This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031613a3a2f34382d3438203d3e203532353039.roa
File:                     323030313a313363373a363031613a3a2f34382d3438203d3e203532353039.roa (raw, json)
Hash identifier:          oUJDQWCVJxSi/NAKCCebLul7e3wdGzKkj/hPJXTMTxs=
Subject key identifier:   05:D8:55:B8:5F:B4:6C:A3:AA:CC:4B:EC:F5:F0:7D:0D:FB:AD:C3:42
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       10AFD5155C941A1DBDF76ECFA90F13DF90C88AC8
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031613a3a2f34382d3438203d3e203532353039.roa
Signing time:             Tue 06 Jan 2026 19:29:29 +0000
ROA not before:           Tue 06 Jan 2026 19:24:29 +0000
ROA not after:            Tue 05 Jan 2027 19:29:29 +0000
asID:                     52509
IP address blocks:        2001:13c7:601a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:af:d5:15:5c:94:1a:1d:bd:f7:6e:cf:a9:0f:13:df:90:c8:8a:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Jan  6 19:24:29 2026 GMT
            Not After : Jan  5 19:29:29 2027 GMT
        Subject: CN=05D855B85FB46CA3AACC4BECF5F07D0DFBADC342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:57:76:18:44:bf:57:0c:14:09:cb:9d:5e:23:
                    65:63:c1:1a:c9:f3:90:e5:a6:23:dd:a3:88:71:27:
                    47:17:19:8c:94:74:48:94:36:d2:a4:a4:40:d2:11:
                    88:ca:07:16:59:74:5f:dc:8b:6b:ba:49:12:c6:db:
                    49:7b:63:65:47:6b:cf:3a:a7:b7:5c:c5:f5:bc:75:
                    40:8f:a1:24:8f:83:1b:3a:cb:1c:8c:18:77:05:88:
                    73:57:4e:fe:cf:18:9a:a3:ee:51:0e:45:06:50:f9:
                    40:16:77:10:38:cf:34:33:b0:ac:e8:2a:96:19:67:
                    3a:ae:b7:cb:62:f5:35:93:31:d2:74:5c:33:fc:af:
                    31:83:74:af:93:25:8e:21:7c:a1:79:6a:b1:73:9b:
                    37:d8:6c:bd:64:ee:25:96:a7:59:95:a1:86:63:c7:
                    7c:c9:db:99:67:a4:ce:b5:d8:46:ab:80:01:04:c6:
                    92:d2:e4:31:e4:59:1d:4a:d6:43:23:38:71:90:b2:
                    07:cb:00:c2:ca:90:bd:ec:66:fc:df:ff:ee:b3:30:
                    4f:f0:a1:2c:39:a5:b5:5f:c2:33:e5:ab:16:01:f1:
                    78:43:87:ff:69:b8:b4:40:80:11:ec:9d:78:ca:72:
                    57:b4:c6:dc:e8:3c:9b:d5:6b:86:00:62:53:f1:19:
                    8c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D8:55:B8:5F:B4:6C:A3:AA:CC:4B:EC:F5:F0:7D:0D:FB:AD:C3:42
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031613a3a2f34382d3438203d3e203532353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:601a::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:e8:d3:47:c5:6d:26:7a:87:b7:5e:91:ae:e9:1f:13:c0:08:
         a7:45:38:18:10:be:31:93:80:6b:3b:ad:2b:6f:d2:6e:5b:5c:
