This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F30A48C56AA62874863852B6922DD67019C81AAF14AA58DBB95B9A4762F3FDDD/0/323830313a31623a383830313a3a2f34382d3438203d3e203138363738.roa
File:                     323830313a31623a383830313a3a2f34382d3438203d3e203138363738.roa (raw, json)
Hash identifier:          /n+yrsmCC4IfUvUnj8an41Vng9MuNgqqHqq3bMavlCg=
Subject key identifier:   7D:5A:C0:C3:3A:DA:AA:91:53:ED:1F:7B:C7:2F:50:FC:2C:C5:18:F4
Certificate issuer:       /CN=BADCEDF8ED0B8CD69BE9EA779E6EDC9570E7959C
Certificate serial:       0DE1B2ACDAFD8E995804E40C367308902CCDF3AC
Authority key identifier: BA:DC:ED:F8:ED:0B:8C:D6:9B:E9:EA:77:9E:6E:DC:95:70:E7:95:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BADCEDF8ED0B8CD69BE9EA779E6EDC9570E7959C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F30A48C56AA62874863852B6922DD67019C81AAF14AA58DBB95B9A4762F3FDDD/0/323830313a31623a383830313a3a2f34382d3438203d3e203138363738.roa
Signing time:             Tue 06 Jan 2026 19:37:49 +0000
ROA not before:           Tue 06 Jan 2026 19:32:49 +0000
ROA not after:            Tue 05 Jan 2027 19:37:49 +0000
asID:                     18678
IP address blocks:        2801:1b:8801::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F30A48C56AA62874863852B6922DD67019C81AAF14AA58DBB95B9A4762F3FDDD/0/BADCEDF8ED0B8CD69BE9EA779E6EDC9570E7959C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F30A48C56AA62874863852B6922DD67019C81AAF14AA58DBB95B9A4762F3FDDD/0/BADCEDF8ED0B8CD69BE9EA779E6EDC9570E7959C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BADCEDF8ED0B8CD69BE9EA779E6EDC9570E7959C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 00:35:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:e1:b2:ac:da:fd:8e:99:58:04:e4:0c:36:73:08:90:2c:cd:f3:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BADCEDF8ED0B8CD69BE9EA779E6EDC9570E7959C
        Validity
            Not Before: Jan  6 19:32:49 2026 GMT
            Not After : Jan  5 19:37:49 2027 GMT
        Subject: CN=7D5AC0C33ADAAA9153ED1F7BC72F50FC2CC518F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:47:58:80:5e:06:6b:4d:b8:11:e1:01:f7:6c:
                    32:05:0b:a6:47:13:31:ef:15:25:d6:f5:a9:e1:cc:
                    d1:57:c3:be:de:4a:b6:06:ad:27:f0:12:8b:59:f7:
                    ad:4e:3f:e8:c9:61:07:36:4c:fa:2c:76:1f:de:a4:
                    ff:1f:0e:93:89:de:db:00:26:d5:35:41:6a:c1:57:
                    f0:57:e5:04:26:c6:cf:3a:25:05:7a:7a:6a:af:9c:
                    39:74:06:68:85:2f:f3:79:10:20:b0:44:16:82:62:
                    cf:f5:e9:46:f2:a3:bd:8b:b4:2b:a0:ab:e2:c2:6d:
                    ce:21:94:e6:b2:ed:89:41:b9:93:21:25:e8:48:75:
                    99:d5:05:07:4f:c2:ec:53:a4:de:1b:4c:95:75:aa:
                    ef:0f:35:f5:3a:24:b1:48:bc:3a:8d:0f:76:2b:56:
                    09:4a:9e:fe:3b:a6:53:9c:b2:16:fe:da:9f:15:bf:
                    91:d1:c7:15:ba:1c:7b:db:6d:0a:89:b5:e6:53:4e:
                    88:52:9a:59:6e:93:7e:a9:a6:e2:1d:6e:8e:49:fd:
                    db:cd:ab:86:ee:d0:f5:5c:13:79:ae:a0:ca:c5:30:
                    5d:8a:70:97:13:fa:56:6b:d4:d2:66:7a:2c:c0:e8:
                    29:35:39:01:e8:41:28:3d:68:3b:eb:4c:31:5b:29:
                    35:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:5A:C0:C3:3A:DA:AA:91:53:ED:1F:7B:C7:2F:50:FC:2C:C5:18:F4
            X509v3 Authority Key Identifier:
                keyid:BA:DC:ED:F8:ED:0B:8C:D6:9B:E9:EA:77:9E:6E:DC:95:70:E7:95:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F30A48C56AA62874863852B6922DD67019C81AAF14AA58DBB95B9A4762F3FDDD/0/BADCEDF8ED0B8CD69BE9EA779E6EDC9570E7959C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BADCEDF8ED0B8CD69BE9EA779E6EDC9570E7959C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F30A48C56AA62874863852B6922DD67019C81AAF14AA58DBB95B9A4762F3FDDD/0/323830313a31623a383830313a3a2f34382d3438203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b:8801::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:41:34:f0:1a:e6:81:54:6f:03:47:90:e1:b2:62:0f:f8:b9:
         8f:33:ce:fb:ba:ae:93:25:65:58:94:e1:91:b1:0f:23:70:26:
         92:72:b0:aa:5b:3c:39:89:1f:a2:72:64:1b:90:49:2a:53:b0:
         ae:24:13:b6:8a:17:56:b7:26:7e:72:8a:92:87:14:7a:1f:c9:
         ac:23:ae:64:a0:7d:58:f5:01:0d:3f:18:e4:fe:5c:e6:d9:09:
         50:a1:50:85:84:a3:ba:5c:23:35:85:53:3c:81:1a:fe:73:73:
         8b:02:14:3d:9f:64:42:87:49:49:e9:df:cc:e6:0f:a0:e2:65:
         23:d8:21:9c:c4:ee:e2:73:80:61:33:57:82:ff:56:f8:c2:d0:
         b9:ec:b7:2a:70:23:6f:50:14:b2:93:39:a4:e2:19:b0:9c:3d:
         41:f5:80:7d:2d:79:68:d3:37:9b:95:1b:7a:ab:fa:a8:79:76:
         61:b2:3b:2e:f6:d3:80:a6:49:c4:08:a1:ad:4b:62:a5:86:c3:
         83:4b:5e:78:c0:ce:ff:e3:cd:2b:37:78:73:aa:10:91:46:03:
         2f:a0:39:54:66:f2:c5:7e:f7:03:ea:50:ab:6b:04:6d:6b:bd:
         e7:cf:e6:8b:79:82:28:20:03:6a:a2:60:c4:f7:4c:dc:2c:89:
         92:cb:3a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 20:01:34 2026 by rpki-client