This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a33363a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a33363a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          GZ44pi0iGliYZ/7mx+uTf6tBXd6OvYfxOyBLmtGIJy4=
Subject key identifier:   B3:F9:84:07:AE:E2:8A:14:D8:A2:08:40:EA:E1:78:F3:73:37:24:55
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       3F0F3D4470246B0CD3DA96BDA7211915387F7016
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a33363a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 06 Jan 2026 19:38:05 +0000
ROA not before:           Tue 06 Jan 2026 19:33:05 +0000
ROA not after:            Tue 05 Jan 2027 19:38:05 +0000
asID:                     271891
IP address blocks:        2801:151:36::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Feb 2026 05:56:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:0f:3d:44:70:24:6b:0c:d3:da:96:bd:a7:21:19:15:38:7f:70:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Jan  6 19:33:05 2026 GMT
            Not After : Jan  5 19:38:05 2027 GMT
        Subject: CN=B3F98407AEE28A14D8A20840EAE178F373372455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:30:9c:91:d0:1d:46:9b:19:18:34:c1:49:6e:
                    f0:2e:84:f3:21:59:af:8b:a3:37:cf:ca:c6:9b:4b:
                    3b:d2:ae:ae:14:6c:30:d5:79:28:1b:a1:77:74:bb:
                    0a:2f:4e:ca:60:38:68:d7:73:a1:78:bb:a8:c9:74:
                    3d:d5:76:af:09:b0:f7:01:77:b9:f8:e3:48:33:a8:
                    2d:4d:4e:12:33:87:8d:07:ad:37:5b:c6:05:05:9a:
                    de:a1:40:19:ee:a7:26:85:23:cf:8e:bc:1b:4c:59:
                    0e:a7:8d:bc:da:71:04:1a:11:58:b3:47:d1:52:dc:
                    22:37:ac:74:e2:ce:d5:30:be:c4:fc:f1:ab:a9:d1:
                    f8:e6:40:69:9b:47:55:79:09:b5:26:e5:56:f0:e2:
                    c5:41:0c:6c:ab:5a:e3:57:d4:09:63:6b:7d:56:3a:
                    92:5e:63:2c:82:76:8e:cd:97:d5:48:82:34:2e:0a:
                    1e:47:e7:62:4d:c1:4a:f3:76:a4:a4:10:9b:3e:38:
                    e2:4a:93:ab:4e:a8:46:6c:32:20:23:09:2f:6a:7e:
                    45:3d:d8:17:6c:5d:30:a2:91:d7:af:53:e5:0b:67:
                    e3:6d:90:6a:76:21:70:b6:9c:4d:79:f5:99:6c:c3:
                    f8:0a:2a:d7:e6:ec:c2:00:77:b4:66:02:f8:e7:90:
                    a7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F9:84:07:AE:E2:8A:14:D8:A2:08:40:EA:E1:78:F3:73:37:24:55
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a33363a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:36::/48

    Signature Algorithm: sha256WithRSAEncryption
         b6:63:3f:c5:1f:db:4d:01:60:8a:b6:d4:e7:c5:76:ae:6b:e1:
         76:bb:a4:06:2a:2b:93:0b:f9:20:91:8a:8b:3b:04:1b:cf:a2:
         15:64:d8:fb:0d:03:b5:3b:b8:78:03:a1:74:1e:06:08:de:3c:
         6f:68:51:0a:f1:19:54:25:cf:4b:94:f5:e2:f3:c7:1f:d5:df:
         0e:0e:7e:30:eb:b6:66:bd:dd:9d:fc:1c:cc:a0:98:90:0d:0b:
         3c:f9:97:48:6a:d4:dc:d1:63:78:97:0a:17:41:35:fd:57:02:
         b1:f6:a1:5d:53:1c:e1:72:6d:58:ef:8f:39:91:f0:44:26:55:
         76:4e:e3:c4:f7:30:9e:77:56:72:dd:8b:f6:55:77:f9:36:6b:
         8a:38:68:03:10:46:71:c7:ae:2d:b4:dc:3f:69:70:7c:8a:b4:
         38:29:70:d0:15:27:83:53:10:c8:83:e3:f5:07:ba:11:69:4a:
         1a:c9:21:b0:e9:3b:0c:c3:59:f6:ad:7c:ad:af:32:08:ca:46:
         87:69:ad:c4:cd:31:1e:07:2d:c6:03:d3:ce:ea:59:4e:24:45:
         5b:e7:6f:8e:18:0b:f8:9f:a3:88:1f:52:f8:48:4a:7e:56:80:
         87:87:00:22:18:a8:e5:7d:e1:bd:46:f5:4c:da:c6:ab:39:6a:
         43:e9:25:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 02:25:54 2026 by rpki-client