This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/323830303a6333303a3a2f33322d3430203d3e203532333631.roa
File:                     323830303a6333303a3a2f33322d3430203d3e203532333631.roa (raw, json)
Hash identifier:          8lnFiVVWCGLekHXbmRxSsIcXQYyTUtK2tj0eg2Hdb4o=
Subject key identifier:   16:F7:73:27:52:5F:17:C0:70:EC:75:C2:1B:42:63:2F:D2:D2:B7:85
Certificate issuer:       /CN=05C9632C2BAF4CD4754DA6B446116C70FEF4D267
Certificate serial:       12AC9ED491DC798860E8482AC8DB28DA6F8E58DC
Authority key identifier: 05:C9:63:2C:2B:AF:4C:D4:75:4D:A6:B4:46:11:6C:70:FE:F4:D2:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/323830303a6333303a3a2f33322d3430203d3e203532333631.roa
Signing time:             Tue 06 Jan 2026 20:52:44 +0000
ROA not before:           Tue 06 Jan 2026 20:47:44 +0000
ROA not after:            Tue 05 Jan 2027 20:52:44 +0000
asID:                     52361
IP address blocks:        2800:c30::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 11:25:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ac:9e:d4:91:dc:79:88:60:e8:48:2a:c8:db:28:da:6f:8e:58:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05C9632C2BAF4CD4754DA6B446116C70FEF4D267
        Validity
            Not Before: Jan  6 20:47:44 2026 GMT
            Not After : Jan  5 20:52:44 2027 GMT
        Subject: CN=16F77327525F17C070EC75C21B42632FD2D2B785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4f:6b:6c:31:90:62:4f:f7:90:ff:23:ff:fd:
                    aa:ac:16:4b:8f:0e:23:32:84:26:58:c7:0f:9f:da:
                    41:8a:cf:d0:0d:41:34:a1:13:45:fd:5e:82:d1:49:
                    3a:ea:6d:16:67:8d:97:58:1b:7f:48:93:80:32:e3:
                    f0:18:cd:9c:38:23:9f:ed:ce:00:a6:3a:e5:28:4b:
                    dc:ed:a2:fd:a2:1c:1a:dc:f9:54:a5:9d:73:e3:41:
                    1e:06:4e:b3:dd:6b:34:2e:18:07:c1:ce:3e:e0:e8:
                    b2:d3:ee:3a:c3:df:32:e6:ff:28:01:b1:f5:32:33:
                    80:45:71:48:d2:9d:db:62:46:a9:01:b5:22:07:6a:
                    b7:c3:de:71:2e:8b:a6:93:65:e7:38:dd:d3:21:66:
                    12:a5:2f:0e:ff:e0:0a:15:29:f8:75:f9:0e:ac:6a:
                    a1:18:82:d8:3a:41:5a:5f:c5:1b:0a:c8:1c:2a:ad:
                    39:35:1e:51:3c:b7:04:e2:f5:66:15:db:82:88:ce:
                    8f:f3:68:b8:58:7f:6c:4b:38:c2:d7:97:06:af:88:
                    71:fc:7b:8a:15:9d:36:f1:fe:77:fe:74:68:b5:fb:
                    1a:d2:c4:82:4f:28:12:78:73:19:a1:d3:bf:2f:09:
                    98:d3:5b:b7:c5:cf:06:55:dc:b4:ad:95:82:0c:64:
                    cc:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F7:73:27:52:5F:17:C0:70:EC:75:C2:1B:42:63:2F:D2:D2:B7:85
            X509v3 Authority Key Identifier:
                keyid:05:C9:63:2C:2B:AF:4C:D4:75:4D:A6:B4:46:11:6C:70:FE:F4:D2:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/323830303a6333303a3a2f33322d3430203d3e203532333631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:c30::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:2f:1e:cd:08:d6:49:cd:11:c2:c6:9d:b8:03:b9:df:2d:3d:
