43:43:5e:02:8b:90:
         d4:5c:9f:00:58:61:4d:e2:79:e6:89:f9:9c:c2:e2:1b:d0:7a:
         19:e3:a1:80:55:fd:7d:c8:63:b0:ff:e4:74:c2:fa:3c:59:d7:
         30:df:4f:0a:c0:1a:cb:af:64:0f:d0:4c:69:a0:03:33:0d:97:
         1a:cc:6a:7a:ea:4a:35:d5:49:12:30:e9:01:48:e0:08:6a:f9:
         15:64:1c:44:2d:19:c6:f9:11:5d:0d:bb:3c:ea:b7:7b:7a:8d:
         cc:67:8a:71:9f:65:61:a1:40:30:e5:3d:b1:ef:84:ac:ce:e5:
         c3:09:b4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 06:01:39 2026 by rpki-client