This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/96FA1A6F3557EB53A08D692D2969844387E7AB240685FDE727EFB11737B3DBD2/0/323830313a31303a3a2f34352d3438203d3e203238303638.roa
File:                     323830313a31303a3a2f34352d3438203d3e203238303638.roa (raw, json)
Hash identifier:          16xFaLTjafeu9HaxyY+rs9ldlxWIyAbLpnAufcE3JUU=
Subject key identifier:   5B:B5:44:A7:F6:96:25:D5:33:DE:CC:41:A7:F0:00:6D:AE:8D:49:C1
Certificate issuer:       /CN=F3DADC8E304E127082BB1169FB59CD8EA1814053
Certificate serial:       2CF67C2D00F3BDEC66C9E13AD0F35CFA434E3C04
Authority key identifier: F3:DA:DC:8E:30:4E:12:70:82:BB:11:69:FB:59:CD:8E:A1:81:40:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3DADC8E304E127082BB1169FB59CD8EA1814053.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/96FA1A6F3557EB53A08D692D2969844387E7AB240685FDE727EFB11737B3DBD2/0/323830313a31303a3a2f34352d3438203d3e203238303638.roa
Signing time:             Tue 06 Jan 2026 19:29:35 +0000
ROA not before:           Tue 06 Jan 2026 19:24:35 +0000
ROA not after:            Tue 05 Jan 2027 19:29:35 +0000
asID:                     28068
IP address blocks:        2801:10::/45 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/96FA1A6F3557EB53A08D692D2969844387E7AB240685FDE727EFB11737B3DBD2/0/F3DADC8E304E127082BB1169FB59CD8EA1814053.crl
                          rsync://repository.lacnic.net/rpki/lacnic/96FA1A6F3557EB53A08D692D2969844387E7AB240685FDE727EFB11737B3DBD2/0/F3DADC8E304E127082BB1169FB59CD8EA1814053.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3DADC8E304E127082BB1169FB59CD8EA1814053.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 19:43:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:f6:7c:2d:00:f3:bd:ec:66:c9:e1:3a:d0:f3:5c:fa:43:4e:3c:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3DADC8E304E127082BB1169FB59CD8EA1814053
        Validity
            Not Before: Jan  6 19:24:35 2026 GMT
            Not After : Jan  5 19:29:35 2027 GMT
        Subject: CN=5BB544A7F69625D533DECC41A7F0006DAE8D49C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d3:49:ca:bf:59:c2:3d:a6:08:74:ec:03:79:
                    cf:32:b0:32:f3:85:40:ff:9f:3d:9e:33:2c:76:78:
                    7b:00:dc:3b:b9:83:f2:75:5b:92:45:04:f0:8a:91:
                    52:9f:ff:11:e2:d0:cb:1f:32:d9:1f:1e:b2:ed:8b:
                    be:c1:7b:17:a8:27:08:a8:68:c0:56:a2:da:c5:a5:
                    0f:98:b0:39:26:86:e9:71:b4:6d:af:9a:57:4a:4e:
                    04:72:e4:6f:99:d2:ef:bd:07:10:26:98:77:07:03:
                    38:80:d8:ad:6d:e9:d0:50:fc:19:1f:6c:80:af:93:
                    7d:e5:06:20:33:ee:9c:e4:95:98:b3:69:fe:3c:16:
                    41:93:2e:e1:83:e6:1e:c3:8d:97:0a:69:0b:d2:56:
                    47:61:ea:b3:2a:86:c2:14:aa:23:be:7f:ea:15:c0:
                    84:32:c5:41:af:94:6f:47:e8:fb:a0:ee:4e:aa:39:
                    f4:48:b3:b2:e8:cb:52:50:84:28:56:42:f8:b4:37:
                    74:65:3f:0f:b5:f8:4f:6a:4b:89:35:25:9d:9a:53:
                    dc:eb:8d:fd:4b:ec:c9:c3:97:29:f4:37:e0:b5:da:
                    e5:66:0e:ac:1d:c6:eb:a8:68:f8:15:42:f9:36:ac:
                    46:50:da:82:21:38:d8:11:7e:ca:d3:0d:fb:df:30:
                    b9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B5:44:A7:F6:96:25:D5:33:DE:CC:41:A7:F0:00:6D:AE:8D:49:C1
            X509v3 Authority Key Identifier:
                keyid:F3:DA:DC:8E:30:4E:12:70:82:BB:11:69:FB:59:CD:8E:A1:81:40:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/96FA1A6F3557EB53A08D692D2969844387E7AB240685FDE727EFB11737B3DBD2/0/F3DADC8E304E127082BB1169FB59CD8EA1814053.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3DADC8E304E127082BB1169FB59CD8EA1814053.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/96FA1A6F3557EB53A08D692D2969844387E7AB240685FDE727EFB11737B3DBD2/0/323830313a31303a3a2f34352d3438203d3e203238303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:10::/45

    Signature Algorithm: sha256WithRSAEncryption
         6b:0c:49:0b:69:af:9d:98:93:ea:93:cb:2d:a0:41:66:95:ce:
         d6:60:4e:c8:c0:b8:cc:62:87:8b:0a:e1:13:8a:8b:42:fa:f9:
         e4:09:b0:0b:07:10:f5:9a:49:1c:20:04:97:6f:10:af:bd:38:
         b9:f2:40:41:a9:2a:c3:0b:da:77:1b:a8:21:bb:c6:da:40:67:
         5d:e6:25:e1:bb:38:de:5b:3c:48:8a:0e:d4:62:05:c7:34:e7:
         c3:cb:fa:2c:5d:dd:30:b4:0a:0c:e8:f9:12:b7:05:46:47:0b:
         1f:f6:c7:33:d1:f1:fd:f1:08:ed:f9:72:85:08:09:6e:42:12:
         f3:fc:ba:03:bc:c2:6a:93:0f:1e:1c:af:d4:ca:05:e6:22:ad:
         af:1b:e1:a4:9f:95:d5:8e:1a:88:dd:50:85:28:52:c6:1c:b2:
         93:4d:ed:ee:6e:ff:48:48:7c:61:90:4b:1d:f0:8c:15:22:59:
         c5:24:0f:b7:22:b8:72:ab:27:2f:a7:d2:bb:e8:03:6b:be:ca:
         30:73:8f:b0:25:52:43:8c:28:7a:77:74:4d:8d:ef:56:45:c4:
         58:1d:2c:50:58:90:fc:25:8c:6e:25:d0:1c:d1:a8:03:88:b1:
         03:68:38:33:0b:eb:a5:52:7e:0a:aa:81:23:49:bd:4c:f0:53:
         03:a8:22:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:55 2026 by rpki-client