This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a66613a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a66613a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          IR4oqNsho5ZGGdW5jKOLfVjbALcgDB0ExQou6M2Jg04=
Subject key identifier:   C5:B2:C1:C8:36:82:BD:87:2A:50:F3:25:09:F7:7F:58:87:B1:B1:E7
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       5A4D5B62A27057AF50F115FB5F535B7130AF094F
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a66613a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 06 Jan 2026 19:38:24 +0000
ROA not before:           Tue 06 Jan 2026 19:33:24 +0000
ROA not after:            Tue 05 Jan 2027 19:38:24 +0000
asID:                     271891
IP address blocks:        2801:151:fa::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Feb 2026 05:56:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:4d:5b:62:a2:70:57:af:50:f1:15:fb:5f:53:5b:71:30:af:09:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Jan  6 19:33:24 2026 GMT
            Not After : Jan  5 19:38:24 2027 GMT
        Subject: CN=C5B2C1C83682BD872A50F32509F77F5887B1B1E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0c:68:4d:f8:84:77:ce:80:7c:45:d0:88:1e:
                    89:36:e3:cd:08:9c:68:5c:d8:49:79:7f:39:3a:d8:
                    9b:bc:13:2a:22:c6:32:a9:d2:68:05:93:1a:d1:fa:
                    0d:1c:97:1f:34:d7:a2:c8:c5:14:3a:04:c9:6a:2d:
                    ff:7d:5c:5e:af:b8:d3:b8:fb:7f:e7:45:cc:d5:54:
                    e4:1b:17:f3:6f:7b:40:5a:56:4e:4a:fd:53:79:01:
                    6a:d4:15:4c:a4:d1:4b:4d:92:7f:95:34:9b:3a:35:
                    5d:83:37:0d:26:c3:b3:3e:bb:2f:b4:88:82:1c:e2:
                    5a:ba:52:fb:e8:d8:bd:0f:9b:5b:18:c0:a8:57:10:
                    90:aa:5f:1a:94:23:c8:98:da:8d:19:5d:4c:7a:08:
                    2d:1b:54:3a:dc:0f:ed:c5:24:bc:05:17:0f:43:dc:
                    14:d5:6f:53:a5:99:ec:7a:0d:93:47:87:19:25:dd:
                    6f:3e:b2:a8:49:33:03:d6:c6:b4:cc:2c:57:b2:94:
                    1d:3b:24:94:7e:c7:53:2d:9e:2b:32:fc:60:70:b6:
                    4e:7d:97:c3:dd:c1:33:fc:af:d0:d9:29:da:54:f4:
                    0e:e5:50:1e:3d:36:4f:50:79:29:60:6e:f4:08:30:
                    20:6f:68:dc:47:cb:f5:14:b4:68:ff:25:66:8c:af:
                    bf:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B2:C1:C8:36:82:BD:87:2A:50:F3:25:09:F7:7F:58:87:B1:B1:E7
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a66613a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:fa::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:8a:8d:18:86:13:68:4d:8f:88:e6:93:f9:09:cf:f1:0e:6a:
         61:54:e0:f2:24:08:4e:75:06:04:c1:f9:9e:2c:24:a6:04:d7:
         c0:2b:a0:18:a8:da:2c:36:96:47:bf:53:4e:66:1b:d9:91:f4:
         65:88:20:cf:70:4b:cf:15:27:78:26:fa:95:28:ce:16:1e:e7:
         37:49:3e:11:fc:88:e1:93:f5:76:3c:78:32:97:76:26:3b:bc:
         b3:dd:d9:33:2f:f2:1e:40:11:57:d5:0a:53:00:97:10:5d:d1:
         26:51:67:12:0c:40:bb:d0:e3:a7:ff:33:1b:9f:8a:f2:e7:23:
         fa:6e:d2:b4:28:3a:0e:6b:35:ff:e4:d6:f6:06:84:56:bc:01:
         09:96:6f:9b:38:3a:ae:16:15:95:1e:02:99:0e:f0:2c:34:4e:
         6c:ff:61:3e:3f:25:58:20:92:17:9f:f9:19:a1:de:fb:f8:88:
         f2:46:72:22:1a:fe:5d:1f:0c:50:85:6f:39:f9:57:92:0e:9b:
         3e:d3:1e:81:a3:19:2a:e0:82:d0:a1:50:98:88:1e:8a:32:c1:
         a2:f3:0f:e1:16:b2:e3:8f:b1:65:1b:83:d6:7f:7f:e2:61:37:
         8d:86:c3:cb:9a:ab:45:4b:3b:f7:89:29:48:de:02:82:e3:04:
         6e:a4:0a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 02:27:47 2026 by rpki-client