This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31623a3a2f34382d3438203d3e20323632313931.roa
File:                     323830303a6237303a31623a3a2f34382d3438203d3e20323632313931.roa (raw, json)
Hash identifier:          tu01J9I8JVslm8V65ivSWsB4bdostkgunca2IdfOQNY=
Subject key identifier:   F3:DE:C1:B4:9A:44:64:9F:3F:FB:07:8F:81:55:6D:DF:54:49:68:D5
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       4F8A9DCC12BB1AD8CE08BCB7121F3DF8EAC933CE
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31623a3a2f34382d3438203d3e20323632313931.roa
Signing time:             Tue 06 Jan 2026 20:55:25 +0000
ROA not before:           Tue 06 Jan 2026 20:50:25 +0000
ROA not after:            Tue 05 Jan 2027 20:55:25 +0000
asID:                     262191
IP address blocks:        2800:b70:1b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 10:26:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:8a:9d:cc:12:bb:1a:d8:ce:08:bc:b7:12:1f:3d:f8:ea:c9:33:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Jan  6 20:50:25 2026 GMT
            Not After : Jan  5 20:55:25 2027 GMT
        Subject: CN=F3DEC1B49A44649F3FFB078F81556DDF544968D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:74:ac:d0:d1:85:f9:97:6f:9f:6f:bd:ba:ac:
                    d8:73:cf:b2:42:0d:bd:48:31:1c:e4:37:e1:ca:b1:
                    c1:c1:fd:1d:66:c4:71:58:07:87:00:15:14:b9:a0:
                    39:f1:d5:87:81:ce:bb:17:20:d5:e3:26:c6:db:8f:
                    9e:6f:6c:77:40:4c:a9:0e:3c:cf:8b:21:b6:13:27:
                    b9:06:90:24:2c:51:64:71:a9:ab:0e:12:b4:8d:3d:
                    e1:67:dd:26:a3:4d:51:17:d7:af:3f:96:c0:82:3c:
                    24:84:6c:05:ba:64:32:ce:b8:fc:83:0a:27:57:af:
                    62:d7:64:a6:58:24:66:af:73:d8:a2:de:c6:d3:5d:
                    9f:59:c6:95:d5:1c:e4:90:31:c6:f9:31:6f:02:1d:
                    76:03:d3:94:9d:47:7b:6d:0b:1a:18:c9:a2:58:c3:
                    b2:6c:1f:cd:fa:8a:bf:73:19:1c:39:d3:33:38:36:
                    98:5a:c1:c9:47:d6:56:13:1d:3d:a6:44:33:57:76:
                    b9:61:a3:2e:f6:43:b7:e7:cb:9c:4a:25:06:d6:60:
                    98:75:09:82:45:45:f4:92:84:fb:bf:15:9c:d0:06:
                    bc:73:28:07:46:41:30:ea:aa:cf:2d:b1:aa:7b:69:
                    ff:ae:75:b1:60:2a:aa:43:d8:a7:50:5d:65:29:e5:
                    4a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:DE:C1:B4:9A:44:64:9F:3F:FB:07:8F:81:55:6D:DF:54:49:68:D5
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31623a3a2f34382d3438203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:1b::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:e7:0f:a0:43:e2:b4:00:71:3c:12:4a:18:4d:46:30:b1:3d:
         10:00:88:d5:bb:45:e1:fe:ba:70:ba:28:b2:31:3c:98:45:39:
         85:85:5e:5c:1c:44:e7:90:26:9d:61:d1:ed:46:9a:dc:1d:bd:
         25:81:3c:50:14:30:88:84:0f:b7:25:ed:9a:48:eb:d5:31:ae:
         83:21:a0:3e:7f:94:60:84:96:09:de:d5:a6:f5:e2:e5:55:38:
         8a:a8:d6:fc:37:77:09:38:44:3f:82:12:04:b7:ee:d9:a5:2f:
         cd:e7:ef:53:37:5c:d5:09:bf:dc:90:38:96:d0:91:d6:14:ea:
         55:36:05:94:61:f8:ee:64:a1:11:16:1e:24:73:9b:6e:91:a3:
         34:7d:5e:5a:32:07:7b:e4:78:13:bf:40:08:65:e9:63:3b:92:
         7a:bd:8f:2c:78:d6:98:3b:43:f3:8f:76:d1:d6:b0:75:5c:25:
         7b:68:6b:79:6d:92:05:b2:56:eb:7d:3e:f0:11:46:cd:ee:3f:
         e9:c2:44:39:78:01:2a:13:ee:68:40:5c:39:d0:23:96:46:bc:
         11:bf:d0:3e:d5:a4:25:7f:51:d5:c5:cb:65:ea:57:e8:1e:f4:
         3f:63:bf:44:64:d1:12:02:91:5b:d9:81:f2:5e:21:9f:b7:7d:
         e9:e7:3e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 02:24:05 2026 by rpki-client