This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/323830303a3539303a313030303a3a2f33362d3438203d3e203136363239.roa
File:                     323830303a3539303a313030303a3a2f33362d3438203d3e203136363239.roa (raw, json)
Hash identifier:          KXEHI//TcB4YJoPFIgC2Wy/X19PYyK4Me0r8CKeCS70=
Subject key identifier:   2D:62:6A:E0:B4:9F:A9:10:8D:23:2E:1E:75:1C:E1:5E:88:0B:F6:AA
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       7253846FBA758BDC34523B28340C46BBEC19AD58
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/323830303a3539303a313030303a3a2f33362d3438203d3e203136363239.roa
Signing time:             Tue 06 Jan 2026 20:52:02 +0000
ROA not before:           Tue 06 Jan 2026 20:47:02 +0000
ROA not after:            Tue 05 Jan 2027 20:52:02 +0000
asID:                     16629
IP address blocks:        2800:590:1000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 13:51:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:53:84:6f:ba:75:8b:dc:34:52:3b:28:34:0c:46:bb:ec:19:ad:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Jan  6 20:47:02 2026 GMT
            Not After : Jan  5 20:52:02 2027 GMT
        Subject: CN=2D626AE0B49FA9108D232E1E751CE15E880BF6AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:79:50:97:91:38:e2:bf:98:f3:d1:02:2f:d8:
                    ba:a6:b7:6f:9c:ec:d5:7e:7a:6e:fa:3d:58:67:95:
                    31:59:85:04:ba:41:12:5d:7d:86:21:a5:0a:9f:32:
                    3c:46:91:ec:38:00:1f:a8:c8:a4:ef:a4:15:2e:d1:
                    8d:ec:51:65:b6:76:75:33:11:f1:f2:c5:b6:82:69:
                    91:eb:b3:d9:2e:c5:d3:06:be:13:ed:a6:72:56:6c:
                    58:0c:90:b7:11:26:8e:ed:12:7d:84:d7:be:e3:8d:
                    9f:5b:63:5c:88:9f:e9:55:88:3f:a0:56:05:d3:88:
                    11:4e:b8:57:38:67:69:42:2b:5a:32:2f:cf:5f:2c:
                    13:f8:9c:e1:e3:92:d6:cf:8a:1b:b2:f4:ae:09:be:
                    25:fc:36:06:d5:75:d6:39:a6:bf:b7:5b:26:16:b9:
                    15:7e:cc:80:2f:b4:a3:4f:9f:af:db:87:88:ac:84:
                    70:c1:eb:cd:f0:18:7f:b1:99:43:35:06:53:48:85:
                    66:16:c8:0d:84:4c:f5:21:4c:9a:ca:e1:56:6e:e2:
                    9d:6c:ba:a4:39:ba:b5:7a:2f:53:d4:58:fa:18:26:
                    58:d1:3f:89:1a:47:c0:5a:9e:4e:ad:1c:d0:f7:9c:
                    fc:e7:2c:3c:a7:24:8b:78:1f:b2:73:26:d0:95:67:
                    38:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:62:6A:E0:B4:9F:A9:10:8D:23:2E:1E:75:1C:E1:5E:88:0B:F6:AA
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/323830303a3539303a313030303a3a2f33362d3438203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:590:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         d2:41:88:00:0c:9d:34:18:a0:ee:6a:60:85:47:fe:fd:7a:f9:
         82:fc:e0:f3:6c:ee:89:0a:8d:24:7f:6c:72:2e:c8:46:27:60:
         86:1a:cf:5c:52:25:40:fc:8c:2e:3b:85:f5:d2:75:bc:69:35:
         9b:bc:d3:39:64:3f:75:ba:b3:9d:63:3e:fc:9f:be:9e:7d:c5:
         ba:de:32:c9:6e:7a:c3:a8:08:a4:ea:b8:b2:21:79:a8:3f:85:
         9c:1e:8b:71:e2:40:90:0e:6d:0b:6b:8c:31:7c:8c:78:35:35:
         a9:aa:19:cd:7b:6a:2f:31:37:79:5b:86:7f:58:6a:1e:1d:c2:
         31:11:bf:94:25:d9:b3:05:5d:95:e3:6d:8c:f3:92:b2:32:8b:
         26:1e:bc:2f:79:7e:f8:85:7c:e6:f6:e3:34:d9:ea:82:1c:80:
         f4:60:30:23:12:fd:a4:20:aa:2c:07:00:3a:e3:15:31:01:1d:
         3b:69:ce:5c:79:75:eb:96:26:6b:92:02:76:95:5c:b2:90:ea:
         aa:47:16:9b:34:10:bb:73:20:f3:1a:42:59:01:ed:c9:a0:41:
         d0:b2:e5:ce:a6:dd:91:27:cc:01:2d:3a:e9:db:eb:a8:84:1f:
         9a:95:5f:2d:3b:df:ba:00:0d:4b:7d:95:d4:e5:4d:5f:d7:c0:
         57:76:46:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:04:37 2026 by rpki-client