This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D60D87ACD7CC1D8FF8A571EC35C811508EDBA500A97039C81F52EC1EF73DE51B/0/323830313a31653a663830303a3a2f34382d3438203d3e203237393531.roa
File:                     323830313a31653a663830303a3a2f34382d3438203d3e203237393531.roa (raw, json)
Hash identifier:          /TWHYacLQ2VcHMhBLiriVERdLXzF8txlA1CLYUcai7c=
Subject key identifier:   06:6C:79:3C:54:AE:C6:02:9F:3B:15:4E:41:60:4F:43:AA:02:AC:5A
Certificate issuer:       /CN=DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8
Certificate serial:       1E2FD3C7E254E96BF556B6D37C57F1AFA2351CFF
Authority key identifier: DE:8A:21:D3:81:A2:A8:57:4B:0F:6A:2D:86:54:9E:47:F4:FB:87:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D60D87ACD7CC1D8FF8A571EC35C811508EDBA500A97039C81F52EC1EF73DE51B/0/323830313a31653a663830303a3a2f34382d3438203d3e203237393531.roa
Signing time:             Thu 06 Nov 2025 21:55:00 +0000
ROA not before:           Thu 06 Nov 2025 21:50:00 +0000
ROA not after:            Thu 05 Nov 2026 21:55:00 +0000
asID:                     27951
IP address blocks:        2801:1e:f800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D60D87ACD7CC1D8FF8A571EC35C811508EDBA500A97039C81F52EC1EF73DE51B/0/DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D60D87ACD7CC1D8FF8A571EC35C811508EDBA500A97039C81F52EC1EF73DE51B/0/DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 06:18:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:2f:d3:c7:e2:54:e9:6b:f5:56:b6:d3:7c:57:f1:af:a2:35:1c:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8
        Validity
            Not Before: Nov  6 21:50:00 2025 GMT
            Not After : Nov  5 21:55:00 2026 GMT
        Subject: CN=066C793C54AEC6029F3B154E41604F43AA02AC5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a0:a6:5b:3f:14:50:94:a1:78:aa:65:26:88:
                    f2:e6:51:09:a2:57:87:31:31:87:4d:ae:77:89:b7:
                    cc:6c:f4:ca:1b:ce:7b:ab:9c:f4:ef:9f:78:17:32:
                    25:ae:e6:15:36:95:8d:f2:0d:e9:4c:71:55:93:59:
                    9a:85:cc:09:44:4e:78:d7:53:0f:85:24:f2:bf:69:
                    e4:ab:db:38:cc:43:d7:5c:25:b8:76:44:de:c6:d9:
                    c7:00:01:63:56:b6:07:b5:ce:38:20:01:5f:90:f4:
                    77:a6:f0:76:3f:5f:0e:a4:ba:ed:8a:5d:4a:e9:57:
                    c9:4c:7a:73:fd:e9:89:c9:1f:90:77:2f:a4:da:0a:
                    10:e3:cc:25:d9:0e:09:38:0a:e8:ad:23:ba:c6:8b:
                    2f:b6:ac:24:b5:a5:78:91:99:db:57:18:2d:c4:72:
                    89:75:90:39:ab:58:5a:86:e0:69:94:80:98:7c:65:
                    68:15:dd:5d:d6:cf:8a:b5:05:3e:c3:72:63:f5:32:
                    de:91:c9:0f:e9:00:ca:1d:e9:f2:2e:b5:8f:f1:e2:
                    7e:46:a7:dc:7e:18:41:82:0e:42:21:98:59:3b:4f:
                    73:d0:f7:c0:46:99:b5:11:17:1d:b2:a9:19:8b:89:
                    b9:15:6d:db:66:72:96:30:03:57:4b:e4:da:9d:f5:
                    09:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:6C:79:3C:54:AE:C6:02:9F:3B:15:4E:41:60:4F:43:AA:02:AC:5A
            X509v3 Authority Key Identifier:
                keyid:DE:8A:21:D3:81:A2:A8:57:4B:0F:6A:2D:86:54:9E:47:F4:FB:87:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D60D87ACD7CC1D8FF8A571EC35C811508EDBA500A97039C81F52EC1EF73DE51B/0/DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D60D87ACD7CC1D8FF8A571EC35C811508EDBA500A97039C81F52EC1EF73DE51B/0/323830313a31653a663830303a3a2f34382d3438203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:f800::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:95:f7:76:0c:ad:f3:ed:18:0e:71:75:fb:73:4f:98:1a:c5:
         e1:53:0d:3e:65:61:33:8e:54:12:94:01:35:a5:c4:55:86:c2:
         c0:64:d5:af:e0:c1:15:fb:ac:9e:d1:03:81:ac:a4:a3:a8:33:
         5f:fa:5b:22:5d:79:fc:f2:1a:f8:61:d5:6e:ca:ff:30:27:38:
         34:f4:be:f4:36:1e:eb:ff:ec:d7:52:3a:16:88:08:9d:7b:ce:
         27:4a:39:c8:56:f6:1a:b2:77:ad:69:f3:34:1c:c5:01:ef:eb:
         db:bf:b2:d3:0d:57:8c:17:8c:79:86:88:2a:94:b5:1b:f8:31:
         02:76:83:4d:51:8e:c8:65:17:21:4d:2c:5e:47:cf:eb:f3:5d:
         89:70:12:74:7f:f1:a7:4b:72:f6:83:9e:c7:aa:b1:10:a2:e1:
         7d:f0:63:70:6c:18:21:d3:f6:c3:fe:3c:44:69:05:e3:85:5c:
         1e:b5:5c:2f:92:15:b4:c9:01:64:b7:d6:66:d1:df:5e:f5:ae:
         b2:f3:1a:a9:2a:b6:e2:08:d3:ad:e1:db:df:39:7a:92:16:5e:
         de:32:ca:98:b5:cb:6c:11:8c:9b:7a:9c:64:45:9c:52:e9:51:
         7c:5f:50:a2:33:51:ab:cf:2a:ed:8f:7f:c5:dc:2c:32:4f:5c:
         ff:1d:ab:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 12:26:00 2025 by rpki-client