This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/323830303a3261303a3a2f33322d3438203d3e203139313639.roa
File:                     323830303a3261303a3a2f33322d3438203d3e203139313639.roa (raw, json)
Hash identifier:          Ser1xtjvLPryhzwn47BrWfVhMoIaymcpd/Dr5cndgTM=
Subject key identifier:   84:58:5A:B0:EC:8B:58:6F:E6:13:A9:78:3B:AF:01:3E:57:8D:BD:01
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       18F786EDC491FB9A9F9466142C3EC0654208938B
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/323830303a3261303a3a2f33322d3438203d3e203139313639.roa
Signing time:             Tue 06 Jan 2026 19:08:40 +0000
ROA not before:           Tue 06 Jan 2026 19:03:40 +0000
ROA not after:            Tue 05 Jan 2027 19:08:40 +0000
asID:                     19169
IP address blocks:        2800:2a0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 13:24:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:f7:86:ed:c4:91:fb:9a:9f:94:66:14:2c:3e:c0:65:42:08:93:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Jan  6 19:03:40 2026 GMT
            Not After : Jan  5 19:08:40 2027 GMT
        Subject: CN=84585AB0EC8B586FE613A9783BAF013E578DBD01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:97:13:9a:5a:65:f7:89:10:61:52:e4:fb:f6:
                    75:52:05:81:7f:ae:10:01:db:ec:9f:71:8e:fe:01:
                    13:a6:22:ca:a2:72:97:7e:d0:02:65:70:6c:28:77:
                    62:26:a4:d8:de:65:1e:65:12:f4:63:12:12:40:08:
                    66:5a:17:bb:be:6b:dc:8f:4c:78:0f:4c:f1:53:df:
                    5c:46:41:f4:78:41:bd:ce:41:d0:87:71:07:ff:ea:
                    98:05:e1:7c:f7:00:45:af:1b:01:cf:5c:77:c5:af:
                    d4:f3:9c:04:c2:cc:3c:e8:46:c4:13:0d:90:3d:9c:
                    15:43:9d:f1:93:0d:51:f8:2d:26:dc:e3:05:20:1a:
                    07:12:82:d4:6b:da:c2:26:4a:00:27:0e:55:03:fd:
                    32:b8:d3:e0:5c:93:bf:b4:1a:e6:35:d1:54:00:b1:
                    f1:a7:0d:a5:22:08:44:4c:16:75:5b:94:3c:a1:0d:
                    77:e2:d1:e0:10:1e:ed:1c:5d:e1:02:db:bd:da:e1:
                    c9:06:4d:13:b3:98:eb:69:37:27:b3:34:e8:58:32:
                    1a:39:6e:97:2d:3a:47:e0:cd:17:7e:b6:34:8e:0e:
                    37:aa:ac:a1:ab:8f:4e:8e:fa:fa:5b:c7:78:9c:6e:
                    7c:4d:7c:fb:92:dd:86:fd:5d:e3:a4:03:a5:75:07:
                    e8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:58:5A:B0:EC:8B:58:6F:E6:13:A9:78:3B:AF:01:3E:57:8D:BD:01
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/323830303a3261303a3a2f33322d3438203d3e203139313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:2a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:7e:01:04:91:74:26:17:a9:f4:25:c0:68:a4:90:1d:03:3f:
         1f:c9:d1:47:dd:68:66:24:f7:0b:f0:e2:fe:e5:c3:c4:e6:49:
         d2:4c:0d:34:62:21:81:80:f9:2d:71:00:25:d2:7b:7b:af:86:
         f7:22:60:58:b8:5a:ce:70:db:8a:eb:41:3d:47:4a:89:e2:52:
         04:0c:8c:38:ab:c6:8d:af:a1:a4:e3:36:15:4e:69:35:53:06:
         11:e4:e3:7a:8a:b0:fd:78:ad:a5:96:15:70:bd:c2:17:d3:b9:
         21:da:43:fb:50:21:fe:98:60:79:f0:a5:e8:ce:9d:0a:52:10:
         22:c1:f5:3b:71:94:8d:ba:de:1d:4f:77:07:40:0c:12:1b:8f:
         62:38:6b:da:00:60:c8:8d:d5:f0:47:8a:cd:fd:0f:3c:37:e0:
         45:bf:4f:9d:26:70:27:d8:d9:a3:a3:fc:c0:3c:64:6c:3e:38:
         1a:76:72:93:07:58:16:1d:ca:11:d5:f1:bb:27:a1:a7:42:2f:
         09:25:73:c3:80:a5:f6:e6:87:6f:a1:9f:ba:7b:1c:8d:2b:95:
         11:2b:67:c3:9d:88:34:cc:90:89:50:5a:00:48:a4:e9:95:46:
         78:91:1e:c8:b4:19:ce:c2:01:9c:3c:03:ea:da:8c:fc:39:02:
         73:53:b3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 23:37:14 2026 by rpki-client