This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58327713E57A0487B013AB0B77C72DAB065574E92EB8E0C3B99DF1C5FA80A637/0/323830303a3366303a343030323a3a2f34372d3438203d3e203135313639.roa
File:                     323830303a3366303a343030323a3a2f34372d3438203d3e203135313639.roa (raw, json)
Hash identifier:          GWfL5+1/hYaumArXCnxBeeoyY+mGh7aNMgxmtHMlsDM=
Subject key identifier:   F0:08:1E:C0:C2:C3:52:09:39:CC:3C:69:92:A1:80:E4:CF:94:0C:86
Certificate issuer:       /CN=4A21846C50E619589B04A94E63EC535C6F77C010
Certificate serial:       02A0D0AB219F5C6EACCD97423AE279DF0DEBBB2D
Authority key identifier: 4A:21:84:6C:50:E6:19:58:9B:04:A9:4E:63:EC:53:5C:6F:77:C0:10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A21846C50E619589B04A94E63EC535C6F77C010.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58327713E57A0487B013AB0B77C72DAB065574E92EB8E0C3B99DF1C5FA80A637/0/323830303a3366303a343030323a3a2f34372d3438203d3e203135313639.roa
Signing time:             Tue 06 Jan 2026 19:13:00 +0000
ROA not before:           Tue 06 Jan 2026 19:08:00 +0000
ROA not after:            Tue 05 Jan 2027 19:13:00 +0000
asID:                     15169
IP address blocks:        2800:3f0:4002::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/58327713E57A0487B013AB0B77C72DAB065574E92EB8E0C3B99DF1C5FA80A637/0/4A21846C50E619589B04A94E63EC535C6F77C010.crl
                          rsync://repository.lacnic.net/rpki/lacnic/58327713E57A0487B013AB0B77C72DAB065574E92EB8E0C3B99DF1C5FA80A637/0/4A21846C50E619589B04A94E63EC535C6F77C010.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A21846C50E619589B04A94E63EC535C6F77C010.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 01:41:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:a0:d0:ab:21:9f:5c:6e:ac:cd:97:42:3a:e2:79:df:0d:eb:bb:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A21846C50E619589B04A94E63EC535C6F77C010
        Validity
            Not Before: Jan  6 19:08:00 2026 GMT
            Not After : Jan  5 19:13:00 2027 GMT
        Subject: CN=F0081EC0C2C3520939CC3C6992A180E4CF940C86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:65:20:a9:bd:46:45:f3:b2:55:8d:3b:66:0a:
                    00:01:ce:69:c8:1d:57:2b:f2:e5:7a:d6:c3:1f:ca:
                    8e:91:1d:08:c5:6e:82:31:e8:7f:05:91:7c:01:f7:
                    8d:59:b7:ac:10:ce:99:d6:27:8c:61:a9:28:90:f1:
                    f0:1e:6e:cc:f5:19:3f:ee:b8:ff:f4:ee:dc:34:21:
                    dc:bc:dd:85:b9:41:38:bc:53:64:c3:9b:43:8c:d2:
                    7c:14:83:41:77:bb:93:dc:20:71:2a:94:2c:0e:71:
                    11:73:8d:64:63:33:1c:0d:d6:e4:d6:dc:e8:61:95:
                    ed:dc:5a:1f:67:6e:b1:98:4d:a4:33:fd:54:96:0b:
                    08:92:29:b3:52:e2:b5:dd:6e:e4:84:64:19:a1:65:
                    be:af:16:82:60:cf:48:ee:a3:9e:a5:14:60:a6:98:
                    58:8a:50:4c:95:ca:fb:8d:f4:cd:80:9c:47:68:1c:
                    b1:78:e9:13:7f:4a:58:d4:f4:5d:a0:23:3b:29:42:
                    ea:92:de:e6:e1:74:ee:43:e8:86:01:11:48:95:a5:
                    eb:f4:4f:df:1d:8f:1e:33:e1:ef:b6:92:48:4f:ba:
                    0f:14:11:83:9a:39:7c:2b:34:17:f2:8c:ab:7e:79:
                    c5:12:55:c8:3f:0c:86:65:c0:87:2b:62:c7:f9:e0:
                    2a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:08:1E:C0:C2:C3:52:09:39:CC:3C:69:92:A1:80:E4:CF:94:0C:86
            X509v3 Authority Key Identifier:
                keyid:4A:21:84:6C:50:E6:19:58:9B:04:A9:4E:63:EC:53:5C:6F:77:C0:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58327713E57A0487B013AB0B77C72DAB065574E92EB8E0C3B99DF1C5FA80A637/0/4A21846C50E619589B04A94E63EC535C6F77C010.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A21846C50E619589B04A94E63EC535C6F77C010.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58327713E57A0487B013AB0B77C72DAB065574E92EB8E0C3B99DF1C5FA80A637/0/323830303a3366303a343030323a3a2f34372d3438203d3e203135313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:3f0:4002::/47

    Signature Algorithm: sha256WithRSAEncryption
         52:88:f4:4f:b8:c9:21:f9:10:10:df:3d:37:0d:31:10:53:11:
         72:5b:e4:52:ab:50:07:ce:9d:ec:91:cb:b3:26:9b:70:5f:79:
         4c:18:6c:13:53:08:00:43:65:4d:bd:c4:22:d2:eb:69:ec:1e:
         2d:92:76:d7:73:3c:7b:89:ff:48:ad:8f:6f:3f:83:df:e9:df:
         1f:23:6d:30:eb:57:95:ee:1d:3e:1b:f9:63:8e:8e:1f:84:4d:
         cd:1b:fa:85:cd:72:27:97:e3:80:ac:ca:9c:e8:f4:65:f5:63:
         bd:dc:45:5c:56:70:c7:09:ef:0f:37:e5:b0:f8:b2:5a:85:bf:
         82:a6:ca:5a:4d:a2:cb:94:d9:49:c8:69:b7:5a:da:00:63:bc:
         97:1b:8e:bb:e3:f3:ec:cd:72:db:31:45:2b:15:ac:f8:07:c3:
         f5:a9:a1:f5:36:1c:f2:08:78:0e:08:57:9b:d3:7a:22:7f:f3:
         67:ee:3b:1f:6f:84:bd:11:4e:9f:bf:db:91:2c:68:e1:75:89:
         9a:87:ef:52:0e:83:69:19:b6:4a:15:62:5a:02:7f:ea:c0:8c:
         f7:f9:72:52:70:ec:5e:f2:93:b6:ae:c6:a8:e6:99:a6:78:e1:
         73:bf:e6:7b:65:04:ad:6f:4c:5a:33:07:80:5f:f5:1c:1c:0d:
         93:45:e8:49
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUAqDQqyGfXG6szZdCOuJ53w3ruy0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEEyMTg0NkM1MEU2MTk1ODlCMDRBOTRFNjNFQzUzNUM2
Rjc3QzAxMDAeFw0yNjAxMDYxOTA4MDBaFw0yNzAxMDUxOTEzMDBaMDMxMTAvBgNV
BAMTKEYwMDgxRUMwQzJDMzUyMDkzOUNDM0M2OTkyQTE4MEU0Q0Y5NDBDODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkZSCpvUZF87JVjTtmCgABzmnI
HVcr8uV61sMfyo6RHQjFboIx6H8FkXwB941Zt6wQzpnWJ4xhqSiQ8fAebsz1GT/u
uP/07tw0Idy83YW5QTi8U2TDm0OM0nwUg0F3u5PcIHEqlCwOcRFzjWRjMxwN1uTW
3Ohhle3cWh9nbrGYTaQz/VSWCwiSKbNS4rXdbuSEZBmhZb6vFoJgz0juo56lFGCm
mFiKUEyVyvuN9M2AnEdoHLF46RN/SljU9F2gIzspQuqS3ubhdO5D6IYBEUiVpev0
T98djx4z4e+2kkhPug8UEYOaOXwrNBfyjKt+ecUSVcg/DIZlwIcrYsf54CovAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQU8AgewMLDUgk5zDxpkqGA5M+UDIYwHwYDVR0j
BBgwFoAUSiGEbFDmGVibBKlOY+xTXG93wBAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81ODMyNzcxM0U1N0EwNDg3QjAxM0FCMEI3N0M3MkRBQjA2
NTU3NEU5MkVCOEUwQzNCOTlERjFDNUZBODBBNjM3LzAvNEEyMTg0NkM1MEU2MTk1
ODlCMDRBOTRFNjNFQzUzNUM2Rjc3QzAxMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80QTIxODQ2QzUwRTYxOTU4OUIw
NEE5NEU2M0VDNTM1QzZGNzdDMDEwLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTgzMjc3MTNFNTdBMDQ4N0IwMTNBQjBCNzdDNzJEQUIwNjU1NzRFOTJF
QjhFMEMzQjk5REYxQzVGQTgwQTYzNy8wLzMyMzgzMDMwM2EzMzY2MzAzYTM0MzAz
MDMyM2EzYTJmMzQzNzJkMzQzODIwM2QzZTIwMzEzNTMxMzYzOS5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ASgAA/BAAjANBgkqhkiG9w0BAQsFAAOCAQEAUoj0T7jJIfkQEN89Nw0xEFMRclvk
UqtQB86d7JHLsyabcF95TBhsE1MIAENlTb3EItLraeweLZJ213M8e4n/SK2Pbz+D
3+nfHyNtMOtXle4dPhv5Y46OH4RNzRv6hc1yJ5fjgKzKnOj0ZfVjvdxFXFZwxwnv
DzflsPiyWoW/gqbKWk2iy5TZSchpt1raAGO8lxuOu+Pz7M1y2zFFKxWs+AfD9amh
9TYc8gh4DghXm9N6In/zZ+47H2+EvRFOn7/bkSxo4XWJmofvUg6DaRm2ShViWgJ/
6sCM9/lyUnDsXvKTtq7GqOaZpnjhc7/me2UErW9MWjMHgF/1HBwNk0XoSQ==
-----END CERTIFICATE-----
Generated at Tue Jan 13 22:15:08 2026 by rpki-client