This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31383a3a2f34382d3438203d3e20323632313931.roa
File:                     323830303a6237303a31383a3a2f34382d3438203d3e20323632313931.roa (raw, json)
Hash identifier:          6T/2ahbgFExJPHD8VJlcPt396rmrrq0EmyUJXgcyQpI=
Subject key identifier:   FB:F6:71:9E:B0:4C:A9:FC:ED:2B:42:8D:A9:7A:F1:5B:87:65:8F:19
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       2B0AC665BBE4C34ABF5F7B02EE8DC96089565E2E
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31383a3a2f34382d3438203d3e20323632313931.roa
Signing time:             Tue 06 Jan 2026 20:55:28 +0000
ROA not before:           Tue 06 Jan 2026 20:50:28 +0000
ROA not after:            Tue 05 Jan 2027 20:55:28 +0000
asID:                     262191
IP address blocks:        2800:b70:18::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 10:26:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:0a:c6:65:bb:e4:c3:4a:bf:5f:7b:02:ee:8d:c9:60:89:56:5e:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Jan  6 20:50:28 2026 GMT
            Not After : Jan  5 20:55:28 2027 GMT
        Subject: CN=FBF6719EB04CA9FCED2B428DA97AF15B87658F19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3a:5e:a9:ea:fb:54:1c:90:59:f3:d5:ca:79:
                    b8:8f:64:a6:b2:76:4e:4a:5e:6d:69:31:20:fe:4c:
                    0a:0f:ef:ba:91:2f:3a:a8:e5:63:6e:59:80:46:77:
                    d0:90:50:89:58:ce:df:60:e8:90:d5:ba:11:d9:71:
                    f6:48:69:d4:dc:34:be:dc:3e:23:b7:6f:49:3d:25:
                    04:1c:d8:4c:6b:c9:8e:3d:d8:61:c6:0b:49:e4:ef:
                    07:f4:1a:bb:eb:41:7e:27:98:4c:2b:5f:47:4e:49:
                    dc:0c:8f:12:58:2b:b2:73:30:4c:fb:31:14:b2:8a:
                    85:27:d0:03:02:09:54:0b:69:cd:43:67:e1:87:74:
                    8b:5a:7a:c5:d8:0d:d8:41:b2:f7:23:13:63:e1:8d:
                    8f:3b:df:2d:f8:89:f0:30:20:d5:dc:83:e1:a0:40:
                    a1:d1:ca:75:34:e6:93:a8:52:25:0f:b5:95:65:7c:
                    4c:18:ba:27:46:f3:c6:f7:96:74:0c:72:63:50:34:
                    55:3a:6d:6f:17:56:e3:48:53:c0:ff:27:de:e1:2d:
                    a7:44:8e:0e:e5:40:81:dd:80:16:78:2b:d3:dd:8e:
                    56:6f:e8:45:d7:cf:f3:60:29:8e:d8:ce:7f:91:89:
                    fe:70:f6:34:d6:d4:12:b2:b6:c1:e5:8e:1e:66:1e:
                    e3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F6:71:9E:B0:4C:A9:FC:ED:2B:42:8D:A9:7A:F1:5B:87:65:8F:19
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31383a3a2f34382d3438203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:18::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:6a:64:9a:e6:ed:bb:6b:0b:62:ca:17:41:c8:af:cc:2e:6f:
