This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/400B69AFB40BD427162CF2854DEBE3128DE8911BB103D76BB95AB314BCB8ACC1/0/323030313a313236633a3a2f33322d3438203d3e20323733333037.roa
File:                     323030313a313236633a3a2f33322d3438203d3e20323733333037.roa (raw, json)
Hash identifier:          FeqYX52hbJUD6aR0t18iluomLUI+Srz73vv/uK7wBLc=
Subject key identifier:   96:44:71:9C:44:50:F9:CA:41:8D:70:49:93:3B:AF:F7:5E:4F:AB:7D
Certificate issuer:       /CN=56A538C24A41AE3A2A3D2F068932336A9A90D25F
Certificate serial:       74D42834F8F94F254DCF5573CB6F618DD108574E
Authority key identifier: 56:A5:38:C2:4A:41:AE:3A:2A:3D:2F:06:89:32:33:6A:9A:90:D2:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56A538C24A41AE3A2A3D2F068932336A9A90D25F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/400B69AFB40BD427162CF2854DEBE3128DE8911BB103D76BB95AB314BCB8ACC1/0/323030313a313236633a3a2f33322d3438203d3e20323733333037.roa
Signing time:             Mon 29 Dec 2025 23:45:00 +0000
ROA not before:           Mon 29 Dec 2025 23:40:00 +0000
ROA not after:            Mon 28 Dec 2026 23:45:00 +0000
asID:                     273307
IP address blocks:        2001:126c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/400B69AFB40BD427162CF2854DEBE3128DE8911BB103D76BB95AB314BCB8ACC1/0/56A538C24A41AE3A2A3D2F068932336A9A90D25F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/400B69AFB40BD427162CF2854DEBE3128DE8911BB103D76BB95AB314BCB8ACC1/0/56A538C24A41AE3A2A3D2F068932336A9A90D25F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56A538C24A41AE3A2A3D2F068932336A9A90D25F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:d4:28:34:f8:f9:4f:25:4d:cf:55:73:cb:6f:61:8d:d1:08:57:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56A538C24A41AE3A2A3D2F068932336A9A90D25F
        Validity
            Not Before: Dec 29 23:40:00 2025 GMT
            Not After : Dec 28 23:45:00 2026 GMT
        Subject: CN=9644719C4450F9CA418D7049933BAFF75E4FAB7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:14:27:fc:47:0f:3a:0f:01:a9:40:aa:73:7b:
                    99:14:1a:10:56:ba:43:41:8d:6e:a1:8e:72:86:f4:
                    1e:9d:40:d1:a8:76:b8:23:db:8a:38:61:72:a3:78:
                    13:96:84:52:6d:3d:72:ab:e4:5b:bc:eb:2e:81:85:
                    ce:34:18:5a:c0:ed:39:fb:38:20:da:7f:bc:03:19:
                    62:ca:ad:2f:92:b8:90:ad:39:21:e7:26:e1:c3:26:
                    b0:7c:35:bf:2e:3d:b3:a2:04:c3:95:ee:52:be:3b:
                    2c:1a:79:9c:dd:01:2c:1c:0f:92:1f:39:b9:7b:dd:
                    a5:7f:52:bc:d4:6f:fe:8e:76:1d:a5:dc:11:3b:61:
                    e2:4b:4c:5a:31:79:b7:36:22:9d:84:7b:63:ee:b8:
                    50:de:24:4c:7b:6c:5c:9f:9e:6c:1b:cc:17:16:76:
                    37:03:c5:7b:c0:d2:d6:98:dc:98:7c:03:40:6a:1e:
                    23:ac:a1:d7:fd:d3:f1:dd:82:98:96:57:be:7f:2d:
                    90:68:3c:d9:ff:7c:fa:61:49:30:59:17:89:cd:46:
                    75:53:8c:46:a1:20:95:27:92:d4:e2:b5:83:9e:09:
                    e8:48:9b:e9:63:c8:3d:32:ad:c8:1a:37:7c:18:54:
                    26:d1:46:57:98:51:11:03:e5:e9:37:80:34:e5:08:
                    3b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:44:71:9C:44:50:F9:CA:41:8D:70:49:93:3B:AF:F7:5E:4F:AB:7D
            X509v3 Authority Key Identifier:
                keyid:56:A5:38:C2:4A:41:AE:3A:2A:3D:2F:06:89:32:33:6A:9A:90:D2:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/400B69AFB40BD427162CF2854DEBE3128DE8911BB103D76BB95AB314BCB8ACC1/0/56A538C24A41AE3A2A3D2F068932336A9A90D25F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56A538C24A41AE3A2A3D2F068932336A9A90D25F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/400B69AFB40BD427162CF2854DEBE3128DE8911BB103D76BB95AB314BCB8ACC1/0/323030313a313236633a3a2f33322d3438203d3e20323733333037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:126c::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:a0:6d:5c:24:37:d1:71:ea:91:c2:d8:44:6e:eb:60:f3:89:
         ce:6a:6b:96:77:ec:7a:da:9d:59:43:1e:78:4a:00:75:33:5f:
         ff:0a:a9:f9:a0:17:80:69:1d:13:73:0e:ea:7b:02:23:9d:4e:
         7f:46:80:12:d7:c7:0d:7e:80:c2:1d:0b:6a:bb:ec:3e:9b:9f:
         55:87:2d:62:e6:1e:df:33:70:6d:1f:df:74:2d:34:ec:02:50:
         97:ec:e6:32:3a:7d:fa:9b:06:fc:14:b9:e2:90:c2:e6:5d:e0:
         b6:05:3d:69:20:1e:27:e5:4b:99:33:31:02:a1:5f:9a:36:0a:
         8d:a7:83:6a:8a:28:5e:ee:33:37:53:48:5a:4c:d3:a2:98:39:
         05:9a:8c:39:03:a7:55:75:a5:f6:34:2e:d5:13:6f:17:da:10:
         f4:3f:7a:be:78:35:a4:29:51:a9:1d:e2:3e:c8:27:59:31:79:
         d0:2f:ad:25:85:fc:79:c0:5c:67:b2:22:2c:75:91:a6:dd:ea:
         f7:72:29:d8:d0:a1:1e:af:57:51:47:77:6c:60:db:d1:b8:1b:
         e0:e5:12:63:ae:c5:dd:3b:d9:ac:a4:2a:9e:d3:cf:cb:be:be:
         d2:e5:51:53:b1:7c:50:77:a3:0a:7f:34:45:1d:18:62:93:0a:
         34:c0:b5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:02:58 2026 by rpki-client