This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323830313a3a2f34382d3438203d3e203532323234.roa
File:                     323830313a3a2f34382d3438203d3e203532323234.roa (raw, json)
Hash identifier:          J3kT7CoJDvkNVx1C7Zg2tQOi/NktqRbo9xTJzleDuW4=
Subject key identifier:   3C:1A:27:A0:23:48:9E:A4:97:CA:69:CC:6D:ED:B9:18:D6:BE:D8:14
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       35F170948E01B3ED6EFE63D573AB2FBB44E7A52C
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323830313a3a2f34382d3438203d3e203532323234.roa
Signing time:             Tue 06 Jan 2026 19:15:36 +0000
ROA not before:           Tue 06 Jan 2026 19:10:36 +0000
ROA not after:            Tue 05 Jan 2027 19:15:36 +0000
asID:                     52224
IP address blocks:        2801::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Jan 2026 20:36:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:f1:70:94:8e:01:b3:ed:6e:fe:63:d5:73:ab:2f:bb:44:e7:a5:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Jan  6 19:10:36 2026 GMT
            Not After : Jan  5 19:15:36 2027 GMT
        Subject: CN=3C1A27A023489EA497CA69CC6DEDB918D6BED814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5c:71:3c:8c:7c:03:9e:85:40:ea:20:8e:bf:
                    74:4e:1b:18:c6:ad:ea:8f:e0:90:4b:44:ff:b2:7c:
                    5c:8d:57:18:9e:49:a2:04:38:ae:00:8b:3b:d0:42:
                    a9:81:08:3f:ac:d7:30:16:eb:23:fe:d0:d3:a7:c3:
                    6c:d4:7b:31:0b:05:35:10:d9:1f:7f:94:02:5d:f6:
                    6a:2e:ff:53:ef:0d:22:c2:d9:9a:0c:8b:c8:93:2f:
                    29:6f:38:e4:2b:11:ca:bf:8f:95:e2:3e:c1:1f:bc:
                    72:f9:67:6f:b4:cd:85:aa:cb:2e:9a:9b:c1:f5:fa:
                    0e:c9:81:7f:25:10:1c:b5:2f:87:17:97:f7:f3:07:
                    aa:9b:89:2f:d7:81:c8:56:eb:37:c6:24:a6:ef:db:
                    51:29:cd:13:af:98:45:51:a6:ef:39:70:a8:09:b8:
                    2a:78:da:81:b4:e8:e5:ca:73:f2:e6:d2:ed:7e:5b:
                    56:ce:68:a2:8c:80:fe:0c:7d:49:9e:df:9a:2e:7a:
                    3b:83:f7:2f:05:1e:94:87:6c:74:f3:c7:ea:2d:22:
                    fa:a7:3c:dd:6c:b0:21:44:86:7e:8c:f7:45:13:c2:
                    61:c9:81:9d:80:6a:bd:66:cd:bd:5e:69:7f:65:b5:
                    73:33:f0:5e:27:3c:3b:2a:5f:67:cd:82:54:0e:b2:
                    e6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:1A:27:A0:23:48:9E:A4:97:CA:69:CC:6D:ED:B9:18:D6:BE:D8:14
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323830313a3a2f34382d3438203d3e203532323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801::/48

    Signature Algorithm: sha256WithRSAEncryption
         d4:97:00:cb:1c:a3:22:05:37:7e:f2:09:c8:75:60:87:ec:e0:
         0a:a4:97:b2:80:82:b3:2f:f5:8e:4f:96:3a:6f:43:cb:f4:1b:
         9b:e1:cb:6b:5a:c9:1b:25:51:98:f6:67:fe:68:a5:fe:05:9f:
         62:67:91:a1:f9:91:35:45:52:70:71:81:60:c9:3f:6b:66:df:
         b1:ec:28:57:f6:4a:41:08:d2:87:0d:04:52:fa:3a:1a:29:04:
         aa:b4:ea:90:bb:ae:78:05:6c:66:c6:54:52:6c:03:62:69:21:
         84:3d:44:05:2a:e0:90:99:ce:16:ce:59:fa:bf:07:1c:7a:7a:
         62:17:27:3e:69:f4:a2:69:31:66:62:17:18:c2:cd:98:db:80:
         60:9c:74:a0:46:30:a0:02:ce:2d:96:3e:60:00:b8:f6:27:c6:
         58:38:ff:a4:46:39:0f:0c:6e:a0:79:11:21:09:6f:b2:44:79:
         17:ce:1d:bb:b3:04:7e:39:ca:39:59:b6:a4:d6:ad:1b:c8:6b:
         37:3b:af:d7:85:30:af:6e:e6:a6:bc:af:de:c3:67:ad:07:a0:
         00:03:c1:0b:f6:dd:52:a1:e3:33:33:a1:a5:ad:5e:70:3c:ad:
         c2:e2:b9:2a:83:40:a6:c3:0f:81:b8:af:96:71:d4:12:b4:eb:
         34:1b:41:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 18:18:35 2026 by rpki-client