This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a63343a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a63343a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          NLPA9myERW/mE9HfvClyJco6IhvKyJBLctPcuTBRk1A=
Subject key identifier:   72:C5:3A:90:37:86:98:07:93:00:A8:0C:1D:D4:16:B3:88:31:0C:13
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       2AF2F067CACBC4776C27238EE6F935F277D82B1E
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a63343a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 06 Jan 2026 19:38:23 +0000
ROA not before:           Tue 06 Jan 2026 19:33:23 +0000
ROA not after:            Tue 05 Jan 2027 19:38:23 +0000
asID:                     271891
IP address blocks:        2801:151:c4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Feb 2026 05:56:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:f2:f0:67:ca:cb:c4:77:6c:27:23:8e:e6:f9:35:f2:77:d8:2b:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Jan  6 19:33:23 2026 GMT
            Not After : Jan  5 19:38:23 2027 GMT
        Subject: CN=72C53A90378698079300A80C1DD416B388310C13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:17:73:c7:21:56:e4:0d:f9:e8:3f:c3:83:d3:
                    a9:ab:ba:56:62:e1:d2:70:12:93:40:7a:b4:2d:32:
                    b9:63:76:07:e7:78:0f:af:83:e7:ea:a0:07:3c:b2:
                    6b:f7:f8:f9:c5:0e:80:91:1e:77:ee:01:73:37:5d:
                    4b:e8:97:d3:a3:28:3f:b4:b3:27:14:68:a8:54:3f:
                    fa:90:da:d1:29:25:ed:f6:f8:f3:82:2c:fe:b2:71:
                    55:2a:87:06:4e:db:33:db:d4:4d:ee:b3:51:43:24:
                    57:dc:92:9f:7c:52:66:24:7a:7e:07:7a:86:1b:ac:
                    d1:d8:af:da:f9:ba:7f:cd:ad:1a:d4:81:3f:28:5a:
                    1f:76:81:3c:28:70:a6:2a:14:fe:fc:4a:bc:df:c3:
                    ae:ad:3c:a6:d3:63:cd:92:56:f4:1e:51:74:4a:04:
                    46:f7:22:67:da:f2:4f:ea:08:bf:64:6e:a3:89:1f:
                    9f:3c:c5:37:38:b8:1b:aa:07:57:1c:29:f9:ec:3b:
                    a2:fd:8f:9d:41:3e:20:0d:20:d2:c9:4e:02:25:47:
                    19:49:bf:eb:73:c4:87:ad:8c:83:ac:59:81:7f:1c:
                    d5:1c:a6:b9:0a:c2:78:f0:33:53:0c:cb:e0:37:a4:
                    04:93:fa:17:78:9e:a1:ff:cb:88:6f:d4:e2:ab:20:
                    aa:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C5:3A:90:37:86:98:07:93:00:A8:0C:1D:D4:16:B3:88:31:0C:13
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a63343a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:c4::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:11:4b:d8:e5:4b:c1:ac:29:09:e7:5c:24:2c:cf:dd:9c:4d:
         c5:3d:35:32:82:63:d6:58:b0:9e:54:10:e0:a2:d9:bc:58:61:
         12:5d:20:94:bd:7e:be:a6:f2:53:29:d1:6c:e9:51:30:88:7a:
         6b:51:10:16:7d:0f:3d:ea:ec:02:2b:b2:b3:ae:a5:03:5b:d8:
         11:c4:1f:d9:a3:d5:33:f5:a5:51:2f:d9:e8:6f:d3:ae:76:bc:
         19:4f:1c:a3:4a:d0:bd:b0:c9:cd:47:1d:7b:be:86:da:0a:58:
         81:ca:43:bc:ff:49:2b:bb:5b:1a:c9:a7:82:23:10:84:92:9b:
         f8:4e:a8:77:a8:58:e3:2f:0d:a2:0a:d9:10:e8:5d:2c:d1:4e:
         48:2d:b3:53:2c:e9:a0:d1:05:35:ce:1d:93:42:c8:26:3d:24:
         0c:e5:ee:25:2c:fb:ba:26:52:16:09:aa:60:80:ac:e2:d0:a1:
         ce:c8:b4:fb:cf:d8:d8:51:f9:34:cd:6c:bc:f6:de:49:6b:3c:
         bc:48:43:91:dc:2f:16:93:b1:b2:4c:67:ea:bb:d8:39:17:7f:
         1a:ae:1c:61:7c:5d:34:98:1f:b2:02:48:9a:7c:7a:8b:de:c5:
         67:5e:57:34:54:f9:a0:8d:d0:a9:06:24:d6:26:d0:f3:90:2e:
         5e:11:8d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 02:26:10 2026 by rpki-client