This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/323030313a313366303a3a2f33322d3332203d3e203132303636.roa
File:                     323030313a313366303a3a2f33322d3332203d3e203132303636.roa (raw, json)
Hash identifier:          WlgWmElNm0W/YuUIhdTzj/oNHmtraLDNpU5YCMOcDzY=
Subject key identifier:   1A:77:12:C7:C0:A5:38:7B:D0:D9:E6:DF:3A:C7:14:80:68:A7:94:79
Certificate issuer:       /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial:       2120B0E9FDD6ABB03574A18806A97A4E0AAD16BE
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/323030313a313366303a3a2f33322d3332203d3e203132303636.roa
Signing time:             Tue 06 Jan 2026 19:39:56 +0000
ROA not before:           Tue 06 Jan 2026 19:34:56 +0000
ROA not after:            Tue 05 Jan 2027 19:39:56 +0000
asID:                     12066
IP address blocks:        2001:13f0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:20:b0:e9:fd:d6:ab:b0:35:74:a1:88:06:a9:7a:4e:0a:ad:16:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
        Validity
            Not Before: Jan  6 19:34:56 2026 GMT
            Not After : Jan  5 19:39:56 2027 GMT
        Subject: CN=1A7712C7C0A5387BD0D9E6DF3AC7148068A79479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:08:02:2e:b0:13:27:7d:68:dc:4b:bd:c4:da:
                    73:cb:bf:74:31:02:e3:36:2d:e0:6c:a9:6f:e2:c4:
                    07:15:1f:8a:63:c9:36:71:6a:37:aa:1e:73:c4:0a:
                    be:41:6a:11:39:ac:d9:19:d0:32:83:eb:3f:60:a4:
                    ae:ef:f3:6c:ce:32:03:df:38:c9:95:63:fe:84:4b:
                    ca:03:31:a6:93:ac:e8:2e:85:5c:36:b8:e8:7f:69:
                    e4:65:b5:7e:0e:1e:84:64:7d:0f:3b:af:cf:94:40:
                    b9:b9:e4:28:a7:b6:44:a2:1a:67:5f:c0:05:d5:9e:
                    51:6f:a9:ac:2f:38:48:3e:53:10:1a:5d:0d:83:8b:
                    3a:d1:7a:19:52:4a:f4:a5:d7:d4:7d:24:0a:6a:ef:
                    92:8f:4d:22:2d:ba:0e:6c:d7:f0:ae:41:36:b4:fb:
                    2c:80:27:98:0b:ac:e0:fd:29:3f:2c:f4:31:51:22:
                    d3:54:23:7d:7f:b7:37:7a:3a:8a:e4:6c:a0:5c:1e:
                    67:66:dc:81:ba:18:15:8c:dc:c0:78:0e:98:1d:54:
                    28:3c:09:ad:39:2f:a9:84:ba:9d:95:a5:45:f9:ba:
                    e2:8a:e5:59:7d:d7:d9:ce:3a:63:9b:56:14:d6:3a:
                    a4:8e:1f:df:1b:19:6e:f6:76:fc:d2:07:c7:4a:ed:
                    09:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:77:12:C7:C0:A5:38:7B:D0:D9:E6:DF:3A:C7:14:80:68:A7:94:79
            X509v3 Authority Key Identifier:
                keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/323030313a313366303a3a2f33322d3332203d3e203132303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:12:ea:ad:f2:d4:1b:a6:bd:75:26:4e:f3:c9:ad:eb:ea:34:
         74:72:5f:83:ae:40:d4:ac:cd:02:cf:52:ff:7a:56:c8:2c:4c:
         55:52:a5:47:74:bb:c9:71:f1:1c:c2:8b:7e:82:ec:45:8c:8c:
         c5:fd:c3:ed:36:55:fb:70:20:c8:5a:32:25:ab:b6:2e:e2:94:
         04:42:8b:13:45:cc:dc:93:32:fe:ea:ba:ae:df:22:ad:04:33:
         6a:d5:4e:a6:5d:7c:71:6a:0f:a1:b7:5a:38:87:f6:13:06:3e:
         2a:16:30:a9:69:e8:51:c8:2d:d8:2c:37:5f:93:3d:bb:06:da:
         81:93:84:54:9f:d7:28:f1:86:01:2d:da:77:62:27:6f:11:61:
         b6:58:ae:de:0b:59:60:03:ac:1d:b7:a2:5c:ee:cd:b5:8a:cb:
         5f:52:73:5c:b6:4c:08:a1:2a:8c:6e:37:9c:70:fe:66:01:41:
         c8:57:a8:1d:37:18:da:1b:b1:aa:a5:c9:7c:23:7f:2e:1d:c9:
         91:d8:0a:91:44:c9:09:35:00:ef:54:58:b1:c8:67:e7:61:5a:
         86:0f:6d:69:a5:ff:f7:df:f0:2c:9d:6d:ef:af:df:8d:f1:67:
         cf:3b:32:dd:55:92:f6:1c:2c:5c:aa:75:21:04:2f:84:3e:ae:
         ab:cd:b5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:58:23 2026 by rpki-client