This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/323830303a3362303a323030303a3a2f33362d3336203d3e20323633313733.roa
File:                     323830303a3362303a323030303a3a2f33362d3336203d3e20323633313733.roa (raw, json)
Hash identifier:          09aUH41QUvvTMDKOSQaY/tz8178AF0kcIs6jAtK3cFA=
Subject key identifier:   E6:EE:4C:3C:CE:AF:74:61:77:26:7D:F1:80:27:A1:07:EE:C0:1F:94
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       4FEBE21DEC21922774E87F555F731F247E3AFB29
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/323830303a3362303a323030303a3a2f33362d3336203d3e20323633313733.roa
Signing time:             Tue 06 Jan 2026 20:54:25 +0000
ROA not before:           Tue 06 Jan 2026 20:49:25 +0000
ROA not after:            Tue 05 Jan 2027 20:54:25 +0000
asID:                     263173
IP address blocks:        2800:3b0:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Feb 2026 12:52:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:eb:e2:1d:ec:21:92:27:74:e8:7f:55:5f:73:1f:24:7e:3a:fb:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Jan  6 20:49:25 2026 GMT
            Not After : Jan  5 20:54:25 2027 GMT
        Subject: CN=E6EE4C3CCEAF746177267DF18027A107EEC01F94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cf:e6:ae:d9:c2:1d:96:44:ee:37:5d:b1:89:
                    4e:f0:e2:55:b4:2b:81:8a:0c:ba:48:5e:c2:65:2d:
                    34:b6:8b:49:4d:1d:b2:c6:50:34:c5:ca:e6:5c:ec:
                    0c:d7:71:72:88:0c:5e:dd:65:54:a1:a8:1a:28:2b:
                    6c:28:26:83:42:8b:28:6e:56:c3:36:c1:c8:24:47:
                    97:e5:41:e1:6f:f6:82:45:57:5a:a5:5c:ba:48:16:
                    3d:19:c1:8f:c9:19:3f:0f:64:2b:91:75:ff:90:a5:
                    1b:21:43:86:da:74:15:9d:52:26:0f:59:1d:11:f2:
                    22:3c:a4:8e:42:b4:2a:c6:22:11:4e:d0:e1:28:10:
                    25:f4:35:75:2c:96:fa:73:6f:a1:5e:36:b7:6c:f9:
                    0f:18:ee:cb:fd:0f:45:ef:51:21:75:c1:52:d1:0b:
                    fb:69:2e:c4:1e:6c:ca:44:81:6a:dc:67:c4:33:14:
                    99:3e:28:17:66:21:c8:0a:d7:60:8e:5b:b2:10:29:
                    c7:34:34:32:4e:56:5d:ad:5f:b0:6d:3a:5a:9a:2f:
                    05:6e:03:55:80:d0:77:a4:00:24:98:12:0e:bb:20:
                    e3:92:f4:d8:f3:e7:d7:7c:cc:b3:f8:12:39:88:4e:
                    de:fd:e5:7b:4e:a2:19:09:c7:83:d0:69:a7:23:06:
                    57:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:EE:4C:3C:CE:AF:74:61:77:26:7D:F1:80:27:A1:07:EE:C0:1F:94
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/323830303a3362303a323030303a3a2f33362d3336203d3e20323633313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:3b0:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         84:ad:04:41:7f:d9:05:9e:fa:4c:cd:e5:74:50:9e:7b:c3:85:
         80:1e:5f:86:a3:2e:81:02:18:e0:22:3b:26:d5:b7:9b:47:be:
         91:82:93:79:25:5a:7d:71:ea:c4:65:92:3f:fb:b1:5f:ca:4c:
         15:8d:65:49:97:79:f1:97:e0:5a:55:00:74:d2:06:ee:e8:4e:
         e3:55:d3:16:a9:1a:22:55:cd:46:65:67:2d:93:af:ea:66:d8:
         1b:90:48:be:54:be:f0:e2:2d:1a:2f:31:2b:b0:aa:25:08:24:
         b7:fc:3d:74:1d:11:68:6a:5c:c8:6a:77:f6:2e:00:2c:3c:db:
         3f:37:2f:64:60:a1:0c:8f:c8:75:c8:ac:75:73:87:dd:f3:d1:
         2a:81:3c:31:1f:6e:33:53:a6:70:c2:9c:65:17:59:46:19:ab:
         7e:b0:b6:c5:f0:31:78:fc:d5:28:c8:fc:82:5b:6a:06:80:94:
         2a:ad:5e:a9:01:c7:99:18:be:5c:b9:46:01:5f:19:33:82:ae:
         22:84:9a:6a:0b:b2:9f:58:7a:e7:06:4b:35:c0:39:20:55:17:
         e3:e5:06:15:a3:72:93:60:44:48:47:4e:b2:53:e6:fd:d6:ab:
         d5:19:2f:8e:0f:b4:66:da:7f:4c:15:ac:2e:57:f8:fc:de:83:
         61:38:d5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 23:36:18 2026 by rpki-client