This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373031303a3a2f34362d3438203d3e203238303030.roa
File:                     323030313a313363373a373031303a3a2f34362d3438203d3e203238303030.roa (raw, json)
Hash identifier:          orsO/W60MYMCK5HFj2VRBzKDEZXWwGQo5aD3AuNiT4k=
Subject key identifier:   EE:DB:40:EF:2D:02:3E:58:67:13:DB:F1:99:41:E9:F2:AD:2B:78:E7
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       2AFBA193E28B4E3AF556E4929C55394E0C86CFF5
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373031303a3a2f34362d3438203d3e203238303030.roa
Signing time:             Tue 06 Jan 2026 19:15:29 +0000
ROA not before:           Tue 06 Jan 2026 19:10:29 +0000
ROA not after:            Tue 05 Jan 2027 19:15:29 +0000
asID:                     28000
IP address blocks:        2001:13c7:7010::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:fb:a1:93:e2:8b:4e:3a:f5:56:e4:92:9c:55:39:4e:0c:86:cf:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Jan  6 19:10:29 2026 GMT
            Not After : Jan  5 19:15:29 2027 GMT
        Subject: CN=EEDB40EF2D023E586713DBF19941E9F2AD2B78E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:c0:ca:80:48:93:83:ba:7e:4e:78:db:e0:59:
                    fa:18:a5:73:50:12:d7:f0:81:3d:46:ec:b8:23:6b:
                    e7:cb:61:1e:6c:c4:1f:40:d1:97:67:02:93:26:99:
                    c3:83:eb:8a:4e:d4:c4:33:dd:cd:e4:77:05:09:6b:
                    bd:87:44:3d:9c:fa:b8:6f:71:0e:ca:db:e3:d2:a6:
                    70:76:92:1d:a9:18:20:d3:f3:76:f9:67:38:be:33:
                    ff:a9:68:f4:a5:2b:de:da:92:d4:3e:3e:8e:17:4b:
                    12:cb:8a:7c:7b:ea:1c:11:be:59:bc:d0:0d:b9:d0:
                    cd:ca:91:95:77:12:3e:be:a0:d2:c0:09:fd:20:2f:
                    1f:e9:14:c6:07:54:f7:a8:08:fd:72:aa:87:6b:8e:
                    8b:73:54:77:59:f3:7a:dc:0c:3a:b6:3e:df:e3:83:
                    34:48:05:b2:2b:d2:b0:9e:74:8b:30:13:92:cc:01:
                    96:5d:03:bd:56:36:22:70:6f:45:c1:06:69:67:a4:
                    af:27:f4:72:d7:60:06:fb:2e:f6:a2:78:95:e6:a2:
                    eb:1b:5f:63:4d:14:13:cc:39:3b:00:cd:8e:c0:58:
                    93:ff:bd:8b:ed:72:d5:8e:38:44:cd:e3:4e:c1:46:
                    f8:28:0d:6b:ab:02:78:7f:9d:fe:5c:f7:eb:54:79:
                    60:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:DB:40:EF:2D:02:3E:58:67:13:DB:F1:99:41:E9:F2:AD:2B:78:E7
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373031303a3a2f34362d3438203d3e203238303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7010::/46

    Signature Algorithm: sha256WithRSAEncryption
         06:9e:b1:e2:57:a4:80:95:5a:e6:79:4f:fd:d4:f1:c1:0e:3a:
         5e:43:5f:af:c5:31:88:b4:dc:f1:0d:00:45:90:74:8e:25:82:
         13:d2:70:b6:74:86:d2:0d:15:3e:b2:c8:db:66:7a:2a:f8:27:
         a7:4c:2a:3b:47:52:9b:f1:c9:19:4a:50:26:13:12:87:2f:57:
         f9:39:c4:40:f1:a3:c3:38:d7:5a:cb:b1:eb:1f:6c:15:86:57:
         a7:b1:cc:37:e2:ac:19:d5:08:be:2b:0b:23:2f:15:3f:b0:51:
         55:b9:79:e4:d4:1f:90:e4:5a:d0:cc:39:69:06:99:08:98:0a:
         d5:ae:e7:ef:5f:7f:d6:91:25:cf:d3:37:f9:c1:af:5d:62:6a:
         19:c2:17:57:04:32:86:18:16:c4:28:40:3b:f7:88:02:6c:78:
         dc:f4:c0:e8:63:1e:ec:46:40:d6:8a:19:97:f4:86:8f:0d:58:
         26:52:f1:46:9d:6d:0c:be:a0:a0:18:d0:d9:5e:a0:f5:eb:4b:
         ca:44:b2:43:a9:35:13:67:dc:82:2f:03:28:2e:43:34:c3:31:
         c7:2c:6c:fc:a9:45:cc:99:c4:1c:32:61:69:e2:1d:7e:09:f1:
         6d:7f:56:41:71:01:9c:a9:9f:78:2c:17:e8:e8:e1:67:da:03:
         6f:d9:97:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:24:06 2026 by rpki-client