This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/323830303a3565303a3a2f33322d3438203d3e20333934363834.roa
File:                     323830303a3565303a3a2f33322d3438203d3e20333934363834.roa (raw, json)
Hash identifier:          tbDOUjSWXbTojMTKpDUKAoNlg2u/PSPhnGa0Ly+W1Ys=
Subject key identifier:   2A:C8:A5:CF:D9:8A:2B:4A:97:95:B7:23:DD:B7:86:DC:3F:28:10:17
Certificate issuer:       /CN=00C0ACD86F331A95D261959180F50CBCC82F52AB
Certificate serial:       55C40E329EED83276CD62B184855815861FC7D57
Authority key identifier: 00:C0:AC:D8:6F:33:1A:95:D2:61:95:91:80:F5:0C:BC:C8:2F:52:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/323830303a3565303a3a2f33322d3438203d3e20333934363834.roa
Signing time:             Tue 06 Jan 2026 19:32:15 +0000
ROA not before:           Tue 06 Jan 2026 19:27:15 +0000
ROA not after:            Tue 05 Jan 2027 19:32:15 +0000
asID:                     394684
IP address blocks:        2800:5e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 06:18:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:c4:0e:32:9e:ed:83:27:6c:d6:2b:18:48:55:81:58:61:fc:7d:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00C0ACD86F331A95D261959180F50CBCC82F52AB
        Validity
            Not Before: Jan  6 19:27:15 2026 GMT
            Not After : Jan  5 19:32:15 2027 GMT
        Subject: CN=2AC8A5CFD98A2B4A9795B723DDB786DC3F281017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:46:a2:33:1a:c2:c4:21:c3:d0:f4:7b:fc:24:
                    48:ae:16:91:53:b0:da:ef:57:a8:bb:28:68:aa:22:
                    9a:10:11:1f:c7:4d:fe:bc:dd:03:11:e9:91:63:79:
                    98:28:f7:37:c2:89:f4:24:43:d9:89:c1:a8:42:00:
                    70:0d:ab:31:8d:ec:7f:ec:e7:5b:b2:63:e2:9f:03:
                    a1:69:71:37:c7:d0:a7:56:d4:0a:5c:f2:bc:12:55:
                    2b:67:20:05:70:ed:34:f7:34:4e:94:27:b1:60:87:
                    c7:fa:85:be:01:4e:9a:57:dc:03:a6:97:b8:53:01:
                    66:b4:1a:6a:a8:85:6a:4b:09:8b:fe:37:24:80:be:
                    96:e9:3e:46:63:98:36:2f:8c:b1:ce:62:72:ee:95:
                    3a:bd:c0:b9:2b:cd:70:9c:75:99:8f:62:e1:fe:5f:
                    ed:ea:52:d7:e7:2d:4c:fa:2e:9c:b6:4c:c3:df:1b:
                    d0:57:7b:4d:36:b0:0f:86:21:87:03:58:3a:19:8d:
                    15:18:13:1e:7b:c1:b4:cc:6f:0e:48:7e:16:45:93:
                    3d:13:d2:07:4e:07:5e:52:06:e5:00:07:2d:68:50:
                    7f:e3:60:f7:22:0e:2f:a2:e9:10:2f:71:49:56:4f:
                    08:ea:04:fa:47:a8:09:9d:34:6b:f8:26:4c:be:e7:
                    52:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C8:A5:CF:D9:8A:2B:4A:97:95:B7:23:DD:B7:86:DC:3F:28:10:17
            X509v3 Authority Key Identifier:
                keyid:00:C0:AC:D8:6F:33:1A:95:D2:61:95:91:80:F5:0C:BC:C8:2F:52:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/323830303a3565303a3a2f33322d3438203d3e20333934363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:5e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:03:43:0a:8e:3d:b4:40:63:bd:e2:5b:cd:c4:b2:42:7e:11:
         b3:94:18:86:76:61:d8:c2:ac:5b:80:ac:a7:1c:54:35:71:31:
         ca:ba:75:69:80:c0:6d:ab:16:13:b5:68:f5:90:3f:cb:c4:71:
         82:c1:4a:79:be:33:9e:85:4d:a4:86:c7:d0:98:88:e1:86:79:
         d0:67:b7:1f:61:60:19:3b:0e:08:74:8e:48:72:27:a1:99:00:
         0a:ff:44:ca:a3:27:78:27:ae:de:ab:3c:57:03:43:0e:c5:7d:
         83:73:6f:c2:6f:39:58:5e:30:4f:eb:bf:04:5b:33:5b:07:46:
         17:ce:c4:e7:03:4e:2b:33:85:2a:68:79:c3:fc:0c:89:72:ea:
         b2:4d:86:33:67:c7:8c:c8:47:af:67:53:c9:c2:a9:2f:80:79:
         58:62:d5:8c:1c:6a:35:ce:1e:8b:93:4e:b9:e7:ab:80:2c:2c:
         9c:fc:91:59:67:4b:92:5d:08:69:64:7d:0a:03:37:c0:2b:ee:
         49:bc:c4:41:32:54:ab:58:dc:1c:15:33:cf:3f:80:e3:a2:80:
         0b:55:ac:44:81:10:1b:02:70:18:58:c0:81:a8:c6:20:6c:6f:
         a0:8a:f5:af:38:3e:ba:6f:ea:aa:19:d2:68:f0:18:84:f6:f6:
         5d:47:90:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:29:34 2026 by rpki-client