         d8:b1:db:bc:eb:b4:48:2c:3c:a6:06:de:36:de:ef:cc:da:92:
         8a:1e:79:a0:5f:a9:68:2d:3b:ac:6b:d0:57:ba:27:c5:04:f2:
         a7:75:bf:ff:a6:27:25:7e:97:46:4e:bc:a9:8d:55:52:b6:09:
         13:4b:47:38:72:35:93:bc:b5:8b:53:95:19:8f:1e:e1:c4:77:
         29:ec:80:91:ad:89:61:dd:c7:fb:8c:7e:6e:5e:94:6e:60:9f:
         9f:f0:33:63:30:c9:2d:40:67:f2:f2:b9:ef:f6:d3:5b:80:ad:
         a3:e8:cf:da:58:7a:dc:95:7a:e3:a4:24:76:67:59:f5:35:02:
         97:7a:d7:2c:9e:29:8a:32:70:dc:0c:00:1c:64:15:da:eb:b8:
         f7:d7:c9:dd:e8:48:be:59:4c:f4:b6:39:d3:ad:79:27:16:a7:
         11:7f:40:ab:86:26:cc:20:6e:1f:09:21:55:b1:1d:39:3e:fc:
         a5:32:16:2c:2e:a5:59:d4:50:d2:a3:33:9c:ab:e8:08:59:2e:
         82:60:cb:52:6f:99:99:79:62:40:49:b4:db:e0:e0:d2:f0:1c:
         0d:dd:2e:61
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUEK/VFVyUGh29927PqQ8T35DIisgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDgxQjM4NzY4ODBGNjNENUY5QkE2RDc2M0Q3RTY2M0U5
REIzNjlGQzAeFw0yNjAxMDYxOTI0MjlaFw0yNzAxMDUxOTI5MjlaMDMxMTAvBgNV
BAMTKDA1RDg1NUI4NUZCNDZDQTNBQUNDNEJFQ0Y1RjA3RDBERkJBREMzNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsV3YYRL9XDBQJy51eI2VjwRrJ
85DlpiPdo4hxJ0cXGYyUdEiUNtKkpEDSEYjKBxZZdF/ci2u6SRLG20l7Y2VHa886
p7dcxfW8dUCPoSSPgxs6yxyMGHcFiHNXTv7PGJqj7lEORQZQ+UAWdxA4zzQzsKzo
KpYZZzqut8ti9TWTMdJ0XDP8rzGDdK+TJY4hfKF5arFzmzfYbL1k7iWWp1mVoYZj
x3zJ25lnpM612EargAEExpLS5DHkWR1K1kMjOHGQsgfLAMLKkL3sZvzf/+6zME/w
oSw5pbVfwjPlqxYB8XhDh/9puLRAgBHsnXjKcle0xtzoPJvVa4YAYlPxGYwVAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUBdhVuF+0bKOqzEvs9fB9Dfutw0IwHwYDVR0j
BBgwFoAUSBs4dogPY9X5um12PX5mPp2zafwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRjgyMDVBNUJCOTcyMDFFOTkwRDMzNzJCN0FGOTQxNTVE
N0YxODYzRUUyRTc5QjQ0NzQwNkYwNTQwRDlCMDAyLzAvNDgxQjM4NzY4ODBGNjNE
NUY5QkE2RDc2M0Q3RTY2M0U5REIzNjlGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80ODFCMzg3Njg4MEY2M0Q1RjlC
QTZENzYzRDdFNjYzRTlEQjM2OUZDLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUY4MjA1QTVCQjk3MjAxRTk5MEQzMzcyQjdBRjk0MTU1RDdGMTg2M0VF
MkU3OUI0NDc0MDZGMDU0MEQ5QjAwMi8wLzMyMzAzMDMxM2EzMTMzNjMzNzNhMzYz
MDMxNjEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTMyMzUzMDM5LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcAIAETx2AaMA0GCSqGSIb3DQEBCwUAA4IBAQCg6NNHxW0meoe3XpGu6R8TwAin
RTgYEL4xk4BrO60rb9JuW1zYsdu867RILDymBt423u/M2pKKHnmgX6loLTusa9BX
uifFBPKndb//piclfpdGTrypjVVStgkTS0c4cjWTvLWLU5UZjx7hxHcp7ICRrYlh
3cf7jH5uXpRuYJ+f8DNjMMktQGfy8rnv9tNbgK2j6M/aWHrclXrjpCR2Z1n1NQKX
etcsnimKMnDcDAAcZBXa67j318nd6Ei+WUz0tjnTrXknFqcRf0CrhibMIG4fCSFV
sR05PvylMhYsLqVZ1FDSozOcq+gIWS6CYMtSb5mZeWJASbTb4ODS8BwN3S5h
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:20:11 2026 by rpki-client