This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFB6520A3BD403E382DFCE7956B80C15F13A2C0F1B9B52DC4CF1FFD822F349C3/0/323830313a3131323a3a2f34302d3430203d3e203134303830.roa
File:                     323830313a3131323a3a2f34302d3430203d3e203134303830.roa (raw, json)
Hash identifier:          5rAyQWUS+wkZ8oURNKspn/TCnDeEuxbXDACMYlwUuus=
Subject key identifier:   2C:7F:A6:1F:13:28:0B:66:C6:DA:33:B7:43:3E:AF:53:18:97:57:CB
Certificate issuer:       /CN=6C02502E27FB7D2BA9B87DA566CB4D16F25D893E
Certificate serial:       520560E92F83DCCC0CA67CD4A9604F2AE3E2381C
Authority key identifier: 6C:02:50:2E:27:FB:7D:2B:A9:B8:7D:A5:66:CB:4D:16:F2:5D:89:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C02502E27FB7D2BA9B87DA566CB4D16F25D893E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFB6520A3BD403E382DFCE7956B80C15F13A2C0F1B9B52DC4CF1FFD822F349C3/0/323830313a3131323a3a2f34302d3430203d3e203134303830.roa
Signing time:             Tue 06 Jan 2026 20:52:22 +0000
ROA not before:           Tue 06 Jan 2026 20:47:22 +0000
ROA not after:            Tue 05 Jan 2027 20:52:22 +0000
asID:                     14080
IP address blocks:        2801:112::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFB6520A3BD403E382DFCE7956B80C15F13A2C0F1B9B52DC4CF1FFD822F349C3/0/6C02502E27FB7D2BA9B87DA566CB4D16F25D893E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFB6520A3BD403E382DFCE7956B80C15F13A2C0F1B9B52DC4CF1FFD822F349C3/0/6C02502E27FB7D2BA9B87DA566CB4D16F25D893E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C02502E27FB7D2BA9B87DA566CB4D16F25D893E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 13:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:05:60:e9:2f:83:dc:cc:0c:a6:7c:d4:a9:60:4f:2a:e3:e2:38:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C02502E27FB7D2BA9B87DA566CB4D16F25D893E
        Validity
            Not Before: Jan  6 20:47:22 2026 GMT
            Not After : Jan  5 20:52:22 2027 GMT
        Subject: CN=2C7FA61F13280B66C6DA33B7433EAF53189757CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:dd:5a:e3:66:18:dc:1e:66:87:72:12:e2:65:
                    a8:b0:6c:58:fd:df:27:53:cc:61:4f:74:c6:fa:06:
                    48:6b:06:61:f9:c7:0e:83:f4:5b:ce:d0:69:0b:e3:
                    79:a1:26:8e:46:08:1c:d0:07:b8:cd:f8:52:dc:44:
                    71:9e:05:a3:18:85:5d:8c:14:f6:e5:4b:ff:b9:10:
                    49:ac:44:ab:f2:1f:c7:44:55:c1:d0:78:6e:9a:2c:
                    b6:61:28:07:92:88:da:10:90:b4:76:24:c4:da:e0:
                    db:42:ca:76:db:56:61:86:62:ab:4c:7a:42:b9:a4:
                    38:34:cc:af:16:24:3f:e2:9e:37:28:2e:67:7a:c5:
                    51:7f:eb:1d:45:48:fd:70:10:6f:e6:20:25:9f:cb:
                    e6:f1:c9:ce:0d:3d:30:21:5d:8c:1c:4b:29:03:8b:
                    ad:81:45:2d:f1:dc:38:eb:ff:8c:fc:f1:62:e4:3f:
                    c5:02:21:d9:49:93:fe:c8:c2:fc:d4:96:f2:cc:2b:
                    d1:35:b8:ad:7e:59:f5:d6:ea:79:c9:d3:5c:5d:b6:
                    2b:fb:b7:9f:31:81:66:20:1a:be:58:43:80:42:c4:
                    ff:72:b1:bd:7b:10:0f:9c:78:f7:c4:4d:5f:bd:6d:
                    aa:bc:db:9d:71:f5:53:b4:2f:cf:b2:52:8c:41:73:
                    7d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:7F:A6:1F:13:28:0B:66:C6:DA:33:B7:43:3E:AF:53:18:97:57:CB
            X509v3 Authority Key Identifier:
                keyid:6C:02:50:2E:27:FB:7D:2B:A9:B8:7D:A5:66:CB:4D:16:F2:5D:89:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFB6520A3BD403E382DFCE7956B80C15F13A2C0F1B9B52DC4CF1FFD822F349C3/0/6C02502E27FB7D2BA9B87DA566CB4D16F25D893E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C02502E27FB7D2BA9B87DA566CB4D16F25D893E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFB6520A3BD403E382DFCE7956B80C15F13A2C0F1B9B52DC4CF1FFD822F349C3/0/323830313a3131323a3a2f34302d3430203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:112::/40

    Signature Algorithm: sha256WithRSAEncryption
         5c:b8:35:3e:a1:74:b1:2c:9b:66:e6:c9:9b:1d:c5:78:87:cb:
         4d:7e:4e:94:b5:55:0f:7b:cf:7e:41:65:b9:94:d9:32:ff:06:
         4d:6a:57:f1:3b:a2:25:53:2b:7e:ee:36:c2:ee:ad:49:9a:b4:
         7e:11:50:6a:df:86:b9:50:14:19:fd:d9:74:4d:7a:a6:39:3e:
         ca:14:52:cd:d8:db:48:30:32:be:42:b1:0a:0d:57:18:b1:9e:
         73:a6:f1:48:78:4c:72:59:4f:7b:11:a4:c4:f0:69:7a:f3:94:
         ed:be:9f:a4:4f:ef:c6:e4:5a:a6:cc:08:d2:5b:56:93:e5:a9:
         31:c8:c9:3f:05:70:e0:36:57:da:f1:b3:45:c8:88:be:3c:e4:
         10:95:a4:ff:41:c2:30:5c:63:fd:d5:e1:3f:c8:0c:48:a1:12:
         d6:e4:bb:1b:7a:88:f6:ec:3e:51:9c:9e:31:2c:17:4c:23:8c:
         a7:72:d5:f2:2d:c1:2e:2b:56:5f:43:f7:06:96:1e:f5:6f:50:
         1b:c5:12:eb:4f:59:09:1c:ff:ba:be:13:68:ea:85:83:79:30:
         c1:47:3d:e9:8c:02:64:b4:6a:06:8a:3f:4c:21:10:b7:a7:d7:
         7b:7d:a4:bf:cf:11:8d:22:c3:48:a1:10:c6:72:56:a6:f7:94:
         55:85:f0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:24:41 2026 by rpki-client