This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/651B06C59A0B162BEE25D0591333AEC2EC1921B263E89EE760DC7B75FAFABF55/0/323830303a3531303a3a2f34362d3634203d3e203238303232.roa
File:                     323830303a3531303a3a2f34362d3634203d3e203238303232.roa (raw, json)
Hash identifier:          cUfqot1l6uvGaYW5DtTQWOhXTGnL1+Uy1z/Fm41mDIg=
Subject key identifier:   D1:19:95:7C:63:46:40:1D:2C:F4:62:E9:58:6E:31:62:94:7F:59:D2
Certificate issuer:       /CN=2000BFC4CE0B56183990500772974F91AC5629B4
Certificate serial:       7F1177B8931B1C8B19609006B4859E1C2CE7E7F4
Authority key identifier: 20:00:BF:C4:CE:0B:56:18:39:90:50:07:72:97:4F:91:AC:56:29:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2000BFC4CE0B56183990500772974F91AC5629B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/651B06C59A0B162BEE25D0591333AEC2EC1921B263E89EE760DC7B75FAFABF55/0/323830303a3531303a3a2f34362d3634203d3e203238303232.roa
Signing time:             Tue 06 Jan 2026 19:26:47 +0000
ROA not before:           Tue 06 Jan 2026 19:21:47 +0000
ROA not after:            Tue 05 Jan 2027 19:26:47 +0000
asID:                     28022
IP address blocks:        2800:510::/46 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/651B06C59A0B162BEE25D0591333AEC2EC1921B263E89EE760DC7B75FAFABF55/0/2000BFC4CE0B56183990500772974F91AC5629B4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/651B06C59A0B162BEE25D0591333AEC2EC1921B263E89EE760DC7B75FAFABF55/0/2000BFC4CE0B56183990500772974F91AC5629B4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2000BFC4CE0B56183990500772974F91AC5629B4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 07:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:11:77:b8:93:1b:1c:8b:19:60:90:06:b4:85:9e:1c:2c:e7:e7:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2000BFC4CE0B56183990500772974F91AC5629B4
        Validity
            Not Before: Jan  6 19:21:47 2026 GMT
            Not After : Jan  5 19:26:47 2027 GMT
        Subject: CN=D119957C6346401D2CF462E9586E3162947F59D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c3:4b:8d:2e:ce:ff:54:e8:28:38:dd:94:64:
                    b6:3f:23:9b:6b:cd:3e:50:70:73:4c:b2:4f:90:c8:
                    95:9f:a5:04:38:15:08:56:1d:b8:ea:39:6a:df:9b:
                    b2:ff:73:78:ed:8c:dc:dd:48:b9:d5:60:98:d5:c6:
                    56:fe:19:c6:86:0d:ff:2d:a7:0e:93:08:5b:75:1d:
                    fc:b0:c3:12:ef:ff:54:e8:39:a1:f6:20:a2:66:e4:
                    35:e7:bf:03:bf:ae:10:64:8f:67:8f:64:37:1d:f6:
                    3c:82:c4:f9:8e:38:31:4f:4f:0d:0e:84:ff:fa:5c:
                    58:a3:28:f8:a9:49:06:0e:40:0e:48:2b:7e:bb:d9:
                    60:71:e4:f3:be:cc:66:2a:d2:d4:b5:84:11:d9:8c:
                    55:da:e4:5d:fe:64:e6:a6:55:a7:0d:96:18:4c:01:
                    86:83:5c:c2:42:ad:72:90:c8:d3:cb:e8:3a:b3:58:
                    99:4c:3e:50:91:d6:f8:d3:8d:b0:3d:05:f4:23:7f:
                    9f:24:80:60:52:f9:bb:70:50:12:9c:dc:d2:b5:b7:
                    59:3c:e6:f6:85:e2:33:00:2a:28:ef:59:91:39:2c:
                    e8:9b:14:e4:70:5d:9d:cb:0d:4b:ae:12:59:ae:f1:
                    a2:ed:85:1e:1d:2e:65:a6:d3:6e:0c:d3:03:56:c3:
                    1d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:19:95:7C:63:46:40:1D:2C:F4:62:E9:58:6E:31:62:94:7F:59:D2
            X509v3 Authority Key Identifier:
