This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/323830303a6131303a3a2f33322d3438203d3e203131303134.roa
File:                     323830303a6131303a3a2f33322d3438203d3e203131303134.roa (raw, json)
Hash identifier:          1KkvYG6zfIybUhiAMxjfuvrgHKUzf8jRg2997rGpLRI=
Subject key identifier:   58:F9:4E:86:37:33:9D:EE:F8:07:B9:2E:8B:2B:AB:8F:36:FE:B2:89
Certificate issuer:       /CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
Certificate serial:       7DE4851EEB3FE1D037B68426B164C8EE4A39C9D3
Authority key identifier: A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/323830303a6131303a3a2f33322d3438203d3e203131303134.roa
Signing time:             Tue 06 Jan 2026 19:20:17 +0000
ROA not before:           Tue 06 Jan 2026 19:15:17 +0000
ROA not after:            Tue 05 Jan 2027 19:20:17 +0000
asID:                     11014
IP address blocks:        2800:a10::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:e4:85:1e:eb:3f:e1:d0:37:b6:84:26:b1:64:c8:ee:4a:39:c9:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
        Validity
            Not Before: Jan  6 19:15:17 2026 GMT
            Not After : Jan  5 19:20:17 2027 GMT
        Subject: CN=58F94E8637339DEEF807B92E8B2BAB8F36FEB289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:27:5d:3a:9a:04:39:a6:77:97:3a:df:9f:95:
                    3e:6b:dc:b4:ff:b7:8a:68:ba:0d:81:fd:6b:be:8c:
                    aa:77:a8:74:2f:13:e3:5f:bc:e8:16:44:05:69:81:
                    c4:83:b2:65:cc:2e:2f:bd:8a:d3:12:ce:c1:b1:03:
                    43:84:fe:27:8b:b6:bb:ae:6d:55:eb:88:fd:7d:46:
                    02:4d:90:75:32:84:cc:6d:a8:90:79:9d:9a:79:93:
                    22:04:9a:c3:13:dc:f9:61:b2:8f:3d:99:d6:ee:79:
                    b3:9e:87:4d:6c:71:7b:9c:9a:3a:3c:c0:02:29:ab:
                    ff:af:b7:23:5b:68:af:b1:9c:29:4b:fd:a9:c3:b0:
                    0b:61:60:0e:1d:c3:cb:fc:48:eb:78:f2:22:c0:69:
                    f6:be:14:95:1a:6d:d1:01:f6:1d:14:01:4c:6c:01:
                    93:73:12:cd:01:5b:74:4d:c6:b8:00:b1:bb:7b:7b:
                    04:ca:5a:cf:04:61:54:f7:5e:fa:20:46:43:43:30:
                    22:21:b0:d8:36:6e:14:fe:6a:d1:ea:9e:b2:1c:ac:
                    83:09:84:f5:b8:e4:bc:40:a5:09:4c:4a:50:75:fd:
                    25:bb:ec:24:b7:4a:35:16:e5:3f:6e:f0:6b:cd:ee:
                    b2:d3:a6:9a:c4:4d:0b:e2:d6:a7:c9:0b:3e:ca:39:
                    6d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F9:4E:86:37:33:9D:EE:F8:07:B9:2E:8B:2B:AB:8F:36:FE:B2:89
            X509v3 Authority Key Identifier:
                keyid:A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/323830303a6131303a3a2f33322d3438203d3e203131303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:a10::/32

    Signature Algorithm: sha256WithRSAEncryption
         bb:59:ee:78:d3:c5:42:15:69:28:7a:87:62:e8:bd:3f:15:e6:
         82:c3:f4:cc:1f:3c:72:91:1d:c6:e4:b2:1d:93:fc:14:ed:38:
         e8:4e:e3:f5:27:65:a9:8c:34:12:31:f0:35:96:8e:da:58:ea:
         56:05:0a:5d:02:f0:72:81:f6:ac:f5:ba:6a:2e:1b:68:10:5a:
         c6:75:e9:e9:c5:c9:e3:48:29:3a:3d:33:da:3d:25:7c:1e:20:
         19:cf:1a:83:08:2d:a7:8b:53:25:91:4c:d6:f7:35:4f:98:9d:
         37:04:ca:c5:66:a1:19:a9:19:24:d5:7d:f3:fe:90:54:9c:b5:
         37:be:c1:32:62:02:8e:91:f5:27:5a:29:1e:bc:df:33:ca:34:
         01:00:cd:0e:13:9d:8a:9b:e2:aa:00:ca:9d:6a:97:a6:58:b7:
         f1:64:ec:1a:cd:95:b5:7d:66:62:34:b0:67:ca:c2:56:a1:35:
         aa:14:09:f7:4b:0c:d4:cc:85:e6:b4:71:0f:5d:4a:33:7a:c4:
         f9:08:93:96:bf:b6:59:56:b6:03:c1:71:48:c3:ce:a0:2d:61:
         d8:29:be:d7:cd:97:a4:74:33:30:8b:1d:5f:ec:2a:e4:f3:a3:
         fc:c9:3e:47:bb:5c:db:94:78:d6:3b:40:99:44:0e:33:23:14:
         11:16:18:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:30:44 2026 by rpki-client