This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/323830303a3831303a3a2f32382d3634203d3e203237373437.roa
File:                     323830303a3831303a3a2f32382d3634203d3e203237373437.roa (raw, json)
Hash identifier:          4x/2DhjQLBaKh+THy1MOYbZahBEQp5nNhTBNxIITx8U=
Subject key identifier:   95:36:88:CD:37:22:45:12:4E:C9:BD:F3:95:FE:B6:7F:2C:53:EC:95
Certificate issuer:       /CN=2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89
Certificate serial:       5DCB0B755F4DE4000123DA1F9868E6DBB8BE6D1F
Authority key identifier: 2C:09:96:B2:CA:51:69:CE:A2:CE:5B:99:EA:E2:4D:BE:CD:A3:7C:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/323830303a3831303a3a2f32382d3634203d3e203237373437.roa
Signing time:             Tue 06 Jan 2026 19:29:02 +0000
ROA not before:           Tue 06 Jan 2026 19:24:02 +0000
ROA not after:            Tue 05 Jan 2027 19:29:02 +0000
asID:                     27747
IP address blocks:        2800:810::/28 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 10:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:cb:0b:75:5f:4d:e4:00:01:23:da:1f:98:68:e6:db:b8:be:6d:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89
        Validity
            Not Before: Jan  6 19:24:02 2026 GMT
            Not After : Jan  5 19:29:02 2027 GMT
        Subject: CN=953688CD372245124EC9BDF395FEB67F2C53EC95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3d:4e:65:92:03:7f:36:61:2d:86:c1:ce:d5:
                    cc:4e:53:64:99:cd:2d:d0:70:bb:e8:05:a2:e5:18:
                    22:0a:6d:26:fb:ff:4f:9a:dd:52:6e:14:99:78:32:
                    1f:cb:2b:c4:41:d8:c0:95:7f:91:48:1e:3a:8e:70:
                    72:71:c9:79:cc:be:ca:8e:e0:d6:56:85:ae:b9:41:
                    36:c3:fc:42:4f:2e:cf:1c:30:2e:3b:57:b4:52:ef:
                    56:a4:06:56:60:cf:53:af:c0:f8:b9:8d:32:a9:7e:
                    04:ea:fc:cc:7b:5b:dc:b3:46:a4:c5:fe:55:ba:48:
                    82:58:ca:33:3c:40:ba:85:9e:13:c4:e3:16:20:d9:
                    e7:06:80:de:40:f2:3a:cc:09:de:40:b7:45:1b:c9:
                    7b:6f:b3:c1:a7:fb:23:47:a0:b3:c8:73:9e:61:30:
                    29:e2:47:cb:44:6d:61:44:1a:64:87:a5:49:99:a5:
                    ee:f6:89:fa:e1:4a:92:51:4c:e8:07:f7:2a:e7:de:
                    a8:ce:a4:50:6f:9c:6d:7f:f0:6f:ca:e5:f9:a7:56:
                    d6:e5:53:c8:11:7d:28:02:ec:6e:13:79:05:56:c8:
                    88:7d:c1:1f:97:80:c3:ed:35:b5:aa:08:8f:f0:90:
                    47:f5:e4:eb:23:16:8f:63:69:15:d1:88:c1:ad:97:
                    94:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:36:88:CD:37:22:45:12:4E:C9:BD:F3:95:FE:B6:7F:2C:53:EC:95
            X509v3 Authority Key Identifier:
                keyid:2C:09:96:B2:CA:51:69:CE:A2:CE:5B:99:EA:E2:4D:BE:CD:A3:7C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/323830303a3831303a3a2f32382d3634203d3e203237373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:810::/28

    Signature Algorithm: sha256WithRSAEncryption
         94:31:69:1f:16:66:a5:e4:24:6c:23:3f:6d:91:91:4e:87:86:
         03:54:f7:92:de:d9:7a:81:7c:c0:fa:98:eb:04:de:da:05:06:
         b1:82:d6:89:8f:42:c4:7c:8f:2e:1f:e4:75:1d:27:02:46:4f:
         00:75:82:06:6a:ad:b2:dc:5a:c0:79:ad:8f:a0:7f:ab:27:b2:
         fd:a7:65:35:2a:24:59:04:11:ea:77:66:ed:cb:7e:af:4b:de:
         58:67:68:d5:78:a6:9f:0d:03:56:d4:04:f5:d7:09:c9:ac:87:
         9c:ad:3c:1c:62:b2:9d:47:38:63:44:6e:65:aa:4f:74:ee:78:
         86:de:a0:aa:e6:dd:2d:7b:0a:6a:a6:40:86:a0:5b:81:d2:3b:
         d9:09:2a:0a:3f:3f:ae:b0:c8:bd:79:47:a6:e7:dd:63:3c:6d:
         eb:87:33:a9:69:58:7d:bb:47:c3:05:7a:6b:1c:7e:00:ce:9f:
         4e:6e:8c:28:9a:1c:37:ed:89:5b:7f:68:2a:45:57:41:42:fb:
         9e:a5:c4:43:f8:6f:11:af:7c:36:d6:68:e9:52:d3:f6:26:3e:
         28:62:fa:59:2b:e8:0d:09:0d:fc:16:54:a5:3f:2b:db:5a:6b:
         50:bc:95:48:3c:ea:ce:e3:b2:2b:51:b7:4a:60:51:aa:d4:9e:
         67:24:dc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 14:08:00 2026 by rpki-client