This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CBF11D4426A352F0FBE1D67B244829E9D61ADFD306CF807FED92D5011E51E8C6/0/323830313a31303a353030303a3a2f34382d3438203d3e20323634373437.roa
File:                     323830313a31303a353030303a3a2f34382d3438203d3e20323634373437.roa (raw, json)
Hash identifier:          g3BKTI1+L2iZbHErNsKlDoDUrT+E20HuzKEg+SZvfl4=
Subject key identifier:   5C:80:0A:DD:0B:99:51:FA:BA:91:C4:63:55:EB:1D:D4:B4:6D:60:FD
Certificate issuer:       /CN=B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6
Certificate serial:       5833C76EA6CF4D74810504AC71E7912ABC1A2DA5
Authority key identifier: B9:C8:69:5C:8A:81:EF:89:CF:9F:A7:B4:2E:15:9E:98:A8:EC:0B:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CBF11D4426A352F0FBE1D67B244829E9D61ADFD306CF807FED92D5011E51E8C6/0/323830313a31303a353030303a3a2f34382d3438203d3e20323634373437.roa
Signing time:             Tue 06 Jan 2026 19:17:07 +0000
ROA not before:           Tue 06 Jan 2026 19:12:07 +0000
ROA not after:            Tue 05 Jan 2027 19:17:07 +0000
asID:                     264747
IP address blocks:        2801:10:5000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CBF11D4426A352F0FBE1D67B244829E9D61ADFD306CF807FED92D5011E51E8C6/0/B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CBF11D4426A352F0FBE1D67B244829E9D61ADFD306CF807FED92D5011E51E8C6/0/B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 06:45:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:33:c7:6e:a6:cf:4d:74:81:05:04:ac:71:e7:91:2a:bc:1a:2d:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6
        Validity
            Not Before: Jan  6 19:12:07 2026 GMT
            Not After : Jan  5 19:17:07 2027 GMT
        Subject: CN=5C800ADD0B9951FABA91C46355EB1DD4B46D60FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4c:4e:f7:61:7a:d4:93:18:07:72:ce:d4:49:
                    3d:6b:cd:f4:d6:65:9c:3c:08:09:6a:5a:f4:8b:f2:
                    8f:eb:bc:e4:71:4a:79:2c:03:9a:fa:6e:dd:7a:e4:
                    d0:78:91:d1:df:0e:fe:f9:a1:e6:e8:2c:32:a5:03:
                    53:9a:d4:bc:0c:50:f2:64:4d:c8:26:d2:83:83:0b:
                    26:de:63:f5:88:f3:94:ef:23:67:41:6b:63:4f:1d:
                    cb:11:2b:41:93:d7:a7:d5:0f:9c:c9:b2:11:e0:81:
                    64:b0:bf:d8:ab:7b:63:57:cc:63:03:14:3f:78:08:
                    dd:e1:18:b9:4f:72:10:c4:13:96:14:80:02:8b:e0:
                    7e:b2:1c:93:4f:da:bc:11:59:23:ca:7b:4f:05:80:
                    ac:6d:f9:6b:16:92:49:1c:30:3f:08:ee:18:dc:36:
                    8b:5a:86:f6:18:9d:4f:dc:36:80:6d:2d:10:e0:a5:
                    4b:fc:27:3a:32:14:04:e8:2e:d5:56:69:2d:bf:1c:
                    0d:7d:d7:9a:2b:8d:bf:49:32:cd:c8:e6:4a:22:b4:
                    cd:50:66:c8:1e:c1:ef:39:e8:e5:60:23:a4:98:40:
                    ab:70:a5:03:d6:c5:59:0d:8e:65:bd:df:35:c0:05:
                    e4:a2:c5:24:6a:4a:a3:be:b2:4e:3e:f8:6b:75:2e:
                    53:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:80:0A:DD:0B:99:51:FA:BA:91:C4:63:55:EB:1D:D4:B4:6D:60:FD
            X509v3 Authority Key Identifier:
                keyid:B9:C8:69:5C:8A:81:EF:89:CF:9F:A7:B4:2E:15:9E:98:A8:EC:0B:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CBF11D4426A352F0FBE1D67B244829E9D61ADFD306CF807FED92D5011E51E8C6/0/B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CBF11D4426A352F0FBE1D67B244829E9D61ADFD306CF807FED92D5011E51E8C6/0/323830313a31303a353030303a3a2f34382d3438203d3e20323634373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:10:5000::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:f4:51:37:4d:0b:12:39:eb:25:24:7d:8d:27:86:4f:06:86:
         2b:ca:e5:6f:ee:27:61:5a:f8:74:2f:5f:b7:a3:3e:5e:1a:be:
         c3:d9:06:35:88:5a:7c:d8:18:4b:36:36:34:d6:8a:48:38:6c:
         78:c3:48:4f:40:3d:2c:ad:53:3c:26:af:1f:8a:da:3b:06:c6:
         b0:87:42:7d:76:ad:4e:87:37:39:77:61:b6:24:63:6b:a6:48:
         f6:b9:bf:f6:d4:65:9d:52:53:43:76:11:e9:b2:29:5a:b7:32:
         44:3a:06:76:cd:58:86:78:96:3c:5a:b2:35:4a:3c:b4:4b:d4:
         48:c8:76:31:16:ac:25:fe:55:45:9d:c8:47:01:56:78:ea:7b:
         63:ba:25:41:32:53:6f:63:37:92:71:e2:c6:da:c3:ee:87:60:
         f7:04:84:bd:c5:b9:4d:c1:a1:09:af:64:3d:08:ce:56:f0:79:
         9d:f8:05:f4:ae:3a:8a:9b:bf:db:40:e9:b3:07:70:73:50:58:
         1a:a1:41:a0:6c:3f:91:58:85:67:c2:b0:96:ec:4b:bd:8a:ab:
         8e:0b:9c:2c:94:7d:fd:de:78:04:1b:cd:bf:a9:5f:36:1e:c2:
         74:1c:a8:b7:1b:e0:b8:0a:ce:be:b3:e7:6f:fe:55:ec:09:19:
         75:34:4d:84
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUWDPHbqbPTXSBBQSsceeRKrwaLaUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlDODY5NUM4QTgxRUY4OUNGOUZBN0I0MkUxNTlFOThB
OEVDMEJCNjAeFw0yNjAxMDYxOTEyMDdaFw0yNzAxMDUxOTE3MDdaMDMxMTAvBgNV
BAMTKDVDODAwQUREMEI5OTUxRkFCQTkxQzQ2MzU1RUIxREQ0QjQ2RDYwRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDTE73YXrUkxgHcs7UST1rzfTW
ZZw8CAlqWvSL8o/rvORxSnksA5r6bt165NB4kdHfDv75oeboLDKlA1Oa1LwMUPJk
Tcgm0oODCybeY/WI85TvI2dBa2NPHcsRK0GT16fVD5zJshHggWSwv9ire2NXzGMD
FD94CN3hGLlPchDEE5YUgAKL4H6yHJNP2rwRWSPKe08FgKxt+WsWkkkcMD8I7hjc
NotahvYYnU/cNoBtLRDgpUv8JzoyFAToLtVWaS2/HA1915orjb9JMs3I5koitM1Q
Zsgewe856OVgI6SYQKtwpQPWxVkNjmW93zXABeSixSRqSqO+sk4++Gt1LlPrAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUXIAK3QuZUfq6kcRjVesd1LRtYP0wHwYDVR0j
BBgwFoAUuchpXIqB74nPn6e0LhWemKjsC7YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DQkYxMUQ0NDI2QTM1MkYwRkJFMUQ2N0IyNDQ4MjlFOUQ2
MUFERkQzMDZDRjgwN0ZFRDkyRDUwMTFFNTFFOEM2LzAvQjlDODY5NUM4QTgxRUY4
OUNGOUZBN0I0MkUxNTlFOThBOEVDMEJCNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COUM4Njk1QzhBODFFRjg5Q0Y5
RkE3QjQyRTE1OUU5OEE4RUMwQkI2LmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0JGMTFENDQyNkEzNTJGMEZCRTFENjdCMjQ0ODI5RTlENjFBREZEMzA2
Q0Y4MDdGRUQ5MkQ1MDExRTUxRThDNi8wLzMyMzgzMDMxM2EzMTMwM2EzNTMwMzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzNDM3MzQzNy5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgBABBQADANBgkqhkiG9w0BAQsFAAOCAQEALfRRN00LEjnrJSR9jSeGTwaGK8rl
b+4nYVr4dC9ft6M+Xhq+w9kGNYhafNgYSzY2NNaKSDhseMNIT0A9LK1TPCavH4ra
OwbGsIdCfXatToc3OXdhtiRja6ZI9rm/9tRlnVJTQ3YR6bIpWrcyRDoGds1YhniW
PFqyNUo8tEvUSMh2MRasJf5VRZ3IRwFWeOp7Y7olQTJTb2M3knHixtrD7odg9wSE
vcW5TcGhCa9kPQjOVvB5nfgF9K46ipu/20Dpswdwc1BYGqFBoGw/kViFZ8KwluxL
vYqrjgucLJR9/d54BBvNv6lfNh7CdByotxvguArOvrPnb/5V7AkZdTRNhA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:57:37 2026 by rpki-client