         77:95:73:24:d4:82:3c:d5:35:df:49:a7:f9:7c:16:67:be:4c:
         5b:00:f4:e7:73:e0:48:b1:8b:cf:a0:f0:13:00:4f:cc:d4:e8:
         23:f6:99:c6:53:40:68:bd:28:db:ce:10:0a:2d:bd:0d:a8:2a:
         90:e4:b5:6c:e7:5c:57:e7:10:f3:34:1e:f7:86:05:f7:35:fa:
         80:88:73:b3:fd:ed:f5:99:e7:be:82:72:84:32:5e:60:5f:78:
         ce:48:91:e6:db:c3:48:93:65:fc:32:43:a4:6f:8b:22:5d:16:
         13:36:01:06:f2:83:7c:9d:d7:cb:1a:36:ec:d7:77:08:53:69:
         e0:3f:9d:74:2f:a4:16:ca:dc:47:73:e7:33:26:ac:95:1d:29:
         ab:f7:71:b8:f1:3f:27:51:1c:26:d2:d9:63:cc:17:59:ae:16:
         5a:20:1e:5b:02:a6:e0:99:97:90:a2:a5:47:4f:9d:a8:74:2d:
         5b:4c:00:08:2f:38:23:91:53:3b:8a:60:90:6e:d7:a6:8c:ed:
         70:0f:36:e4:2e:4f:f6:f8:97:7c:ba:01:0b:85:3a:b4:63:f9:
         81:ac:07:d0:58:84:68:c3:65:25:6a:20:0d:92:5a:07:07:32:
         a1:06:93:7e
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUEqye1JHceYhg6EgqyNso2m+OWNwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDVDOTYzMkMyQkFGNENENDc1NERBNkI0NDYxMTZDNzBG
RUY0RDI2NzAeFw0yNjAxMDYyMDQ3NDRaFw0yNzAxMDUyMDUyNDRaMDMxMTAvBgNV
BAMTKDE2Rjc3MzI3NTI1RjE3QzA3MEVDNzVDMjFCNDI2MzJGRDJEMkI3ODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDET2tsMZBiT/eQ/yP//aqsFkuP
DiMyhCZYxw+f2kGKz9ANQTShE0X9XoLRSTrqbRZnjZdYG39Ik4Ay4/AYzZw4I5/t
zgCmOuUoS9ztov2iHBrc+VSlnXPjQR4GTrPdazQuGAfBzj7g6LLT7jrD3zLm/ygB
sfUyM4BFcUjSndtiRqkBtSIHarfD3nEui6aTZec43dMhZhKlLw7/4AoVKfh1+Q6s
aqEYgtg6QVpfxRsKyBwqrTk1HlE8twTi9WYV24KIzo/zaLhYf2xLOMLXlwaviHH8
e4oVnTbx/nf+dGi1+xrSxIJPKBJ4cxmh078vCZjTW7fFzwZV3LStlYIMZMyjAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUFvdzJ1JfF8Bw7HXCG0JjL9LSt4UwHwYDVR0j
BBgwFoAUBcljLCuvTNR1Taa0RhFscP700mcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CQTAwNTNEQTYwMzg1MkFGNjFDODQ0MjRGQkZGOUFDOEE2
MzI4ODcxODk5NkM2MzNCNjMyOUE4QzkzQzA2NzFFLzAvMDVDOTYzMkMyQkFGNENE
NDc1NERBNkI0NDYxMTZDNzBGRUY0RDI2Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wNUM5NjMyQzJCQUY0Q0Q0NzU0
REE2QjQ0NjExNkM3MEZFRjREMjY3LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkEwMDUzREE2MDM4NTJBRjYxQzg0NDI0RkJGRjlBQzhBNjMyODg3MTg5
OTZDNjMzQjYzMjlBOEM5M0MwNjcxRS8wLzMyMzgzMDMwM2E2MzMzMzAzYTNhMmYz
MzMyMmQzNDMwMjAzZDNlMjAzNTMyMzMzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAAMMDANBgkq
hkiG9w0BAQsFAAOCAQEAZS8ezQjWSc0RwsaduAO53y09d5VzJNSCPNU130mn+XwW
Z75MWwD053PgSLGLz6DwEwBPzNToI/aZxlNAaL0o284QCi29DagqkOS1bOdcV+cQ
8zQe94YF9zX6gIhzs/3t9ZnnvoJyhDJeYF94zkiR5tvDSJNl/DJDpG+LIl0WEzYB
BvKDfJ3Xyxo27Nd3CFNp4D+ddC+kFsrcR3PnMyaslR0pq/dxuPE/J1EcJtLZY8wX
Wa4WWiAeWwKm4JmXkKKlR0+dqHQtW0wACC84I5FTO4pgkG7XpoztcA825C5P9viX
fLoBC4U6tGP5gawH0FiEaMNlJWogDZJaBwcyoQaTfg==
-----END CERTIFICATE-----
Generated at Mon Jan 12 13:13:05 2026 by rpki-client