This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373030313a3a2f34382d3438203d3e203238303030.roa
File:                     323030313a313363373a373030313a3a2f34382d3438203d3e203238303030.roa (raw, json)
Hash identifier:          6AeEb72gMlLIeES9cf8MjCFO4k4/PvKu9dUobJSDHSw=
Subject key identifier:   42:1E:61:25:96:2C:D9:74:EE:36:49:7A:40:2B:58:B6:56:B1:A2:4D
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       229C886FBC7D945722E1DF9926A8FF88AB3B413B
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373030313a3a2f34382d3438203d3e203238303030.roa
Signing time:             Tue 06 Jan 2026 19:15:32 +0000
ROA not before:           Tue 06 Jan 2026 19:10:32 +0000
ROA not after:            Tue 05 Jan 2027 19:15:32 +0000
asID:                     28000
IP address blocks:        2001:13c7:7001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:9c:88:6f:bc:7d:94:57:22:e1:df:99:26:a8:ff:88:ab:3b:41:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Jan  6 19:10:32 2026 GMT
            Not After : Jan  5 19:15:32 2027 GMT
        Subject: CN=421E6125962CD974EE36497A402B58B656B1A24D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:87:33:25:87:ad:6c:5d:7e:8c:ab:87:bc:29:
                    37:5c:30:5a:f5:82:32:a1:9a:0b:1c:7a:9d:e1:6c:
                    8c:49:d0:b8:95:fd:f3:cb:6c:bf:b1:67:b0:17:cc:
                    93:35:fd:4e:f5:b2:f4:11:f1:d6:4f:06:ef:17:40:
                    ce:28:53:36:ff:8e:b6:14:94:6d:ab:9b:c0:62:7b:
                    c8:e4:e2:1c:5a:f6:12:96:59:04:54:83:33:eb:6f:
                    1d:f4:49:ff:a3:f2:4c:cf:d7:56:ba:6a:8c:55:dc:
                    fa:26:16:8c:36:9f:9b:57:d1:2f:1c:a6:73:42:79:
                    f3:cb:37:66:a8:b5:6a:b7:d9:d8:ad:a9:99:4d:f4:
                    9b:05:0a:c7:17:a6:5b:9c:1d:4a:18:37:0d:b3:cb:
                    3a:8e:09:9b:32:98:01:89:68:f8:f9:a2:27:38:c4:
                    84:c8:0d:05:4f:ff:92:03:64:e6:02:53:f9:3d:a0:
                    78:88:9e:fd:09:80:ac:62:bf:8d:82:f5:28:39:1a:
                    9f:cd:87:8e:64:ae:10:35:25:af:dc:f4:2f:7c:76:
                    cb:95:57:50:b0:71:59:19:cd:0e:04:dd:38:8f:dc:
                    e2:65:0f:3b:86:34:9e:b7:ea:6b:39:96:a6:56:96:
                    5f:d6:ae:49:36:b8:a8:1c:16:9e:47:88:4d:24:79:
                    64:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:1E:61:25:96:2C:D9:74:EE:36:49:7A:40:2B:58:B6:56:B1:A2:4D
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373030313a3a2f34382d3438203d3e203238303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7001::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:4e:9c:ff:88:8f:46:3c:37:f5:4f:b1:d3:f2:3b:4c:cf:48:
         09:2e:d9:63:37:dc:62:06:1c:a0:10:f4:be:f7:91:8f:9a:0b:
