This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a32613a3a2f34382d3438203d3e2033373930.roa
File:                     323830313a3135313a32613a3a2f34382d3438203d3e2033373930.roa (raw, json)
Hash identifier:          q0jHAI6AyLpKkkq6vUKV0DwcXW5+4qSFg7oScmDiFxE=
Subject key identifier:   1A:CF:15:72:68:60:ED:5F:BD:F8:50:F8:32:2F:F1:17:29:BC:88:CF
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       19A99C7BDD501F996964B40525C11530D6006ACB
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a32613a3a2f34382d3438203d3e2033373930.roa
Signing time:             Tue 06 Jan 2026 19:38:25 +0000
ROA not before:           Tue 06 Jan 2026 19:33:25 +0000
ROA not after:            Tue 05 Jan 2027 19:38:25 +0000
asID:                     3790
IP address blocks:        2801:151:2a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Feb 2026 05:56:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:a9:9c:7b:dd:50:1f:99:69:64:b4:05:25:c1:15:30:d6:00:6a:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Jan  6 19:33:25 2026 GMT
            Not After : Jan  5 19:38:25 2027 GMT
        Subject: CN=1ACF15726860ED5FBDF850F8322FF11729BC88CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f2:da:d1:9f:1a:c8:9e:cb:e4:81:39:d3:4c:
                    0b:17:9c:4d:3c:8a:78:7c:76:20:cb:1a:a7:50:ca:
                    87:04:ca:b7:f0:d9:ff:d1:01:0f:85:6b:f8:b9:39:
                    fc:5f:47:10:11:9b:0e:dd:2a:96:8b:35:e2:4a:bd:
                    06:11:f6:d2:d7:52:5e:55:00:4c:6a:7c:4f:e9:e0:
                    09:e7:b7:03:b7:03:6f:c0:2a:58:6c:6b:5d:d2:99:
                    88:f1:5f:ad:d2:e0:60:08:d3:38:2f:fc:cb:19:a0:
                    75:84:49:11:d0:bb:e6:54:e9:73:86:e5:12:00:07:
                    38:1e:43:38:ff:3d:54:ac:79:48:5b:17:20:47:73:
                    75:b5:2a:b5:1c:d6:c5:a8:57:3e:99:ee:98:13:ff:
                    f9:45:58:f4:ce:ec:31:32:01:bf:57:70:de:4e:84:
                    00:83:10:fd:82:cf:bf:d7:2c:26:50:0f:ef:ac:a9:
                    96:13:d7:9c:46:55:c0:89:a2:fc:93:22:15:83:0d:
                    7f:60:3c:77:59:7f:37:c2:42:97:09:a9:35:cc:6e:
                    d3:e6:a0:a3:bc:2c:b0:f9:d9:22:9c:eb:f0:a1:57:
                    69:42:20:86:16:ab:6f:ce:e7:2c:fd:66:44:b3:b6:
                    0d:31:8d:74:49:35:f4:f7:d9:7f:da:0c:63:62:ae:
                    85:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:CF:15:72:68:60:ED:5F:BD:F8:50:F8:32:2F:F1:17:29:BC:88:CF
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a32613a3a2f34382d3438203d3e2033373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:2a::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:52:4f:f9:d4:62:0a:bb:44:fa:b2:2e:6b:e7:19:59:12:a5:
         0c:67:b7:a4:64:68:e3:f8:a6:b4:77:b8:4c:a1:4b:02:22:55:
         9f:0c:c8:6e:c0:22:f6:61:f2:9e:6f:3f:2d:89:b0:12:69:40:
         63:19:fc:53:37:b9:8f:18:d6:da:7b:5f:7d:cf:18:b2:b0:12:
         51:fb:b8:5b:86:e6:b3:92:67:fc:9a:f2:a9:ca:05:90:f5:b8:
         c9:de:f2:7a:87:a4:dc:d7:16:e6:0d:b8:69:e4:2e:8d:7e:60:
         b5:e3:78:21:76:ae:05:12:3c:22:5e:57:bf:5f:04:3f:99:b0:
         3e:27:f3:83:b0:b5:cd:a4:6f:39:14:8c:0f:55:be:0b:63:9b:
         47:c5:cd:11:79:e7:91:9d:3b:6e:3f:9c:c6:a4:05:65:d0:bb:
         58:eb:a3:fb:12:c3:3a:ad:7a:fc:90:7f:80:64:c7:8e:8b:ec:
         9e:10:46:70:9e:37:9a:07:f2:57:8b:46:2a:d3:e1:21:77:68:
         cf:bc:55:7f:f7:3b:70:89:0b:65:eb:7d:e8:24:c6:8c:d1:ea:
         0e:e3:36:00:2d:d7:0d:bd:ba:ce:97:2b:03:d0:d9:81:e3:69:
         54:13:72:00:c0:5e:5e:26:8b:d0:22:b0:d4:e8:64:64:84:33:
         16:88:60:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 02:24:52 2026 by rpki-client