This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B8E4E9BBD786655635251BE1AB2B30115F865C40EEDFF12459E0636ED80936CD/0/323830313a303a39303a3a2f34382d3438203d3e203238313039.roa
File:                     323830313a303a39303a3a2f34382d3438203d3e203238313039.roa (raw, json)
Hash identifier:          k5P6H6LDOCQPeyv6keoIh/cN9CRN6aXHOJLe2byPMMU=
Subject key identifier:   77:0D:02:91:CE:07:E3:A1:00:E3:BB:29:B2:51:AA:B3:BD:68:2D:62
Certificate issuer:       /CN=F5FA228A2301CA3C33BD8830D58A40473348595F
Certificate serial:       2E80EB2D3EB12147B0C437DEF9018B8FDFC4F970
Authority key identifier: F5:FA:22:8A:23:01:CA:3C:33:BD:88:30:D5:8A:40:47:33:48:59:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5FA228A2301CA3C33BD8830D58A40473348595F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B8E4E9BBD786655635251BE1AB2B30115F865C40EEDFF12459E0636ED80936CD/0/323830313a303a39303a3a2f34382d3438203d3e203238313039.roa
Signing time:             Tue 06 Jan 2026 19:29:04 +0000
ROA not before:           Tue 06 Jan 2026 19:24:04 +0000
ROA not after:            Tue 05 Jan 2027 19:29:04 +0000
asID:                     28109
IP address blocks:        2801:0:90::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B8E4E9BBD786655635251BE1AB2B30115F865C40EEDFF12459E0636ED80936CD/0/F5FA228A2301CA3C33BD8830D58A40473348595F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B8E4E9BBD786655635251BE1AB2B30115F865C40EEDFF12459E0636ED80936CD/0/F5FA228A2301CA3C33BD8830D58A40473348595F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5FA228A2301CA3C33BD8830D58A40473348595F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:80:eb:2d:3e:b1:21:47:b0:c4:37:de:f9:01:8b:8f:df:c4:f9:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5FA228A2301CA3C33BD8830D58A40473348595F
        Validity
            Not Before: Jan  6 19:24:04 2026 GMT
            Not After : Jan  5 19:29:04 2027 GMT
        Subject: CN=770D0291CE07E3A100E3BB29B251AAB3BD682D62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ea:ef:6d:86:df:68:72:ba:f2:39:72:fc:bc:
                    4f:e5:34:e0:5e:0e:8f:b6:79:a4:eb:00:fa:af:58:
                    aa:25:52:69:b3:02:d6:5d:90:0f:3d:71:25:fa:52:
                    59:aa:8d:ac:24:c5:25:1b:a8:64:e5:3d:72:08:74:
                    04:96:94:9d:6a:b9:fc:ac:28:49:6d:ff:2a:75:0a:
                    5b:79:79:00:18:4d:e4:96:0a:72:ac:71:85:49:5b:
                    ad:de:bf:48:ae:17:e8:be:94:b5:88:ca:73:7b:67:
                    c7:15:1b:bb:87:d0:c1:72:98:10:54:64:40:ee:45:
                    3f:d7:29:65:02:28:1d:c3:40:e2:1b:ce:35:90:f9:
                    1e:8a:3b:d9:65:c6:7a:7e:73:de:fd:56:03:9a:12:
                    fa:4f:69:fc:cc:48:fb:0c:31:e6:af:38:9b:88:cd:
                    4b:99:c6:53:7b:a1:04:3b:1e:30:e7:1e:c9:b8:e0:
                    fc:4d:e1:61:91:a6:ac:0b:5a:68:d2:41:9f:a6:f7:
                    97:20:b7:2e:80:f2:d2:b8:1a:43:bc:99:98:32:81:
                    2c:21:40:51:d4:5c:d1:8c:84:a2:e5:3c:8f:b5:22:
                    2a:9d:32:7e:05:44:e9:be:db:31:52:32:70:c2:90:
                    b5:3a:ea:e8:9e:16:ab:ca:07:3c:c9:cd:eb:ad:f9:
                    f0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:0D:02:91:CE:07:E3:A1:00:E3:BB:29:B2:51:AA:B3:BD:68:2D:62
            X509v3 Authority Key Identifier:
                keyid:F5:FA:22:8A:23:01:CA:3C:33:BD:88:30:D5:8A:40:47:33:48:59:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B8E4E9BBD786655635251BE1AB2B30115F865C40EEDFF12459E0636ED80936CD/0/F5FA228A2301CA3C33BD8830D58A40473348595F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5FA228A2301CA3C33BD8830D58A40473348595F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B8E4E9BBD786655635251BE1AB2B30115F865C40EEDFF12459E0636ED80936CD/0/323830313a303a39303a3a2f34382d3438203d3e203238313039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:90::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:29:6b:ad:1b:1c:52:9a:e2:48:74:56:98:dd:89:ff:28:f2:
         b0:a1:17:a6:13:ac:0d:36:f1:c9:34:ed:e1:cd:2f:aa:4e:3c:
         d9:6d:b1:8f:1e:12:ba:d1:f6:5e:75:58:37:6b:ea:08:14:20:
         89:a7:f3:ff:c9:b4:2a:4f:21:33:bb:88:4e:5a:e5:0f:c1:11:
         24:b6:8f:0e:67:a2:ea:87:5d:55:dd:04:1b:94:7b:2b:00:67:
         a2:a2:30:69:c0:8a:84:29:f1:60:de:36:46:1a:cd:e2:35:d0:
         96:e6:e0:f7:14:0c:bd:52:06:1c:75:94:05:63:8a:a5:6a:b1:
         98:96:3a:76:31:34:61:e6:4a:12:d3:d1:0b:37:79:c2:23:15:
         dc:62:2c:dc:6a:01:08:47:5d:15:1e:87:b8:5f:91:f0:70:05:
         18:ae:a9:7f:32:00:c0:ec:a5:ca:fc:ec:17:bd:d9:33:7c:37:
         f0:28:07:ac:af:d1:a7:3d:a7:d9:8f:ed:23:c1:9e:f5:99:f3:
         3e:f3:f9:06:9d:0c:e6:10:38:b4:3d:3f:21:2b:9c:84:ae:b5:
         83:dc:16:ae:5b:f9:33:7c:60:8d:96:6e:a1:e4:65:70:0b:b5:
         c3:cc:fe:2e:2b:12:a8:29:48:30:f2:c7:e8:f6:49:8d:0a:34:
         3d:28:a4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:28:42 2026 by rpki-client