This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D5BDC4006B2D7EA9E59D54B452005C51A260DD47CC6CABA7D577D1CE2D13801/0/323830313a31663a373030303a3a2f34382d3438203d3e203532333138.roa
File:                     323830313a31663a373030303a3a2f34382d3438203d3e203532333138.roa (raw, json)
Hash identifier:          zuhRQ1jAJ3J0WP/wK5HVNSelQnu6+3kZxU8lpzzCyhA=
Subject key identifier:   C1:2B:E5:57:DF:A9:BE:23:B8:67:3B:37:FB:26:25:3E:C2:D2:D9:C7
Certificate issuer:       /CN=3802AD95B7CACA97DDF17AEBD1AAA914EE988E98
Certificate serial:       5E7C9C94DE29D5F53ED19B1B63CD0E25E700AED1
Authority key identifier: 38:02:AD:95:B7:CA:CA:97:DD:F1:7A:EB:D1:AA:A9:14:EE:98:8E:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3802AD95B7CACA97DDF17AEBD1AAA914EE988E98.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D5BDC4006B2D7EA9E59D54B452005C51A260DD47CC6CABA7D577D1CE2D13801/0/323830313a31663a373030303a3a2f34382d3438203d3e203532333138.roa
Signing time:             Tue 06 Jan 2026 19:15:48 +0000
ROA not before:           Tue 06 Jan 2026 19:10:48 +0000
ROA not after:            Tue 05 Jan 2027 19:15:48 +0000
asID:                     52318
IP address blocks:        2801:1f:7000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D5BDC4006B2D7EA9E59D54B452005C51A260DD47CC6CABA7D577D1CE2D13801/0/3802AD95B7CACA97DDF17AEBD1AAA914EE988E98.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D5BDC4006B2D7EA9E59D54B452005C51A260DD47CC6CABA7D577D1CE2D13801/0/3802AD95B7CACA97DDF17AEBD1AAA914EE988E98.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3802AD95B7CACA97DDF17AEBD1AAA914EE988E98.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:7c:9c:94:de:29:d5:f5:3e:d1:9b:1b:63:cd:0e:25:e7:00:ae:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3802AD95B7CACA97DDF17AEBD1AAA914EE988E98
        Validity
            Not Before: Jan  6 19:10:48 2026 GMT
            Not After : Jan  5 19:15:48 2027 GMT
        Subject: CN=C12BE557DFA9BE23B8673B37FB26253EC2D2D9C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:26:ce:75:96:84:8c:c8:19:4e:5e:7c:0d:87:
                    7a:cd:29:d2:3a:65:18:09:af:c6:2b:4c:9c:b3:bb:
                    bb:7c:3f:d8:c9:8a:66:28:87:c8:4d:45:91:a9:a9:
                    f6:55:32:d1:a6:fa:fc:fa:68:3c:54:e9:1d:d0:1e:
                    3b:01:11:3f:a6:c1:ac:75:30:24:2e:46:b2:6b:e9:
                    0f:08:3b:02:1a:b2:7f:6e:29:ba:0e:46:21:94:0c:
                    b1:b6:e5:31:65:30:bc:30:e8:d9:c5:d1:87:c4:18:
                    3a:e3:1b:02:9e:c5:7c:50:85:f3:46:d2:08:4a:17:
                    d3:e4:5c:4d:3a:20:18:28:cb:7d:f8:76:08:66:9a:
                    10:11:30:ae:cf:13:86:41:da:65:fe:5e:69:6d:04:
                    21:34:b3:e6:c1:2c:4c:ca:50:9d:7b:24:61:00:2f:
                    e7:c6:14:08:03:49:df:fe:fe:3f:65:68:a1:76:d2:
                    32:d5:13:23:25:30:d1:de:02:67:db:82:aa:0d:dd:
                    0d:b8:53:87:22:77:1c:04:5d:28:b0:18:b8:5d:a9:
                    46:02:3f:1b:e3:c4:bd:34:7a:74:ec:80:dc:23:64:
                    6e:70:e5:50:2d:04:93:2e:94:2a:3b:f4:ea:6d:3c:
                    1a:8f:0b:6b:e9:e4:c4:ce:89:9b:60:74:b7:c2:4c:
                    46:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:2B:E5:57:DF:A9:BE:23:B8:67:3B:37:FB:26:25:3E:C2:D2:D9:C7
            X509v3 Authority Key Identifier:
                keyid:38:02:AD:95:B7:CA:CA:97:DD:F1:7A:EB:D1:AA:A9:14:EE:98:8E:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D5BDC4006B2D7EA9E59D54B452005C51A260DD47CC6CABA7D577D1CE2D13801/0/3802AD95B7CACA97DDF17AEBD1AAA914EE988E98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3802AD95B7CACA97DDF17AEBD1AAA914EE988E98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D5BDC4006B2D7EA9E59D54B452005C51A260DD47CC6CABA7D577D1CE2D13801/0/323830313a31663a373030303a3a2f34382d3438203d3e203532333138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f:7000::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:73:58:2f:17:94:bc:41:8c:8a:b9:ae:bb:c3:25:6c:94:2e:
         30:68:2f:ce:c8:9a:1e:18:20:1f:8d:b1:14:8b:14:80:e8:b7:
         18:01:91:3f:81:fa:69:f3:57:59:c0:ed:c6:02:88:e3:0a:0b:
         a8:a8:82:bf:66:cf:f4:70:3d:46:d8:11:37:21:1b:04:b9:aa:
         01:d1:7d:f8:53:8e:03:4d:09:14:6f:14:b6:61:71:f8:7c:5a:
         37:e7:7e:80:0f:6e:ea:bf:f3:34:6f:33:dc:c7:e9:f5:0a:cf:
         b2:8d:08:50:80:a2:68:32:b7:50:1e:5d:1f:e9:17:7b:b0:13:
         ba:76:fa:3b:ac:8c:99:aa:cc:1a:09:04:89:c0:17:40:b9:c2:
         e4:94:3d:9a:53:87:3b:60:ea:91:0c:93:68:27:b2:59:49:de:
         65:9a:20:f8:ff:55:e9:2a:c7:f1:1e:5c:be:41:01:38:2c:f5:
         5b:1b:98:60:21:58:12:5b:9f:14:76:fa:cf:9b:c1:17:76:ad:
         5b:b0:e2:01:00:25:68:da:3a:16:5e:0a:e0:ed:24:52:6e:59:
         74:3e:74:3f:14:7f:fa:1a:0a:39:5a:b9:41:10:9a:e0:93:af:
         7c:7f:55:24:bc:8f:a0:65:59:c6:fd:00:b6:46:3c:c2:5a:fd:
         f2:77:08:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 10:37:42 2026 by rpki-client