This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FC0B589F850E684378BA6014D00CE1F1D73964753ECC02ACC3FB899CE3645A3/0/323830303a6233303a3a2f33312d3334203d3e203237373430.roa
File:                     323830303a6233303a3a2f33312d3334203d3e203237373430.roa (raw, json)
Hash identifier:          EPzo4dwRybjjaClr7w200hhs3T+QwIQcif8uZJzkRmE=
Subject key identifier:   86:C7:C6:8F:C9:E9:9E:75:6F:B3:E8:FA:E0:92:8E:CF:2E:75:10:26
Certificate issuer:       /CN=C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1
Certificate serial:       10E3076D33E53C50B2A8D8AE9312FB72942F6DE5
Authority key identifier: C2:0B:1C:E4:6D:24:F9:B4:B4:1A:A6:CD:DD:9E:B9:6E:8B:23:C2:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FC0B589F850E684378BA6014D00CE1F1D73964753ECC02ACC3FB899CE3645A3/0/323830303a6233303a3a2f33312d3334203d3e203237373430.roa
Signing time:             Tue 06 Jan 2026 19:07:51 +0000
ROA not before:           Tue 06 Jan 2026 19:02:51 +0000
ROA not after:            Tue 05 Jan 2027 19:07:51 +0000
asID:                     27740
IP address blocks:        2800:b30::/31 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8FC0B589F850E684378BA6014D00CE1F1D73964753ECC02ACC3FB899CE3645A3/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8FC0B589F850E684378BA6014D00CE1F1D73964753ECC02ACC3FB899CE3645A3/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:e3:07:6d:33:e5:3c:50:b2:a8:d8:ae:93:12:fb:72:94:2f:6d:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1
        Validity
            Not Before: Jan  6 19:02:51 2026 GMT
            Not After : Jan  5 19:07:51 2027 GMT
        Subject: CN=86C7C68FC9E99E756FB3E8FAE0928ECF2E751026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ad:77:a1:b3:03:f5:a5:19:a5:72:66:45:ed:
                    d9:16:6f:5d:a9:b2:62:c8:aa:8e:45:09:66:3d:cf:
                    cd:c3:9d:0a:06:dc:26:1c:38:d3:6b:0b:ac:c8:01:
                    67:00:ec:3d:04:35:1d:61:13:32:cc:ff:f8:f6:54:
                    41:21:80:83:06:bf:06:fb:f9:89:1d:26:07:cd:2e:
                    af:ae:3e:39:61:9c:79:15:1d:dc:a2:4d:2e:a0:29:
                    4d:ba:d5:a6:4c:15:92:57:65:72:8a:24:e2:ac:fb:
                    e4:8f:1c:4b:7e:bf:6e:02:d1:da:dc:2b:30:b6:3d:
                    65:bd:03:d7:fb:56:8d:98:6e:3a:4d:61:82:5b:bf:
                    18:da:56:d5:86:b5:3d:e3:b5:32:0c:56:04:5b:d4:
                    1e:d1:3b:1f:95:5a:3d:05:bd:e1:f8:2d:c6:86:fa:
                    f3:44:83:4a:6a:28:bb:61:0e:53:be:82:17:e3:ff:
                    42:1c:d5:54:33:d4:c2:d7:ee:c4:e4:98:72:50:86:
                    ae:4c:3b:0e:60:1e:8c:c7:81:76:dc:e4:39:f9:41:
                    14:ee:73:ca:07:d7:dd:4f:0b:fa:f5:f8:17:f3:6c:
                    4e:b4:b1:6e:08:52:59:ee:af:a9:b6:5b:bf:e8:a3:
                    54:b9:47:47:74:db:38:85:17:11:18:63:74:43:2d:
                    2a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:C7:C6:8F:C9:E9:9E:75:6F:B3:E8:FA:E0:92:8E:CF:2E:75:10:26
            X509v3 Authority Key Identifier:
                keyid:C2:0B:1C:E4:6D:24:F9:B4:B4:1A:A6:CD:DD:9E:B9:6E:8B:23:C2:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FC0B589F850E684378BA6014D00CE1F1D73964753ECC02ACC3FB899CE3645A3/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FC0B589F850E684378BA6014D00CE1F1D73964753ECC02ACC3FB899CE3645A3/0/323830303a6233303a3a2f33312d3334203d3e203237373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b30::/31

    Signature Algorithm: sha256WithRSAEncryption
         00:50:62:02:0e:56:2a:5b:22:e5:36:51:9f:ec:d5:aa:e3:c2:
         02:78:54:01:c4:f5:23:29:61:ec:92:4c:39:60:3a:73:4c:66:
         5c:d0:22:83:67:f0:d1:49:2c:c5:a3:63:d1:5e:66:9b:4e:88:
         05:f6:b3:54:38:71:4f:19:6c:34:c9:4c:3d:9e:63:cf:b5:d9:
         76:30:4f:8d:76:5b:fc:49:b1:6e:17:18:b4:bd:d7:0f:11:82:
         f5:7e:bb:d2:94:23:1b:01:5e:3f:03:48:9c:c8:16:2d:fb:04:
         86:b9:63:5c:73:7b:f0:70:05:30:2d:61:7a:dc:5b:70:8b:bb:
         84:5c:aa:97:db:db:dc:96:bf:57:98:e7:9b:43:39:ed:24:ad:
         b4:aa:5a:09:8f:96:4e:9d:58:d6:48:28:b5:4e:e0:a6:fe:a9:
         63:28:c1:02:97:66:6a:fb:44:0c:75:de:6e:18:ef:ce:e9:fb:
         76:33:e5:af:a1:7b:0a:48:0a:09:ee:d3:f2:ef:2c:b7:78:5a:
         09:2e:c0:83:40:c6:a5:97:8a:8b:92:db:8c:04:9f:95:cf:2e:
         50:8d:88:b7:1d:2e:8f:b4:c4:ce:8d:de:ce:49:1d:91:0f:b0:
         e3:77:be:2a:c5:7c:25:19:d0:4a:d3:37:43:fc:71:14:97:70:
         31:7b:4f:4f
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUEOMHbTPlPFCyqNiukxL7cpQvbeUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzIwQjFDRTQ2RDI0RjlCNEI0MUFBNkNEREQ5RUI5NkU4
QjIzQzJCMTAeFw0yNjAxMDYxOTAyNTFaFw0yNzAxMDUxOTA3NTFaMDMxMTAvBgNV
BAMTKDg2QzdDNjhGQzlFOTlFNzU2RkIzRThGQUUwOTI4RUNGMkU3NTEwMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDArXehswP1pRmlcmZF7dkWb12p
smLIqo5FCWY9z83DnQoG3CYcONNrC6zIAWcA7D0ENR1hEzLM//j2VEEhgIMGvwb7
+YkdJgfNLq+uPjlhnHkVHdyiTS6gKU261aZMFZJXZXKKJOKs++SPHEt+v24C0drc
KzC2PWW9A9f7Vo2YbjpNYYJbvxjaVtWGtT3jtTIMVgRb1B7ROx+VWj0FveH4LcaG
+vNEg0pqKLthDlO+ghfj/0Ic1VQz1MLX7sTkmHJQhq5MOw5gHozHgXbc5Dn5QRTu
c8oH191PC/r1+BfzbE60sW4IUlnur6m2W7/oo1S5R0d02ziFFxEYY3RDLSppAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUhsfGj8npnnVvs+j64JKOzy51ECYwHwYDVR0j
BBgwFoAUwgsc5G0k+bS0GqbN3Z65bosjwrEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84RkMwQjU4OUY4NTBFNjg0Mzc4QkE2MDE0RDAwQ0UxRjFE
NzM5NjQ3NTNFQ0MwMkFDQzNGQjg5OUNFMzY0NUEzLzAvQzIwQjFDRTQ2RDI0RjlC
NEI0MUFBNkNEREQ5RUI5NkU4QjIzQzJCMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMjBCMUNFNDZEMjRGOUI0QjQx
QUE2Q0RERDlFQjk2RThCMjNDMkIxLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEZDMEI1ODlGODUwRTY4NDM3OEJBNjAxNEQwMENFMUYxRDczOTY0NzUz
RUNDMDJBQ0MzRkI4OTlDRTM2NDVBMy8wLzMyMzgzMDMwM2E2MjMzMzAzYTNhMmYz
MzMxMmQzMzM0MjAzZDNlMjAzMjM3MzczNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUBKAALMDANBgkq
hkiG9w0BAQsFAAOCAQEAAFBiAg5WKlsi5TZRn+zVquPCAnhUAcT1Iylh7JJMOWA6
c0xmXNAig2fw0UksxaNj0V5mm06IBfazVDhxTxlsNMlMPZ5jz7XZdjBPjXZb/Emx
bhcYtL3XDxGC9X670pQjGwFePwNInMgWLfsEhrljXHN78HAFMC1hetxbcIu7hFyq
l9vb3Ja/V5jnm0M57SSttKpaCY+WTp1Y1kgotU7gpv6pYyjBApdmavtEDHXebhjv
zun7djPlr6F7CkgKCe7T8u8st3haCS7Ag0DGpZeKi5LbjASflc8uUI2Itx0uj7TE
zo3ezkkdkQ+w43e+KsV8JRnQStM3Q/xxFJdwMXtPTw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:18:05 2026 by rpki-client