         ae:86:01:90:53:3e:d0:fd:9e:ec:f3:3d:41:18:1c:c9:6e:70:
         c2:e5:db:57:68:fc:e7:86:f3:e2:a4:7c:6a:61:5e:0a:c6:26:
         07:95:fc:f1:3d:1d:8c:13:03:c2:96:c9:05:18:e9:d9:20:b6:
         f8:85:4a:c0:42:ae:ef:a8:7d:cd:6e:5f:2f:c8:c4:71:bb:b6:
         f4:60:b3:d5:11:30:e8:1f:b0:6b:bb:02:c8:9d:6d:23:3c:db:
         9c:33:12:52:33:bc:86:a3:40:53:90:47:7e:e3:d1:80:b6:05:
         fe:58:11:ae:af:0b:ca:4a:0d:6a:5b:67:84:98:1e:4e:97:1d:
         e3:76:f0:cf:8c:e5:a2:33:d0:56:f7:69:59:1b:96:3a:d5:46:
         80:d8:93:bd:77:ae:f0:10:ff:85:af:73:fe:35:de:5d:21:e7:
         cd:82:51:aa:c0:38:d2:1c:ba:d0:11:cf:48:8b:7f:c6:0d:2b:
         4e:b3:17:34:ab:f5:b2:e8:bc:15:57:49:eb:df:98:12:a0:f2:
         53:15:b4:db:ba:c8:a6:62:86:17:0a:8b:b3:33:27:fe:ba:bc:
         0a:46:e6:bd
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUIpyIb7x9lFci4d+ZJqj/iKs7QTswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY1NkI5MDExQUU4QzlBREREOTY4MDNERUNFMUQxRjkz
MDZEODFERTAeFw0yNjAxMDYxOTEwMzJaFw0yNzAxMDUxOTE1MzJaMDMxMTAvBgNV
BAMTKDQyMUU2MTI1OTYyQ0Q5NzRFRTM2NDk3QTQwMkI1OEI2NTZCMUEyNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7hzMlh61sXX6Mq4e8KTdcMFr1
gjKhmgscep3hbIxJ0LiV/fPLbL+xZ7AXzJM1/U71svQR8dZPBu8XQM4oUzb/jrYU
lG2rm8Bie8jk4hxa9hKWWQRUgzPrbx30Sf+j8kzP11a6aoxV3PomFow2n5tX0S8c
pnNCefPLN2aotWq32ditqZlN9JsFCscXplucHUoYNw2zyzqOCZsymAGJaPj5oic4
xITIDQVP/5IDZOYCU/k9oHiInv0JgKxiv42C9Sg5Gp/Nh45krhA1Ja/c9C98dsuV
V1CwcVkZzQ4E3TiP3OJlDzuGNJ636ms5lqZWll/Wrkk2uKgcFp5HiE0keWSdAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUQh5hJZYs2XTuNkl6QCtYtlaxok0wHwYDVR0j
BBgwFoAUH1a5ARroya3dloA97OHR+TBtgd4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81QUMzM0Q0QUM4NDQ0MzlEOTQ1RjJGQTlGN0JCNzhGMDY0
NjhFMjJDOEJGNTgzNEE1NjhDQzAwMDQ5QUMzQTdCLzAvMUY1NkI5MDExQUU4QzlB
REREOTY4MDNERUNFMUQxRjkzMDZEODFERS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRjU2QjkwMTFBRThDOUFEREQ5
NjgwM0RFQ0UxRDFGOTMwNkQ4MURFLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUFDMzNENEFDODQ0NDM5RDk0NUYyRkE5RjdCQjc4RjA2NDY4RTIyQzhC
RjU4MzRBNTY4Q0MwMDA0OUFDM0E3Qi8wLzMyMzAzMDMxM2EzMTMzNjMzNzNhMzcz
MDMwMzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM4MzAzMDMwLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcAIAETx3ABMA0GCSqGSIb3DQEBCwUAA4IBAQAvTpz/iI9GPDf1T7HT8jtMz0gJ
LtljN9xiBhygEPS+95GPmguuhgGQUz7Q/Z7s8z1BGBzJbnDC5dtXaPznhvPipHxq
YV4KxiYHlfzxPR2MEwPClskFGOnZILb4hUrAQq7vqH3Nbl8vyMRxu7b0YLPVETDo
H7BruwLInW0jPNucMxJSM7yGo0BTkEd+49GAtgX+WBGurwvKSg1qW2eEmB5Olx3j
dvDPjOWiM9BW92lZG5Y61UaA2JO9d67wEP+Fr3P+Nd5dIefNglGqwDjSHLrQEc9I
i3/GDStOsxc0q/Wy6LwVV0nr35gSoPJTFbTbusimYoYXCouzMyf+urwKRua9
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:18:55 2026 by rpki-client