This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5CB5A0421A3DED423EB47007B5143A9F8534AFECF7F389CA73BC1D8204C04B97/0/323830313a31393a353830303a3a2f34382d3438203d3e20323732383434.roa
File:                     323830313a31393a353830303a3a2f34382d3438203d3e20323732383434.roa (raw, json)
Hash identifier:          KEs13DJ2TRLquWUQ5LDsA6qlj9tPzQCmBD6iZM5gI1Q=
Subject key identifier:   3D:63:34:84:17:26:B4:3B:73:19:C6:A8:03:EA:AF:78:D9:75:02:0F
Certificate issuer:       /CN=9C6D7FDFEB0EFBFCDDC32FA46A1C74CC4CC1C946
Certificate serial:       368DDAC2BAB88C11235AE19DD881663CF666F335
Authority key identifier: 9C:6D:7F:DF:EB:0E:FB:FC:DD:C3:2F:A4:6A:1C:74:CC:4C:C1:C9:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C6D7FDFEB0EFBFCDDC32FA46A1C74CC4CC1C946.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5CB5A0421A3DED423EB47007B5143A9F8534AFECF7F389CA73BC1D8204C04B97/0/323830313a31393a353830303a3a2f34382d3438203d3e20323732383434.roa
Signing time:             Tue 06 Jan 2026 19:08:55 +0000
ROA not before:           Tue 06 Jan 2026 19:03:55 +0000
ROA not after:            Tue 05 Jan 2027 19:08:55 +0000
asID:                     272844
IP address blocks:        2801:19:5800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5CB5A0421A3DED423EB47007B5143A9F8534AFECF7F389CA73BC1D8204C04B97/0/9C6D7FDFEB0EFBFCDDC32FA46A1C74CC4CC1C946.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5CB5A0421A3DED423EB47007B5143A9F8534AFECF7F389CA73BC1D8204C04B97/0/9C6D7FDFEB0EFBFCDDC32FA46A1C74CC4CC1C946.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C6D7FDFEB0EFBFCDDC32FA46A1C74CC4CC1C946.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Jan 2026 06:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:8d:da:c2:ba:b8:8c:11:23:5a:e1:9d:d8:81:66:3c:f6:66:f3:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C6D7FDFEB0EFBFCDDC32FA46A1C74CC4CC1C946
        Validity
            Not Before: Jan  6 19:03:55 2026 GMT
            Not After : Jan  5 19:08:55 2027 GMT
        Subject: CN=3D6334841726B43B7319C6A803EAAF78D975020F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:da:a4:fb:ef:70:ba:a0:07:ea:4b:53:ec:1f:
                    ab:c1:6a:81:ab:38:44:f7:48:a6:5e:96:af:67:71:
                    91:35:8c:06:74:02:38:40:96:71:ed:90:fe:bf:97:
                    8a:18:d0:de:85:66:f7:ad:f8:00:14:58:13:51:52:
                    a2:2a:ea:8a:8a:b4:31:12:ba:21:ad:4e:91:a0:cf:
                    0c:e3:f7:1e:c3:e8:43:db:74:b4:c1:de:17:21:2a:
                    e8:f3:88:b9:3c:d0:24:c6:ce:23:aa:71:ce:fc:77:
                    52:11:f1:29:e5:13:76:fe:f0:02:35:3a:41:5d:26:
                    12:e8:73:de:47:5e:b8:3d:43:0e:11:e5:76:2f:ef:
                    23:fe:37:6d:80:c8:ac:84:31:99:f1:54:66:7a:e9:
                    ee:cd:1f:a9:0c:1e:42:39:22:20:39:bd:2c:85:0b:
                    2a:77:2a:ac:7d:25:7a:1f:cc:cc:69:52:ed:82:94:
                    dc:fb:70:d7:9d:9f:46:f6:99:81:c2:35:b6:53:7a:
                    b6:fd:d0:14:ad:be:f1:33:69:50:ad:45:64:18:dc:
                    90:28:a2:5c:aa:4a:4a:25:cf:c4:26:aa:95:08:a3:
                    a4:3b:0e:65:02:3d:7b:b7:b7:95:24:a8:64:c9:23:
                    ec:48:a1:46:f8:3a:84:24:85:db:88:22:98:a8:bd:
                    14:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:63:34:84:17:26:B4:3B:73:19:C6:A8:03:EA:AF:78:D9:75:02:0F
            X509v3 Authority Key Identifier:
                keyid:9C:6D:7F:DF:EB:0E:FB:FC:DD:C3:2F:A4:6A:1C:74:CC:4C:C1:C9:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5CB5A0421A3DED423EB47007B5143A9F8534AFECF7F389CA73BC1D8204C04B97/0/9C6D7FDFEB0EFBFCDDC32FA46A1C74CC4CC1C946.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C6D7FDFEB0EFBFCDDC32FA46A1C74CC4CC1C946.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5CB5A0421A3DED423EB47007B5143A9F8534AFECF7F389CA73BC1D8204C04B97/0/323830313a31393a353830303a3a2f34382d3438203d3e20323732383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:19:5800::/48

    Signature Algorithm: sha256WithRSAEncryption
         c6:3c:d5:8a:cc:5b:80:69:6b:13:a0:61:d4:b6:88:38:2d:7c:
         41:c8:b9:13:d0:f3:56:d9:11:2d:1f:e5:e8:b8:09:68:5d:2f:
         94:07:cc:13:63:ff:9c:ba:07:0f:10:6a:85:d4:cd:b9:d2:3d:
         c4:a2:8f:3f:01:44:e5:e5:a5:97:d3:d8:00:f2:2b:0a:d5:d0:
         e8:cf:71:62:29:a2:67:f1:6f:4f:40:78:87:fd:63:3b:11:a4:
         8f:92:88:09:ca:3f:da:ce:61:81:d4:04:c6:41:ca:18:a1:0e:
         67:7c:d5:fd:bd:37:64:ad:fa:e6:1f:7b:ad:88:4b:d5:6a:2f:
         51:14:99:a6:ae:d5:49:b5:c3:f8:54:ff:72:f4:86:1e:50:f7:
         fc:d6:10:8b:15:cf:3d:f5:1e:61:04:f1:64:85:93:30:62:8f:
         a5:98:c7:db:ae:8e:87:5a:c0:85:7f:d0:45:3e:1a:bc:dc:78:
         c2:0d:9e:e2:73:2d:3d:c1:dc:50:10:cf:f5:d3:72:d7:71:f2:
         ed:a8:69:ea:5e:42:8e:9a:ab:54:2f:0b:9e:5f:06:32:28:e2:
         e2:25:dc:f7:a4:b2:ae:1e:74:a5:76:cc:c1:71:3a:ea:89:a6:
         a9:72:de:8d:dd:cf:59:74:8b:b6:e5:e3:aa:72:fd:2d:b1:73:
         00:58:31:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 08:43:21 2026 by rpki-client