This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/323830303a3665303a3a2f33322d3438203d3e203532333230.roa
File:                     323830303a3665303a3a2f33322d3438203d3e203532333230.roa (raw, json)
Hash identifier:          Yx+FnQvWTbWEzgjggcB3njtk23B8zpOaN+/wpOb+ZWo=
Subject key identifier:   9F:43:D2:1A:AC:4C:CB:F8:F2:85:BB:82:32:F9:AB:38:C4:41:B7:6D
Certificate issuer:       /CN=B0A4556BAD5546D688ED0FF7B492B3881EBC8526
Certificate serial:       0FAE999B57CF5B7CBDCBC47B83CC776A594C1CA8
Authority key identifier: B0:A4:55:6B:AD:55:46:D6:88:ED:0F:F7:B4:92:B3:88:1E:BC:85:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/323830303a3665303a3a2f33322d3438203d3e203532333230.roa
Signing time:             Tue 06 Jan 2026 19:33:05 +0000
ROA not before:           Tue 06 Jan 2026 19:28:05 +0000
ROA not after:            Tue 05 Jan 2027 19:33:05 +0000
asID:                     52320
IP address blocks:        2800:6e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 00:53:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ae:99:9b:57:cf:5b:7c:bd:cb:c4:7b:83:cc:77:6a:59:4c:1c:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0A4556BAD5546D688ED0FF7B492B3881EBC8526
        Validity
            Not Before: Jan  6 19:28:05 2026 GMT
            Not After : Jan  5 19:33:05 2027 GMT
        Subject: CN=9F43D21AAC4CCBF8F285BB8232F9AB38C441B76D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e6:76:5e:b4:86:20:0a:96:7f:8d:e2:50:d4:
                    8f:5c:7f:c4:08:7e:e2:5d:74:a4:6a:3f:f4:c9:a5:
                    b7:40:c9:5c:89:d4:56:06:5b:df:72:39:60:90:36:
                    df:ed:b8:5c:71:af:63:86:ec:20:e5:3e:8e:ca:1d:
                    99:18:76:49:f1:20:ba:e2:00:c0:cc:16:bd:03:b0:
                    8b:c7:91:d0:bc:4c:44:f2:93:7d:b5:00:17:fd:0d:
                    b4:89:53:43:b5:25:fa:5c:4f:22:a2:c0:a2:ef:6d:
                    bc:2e:a3:15:01:e2:61:4b:0f:26:a9:40:e1:d9:b9:
                    be:0a:af:8d:9b:76:95:aa:57:af:43:d9:0f:b4:d0:
                    3a:d7:28:81:69:ca:5a:fe:72:43:81:a0:81:99:54:
                    e6:fb:a7:17:f8:2a:ef:bc:0e:65:3d:1e:0d:11:32:
                    40:77:62:81:55:e8:17:4b:ce:fa:73:4e:fe:37:6c:
                    b1:2d:a2:ca:f5:3f:1c:cf:2c:58:95:95:fe:19:1b:
                    13:5b:21:a5:d8:05:92:e1:3b:96:50:9b:a3:20:d2:
                    73:09:b8:21:a1:42:f0:21:7b:bb:8f:fa:ff:19:76:
                    09:51:eb:0a:e4:31:02:97:76:fc:38:5e:9c:cd:bf:
                    d1:be:b7:52:f0:a2:02:a9:65:63:81:24:51:1d:f4:
                    f4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:43:D2:1A:AC:4C:CB:F8:F2:85:BB:82:32:F9:AB:38:C4:41:B7:6D
            X509v3 Authority Key Identifier:
                keyid:B0:A4:55:6B:AD:55:46:D6:88:ED:0F:F7:B4:92:B3:88:1E:BC:85:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/323830303a3665303a3a2f33322d3438203d3e203532333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:6e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:65:3a:ee:2c:c2:9a:75:ae:12:8d:7b:e6:23:ec:f9:e9:31:
         82:3b:60:36:9c:99:42:db:d1:37:ae:9c:5c:a0:7a:05:39:e6:
         3d:e8:4c:29:dc:3e:ec:46:7f:ec:f9:83:81:3e:d2:1d:a8:c3:
         04:70:93:4f:14:a0:83:dc:c1:c0:05:bf:7d:76:4a:8c:0e:12:
         0c:e0:0f:5e:da:d1:82:2a:62:ec:ba:6b:2a:57:1a:ec:a2:b4:
         30:e0:51:62:f0:68:11:bd:84:6b:5e:41:69:60:f9:9c:bb:76:
         72:41:62:04:b2:3b:33:e0:6c:aa:47:36:b7:4d:28:ce:9e:e1:
         c1:9a:a1:62:37:b6:38:db:ba:8b:2d:6b:f5:20:73:91:1f:55:
         18:cb:4a:57:8b:e8:ba:fa:a9:f1:c9:fc:c3:86:2d:41:bb:a5:
         6f:68:ee:6d:0b:06:42:03:b8:5c:39:a8:5c:3c:57:1f:69:e5:
         31:3c:70:1d:9d:5a:db:cf:ba:6b:b1:b5:fe:a4:45:c8:47:04:
         bc:01:fc:47:2a:b0:d8:74:75:6e:02:f9:27:a1:ab:19:75:81:
         22:d1:f2:40:d6:09:20:5e:1b:80:29:0f:80:33:c1:08:39:15:
         c6:50:73:08:9e:db:47:e5:63:29:d0:35:dc:95:22:3d:8c:99:
         c8:27:a1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 22:17:42 2026 by rpki-client