This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323830313a3162383a31303a3a2f34342d3438203d3e20333934333533.roa
File:                     323830313a3162383a31303a3a2f34342d3438203d3e20333934333533.roa (raw, json)
Hash identifier:          nHQk8Hy6suDy4h8zPDHB/xES3GFsl2+0gnNH+7Zq+h8=
Subject key identifier:   63:CD:FB:A6:BB:04:0F:A3:89:AC:88:9E:1A:35:58:EA:79:67:C3:1B
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       1B4B1D303536D07D63B4CEF819322F7BD61055B2
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323830313a3162383a31303a3a2f34342d3438203d3e20333934333533.roa
Signing time:             Tue 06 Jan 2026 19:15:35 +0000
ROA not before:           Tue 06 Jan 2026 19:10:35 +0000
ROA not after:            Tue 05 Jan 2027 19:15:35 +0000
asID:                     394353
IP address blocks:        2801:1b8:10::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:4b:1d:30:35:36:d0:7d:63:b4:ce:f8:19:32:2f:7b:d6:10:55:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Jan  6 19:10:35 2026 GMT
            Not After : Jan  5 19:15:35 2027 GMT
        Subject: CN=63CDFBA6BB040FA389AC889E1A3558EA7967C31B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:14:8c:57:ef:7b:d7:fd:7c:13:09:32:70:dd:
                    8f:8b:ba:33:4d:ca:1d:b2:4a:a4:4d:e4:2f:da:ae:
                    55:17:90:04:05:ca:e3:93:88:14:a8:e8:7b:90:e8:
                    2d:af:7a:f9:14:6f:6d:56:7c:6d:fb:42:79:27:fe:
                    e6:9c:11:44:f1:0a:40:c8:38:4b:c2:4e:af:c9:79:
                    ce:13:de:52:41:e3:09:c2:66:3c:df:c8:52:16:21:
                    ca:a4:ff:cb:40:e7:85:c1:ac:c7:52:5a:55:bc:1c:
                    4e:60:97:5a:1c:0b:0b:a5:5d:2c:81:d2:a4:66:7a:
                    30:8a:f0:91:e0:13:8e:85:3e:7e:21:b2:c3:d4:04:
                    2f:c0:51:a8:36:4f:53:24:d0:b6:a0:43:0b:b3:bf:
                    96:f9:09:51:60:80:1c:46:a1:b2:5b:0b:65:6f:57:
                    c4:c7:c5:10:d5:4e:e1:66:fa:cd:db:e9:9a:41:04:
                    cd:0c:c8:2d:44:92:fd:18:ee:55:96:b4:a8:6a:2d:
                    44:e7:23:11:4a:d2:a1:75:49:a5:bd:0f:f7:0b:e1:
                    de:b9:ce:61:72:ab:bd:70:2d:94:25:94:d3:a7:91:
                    c5:cb:85:c9:57:dd:17:69:fe:b0:0b:07:43:4c:5a:
                    b0:5a:b6:af:d5:50:b6:19:4c:fe:20:b3:71:7a:1e:
                    2d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:CD:FB:A6:BB:04:0F:A3:89:AC:88:9E:1A:35:58:EA:79:67:C3:1B
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323830313a3162383a31303a3a2f34342d3438203d3e20333934333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b8:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         ce:c9:dd:dd:52:73:6f:1d:a3:c3:2b:93:c9:09:86:a8:4b:3a:
