This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31663a3a2f34382d3438203d3e20323632313931.roa
File:                     323830303a6237303a31663a3a2f34382d3438203d3e20323632313931.roa (raw, json)
Hash identifier:          AX8EwPb6R2FcPu+xRJujYG9reKcQQpGgNH0qyIuRfr4=
Subject key identifier:   E8:B4:FF:E2:89:3C:9A:C7:37:04:13:EB:5E:48:CB:20:44:A5:50:D3
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       2883F401C9D966F89223712C9FEDC16C6C330BF5
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31663a3a2f34382d3438203d3e20323632313931.roa
Signing time:             Tue 06 Jan 2026 20:55:29 +0000
ROA not before:           Tue 06 Jan 2026 20:50:29 +0000
ROA not after:            Tue 05 Jan 2027 20:55:29 +0000
asID:                     262191
IP address blocks:        2800:b70:1f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 10:26:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:83:f4:01:c9:d9:66:f8:92:23:71:2c:9f:ed:c1:6c:6c:33:0b:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Jan  6 20:50:29 2026 GMT
            Not After : Jan  5 20:55:29 2027 GMT
        Subject: CN=E8B4FFE2893C9AC7370413EB5E48CB2044A550D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b5:d6:67:2c:91:cc:29:bb:5a:ed:dd:c8:b9:
                    c0:1d:95:12:ae:e5:df:33:3c:0a:25:38:c4:72:96:
                    ee:13:39:b9:0c:e9:68:f9:a2:7b:2f:bd:76:2a:37:
                    58:9c:e2:17:2b:93:36:ba:55:f1:cc:49:25:86:9f:
                    46:01:9f:8d:64:b4:50:ab:9e:59:26:f1:7c:81:18:
                    af:8a:9c:a1:5e:86:c4:af:0d:6e:65:d4:ff:9e:f9:
                    47:86:3d:cf:33:1a:2e:db:77:d4:16:f8:0d:91:cd:
                    76:12:dc:09:35:72:c8:60:1d:60:3b:9f:d2:09:86:
                    05:37:48:a3:23:0f:f5:29:18:bc:6a:4f:20:38:f5:
                    79:d6:3f:26:6e:76:25:55:9e:ad:51:76:d5:b4:1d:
                    1b:c3:e5:2f:25:ec:e2:de:c0:19:58:8e:9f:06:bc:
                    b2:de:2d:41:b5:f8:c7:97:f8:fb:76:85:0e:b2:a0:
                    f7:2d:7d:b7:e3:f0:61:2c:36:cf:98:4f:1a:29:44:
                    86:d6:03:eb:78:14:a9:ac:ff:20:0d:85:55:bf:7d:
                    36:35:71:13:9d:b1:1c:de:b6:77:58:2b:25:9f:9b:
                    4a:ca:42:95:95:1c:c1:9f:18:31:9e:76:7a:7a:10:
                    11:85:e5:e1:a1:d1:2c:47:03:cb:42:fd:17:5e:52:
                    07:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B4:FF:E2:89:3C:9A:C7:37:04:13:EB:5E:48:CB:20:44:A5:50:D3
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31663a3a2f34382d3438203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:1f::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:e6:09:68:c8:5c:c5:0b:df:64:5a:0e:9b:72:97:00:f3:1f:
         de:cc:0f:45:32:13:72:08:be:8c:f3:0c:22:5c:a8:6c:21:31:
         18:92:13:b7:6d:ed:20:5d:0a:8d:36:f0:6c:43:c0:1c:f3:3d:
         0d:d6:58:55:68:c4:f8:a5:0f:87:ed:7a:d4:76:3e:82:35:06:
         ea:a3:e6:82:5a:63:0f:fa:02:c0:63:04:c4:ae:c3:33:b5:1a:
         7a:77:23:69:d2:fa:ff:c1:65:c1:e2:29:16:fd:4a:5b:f0:99:
         29:d3:30:31:97:84:29:e5:d4:4b:59:a9:c0:46:ff:a9:a9:df:
         e6:1e:bf:71:8b:35:52:c9:c3:7f:23:00:e2:25:e9:7b:72:87:
         8d:2f:8f:9b:d8:b5:d0:bd:5b:21:28:cd:71:e3:53:df:68:ff:
         6a:6d:5a:81:c6:43:85:96:2c:6a:c2:59:2c:89:68:5c:9a:dc:
         eb:f5:1c:3c:58:23:24:20:47:52:30:0d:c7:5b:c9:0a:4a:7b:
         97:11:94:3d:59:81:d7:3b:c8:91:e6:5d:c9:69:cc:37:fb:2e:
         96:1c:f9:27:25:c3:bb:4a:a9:1d:1b:1b:c4:c7:ae:41:c8:6f:
         fa:a1:67:ed:e6:7c:ce:93:f6:f6:8e:44:06:3b:3d:c9:8a:a0:
         ca:d6:63:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 02:24:06 2026 by rpki-client