This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373031303a3a2f34362d3438203d3e203238303031.roa
File:                     323030313a313363373a373031303a3a2f34362d3438203d3e203238303031.roa (raw, json)
Hash identifier:          Lq7SWDw8cPXPMFYtnhoLwa23z+bS5gA/IUSx20kQUiY=
Subject key identifier:   C8:2C:B1:17:B2:23:43:DF:D0:C7:15:1A:55:60:30:28:7A:0C:73:D2
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       50748FAE2E57EEEBACF66A4A3BC38054F0FA34EA
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373031303a3a2f34362d3438203d3e203238303031.roa
Signing time:             Tue 06 Jan 2026 19:15:28 +0000
ROA not before:           Tue 06 Jan 2026 19:10:28 +0000
ROA not after:            Tue 05 Jan 2027 19:15:28 +0000
asID:                     28001
IP address blocks:        2001:13c7:7010::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:74:8f:ae:2e:57:ee:eb:ac:f6:6a:4a:3b:c3:80:54:f0:fa:34:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Jan  6 19:10:28 2026 GMT
            Not After : Jan  5 19:15:28 2027 GMT
        Subject: CN=C82CB117B22343DFD0C7151A556030287A0C73D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1d:2f:06:96:ce:36:06:9a:d0:ae:e5:c4:c7:
                    45:f3:ca:3b:08:d8:3a:2d:42:49:8e:fe:7d:cc:2b:
                    5b:7f:fc:48:84:a2:23:a3:18:a9:7c:6c:09:70:ae:
                    08:37:54:d7:2d:d5:89:ea:ba:25:7e:6f:11:a9:20:
                    90:13:20:c6:42:5a:53:f8:91:2a:56:bd:4a:5c:20:
                    89:ef:88:7d:8e:06:25:15:58:d8:72:21:be:de:c3:
                    01:27:b0:da:70:a9:d8:3a:96:4c:34:73:8e:29:98:
                    86:13:51:69:79:73:c9:54:72:2c:97:72:cd:ae:a4:
                    c4:f1:55:d8:9f:50:fd:46:fa:bd:94:1c:e0:95:95:
                    89:69:66:eb:0e:37:de:67:81:3b:b4:c5:59:a9:f7:
                    17:68:62:af:3a:3d:1a:ce:45:b8:c7:54:33:0e:fc:
                    50:56:07:f1:25:17:11:cc:6d:4b:95:87:58:d5:b1:
                    5e:05:80:3a:bc:64:fd:a4:38:3a:0a:2f:08:1b:5b:
                    fa:1d:b7:f8:ce:83:2a:7e:98:a0:ef:f6:d9:22:ac:
                    4e:e9:0e:90:b5:14:7d:ab:3a:e7:a2:6d:d4:d1:8e:
                    d4:23:9c:47:58:7d:a0:2c:93:7f:a7:67:37:7d:57:
                    26:d2:13:55:f4:76:07:7e:0f:bf:2c:f9:ce:b7:f7:
                    14:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:2C:B1:17:B2:23:43:DF:D0:C7:15:1A:55:60:30:28:7A:0C:73:D2
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373031303a3a2f34362d3438203d3e203238303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7010::/46

    Signature Algorithm: sha256WithRSAEncryption
         2f:d4:27:9c:6e:c8:51:d8:c7:a7:3c:b1:f5:ec:b4:f8:1c:69:
         b1:3e:da:ed:4d:df:6e:8c:11:40:20:67:31:22:59:4b:c4:79:
         21:e7:f1:a9:cc:63:8b:02:8a:8f:d3:36:7c:f4:b8:76:0a:09:
         89:a0:43:47:c4:1b:58:01:f5:d2:e0:7e:ab:a4:a4:ee:e0:3c:
         21:24:de:fa:22:50:a5:7e:27:1a:be:2b:09:60:73:3e:29:7e:
         a7:fe:31:9e:b7:33:4e:ec:b9:c6:4a:69:fa:fe:21:8a:8c:fb:
         f7:93:d3:a4:24:fa:8f:6b:49:fa:89:93:6b:3a:a4:e3:07:e0:
         35:3d:e1:61:f2:72:1b:a3:37:b7:22:5a:b6:a0:fd:ca:dd:82:
         d3:c1:9c:e7:d6:93:b2:7b:8f:69:89:f4:b6:fd:5d:e6:0d:fb:
         88:d6:1f:84:bb:f8:23:08:ae:cc:c0:db:3a:be:f9:2c:10:ed:
         9a:0c:ed:2a:3f:e2:3d:67:7f:37:47:29:03:b7:b5:90:1c:8d:
         56:28:4b:5b:1f:c4:c6:27:91:43:70:d5:44:e6:4c:d1:9d:99:
         8a:a1:87:20:72:57:fc:a5:48:c4:cc:da:ec:9d:f6:09:a1:ff:
         ec:b9:a9:a4:1d:dd:88:16:4f:4d:23:fb:85:17:81:48:36:c6:
         1c:e3:ef:99
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUUHSPri5X7uus9mpKO8OAVPD6NOowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY1NkI5MDExQUU4QzlBREREOTY4MDNERUNFMUQxRjkz
MDZEODFERTAeFw0yNjAxMDYxOTEwMjhaFw0yNzAxMDUxOTE1MjhaMDMxMTAvBgNV
BAMTKEM4MkNCMTE3QjIyMzQzREZEMEM3MTUxQTU1NjAzMDI4N0EwQzczRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLHS8Gls42BprQruXEx0XzyjsI
2DotQkmO/n3MK1t//EiEoiOjGKl8bAlwrgg3VNct1YnquiV+bxGpIJATIMZCWlP4
kSpWvUpcIInviH2OBiUVWNhyIb7ewwEnsNpwqdg6lkw0c44pmIYTUWl5c8lUciyX
cs2upMTxVdifUP1G+r2UHOCVlYlpZusON95ngTu0xVmp9xdoYq86PRrORbjHVDMO
/FBWB/ElFxHMbUuVh1jVsV4FgDq8ZP2kODoKLwgbW/odt/jOgyp+mKDv9tkirE7p
DpC1FH2rOueibdTRjtQjnEdYfaAsk3+nZzd9VybSE1X0dgd+D78s+c639xQVAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUyCyxF7IjQ9/QxxUaVWAwKHoMc9IwHwYDVR0j
BBgwFoAUH1a5ARroya3dloA97OHR+TBtgd4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81QUMzM0Q0QUM4NDQ0MzlEOTQ1RjJGQTlGN0JCNzhGMDY0
NjhFMjJDOEJGNTgzNEE1NjhDQzAwMDQ5QUMzQTdCLzAvMUY1NkI5MDExQUU4QzlB
REREOTY4MDNERUNFMUQxRjkzMDZEODFERS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRjU2QjkwMTFBRThDOUFEREQ5
NjgwM0RFQ0UxRDFGOTMwNkQ4MURFLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUFDMzNENEFDODQ0NDM5RDk0NUYyRkE5RjdCQjc4RjA2NDY4RTIyQzhC
RjU4MzRBNTY4Q0MwMDA0OUFDM0E3Qi8wLzMyMzAzMDMxM2EzMTMzNjMzNzNhMzcz
MDMxMzAzYTNhMmYzNDM2MmQzNDM4MjAzZDNlMjAzMjM4MzAzMDMxLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcCIAETx3AQMA0GCSqGSIb3DQEBCwUAA4IBAQAv1CecbshR2MenPLH17LT4HGmx
PtrtTd9ujBFAIGcxIllLxHkh5/GpzGOLAoqP0zZ89Lh2CgmJoENHxBtYAfXS4H6r
pKTu4DwhJN76IlClficavisJYHM+KX6n/jGetzNO7LnGSmn6/iGKjPv3k9OkJPqP
a0n6iZNrOqTjB+A1PeFh8nIboze3Ilq2oP3K3YLTwZzn1pOye49pifS2/V3mDfuI
1h+Eu/gjCK7MwNs6vvksEO2aDO0qP+I9Z383RykDt7WQHI1WKEtbH8TGJ5FDcNVE
5kzRnZmKoYcgclf8pUjEzNrsnfYJof/suamkHd2IFk9NI/uFF4FINsYc4++Z
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:18:29 2026 by rpki-client