This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6D1CC00427698EA984E9DFC28EAA35240F75A0499336EA446FF34E68ED069736/0/323830313a3130353a3a2f34382d3438203d3e203139343239.roa
File:                     323830313a3130353a3a2f34382d3438203d3e203139343239.roa (raw, json)
Hash identifier:          Y6GLSlHc858B2RHe7m/Jq+KnuSzldON4ErtJRaIjniY=
Subject key identifier:   FC:27:E9:16:A5:2D:B5:2B:D2:8E:F2:06:57:94:13:4F:BE:F0:FA:40
Certificate issuer:       /CN=511EC7ECE8F3FF815535163C5C512E56C1CDA048
Certificate serial:       52FE4F9E8C87C82A4A049A7022B36A12A8124E6F
Authority key identifier: 51:1E:C7:EC:E8:F3:FF:81:55:35:16:3C:5C:51:2E:56:C1:CD:A0:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/511EC7ECE8F3FF815535163C5C512E56C1CDA048.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6D1CC00427698EA984E9DFC28EAA35240F75A0499336EA446FF34E68ED069736/0/323830313a3130353a3a2f34382d3438203d3e203139343239.roa
Signing time:             Tue 06 Jan 2026 19:32:23 +0000
ROA not before:           Tue 06 Jan 2026 19:27:23 +0000
ROA not after:            Tue 05 Jan 2027 19:32:23 +0000
asID:                     19429
IP address blocks:        2801:105::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6D1CC00427698EA984E9DFC28EAA35240F75A0499336EA446FF34E68ED069736/0/511EC7ECE8F3FF815535163C5C512E56C1CDA048.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6D1CC00427698EA984E9DFC28EAA35240F75A0499336EA446FF34E68ED069736/0/511EC7ECE8F3FF815535163C5C512E56C1CDA048.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/511EC7ECE8F3FF815535163C5C512E56C1CDA048.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 03:32:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:fe:4f:9e:8c:87:c8:2a:4a:04:9a:70:22:b3:6a:12:a8:12:4e:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=511EC7ECE8F3FF815535163C5C512E56C1CDA048
        Validity
            Not Before: Jan  6 19:27:23 2026 GMT
            Not After : Jan  5 19:32:23 2027 GMT
        Subject: CN=FC27E916A52DB52BD28EF2065794134FBEF0FA40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6e:c3:c7:e5:02:91:33:cb:54:33:36:ce:a9:
                    90:bb:0b:a2:26:02:1a:6c:f4:5a:79:6e:15:12:9b:
                    8a:95:f6:74:fd:1f:a8:44:17:e5:c3:bf:a9:5f:4e:
                    94:10:c1:8e:9d:4d:36:c6:0e:6d:91:27:ff:d8:29:
                    aa:2f:37:bb:b4:b1:15:5a:cc:9d:92:04:63:ab:2c:
                    3e:6d:d1:a6:68:2c:27:ff:59:55:35:78:86:fe:ee:
                    ed:fc:0e:27:6a:77:f8:a6:56:a2:da:5f:c5:ef:db:
                    7c:2c:4d:48:8e:aa:a5:aa:6f:04:e0:ba:2f:03:a6:
                    9e:9d:c1:51:c2:d5:8a:c9:e6:08:b6:a1:ee:ce:d4:
                    ca:4d:13:96:e9:56:e0:37:af:ff:0b:93:51:87:07:
                    21:94:eb:e7:b7:c9:fd:93:7d:24:b7:56:73:b4:91:
                    a1:7e:d6:2a:62:79:d8:b2:d9:2e:60:ae:ad:c5:7c:
                    ec:c8:5d:60:95:10:b0:67:40:86:c9:90:a7:90:48:
                    7c:ec:86:f5:f2:02:73:92:54:fa:ba:5b:b9:e3:d8:
                    24:04:47:71:24:2c:16:32:bf:b2:35:43:a5:c1:7c:
                    20:86:89:ee:3a:db:16:e3:b1:d0:4e:43:b6:51:f9:
                    dd:e2:05:70:c3:37:f6:47:53:10:82:87:43:82:e6:
                    26:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:27:E9:16:A5:2D:B5:2B:D2:8E:F2:06:57:94:13:4F:BE:F0:FA:40
            X509v3 Authority Key Identifier:
                keyid:51:1E:C7:EC:E8:F3:FF:81:55:35:16:3C:5C:51:2E:56:C1:CD:A0:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6D1CC00427698EA984E9DFC28EAA35240F75A0499336EA446FF34E68ED069736/0/511EC7ECE8F3FF815535163C5C512E56C1CDA048.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/511EC7ECE8F3FF815535163C5C512E56C1CDA048.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6D1CC00427698EA984E9DFC28EAA35240F75A0499336EA446FF34E68ED069736/0/323830313a3130353a3a2f34382d3438203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:105::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:47:21:3e:c0:7a:eb:19:e3:62:b4:fd:ff:4a:e5:0b:cd:00:
         20:69:b5:c1:aa:f6:6b:47:1a:20:91:ed:4c:a7:2c:5f:4b:45:
         48:51:8d:eb:a7:67:cb:95:26:5d:53:f1:39:98:51:e0:d6:34:
         68:dc:47:44:dd:c1:a2:03:e1:d8:f8:d7:44:fa:77:08:b2:8d:
         9d:cc:c6:6a:55:22:5e:10:cc:e7:81:51:3d:19:7b:25:52:8a:
         e4:87:11:e6:06:21:c7:dc:e4:1c:01:ba:c7:bc:2d:3d:2c:29:
         3a:64:39:25:20:70:0f:21:c6:43:45:ba:e1:ef:a6:76:87:aa:
         23:31:bb:73:c1:f0:41:13:d2:b7:53:f4:3e:a2:fb:aa:28:c5:
         0d:98:00:36:81:a4:93:c4:66:a2:48:51:59:a3:d5:f2:43:aa:
         10:aa:93:ba:b4:de:d7:9f:6b:96:73:5c:71:ca:43:65:3a:66:
         3f:a3:73:84:9b:a3:57:01:87:e7:72:3c:b2:9c:5d:8f:b4:7c:
         7b:66:ad:63:2b:b3:5d:7c:e3:ab:2a:b8:9e:66:32:26:97:69:
         22:b5:9c:c3:e3:b6:d2:48:cd:bd:98:09:14:0d:a5:5e:f1:87:
         d6:4d:87:88:d0:26:24:0e:3b:8b:7a:e4:bc:f1:db:62:75:89:
         92:6c:8d:e0
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUUv5PnoyHyCpKBJpwIrNqEqgSTm8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTExRUM3RUNFOEYzRkY4MTU1MzUxNjNDNUM1MTJFNTZD
MUNEQTA0ODAeFw0yNjAxMDYxOTI3MjNaFw0yNzAxMDUxOTMyMjNaMDMxMTAvBgNV
BAMTKEZDMjdFOTE2QTUyREI1MkJEMjhFRjIwNjU3OTQxMzRGQkVGMEZBNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCybsPH5QKRM8tUMzbOqZC7C6Im
Ahps9Fp5bhUSm4qV9nT9H6hEF+XDv6lfTpQQwY6dTTbGDm2RJ//YKaovN7u0sRVa
zJ2SBGOrLD5t0aZoLCf/WVU1eIb+7u38Didqd/imVqLaX8Xv23wsTUiOqqWqbwTg
ui8Dpp6dwVHC1YrJ5gi2oe7O1MpNE5bpVuA3r/8Lk1GHByGU6+e3yf2TfSS3VnO0
kaF+1ipiediy2S5grq3FfOzIXWCVELBnQIbJkKeQSHzshvXyAnOSVPq6W7nj2CQE
R3EkLBYyv7I1Q6XBfCCGie462xbjsdBOQ7ZR+d3iBXDDN/ZHUxCCh0OC5ibRAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQU/CfpFqUttSvSjvIGV5QTT77w+kAwHwYDVR0j
BBgwFoAUUR7H7Ojz/4FVNRY8XFEuVsHNoEgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82RDFDQzAwNDI3Njk4RUE5ODRFOURGQzI4RUFBMzUyNDBG
NzVBMDQ5OTMzNkVBNDQ2RkYzNEU2OEVEMDY5NzM2LzAvNTExRUM3RUNFOEYzRkY4
MTU1MzUxNjNDNUM1MTJFNTZDMUNEQTA0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MTFFQzdFQ0U4RjNGRjgxNTUz
NTE2M0M1QzUxMkU1NkMxQ0RBMDQ4LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkQxQ0MwMDQyNzY5OEVBOTg0RTlERkMyOEVBQTM1MjQwRjc1QTA0OTkz
MzZFQTQ0NkZGMzRFNjhFRDA2OTczNi8wLzMyMzgzMDMxM2EzMTMwMzUzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMTM5MzQzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAEBBQAAMA0G
CSqGSIb3DQEBCwUAA4IBAQAeRyE+wHrrGeNitP3/SuULzQAgabXBqvZrRxogke1M
pyxfS0VIUY3rp2fLlSZdU/E5mFHg1jRo3EdE3cGiA+HY+NdE+ncIso2dzMZqVSJe
EMzngVE9GXslUorkhxHmBiHH3OQcAbrHvC09LCk6ZDklIHAPIcZDRbrh76Z2h6oj
MbtzwfBBE9K3U/Q+ovuqKMUNmAA2gaSTxGaiSFFZo9XyQ6oQqpO6tN7Xn2uWc1xx
ykNlOmY/o3OEm6NXAYfncjyynF2PtHx7Zq1jK7NdfOOrKrieZjIml2kitZzD47bS
SM29mAkUDaVe8YfWTYeI0CYkDjuLeuS88dtidYmSbI3g
-----END CERTIFICATE-----
Generated at Tue Jan 13 11:07:14 2026 by rpki-client