This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323830313a3162383a3a2f34342d3438203d3e203238303030.roa
File:                     323830313a3162383a3a2f34342d3438203d3e203238303030.roa (raw, json)
Hash identifier:          KPb56kc8QUpVFoF7qOPLBYmt6ezb3AdgUnXOanFuETE=
Subject key identifier:   0E:CA:B8:AB:69:96:08:67:58:3E:70:15:40:F6:B4:E1:C1:6E:EE:E8
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       19D7B1BFC1D12C9A5CA4FD77FD35D351928CDAFA
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323830313a3162383a3a2f34342d3438203d3e203238303030.roa
Signing time:             Tue 06 Jan 2026 19:15:29 +0000
ROA not before:           Tue 06 Jan 2026 19:10:29 +0000
ROA not after:            Tue 05 Jan 2027 19:15:29 +0000
asID:                     28000
IP address blocks:        2801:1b8::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:d7:b1:bf:c1:d1:2c:9a:5c:a4:fd:77:fd:35:d3:51:92:8c:da:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Jan  6 19:10:29 2026 GMT
            Not After : Jan  5 19:15:29 2027 GMT
        Subject: CN=0ECAB8AB69960867583E701540F6B4E1C16EEEE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:96:49:73:4d:a6:1b:bf:10:f5:80:cd:f5:9a:
                    b3:86:ac:8c:2a:dd:96:6a:ef:c8:57:de:db:7b:64:
                    ee:a1:dc:ab:47:f4:69:6a:63:06:df:e9:90:e7:e7:
                    c5:46:b4:73:c5:30:2c:ce:94:ac:bf:cd:04:b7:dc:
                    c7:2c:cb:dd:f0:44:ec:51:c5:d6:44:8a:38:57:95:
                    6c:e5:80:98:e1:e3:0e:32:9b:08:ee:35:67:cd:fb:
                    75:41:43:1b:e7:27:22:ee:87:9a:b2:b2:2b:cb:eb:
                    4a:e9:8e:f7:3d:5d:0a:57:c4:04:ee:cc:38:72:a3:
                    52:f5:56:8a:1f:5b:f5:fe:60:16:cf:e1:b0:2d:d5:
                    ef:ec:3d:ed:f8:9a:42:86:2e:58:0a:6d:1e:7e:75:
                    09:a0:ba:32:21:36:85:4e:03:a2:50:18:ac:7c:08:
                    f7:7c:65:b6:58:66:39:c0:77:b0:80:8f:fe:14:69:
                    0e:dd:8b:f1:f3:ea:d8:bd:be:35:a2:76:50:40:01:
                    10:72:6f:81:e5:b5:41:58:00:79:db:03:66:47:67:
                    ae:22:87:17:eb:ce:2d:8f:7b:43:c0:5d:b5:f3:34:
                    ee:11:b5:7e:b4:3d:2d:06:4d:e7:8c:f7:79:b2:40:
                    34:12:46:f3:88:c3:d1:a6:8c:86:f9:06:e6:83:ef:
                    02:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:CA:B8:AB:69:96:08:67:58:3E:70:15:40:F6:B4:E1:C1:6E:EE:E8
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323830313a3162383a3a2f34342d3438203d3e203238303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b8::/44

    Signature Algorithm: sha256WithRSAEncryption
         05:0d:c0:9e:c9:80:2b:ad:73:67:10:44:20:ec:4d:ca:39:86:
         c2:9b:91:79:d7:40:54:7f:f6:e6:5a:9f:3e:28:20:f4:60:00:
         7d:c1:97:b2:45:fd:2b:12:6d:d1:34:16:de:17:c4:95:bd:b3:
         ab:dd:08:83:3b:a3:94:e5:35:b2:e6:0b:6e:43:06:a1:0d:bc:
         8f:a4:ca:46:78:9b:46:07:05:8f:de:8e:e5:d3:c7:fc:a7:b7:
         47:c6:3b:5f:42:ad:27:8a:cc:2b:21:bb:b6:02:61:8b:db:79:
         c1:60:24:84:0c:7a:4e:2b:84:0e:52:b3:d9:5e:2b:18:65:9a:
         16:18:f9:31:4b:cf:69:7c:db:3a:ab:0c:a7:7c:fc:0e:b8:84:
         30:fe:9d:92:76:79:dd:90:f9:63:e0:a6:51:9e:99:27:0d:b1:
         58:f5:a8:01:aa:bb:eb:68:70:2e:0d:51:21:aa:52:83:c8:ff:
         92:c3:4c:3f:37:01:57:b6:44:b2:a9:99:41:ca:be:19:31:5d:
         44:a9:e0:7f:c8:8f:ca:39:5c:ec:90:a8:3a:8f:62:55:74:50:
         6c:94:7a:30:95:b2:5d:19:ea:7c:07:cd:6a:85:8e:ee:90:2a:
         92:9f:3e:32:16:ce:b5:ee:68:3f:a4:68:7e:bb:30:4e:28:d8:
         78:a9:44:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:47:55 2026 by rpki-client