This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/323830303a3561303a3a2f33322d3335203d3e203237373932.roa
File:                     323830303a3561303a3a2f33322d3335203d3e203237373932.roa (raw, json)
Hash identifier:          0xx6hriJxqFwFbwN6QJ41kK+pEJk7CySW0Xiw1ezlCU=
Subject key identifier:   B4:3B:AC:57:E9:10:94:63:7E:69:E5:33:62:9E:21:89:A3:F2:EE:E2
Certificate issuer:       /CN=AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6
Certificate serial:       22EE752D0F83894EC859801A94593DA0DE8D0C02
Authority key identifier: AF:3F:9A:6B:D1:49:BB:2C:B7:62:7F:3B:2E:5B:74:29:C5:5B:7B:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/323830303a3561303a3a2f33322d3335203d3e203237373932.roa
Signing time:             Tue 06 Jan 2026 19:15:43 +0000
ROA not before:           Tue 06 Jan 2026 19:10:43 +0000
ROA not after:            Tue 05 Jan 2027 19:15:43 +0000
asID:                     27792
IP address blocks:        2800:5a0::/32 maxlen: 35
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:ee:75:2d:0f:83:89:4e:c8:59:80:1a:94:59:3d:a0:de:8d:0c:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6
        Validity
            Not Before: Jan  6 19:10:43 2026 GMT
            Not After : Jan  5 19:15:43 2027 GMT
        Subject: CN=B43BAC57E91094637E69E533629E2189A3F2EEE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:15:a1:59:5f:cf:26:40:ff:65:a8:56:e3:03:
                    a8:2d:21:33:cf:ee:ce:c3:5b:62:a3:14:6c:eb:10:
                    d7:f8:b9:3f:0d:74:1e:42:19:20:c1:14:39:b6:8b:
                    bb:f2:45:3e:48:29:0d:a2:7a:34:24:32:db:a7:37:
                    be:17:8a:7f:41:9a:74:12:73:10:64:5f:c4:86:77:
                    c3:a8:56:9d:7a:bd:52:26:11:38:54:ff:80:4f:f6:
                    11:aa:c6:5d:fc:18:ac:3a:41:aa:c5:d4:f1:52:f6:
                    58:2a:22:61:d5:d7:e7:ed:f7:8b:33:dc:4a:7c:95:
                    59:46:a2:fe:f3:72:43:96:e8:13:aa:b4:f1:4b:12:
                    f2:f1:6d:6e:9e:6e:6d:1f:95:17:21:08:07:d7:dd:
                    70:cc:55:b4:5e:0e:0f:e1:98:4a:7c:a2:9d:d7:50:
                    c1:89:ff:54:34:54:ee:85:72:fe:90:92:7b:53:4b:
                    f9:0c:07:7d:5d:6e:bb:12:04:23:44:8a:a2:e5:b0:
                    09:30:8d:c8:f7:b9:c0:6d:0a:74:08:15:a4:d7:b7:
                    e6:36:8a:ac:4e:48:21:5d:66:31:2f:bd:ce:98:32:
                    df:ed:b4:f8:16:b1:35:de:f9:e2:5d:8c:75:a5:10:
                    4c:7f:03:89:1a:93:2c:a7:24:6f:3b:e5:0f:39:a4:
                    ba:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:3B:AC:57:E9:10:94:63:7E:69:E5:33:62:9E:21:89:A3:F2:EE:E2
            X509v3 Authority Key Identifier:
                keyid:AF:3F:9A:6B:D1:49:BB:2C:B7:62:7F:3B:2E:5B:74:29:C5:5B:7B:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/323830303a3561303a3a2f33322d3335203d3e203237373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:5a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:0c:05:15:ff:b4:29:ca:47:50:3b:33:2c:7e:ec:46:a6:23:
         70:bd:24:60:2f:80:82:29:01:49:02:d3:76:94:cf:6c:ca:6d:
         d1:36:46:2d:1a:bd:16:cb:3a:76:3a:08:fe:c7:38:55:b1:58:
         ba:d2:6f:15:8b:f5:8f:f1:70:13:be:a3:14:b2:33:a8:b1:43:
         7b:3e:9c:b5:54:dd:25:2b:94:37:4c:83:19:ae:5d:67:86:6e:
         10:98:d2:6f:23:04:c0:01:b4:37:8e:e4:09:9b:9b:c9:db:da:
         2b:3d:2b:ad:fd:0c:ff:eb:41:5f:bb:b7:d0:9b:47:51:88:3b:
         4f:6c:f4:df:4f:b2:ae:ae:3c:b5:44:93:05:71:b5:a5:6a:a1:
         0a:a0:fa:38:c9:ae:86:e4:a9:a8:ae:cb:66:df:f5:c4:42:96:
         79:ec:a2:96:f2:81:4f:90:5a:df:9a:18:9f:a3:9f:7c:7c:13:
         33:f9:cc:1c:af:54:ff:19:e5:80:47:d9:c0:34:32:a2:52:67:
         e9:d5:f9:cc:77:79:d3:18:70:43:ce:77:26:87:f0:ea:54:1a:
         73:a7:67:04:9b:54:f0:aa:5d:88:a2:8d:11:e4:d7:c4:de:b5:
         fe:25:f2:17:00:31:60:80:ae:c8:5a:56:f7:3a:62:ed:12:b8:
         81:2e:89:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:53:48 2026 by rpki-client