This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/651B06C59A0B162BEE25D0591333AEC2EC1921B263E89EE760DC7B75FAFABF55/0/323830303a3531303a3a2f33322d3634203d3e203238303232.roa
File:                     323830303a3531303a3a2f33322d3634203d3e203238303232.roa (raw, json)
Hash identifier:          v3wqpabqTVeAs7ctNCzfmbn90M0nZeyBZxVOIwKvoeA=
Subject key identifier:   D7:F0:E7:E2:70:44:CC:A5:8D:82:6F:90:BC:D6:A8:DC:41:83:BC:A0
Certificate issuer:       /CN=2000BFC4CE0B56183990500772974F91AC5629B4
Certificate serial:       647AB0200F727D3FCC19E725733AB78A63DF9BDC
Authority key identifier: 20:00:BF:C4:CE:0B:56:18:39:90:50:07:72:97:4F:91:AC:56:29:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2000BFC4CE0B56183990500772974F91AC5629B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/651B06C59A0B162BEE25D0591333AEC2EC1921B263E89EE760DC7B75FAFABF55/0/323830303a3531303a3a2f33322d3634203d3e203238303232.roa
Signing time:             Tue 06 Jan 2026 19:26:46 +0000
ROA not before:           Tue 06 Jan 2026 19:21:46 +0000
ROA not after:            Tue 05 Jan 2027 19:26:46 +0000
asID:                     28022
IP address blocks:        2800:510::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/651B06C59A0B162BEE25D0591333AEC2EC1921B263E89EE760DC7B75FAFABF55/0/2000BFC4CE0B56183990500772974F91AC5629B4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/651B06C59A0B162BEE25D0591333AEC2EC1921B263E89EE760DC7B75FAFABF55/0/2000BFC4CE0B56183990500772974F91AC5629B4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2000BFC4CE0B56183990500772974F91AC5629B4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Jan 2026 22:10:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:7a:b0:20:0f:72:7d:3f:cc:19:e7:25:73:3a:b7:8a:63:df:9b:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2000BFC4CE0B56183990500772974F91AC5629B4
        Validity
            Not Before: Jan  6 19:21:46 2026 GMT
            Not After : Jan  5 19:26:46 2027 GMT
        Subject: CN=D7F0E7E27044CCA58D826F90BCD6A8DC4183BCA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3e:bc:c0:e1:bc:b0:f2:e1:2c:b4:4b:15:1c:
                    c2:d5:49:59:4d:f1:b9:ac:71:57:87:d4:0a:13:a9:
                    d7:c2:59:86:9c:5c:f1:af:a2:54:81:16:23:e7:88:
                    35:fc:a6:e1:76:aa:57:ec:ed:6c:76:14:71:e9:97:
                    20:40:4f:f5:33:11:e0:0c:30:91:cc:07:bd:00:0d:
                    2f:68:26:00:c4:83:d6:ce:19:09:15:09:a4:dd:29:
                    d1:11:7d:07:4b:10:26:e8:96:ae:1f:aa:aa:f4:68:
                    32:57:f4:16:d7:cd:41:38:5e:65:0e:4e:24:a7:33:
                    92:3d:bb:fd:e2:6e:c5:b7:ec:05:8b:67:7a:3b:11:
                    3f:19:cb:9e:21:83:a7:58:16:36:a8:6c:90:2c:73:
                    61:41:07:f5:b8:a6:67:9a:93:6f:7d:31:38:35:cc:
                    24:22:85:b1:93:4c:93:78:3d:72:e6:19:ab:6a:91:
                    90:02:48:64:f0:a1:20:cd:db:2f:01:b8:e5:fd:e5:
                    46:95:b8:8e:8c:6b:ba:65:93:4b:31:b3:12:a0:c7:
                    60:85:9e:34:a5:7a:80:ad:32:26:3d:f6:bc:6c:a8:
                    fe:82:fc:63:5b:b6:8b:2f:53:04:0f:1f:36:61:d8:
                    86:b9:43:28:ce:53:66:f9:b0:af:21:8b:ae:c0:c3:
                    2b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:F0:E7:E2:70:44:CC:A5:8D:82:6F:90:BC:D6:A8:DC:41:83:BC:A0
            X509v3 Authority Key Identifier:
                keyid:20:00:BF:C4:CE:0B:56:18:39:90:50:07:72:97:4F:91:AC:56:29:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/651B06C59A0B162BEE25D0591333AEC2EC1921B263E89EE760DC7B75FAFABF55/0/2000BFC4CE0B56183990500772974F91AC5629B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2000BFC4CE0B56183990500772974F91AC5629B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/651B06C59A0B162BEE25D0591333AEC2EC1921B263E89EE760DC7B75FAFABF55/0/323830303a3531303a3a2f33322d3634203d3e203238303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:510::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:66:6c:92:5f:b5:6a:5f:5c:67:9c:70:1c:be:2f:1c:5d:31:
         9a:ee:c9:d2:a3:4a:41:a2:74:a5:fa:ef:1a:1c:5d:5d:be:f0:
         33:dd:f5:d7:c9:8a:1f:68:81:9d:f1:48:c3:7a:06:1b:e3:00:
         55:18:34:10:b2:52:81:a8:e6:e2:d8:af:86:ac:5e:d4:ed:d7:
         d8:fe:ac:3c:15:3d:6f:5e:45:f8:62:87:11:cf:9b:d8:bb:ea:
         bc:69:31:b3:5c:36:68:c3:8d:e4:be:cd:bb:e5:55:60:1d:c8:
         08:87:7e:86:76:72:5e:34:3d:da:20:e0:6c:29:94:3a:0b:bc:
         08:f1:7b:6b:5d:b8:29:68:b9:81:cb:2f:a8:2e:39:ef:b6:78:
         76:ee:d8:26:09:69:79:92:73:1e:d8:1a:8a:a6:4f:ad:df:5c:
         dc:b7:e2:a2:68:ce:e7:8a:59:21:18:78:79:bd:b7:a3:6e:55:
         74:a8:36:a2:4e:c8:b7:7f:1f:d3:22:92:a3:d3:26:21:71:1e:
         8a:f2:b0:10:91:03:58:52:5a:49:e7:43:00:1f:3b:af:73:fa:
         3c:a6:37:29:a7:eb:4d:40:9b:7e:2a:8d:90:7d:f2:a8:cc:f3:
         d3:5a:bd:cb:32:e8:c2:44:30:4f:e3:de:ca:a9:c5:5d:2d:10:
         ab:7b:12:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 06:47:54 2026 by rpki-client