This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/323830303a6234303a3a2f33322d3438203d3e20323632323230.roa
File:                     323830303a6234303a3a2f33322d3438203d3e20323632323230.roa (raw, json)
Hash identifier:          6BTpNZz6dRmhsGo0vFJvhRH2NbrFAuXiL9FZLt80sHM=
Subject key identifier:   AD:82:BC:73:EE:33:A0:0C:37:51:76:59:40:7F:2B:3B:0A:21:1C:66
Certificate issuer:       /CN=24283CA1133BF90D2EB2CC52CE1E0804803B0C85
Certificate serial:       5D5A92F5F5235427C557024328FE595D0628D5D6
Authority key identifier: 24:28:3C:A1:13:3B:F9:0D:2E:B2:CC:52:CE:1E:08:04:80:3B:0C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/323830303a6234303a3a2f33322d3438203d3e20323632323230.roa
Signing time:             Tue 06 Jan 2026 19:08:16 +0000
ROA not before:           Tue 06 Jan 2026 19:03:16 +0000
ROA not after:            Tue 05 Jan 2027 19:08:16 +0000
asID:                     262220
IP address blocks:        2800:b40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:5a:92:f5:f5:23:54:27:c5:57:02:43:28:fe:59:5d:06:28:d5:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24283CA1133BF90D2EB2CC52CE1E0804803B0C85
        Validity
            Not Before: Jan  6 19:03:16 2026 GMT
            Not After : Jan  5 19:08:16 2027 GMT
        Subject: CN=AD82BC73EE33A00C37517659407F2B3B0A211C66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:74:57:d0:43:d3:12:1e:78:1d:62:fa:bb:7e:
                    2b:6d:43:b6:9b:ad:0a:76:72:9e:3c:dc:0b:64:fe:
                    d3:56:a6:77:c6:26:ae:09:3b:87:55:e2:31:65:0a:
                    b4:21:30:5a:b8:c9:b2:08:21:5e:34:0b:dd:5f:af:
                    4b:df:56:22:88:77:b8:80:80:8f:76:f3:ea:27:5c:
                    e5:22:1c:24:21:32:60:f6:d9:38:02:46:c2:60:5f:
                    41:a1:21:cc:e7:09:e6:00:9c:bd:b5:d9:25:cd:73:
                    b4:36:71:ee:f3:f8:73:e4:72:e2:4f:0f:39:46:14:
                    d1:b3:10:65:1d:41:f1:bd:e0:dc:0a:9c:3b:68:10:
                    73:12:12:9e:9f:a7:b2:fa:4f:bd:3c:53:1e:b9:d7:
                    f7:e0:30:e0:32:d7:22:4a:1c:f1:2d:2a:32:cc:fc:
                    b4:1b:c3:39:73:ed:1f:10:0b:cc:73:e8:77:d5:a1:
                    06:f8:cd:34:3a:31:fa:e1:8a:b1:b3:6f:7c:4a:25:
                    fb:6d:2c:7d:dd:6b:c2:a1:00:55:76:15:71:ef:c5:
                    a5:c1:96:70:6b:a6:33:bb:5e:bb:05:31:87:8c:87:
                    6a:46:06:38:46:d9:ee:81:75:dd:42:da:c2:23:9d:
                    0c:37:8c:9d:34:e0:39:75:d0:35:21:bf:da:34:36:
                    b0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:82:BC:73:EE:33:A0:0C:37:51:76:59:40:7F:2B:3B:0A:21:1C:66
            X509v3 Authority Key Identifier:
                keyid:24:28:3C:A1:13:3B:F9:0D:2E:B2:CC:52:CE:1E:08:04:80:3B:0C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/323830303a6234303a3a2f33322d3438203d3e20323632323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:99:10:fb:30:45:a4:b5:69:7b:83:96:3c:41:aa:69:2f:38:
         8c:a7:c3:2c:41:63:52:16:3c:13:64:54:02:2a:32:12:15:45:
         2f:63:69:64:de:f6:e3:a4:4a:2f:a8:9b:0d:bc:9e:1d:a3:57:
         95:dd:cd:27:ae:f4:53:c6:55:10:a5:7a:6e:4e:9c:10:ce:04:
         e4:5f:d9:0e:36:1d:27:1c:26:30:1a:af:25:19:68:2b:eb:6f:
         fc:27:c2:b0:2f:6e:e3:c0:53:5b:c8:5c:27:7d:8e:c3:09:50:
         e7:d6:30:1b:2b:53:a3:49:cd:6b:48:88:b3:e8:42:38:94:ce:
         c9:a2:2d:c7:01:73:be:e4:bd:99:da:c7:49:2c:df:18:de:0a:
         d2:73:95:ba:2b:37:47:44:1c:d6:9d:1b:05:9b:c4:33:be:a0:
         0d:48:74:d2:c3:7c:4c:e0:7f:3e:8b:d1:5b:f8:71:9e:b1:8e:
         c1:3e:a0:be:f0:55:30:e0:fa:67:99:30:1d:75:aa:d5:dd:48:
         b9:b1:fb:45:12:b5:cc:b0:19:1f:ab:09:f5:70:c2:72:4a:be:
         4b:0d:7d:7f:82:2b:66:33:79:3a:e7:90:53:47:57:7d:46:fc:
         25:2a:64:ed:78:85:a4:7b:3c:e9:4d:67:61:fa:8e:af:c4:6d:
         fb:39:c8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:00:29 2026 by rpki-client