This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CDC10FFE290C2670FB33F81277F75A3E856C9E2A50421B4A1B6FCDEB3D3B0142/0/323830313a3163323a3a2f34342d3434203d3e203133343839.roa
File:                     323830313a3163323a3a2f34342d3434203d3e203133343839.roa (raw, json)
Hash identifier:          i300+FiRFGhFB4TGAEd2yWVtg6SPlx8ytL9pGDOzRGY=
Subject key identifier:   14:C4:72:31:D8:48:73:01:AB:2B:73:5E:C2:18:BA:77:86:8D:18:FD
Certificate issuer:       /CN=1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF
Certificate serial:       303D8C328FDFC26FB734EBA3880A79F6A20439F9
Authority key identifier: 1E:B6:EF:3C:C5:42:1A:C3:AF:71:CC:DC:DF:43:BB:05:56:E6:BE:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CDC10FFE290C2670FB33F81277F75A3E856C9E2A50421B4A1B6FCDEB3D3B0142/0/323830313a3163323a3a2f34342d3434203d3e203133343839.roa
Signing time:             Tue 06 Jan 2026 19:30:45 +0000
ROA not before:           Tue 06 Jan 2026 19:25:45 +0000
ROA not after:            Tue 05 Jan 2027 19:30:45 +0000
asID:                     13489
IP address blocks:        2801:1c2::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CDC10FFE290C2670FB33F81277F75A3E856C9E2A50421B4A1B6FCDEB3D3B0142/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CDC10FFE290C2670FB33F81277F75A3E856C9E2A50421B4A1B6FCDEB3D3B0142/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 12:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:3d:8c:32:8f:df:c2:6f:b7:34:eb:a3:88:0a:79:f6:a2:04:39:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF
        Validity
            Not Before: Jan  6 19:25:45 2026 GMT
            Not After : Jan  5 19:30:45 2027 GMT
        Subject: CN=14C47231D8487301AB2B735EC218BA77868D18FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a0:55:00:e3:8f:60:94:cf:68:ff:99:c7:7f:
                    75:a1:be:d9:f1:ef:5f:9e:78:a7:eb:8f:fc:d6:62:
                    d8:a0:25:a8:20:4c:00:b4:1d:49:a0:95:74:75:00:
                    38:cb:29:5b:a3:7a:cf:99:3c:a5:50:2b:50:54:1a:
                    18:1d:6d:e5:f5:19:b1:81:7d:5a:4f:d9:79:c1:81:
                    8b:f3:a8:ae:82:7b:db:00:e8:2f:93:34:e2:29:a7:
                    02:47:e3:30:bf:07:3a:88:e4:8b:a4:57:20:64:1c:
                    a5:65:6c:b7:ac:6e:db:32:10:79:53:66:4b:eb:b5:
                    bc:b4:0c:bc:80:1d:e1:5b:0e:77:4b:ec:5e:50:4b:
                    9b:e3:b4:6b:bd:10:a2:24:63:7b:99:76:40:ef:a2:
                    cb:69:43:8f:b6:c6:83:b0:bc:c2:6c:92:5b:74:48:
                    ca:91:4b:36:e1:6f:da:c7:30:d0:d1:c3:d6:dc:63:
                    77:3d:92:b4:53:ce:e4:60:b6:40:ef:28:d9:22:5c:
                    5e:45:ba:1d:9b:20:6a:ac:39:a8:0f:ae:a3:02:20:
                    62:1b:26:6d:33:36:b4:54:b7:37:2f:d7:ff:11:c3:
                    b0:9e:3f:8c:5c:de:0e:86:e6:8b:86:3e:a3:f5:e1:
                    98:3f:42:21:64:89:a0:dd:e1:5e:88:c0:70:ba:87:
                    d6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C4:72:31:D8:48:73:01:AB:2B:73:5E:C2:18:BA:77:86:8D:18:FD
            X509v3 Authority Key Identifier:
                keyid:1E:B6:EF:3C:C5:42:1A:C3:AF:71:CC:DC:DF:43:BB:05:56:E6:BE:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CDC10FFE290C2670FB33F81277F75A3E856C9E2A50421B4A1B6FCDEB3D3B0142/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CDC10FFE290C2670FB33F81277F75A3E856C9E2A50421B4A1B6FCDEB3D3B0142/0/323830313a3163323a3a2f34342d3434203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c2::/44

    Signature Algorithm: sha256WithRSAEncryption
         8f:db:f6:4f:82:67:ff:a9:23:2c:cd:45:bb:12:0f:d1:e6:ef:
         a9:ae:06:25:b4:44:b4:30:2e:23:d0:5a:7b:8e:06:0d:e8:ba:
         5d:df:3c:46:07:4e:02:c6:05:62:7c:d7:f0:52:e9:ef:49:c0:
         44:37:c7:9d:f4:26:dd:a2:45:00:18:2b:e7:2e:a4:e2:bd:50:
         11:04:ea:6d:b0:ca:a8:95:f9:4f:cc:a5:c3:4b:a4:94:9c:79:
         56:a1:09:85:5a:b1:9e:0b:25:14:23:db:b7:01:a5:ea:df:94:
         a1:bb:6b:38:07:c9:61:59:a0:3c:14:c0:0a:12:bc:0a:c1:4c:
         4e:e1:e2:6b:dc:c7:85:5d:2f:57:68:e2:c1:25:ad:14:81:5a:
         aa:29:41:74:0c:70:75:38:f9:1c:56:4f:c2:bb:c0:e4:49:1e:
         b4:ad:bf:7e:35:28:3b:c6:9f:98:78:7f:2c:46:d7:ec:6d:b7:
         32:b6:54:98:d8:ff:c4:aa:a5:84:37:a2:2e:24:69:fd:fc:36:
         53:e4:5a:35:c2:8e:ae:b6:08:5e:81:c8:68:22:64:f9:ca:12:
         ae:09:f1:87:64:84:cf:c7:5e:99:6f:66:9c:23:36:48:0b:18:
         e6:75:18:f5:e4:5e:b5:98:e9:d0:f6:de:c8:8f:a3:8d:56:30:
         86:40:ba:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 12:17:56 2026 by rpki-client