This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/323830313a31333a373030303a3a2f34382d3438203d3e203237393437.roa
File:                     323830313a31333a373030303a3a2f34382d3438203d3e203237393437.roa (raw, json)
Hash identifier:          0JS4m1kU5E+lKqSxvP+c9zc8qUR9wWOqBm6y1RE97eA=
Subject key identifier:   11:0B:F0:CB:4E:47:6D:4D:3E:F8:5E:79:46:A7:C3:FF:45:34:1E:6D
Certificate issuer:       /CN=851D006BBDF702AC914FD79F2055A11E9699775D
Certificate serial:       36F608FDBAD098DDA04775C5A9C68A40081E27BD
Authority key identifier: 85:1D:00:6B:BD:F7:02:AC:91:4F:D7:9F:20:55:A1:1E:96:99:77:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/851D006BBDF702AC914FD79F2055A11E9699775D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/323830313a31333a373030303a3a2f34382d3438203d3e203237393437.roa
Signing time:             Tue 06 Jan 2026 19:03:24 +0000
ROA not before:           Tue 06 Jan 2026 18:58:24 +0000
ROA not after:            Tue 05 Jan 2027 19:03:24 +0000
asID:                     27947
IP address blocks:        2801:13:7000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/851D006BBDF702AC914FD79F2055A11E9699775D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/851D006BBDF702AC914FD79F2055A11E9699775D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/851D006BBDF702AC914FD79F2055A11E9699775D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 25 Jan 2026 09:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:f6:08:fd:ba:d0:98:dd:a0:47:75:c5:a9:c6:8a:40:08:1e:27:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=851D006BBDF702AC914FD79F2055A11E9699775D
        Validity
            Not Before: Jan  6 18:58:24 2026 GMT
            Not After : Jan  5 19:03:24 2027 GMT
        Subject: CN=110BF0CB4E476D4D3EF85E7946A7C3FF45341E6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:37:d5:fb:14:91:0f:7f:48:6d:9c:cf:2f:16:
                    b8:6a:e0:f3:98:fd:74:ac:7d:53:2c:85:76:11:ea:
                    c6:ee:00:30:87:49:dc:04:62:c7:ca:be:a8:96:8f:
                    85:e5:cb:15:b7:0c:50:b4:36:00:81:84:dc:c9:1a:
                    25:84:f7:a2:21:20:08:f4:f8:e9:48:c2:72:5f:c7:
                    41:ad:cd:26:61:d4:db:3c:ce:a8:8c:cc:6f:19:f3:
                    27:67:0b:84:ba:a1:44:a1:e4:b9:af:2c:43:8b:d4:
                    9f:5a:3a:f2:d7:41:82:17:5a:7d:6e:f1:3e:89:8b:
                    e6:e3:f8:bf:70:34:ad:79:07:ba:42:18:8c:8c:e0:
                    cf:56:4a:7b:05:d3:6d:62:08:f5:9a:ab:68:0b:e9:
                    d8:e0:d4:3b:84:35:28:f4:bd:22:4e:7d:2b:e1:09:
                    88:ab:12:f2:d3:f4:18:64:0c:ae:91:ad:4d:01:2a:
                    a6:23:b1:8f:68:ce:de:ae:0e:06:71:12:2b:5a:91:
                    7c:a0:56:7a:4e:d0:c2:ca:d7:dc:52:2e:1f:52:8c:
                    7c:bc:ff:c6:c1:19:35:0f:9c:e1:70:6c:23:f7:74:
                    84:4d:81:6c:2c:c0:d9:71:fb:37:61:3d:b3:f4:ca:
                    9f:a5:5e:58:76:36:b9:90:8c:15:ec:70:d0:18:5c:
                    a1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:0B:F0:CB:4E:47:6D:4D:3E:F8:5E:79:46:A7:C3:FF:45:34:1E:6D
            X509v3 Authority Key Identifier:
                keyid:85:1D:00:6B:BD:F7:02:AC:91:4F:D7:9F:20:55:A1:1E:96:99:77:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/851D006BBDF702AC914FD79F2055A11E9699775D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/851D006BBDF702AC914FD79F2055A11E9699775D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/323830313a31333a373030303a3a2f34382d3438203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:13:7000::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:a3:0b:04:4b:ea:70:56:91:00:ee:83:1c:b3:6a:cc:88:e7:
         5d:d7:9f:0b:2c:3f:b9:78:c8:43:ab:fc:7f:22:82:87:9b:83:
         10:83:fd:a5:23:89:79:56:9f:bc:10:0a:9d:a2:14:91:b8:08:
         1c:88:c3:cf:e0:04:58:d9:03:fc:e1:94:1c:ed:e0:40:d4:6c:
         4b:66:85:01:b0:76:60:79:ca:19:49:3d:6a:d7:00:e1:08:89:
         a8:86:86:60:b1:f8:62:96:b2:28:26:43:2e:63:3c:04:3b:b3:
         90:75:91:12:ae:45:c3:e7:ac:40:8b:09:35:c5:62:e6:d8:ad:
         09:8b:b7:49:b9:f6:80:68:8f:61:06:e3:2f:84:17:45:a4:31:
         a8:19:02:13:6b:03:a8:a1:13:18:75:b1:e6:d6:61:c3:01:2c:
         bc:5a:ad:30:5d:b6:3d:71:34:49:49:ec:03:85:8a:34:dd:21:
         f6:0a:04:7c:c1:e6:b1:66:b5:6f:0b:86:f0:68:8b:e8:bc:04:
         17:0d:78:ae:c7:b0:0e:48:1d:14:ed:06:9a:85:c6:46:70:de:
         1f:87:ae:2a:f0:a6:0d:73:67:0e:ea:8c:e3:1f:2a:cd:32:55:
         21:b9:67:11:85:47:6f:b3:4b:f5:97:b3:01:aa:66:13:de:f3:
         8f:a2:5a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 18:49:11 2026 by rpki-client