         73:7f:8b:71:de:58:b4:74:f4:73:2e:0a:b6:af:19:23:54:58:
         9d:bd:9e:10:f7:5b:16:28:32:7c:f6:b3:63:b4:c8:05:28:69:
         7d:42:e2:d9:cd:c2:c3:d1:48:ae:d1:a9:86:26:d3:33:0a:6b:
         6c:59:57:1a:89:58:34:28:a5:92:eb:c6:07:b3:12:db:0b:15:
         e0:ed:5e:f0:e9:00:79:43:53:78:b5:54:fb:3e:88:09:39:1a:
         6c:0c:a9:0f:35:25:66:e0:f9:6a:a2:48:0b:f5:ad:73:fe:13:
         6f:c1:7a:b0:04:8b:90:0c:19:1c:2c:18:05:56:3b:6f:a0:ae:
         24:63:4f:31:ed:ea:2d:22:c5:3f:df:1f:ea:6f:31:37:86:1c:
         21:1b:00:05:a7:8e:82:38:99:84:5f:a4:6e:61:e2:36:8c:94:
         2b:ea:0c:0a:ad:ad:9a:9c:4e:11:b2:50:a1:37:79:be:c0:98:
         64:ab:e3:42:32:20:d1:5d:74:6e:82:26:8a:d0:91:1f:87:0a:
         8d:09:01:cc:2a:b6:ad:6f:57:02:89:5c:68:62:76:00:ec:9d:
         38:44:38:5a:a7:3c:13:65:82:13:10:ff:95:a7:43:47:67:b8:
         7b:24:04:4a
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUG0sdMDU20H1jtM74GTIve9YQVbIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY1NkI5MDExQUU4QzlBREREOTY4MDNERUNFMUQxRjkz
MDZEODFERTAeFw0yNjAxMDYxOTEwMzVaFw0yNzAxMDUxOTE1MzVaMDMxMTAvBgNV
BAMTKDYzQ0RGQkE2QkIwNDBGQTM4OUFDODg5RTFBMzU1OEVBNzk2N0MzMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcFIxX73vX/XwTCTJw3Y+LujNN
yh2ySqRN5C/arlUXkAQFyuOTiBSo6HuQ6C2vevkUb21WfG37Qnkn/uacEUTxCkDI
OEvCTq/Jec4T3lJB4wnCZjzfyFIWIcqk/8tA54XBrMdSWlW8HE5gl1ocCwulXSyB
0qRmejCK8JHgE46FPn4hssPUBC/AUag2T1Mk0LagQwuzv5b5CVFggBxGobJbC2Vv
V8THxRDVTuFm+s3b6ZpBBM0MyC1Ekv0Y7lWWtKhqLUTnIxFK0qF1SaW9D/cL4d65
zmFyq71wLZQllNOnkcXLhclX3Rdp/rALB0NMWrBatq/VULYZTP4gs3F6Hi0RAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUY837prsED6OJrIieGjVY6nlnwxswHwYDVR0j
BBgwFoAUH1a5ARroya3dloA97OHR+TBtgd4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81QUMzM0Q0QUM4NDQ0MzlEOTQ1RjJGQTlGN0JCNzhGMDY0
NjhFMjJDOEJGNTgzNEE1NjhDQzAwMDQ5QUMzQTdCLzAvMUY1NkI5MDExQUU4QzlB
REREOTY4MDNERUNFMUQxRjkzMDZEODFERS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRjU2QjkwMTFBRThDOUFEREQ5
NjgwM0RFQ0UxRDFGOTMwNkQ4MURFLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUFDMzNENEFDODQ0NDM5RDk0NUYyRkE5RjdCQjc4RjA2NDY4RTIyQzhC
RjU4MzRBNTY4Q0MwMDA0OUFDM0E3Qi8wLzMyMzgzMDMxM2EzMTYyMzgzYTMxMzAz
YTNhMmYzNDM0MmQzNDM4MjAzZDNlMjAzMzM5MzQzMzM1MzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQo
AQG4ABAwDQYJKoZIhvcNAQELBQADggEBAM7J3d1Sc28do8Mrk8kJhqhLOnN/i3He
WLR09HMuCravGSNUWJ29nhD3WxYoMnz2s2O0yAUoaX1C4tnNwsPRSK7RqYYm0zMK
a2xZVxqJWDQopZLrxgezEtsLFeDtXvDpAHlDU3i1VPs+iAk5GmwMqQ81JWbg+Wqi
SAv1rXP+E2/BerAEi5AMGRwsGAVWO2+griRjTzHt6i0ixT/fH+pvMTeGHCEbAAWn
joI4mYRfpG5h4jaMlCvqDAqtrZqcThGyUKE3eb7AmGSr40IyINFddG6CJorQkR+H
Co0JAcwqtq1vVwKJXGhidgDsnThEOFqnPBNlghMQ/5WnQ0dnuHskBEo=
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:19:15 2026 by rpki-client