This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F27AC91C474B388C0CCACF20057081094094BA4652C9759598575AD02D8AC576/0/323830313a31613a633030303a3a2f34382d3438203d3e203134303830.roa
File:                     323830313a31613a633030303a3a2f34382d3438203d3e203134303830.roa (raw, json)
Hash identifier:          nRvVhST0i5f91Ofap0Icq3mjOohw8lt0b+w0eE/tK6U=
Subject key identifier:   BF:0D:FB:E7:07:29:87:4C:55:60:5A:F6:45:6F:F3:88:29:3F:AD:4C
Certificate issuer:       /CN=2D7C9588134926F30E67EDE409C53B875B5CF047
Certificate serial:       43C10FC7F5991715D0BF631FFD6162AFDA9CE69C
Authority key identifier: 2D:7C:95:88:13:49:26:F3:0E:67:ED:E4:09:C5:3B:87:5B:5C:F0:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D7C9588134926F30E67EDE409C53B875B5CF047.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F27AC91C474B388C0CCACF20057081094094BA4652C9759598575AD02D8AC576/0/323830313a31613a633030303a3a2f34382d3438203d3e203134303830.roa
Signing time:             Tue 06 Jan 2026 20:49:48 +0000
ROA not before:           Tue 06 Jan 2026 20:44:48 +0000
ROA not after:            Tue 05 Jan 2027 20:49:48 +0000
asID:                     14080
IP address blocks:        2801:1a:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F27AC91C474B388C0CCACF20057081094094BA4652C9759598575AD02D8AC576/0/2D7C9588134926F30E67EDE409C53B875B5CF047.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F27AC91C474B388C0CCACF20057081094094BA4652C9759598575AD02D8AC576/0/2D7C9588134926F30E67EDE409C53B875B5CF047.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D7C9588134926F30E67EDE409C53B875B5CF047.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 09:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:c1:0f:c7:f5:99:17:15:d0:bf:63:1f:fd:61:62:af:da:9c:e6:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D7C9588134926F30E67EDE409C53B875B5CF047
        Validity
            Not Before: Jan  6 20:44:48 2026 GMT
            Not After : Jan  5 20:49:48 2027 GMT
        Subject: CN=BF0DFBE70729874C55605AF6456FF388293FAD4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a1:f4:f3:91:28:99:df:aa:27:a3:57:b4:46:
                    fd:ea:ba:6c:30:96:6a:8c:79:b5:bc:90:7b:24:b1:
                    91:11:4f:05:45:e1:9d:0d:dc:35:0b:c7:99:bf:66:
                    59:ca:ad:32:7c:9c:96:df:36:b0:18:ee:6b:f3:36:
                    c9:b6:79:f8:63:62:86:1d:08:c8:c0:61:d5:88:00:
                    9d:0d:d8:fd:7a:d1:c8:d2:87:f0:1c:2d:92:e5:16:
                    99:c5:00:e0:7a:d4:45:8e:5f:16:2c:4f:7d:6a:1d:
                    67:f6:75:df:2b:a3:2b:11:ce:b2:db:ab:b1:8c:42:
                    aa:48:15:04:ec:de:8a:0c:b3:75:24:99:eb:c9:3b:
                    cb:82:ae:20:7d:e9:28:6b:52:02:d1:a1:52:49:3f:
                    79:17:82:05:56:ff:30:b4:c3:36:56:e7:f2:6f:4c:
                    ff:01:22:fd:4c:1d:21:ba:3b:65:84:41:31:92:24:
                    45:c3:95:a1:6e:0f:7c:fd:bb:94:fa:a0:5b:e0:4c:
                    fd:35:c6:8e:4e:ea:9c:1c:11:f1:ff:22:1b:20:a0:
                    2b:eb:18:ad:d4:17:5d:78:89:4f:3b:22:3f:b8:64:
                    b9:cf:31:a7:5c:e1:c7:da:59:39:44:de:5e:0e:bc:
                    f9:58:ac:15:a5:c2:3f:16:ca:3e:e0:5e:59:89:a3:
                    60:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:0D:FB:E7:07:29:87:4C:55:60:5A:F6:45:6F:F3:88:29:3F:AD:4C
            X509v3 Authority Key Identifier:
                keyid:2D:7C:95:88:13:49:26:F3:0E:67:ED:E4:09:C5:3B:87:5B:5C:F0:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F27AC91C474B388C0CCACF20057081094094BA4652C9759598575AD02D8AC576/0/2D7C9588134926F30E67EDE409C53B875B5CF047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D7C9588134926F30E67EDE409C53B875B5CF047.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F27AC91C474B388C0CCACF20057081094094BA4652C9759598575AD02D8AC576/0/323830313a31613a633030303a3a2f34382d3438203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a:c000::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:14:81:9e:f6:a8:d0:6d:7c:ce:d0:d1:bb:7f:aa:cd:cf:ca:
         ce:7c:2b:9a:04:e1:d9:07:2a:b3:ed:18:41:bc:be:ff:53:19:
         4e:c6:e6:a0:6d:34:fe:8e:b5:19:52:2d:de:6e:52:63:5a:00:
         f6:e2:a3:d4:93:f0:e7:3b:5d:56:14:33:d7:ec:ac:b7:f5:d6:
         f1:3a:ff:34:54:8d:f0:f6:80:22:b6:e2:a7:1b:0e:6f:91:ab:
         18:36:39:45:b1:41:39:11:ce:ba:63:f1:70:3f:00:61:98:85:
         2f:e6:0d:9b:35:f6:d2:13:68:fa:c2:e8:ab:a9:32:33:b8:27:
         eb:2d:7f:54:45:08:e1:9e:7d:e3:58:00:b5:e1:2e:54:1e:ca:
         5d:11:d8:a7:65:94:da:cc:18:1a:3b:d0:88:45:1f:87:47:dd:
         15:e9:65:58:59:2d:2f:a3:bd:a4:70:c4:a5:2f:73:23:f2:e0:
         2f:a2:2b:a6:58:36:2e:5b:35:c5:ae:72:c8:1d:83:0b:3d:09:
         33:d3:0d:d7:54:32:1f:86:6d:ff:20:67:e7:2f:72:11:8d:50:
         f4:fb:43:00:de:c4:0e:bd:e1:9f:4a:fd:b1:c3:62:e4:1a:70:
         46:ea:67:d6:c6:ff:cb:1c:22:27:a2:3e:8b:eb:83:d0:cd:59:
         55:a4:9d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 22:33:50 2026 by rpki-client