                keyid:20:00:BF:C4:CE:0B:56:18:39:90:50:07:72:97:4F:91:AC:56:29:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/651B06C59A0B162BEE25D0591333AEC2EC1921B263E89EE760DC7B75FAFABF55/0/2000BFC4CE0B56183990500772974F91AC5629B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2000BFC4CE0B56183990500772974F91AC5629B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/651B06C59A0B162BEE25D0591333AEC2EC1921B263E89EE760DC7B75FAFABF55/0/323830303a3531303a3a2f34362d3634203d3e203238303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:510::/46

    Signature Algorithm: sha256WithRSAEncryption
         b3:ee:a3:84:f5:cb:be:1a:5e:2a:54:5d:00:2c:dd:30:e4:79:
         58:67:32:e5:74:50:c6:5d:af:aa:97:d8:bf:10:66:1c:c7:ad:
         13:f1:aa:a2:8d:f4:0c:41:ce:a6:2e:13:ca:13:8a:ee:16:b0:
         5c:70:d6:3d:05:0c:b0:16:34:8b:38:95:68:87:23:b3:82:64:
         67:48:4c:96:f9:8f:b0:ae:9c:b0:1f:d1:62:de:ee:68:09:2d:
         2f:cf:12:8e:06:33:31:d5:41:ac:35:d9:4e:11:ed:d5:41:48:
         d0:2b:0d:98:11:ef:28:6e:6d:48:e0:55:ea:ab:bc:32:10:bd:
         9f:7b:74:b9:aa:66:9e:a1:03:12:45:4f:6b:13:95:d3:1c:46:
         4e:4e:54:c2:0f:62:3e:91:75:aa:8b:6c:95:54:ba:80:8c:82:
         7b:21:13:a6:ef:62:90:2d:11:a9:31:63:27:44:87:4a:9a:ad:
         3c:84:cc:3f:2e:47:da:66:e5:68:59:0c:98:b4:79:a4:45:15:
         b0:d7:27:e2:dd:0b:02:15:30:c9:9b:31:c8:ca:0d:9e:36:98:
         48:2e:e5:86:e8:5a:ae:d4:4a:b4:8b:f6:7b:80:74:0f:aa:b7:
         69:fd:d3:ca:9d:0c:08:ca:66:dd:3f:3b:44:19:3d:cc:2d:2e:
         fe:04:de:bd
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUfxF3uJMbHIsZYJAGtIWeHCzn5/QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjAwMEJGQzRDRTBCNTYxODM5OTA1MDA3NzI5NzRGOTFB
QzU2MjlCNDAeFw0yNjAxMDYxOTIxNDdaFw0yNzAxMDUxOTI2NDdaMDMxMTAvBgNV
BAMTKEQxMTk5NTdDNjM0NjQwMUQyQ0Y0NjJFOTU4NkUzMTYyOTQ3RjU5RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjw0uNLs7/VOgoON2UZLY/I5tr
zT5QcHNMsk+QyJWfpQQ4FQhWHbjqOWrfm7L/c3jtjNzdSLnVYJjVxlb+GcaGDf8t
pw6TCFt1HfywwxLv/1ToOaH2IKJm5DXnvwO/rhBkj2ePZDcd9jyCxPmOODFPTw0O
hP/6XFijKPipSQYOQA5IK3672WBx5PO+zGYq0tS1hBHZjFXa5F3+ZOamVacNlhhM
AYaDXMJCrXKQyNPL6DqzWJlMPlCR1vjTjbA9BfQjf58kgGBS+btwUBKc3NK1t1k8
5vaF4jMAKijvWZE5LOibFORwXZ3LDUuuElmu8aLthR4dLmWm024M0wNWwx2ZAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQU0RmVfGNGQB0s9GLpWG4xYpR/WdIwHwYDVR0j
BBgwFoAUIAC/xM4LVhg5kFAHcpdPkaxWKbQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NTFCMDZDNTlBMEIxNjJCRUUyNUQwNTkxMzMzQUVDMkVD
MTkyMUIyNjNFODlFRTc2MERDN0I3NUZBRkFCRjU1LzAvMjAwMEJGQzRDRTBCNTYx
ODM5OTA1MDA3NzI5NzRGOTFBQzU2MjlCNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMDAwQkZDNENFMEI1NjE4Mzk5
MDUwMDc3Mjk3NEY5MUFDNTYyOUI0LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjUxQjA2QzU5QTBCMTYyQkVFMjVEMDU5MTMzM0FFQzJFQzE5MjFCMjYz
RTg5RUU3NjBEQzdCNzVGQUZBQkY1NS8wLzMyMzgzMDMwM2EzNTMxMzAzYTNhMmYz
NDM2MmQzNjM0MjAzZDNlMjAzMjM4MzAzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCKAAFEAAAMA0G
CSqGSIb3DQEBCwUAA4IBAQCz7qOE9cu+Gl4qVF0ALN0w5HlYZzLldFDGXa+ql9i/
EGYcx60T8aqijfQMQc6mLhPKE4ruFrBccNY9BQywFjSLOJVohyOzgmRnSEyW+Y+w
rpywH9Fi3u5oCS0vzxKOBjMx1UGsNdlOEe3VQUjQKw2YEe8obm1I4FXqq7wyEL2f
e3S5qmaeoQMSRU9rE5XTHEZOTlTCD2I+kXWqi2yVVLqAjIJ7IROm72KQLRGpMWMn
RIdKmq08hMw/LkfaZuVoWQyYtHmkRRWw1yfi3QsCFTDJmzHIyg2eNphILuWG6Fqu
1Eq0i/Z7gHQPqrdp/dPKnQwIymbdPztEGT3MLS7+BN69
-----END CERTIFICATE-----
Generated at Mon Jan 12 15:04:38 2026 by rpki-client