         d0:64:e8:2a:21:98:fe:c8:56:06:f9:93:7b:2b:2a:07:12:f7:
         09:a1:5b:2d:3c:ee:4c:76:b8:ff:ed:47:49:6a:7a:b1:0d:99:
         cb:bc:57:4f:50:fe:c0:42:9d:29:23:b6:a9:44:37:ec:b4:b4:
         3d:46:74:86:30:85:cf:78:54:52:76:51:fa:7d:19:8d:24:fe:
         5c:1d:b5:3e:a8:62:f0:ea:80:28:cc:34:ce:04:db:b0:3b:c9:
         75:0f:69:18:3f:b2:46:4f:df:ba:d2:f0:db:a8:e3:b6:0d:db:
         9d:69:6b:d8:55:47:40:ef:34:25:c1:fb:30:21:e3:cf:f5:f5:
         69:87:4e:5a:8f:4b:d5:c1:48:d8:5d:64:f8:11:db:06:13:65:
         7e:1c:69:73:4c:f8:c4:1d:5b:0a:01:15:2f:c0:f8:47:11:0a:
         cb:75:dc:b4:30:02:39:b0:b9:40:b8:1d:35:e7:c6:be:03:34:
         2f:c8:3b:97:01:8a:95:e7:36:99:b7:53:46:e6:81:84:b0:26:
         3e:b6:59:b2:3c:b4:f0:9f:1c:63:a1:e5:fc:76:fb:9f:84:fe:
         6c:ba:12:9e:7d:6a:4d:c3:b9:b0:63:4f:b6:5e:c3:d3:bc:b7:
         63:3e:b0:ef
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUKwrGZbvkw0q/X3sC7o3JYIlWXi4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODVEOUU3RDlCRUVGRUQwQjlFMTg4REI3RThDQzNCNjQ4
OTA2NkRDRDAeFw0yNjAxMDYyMDUwMjhaFw0yNzAxMDUyMDU1MjhaMDMxMTAvBgNV
BAMTKEZCRjY3MTlFQjA0Q0E5RkNFRDJCNDI4REE5N0FGMTVCODc2NThGMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbOl6p6vtUHJBZ89XKebiPZKay
dk5KXm1pMSD+TAoP77qRLzqo5WNuWYBGd9CQUIlYzt9g6JDVuhHZcfZIadTcNL7c
PiO3b0k9JQQc2ExryY492GHGC0nk7wf0GrvrQX4nmEwrX0dOSdwMjxJYK7JzMEz7
MRSyioUn0AMCCVQLac1DZ+GHdItaesXYDdhBsvcjE2PhjY873y34ifAwINXcg+Gg
QKHRynU05pOoUiUPtZVlfEwYuidG88b3lnQMcmNQNFU6bW8XVuNIU8D/J97hLadE
jg7lQIHdgBZ4K9PdjlZv6EXXz/NgKY7Yzn+Rif5w9jTW1BKytsHljh5mHuMLAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQU+/ZxnrBMqfztK0KNqXrxW4dljxkwHwYDVR0j
BBgwFoAUhdnn2b7v7QueGI236Mw7ZIkGbc0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQUQ3MjYxQzdGRDFFNEVGRUNFQkU2RjM2MkZDRDBDNzU2
OTdFMDZCNDE0NzRCRUE4Q0FCQzcwNkY3OUVDRjNELzAvODVEOUU3RDlCRUVGRUQw
QjlFMTg4REI3RThDQzNCNjQ4OTA2NkRDRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NUQ5RTdEOUJFRUZFRDBCOUUx
ODhEQjdFOENDM0I2NDg5MDY2RENELmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUFENzI2MUM3RkQxRTRFRkVDRUJFNkYzNjJGQ0QwQzc1Njk3RTA2QjQx
NDc0QkVBOENBQkM3MDZGNzlFQ0YzRC8wLzMyMzgzMDMwM2E2MjM3MzAzYTMxMzgz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzIzMTM5MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AAtwABgwDQYJKoZIhvcNAQELBQADggEBAKhqZJrm7btrC2LKF0HIr8wub9Bk6Coh
mP7IVgb5k3srKgcS9wmhWy087kx2uP/tR0lqerENmcu8V09Q/sBCnSkjtqlEN+y0
tD1GdIYwhc94VFJ2Ufp9GY0k/lwdtT6oYvDqgCjMNM4E27A7yXUPaRg/skZP37rS
8Nuo47YN251pa9hVR0DvNCXB+zAh48/19WmHTlqPS9XBSNhdZPgR2wYTZX4caXNM
+MQdWwoBFS/A+EcRCst13LQwAjmwuUC4HTXnxr4DNC/IO5cBipXnNpm3U0bmgYSw
Jj62WbI8tPCfHGOh5fx2+5+E/my6Ep59ak3DubBjT7Zew9O8t2M+sO8=
-----END CERTIFICATE-----
Generated at Fri Jan 23 02:23:59 2026 by rpki-client