This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04BB42195A3038A81C1F1200E30F8D51F752801E722B954EE7A5705D70C72CB0/0/323830303a3239303a3a2f33322d3332203d3e203230303135.roa
File:                     323830303a3239303a3a2f33322d3332203d3e203230303135.roa (raw, json)
Hash identifier:          6j1tEHhZhMmIZjy6pMG3TOZXrtH+IN2NMbc1xzQLA5w=
Subject key identifier:   3A:C0:1E:92:79:19:9F:FF:8B:7A:46:41:46:49:EA:EA:49:87:9C:53
Certificate issuer:       /CN=BA56744DBF20010C478D63405BC3FD8408043C5B
Certificate serial:       1C03C4D6EB950EA51004C42356CFB2C2BD72A4CA
Authority key identifier: BA:56:74:4D:BF:20:01:0C:47:8D:63:40:5B:C3:FD:84:08:04:3C:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA56744DBF20010C478D63405BC3FD8408043C5B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04BB42195A3038A81C1F1200E30F8D51F752801E722B954EE7A5705D70C72CB0/0/323830303a3239303a3a2f33322d3332203d3e203230303135.roa
Signing time:             Tue 06 Jan 2026 19:27:03 +0000
ROA not before:           Tue 06 Jan 2026 19:22:03 +0000
ROA not after:            Tue 05 Jan 2027 19:27:03 +0000
asID:                     20015
IP address blocks:        2800:290::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/04BB42195A3038A81C1F1200E30F8D51F752801E722B954EE7A5705D70C72CB0/0/BA56744DBF20010C478D63405BC3FD8408043C5B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/04BB42195A3038A81C1F1200E30F8D51F752801E722B954EE7A5705D70C72CB0/0/BA56744DBF20010C478D63405BC3FD8408043C5B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA56744DBF20010C478D63405BC3FD8408043C5B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 13:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:03:c4:d6:eb:95:0e:a5:10:04:c4:23:56:cf:b2:c2:bd:72:a4:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA56744DBF20010C478D63405BC3FD8408043C5B
        Validity
            Not Before: Jan  6 19:22:03 2026 GMT
            Not After : Jan  5 19:27:03 2027 GMT
        Subject: CN=3AC01E9279199FFF8B7A46414649EAEA49879C53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c6:86:fa:de:8e:36:0a:15:b7:b8:cd:ef:25:
                    95:c2:7e:db:ad:6d:b7:f5:a7:d5:63:58:33:f1:cd:
                    64:88:68:77:a4:8c:cf:5d:5d:bc:8a:e6:c9:ab:f9:
                    b6:b6:80:35:df:71:ac:ca:f6:c9:09:89:2d:59:3e:
                    51:fa:39:26:f8:50:94:06:52:50:24:91:fa:b0:5c:
                    72:59:f7:35:51:cd:33:a5:a4:a3:af:51:e9:d2:bc:
                    1a:d1:7d:28:a4:5e:01:ac:ab:5f:36:00:19:80:c8:
                    84:0a:64:26:42:4d:b0:b2:13:d8:c2:7b:29:17:97:
                    e5:71:2f:13:05:c2:b4:56:d3:f1:4e:3e:71:dc:98:
                    7c:97:07:64:92:1a:e4:bf:cc:f8:09:83:9b:6a:93:
                    43:84:f4:5a:dc:c5:f9:71:9f:3a:08:de:6b:74:93:
                    5f:1d:ad:fe:2c:a6:b8:35:dd:3c:f2:8a:52:ee:9b:
                    dd:2d:1e:fd:ab:18:28:d2:17:2b:c8:92:10:f6:b3:
                    49:76:fc:ba:f4:ae:e5:36:75:99:af:12:d5:1e:c6:
                    5a:f6:15:ea:ff:0c:da:6b:fb:b8:14:b3:12:64:e3:
                    9f:d5:c7:71:c2:00:bd:84:fc:f0:41:00:3a:00:b2:
                    54:5c:28:cf:9e:06:71:26:e9:0f:c4:9f:da:3f:9f:
                    72:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C0:1E:92:79:19:9F:FF:8B:7A:46:41:46:49:EA:EA:49:87:9C:53
            X509v3 Authority Key Identifier:
                keyid:BA:56:74:4D:BF:20:01:0C:47:8D:63:40:5B:C3:FD:84:08:04:3C:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04BB42195A3038A81C1F1200E30F8D51F752801E722B954EE7A5705D70C72CB0/0/BA56744DBF20010C478D63405BC3FD8408043C5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA56744DBF20010C478D63405BC3FD8408043C5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04BB42195A3038A81C1F1200E30F8D51F752801E722B954EE7A5705D70C72CB0/0/323830303a3239303a3a2f33322d3332203d3e203230303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:290::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:84:26:93:28:09:68:20:de:55:de:ad:fe:48:1a:77:75:f0:
         58:4a:ba:5f:93:a5:ed:de:ee:ee:47:d9:d9:b1:a9:9a:b5:c3:
         b2:79:3b:72:de:4c:c0:57:75:0a:e6:b7:99:f4:10:36:34:aa:
         d3:f8:21:f4:03:36:f2:68:82:8f:96:0e:8c:7b:6e:59:1a:72:
         cd:d8:7c:3a:b2:45:6f:cb:f0:50:e7:73:a8:3e:1c:66:24:f0:
         07:7a:79:9c:e7:67:1d:7f:13:68:82:b3:ff:59:ea:f8:cf:e6:
         fb:bf:ba:6e:37:24:ab:45:06:a1:6d:91:d8:6a:56:8d:c6:52:
         72:37:56:04:38:34:5f:2e:e6:69:bd:8d:3a:ae:89:2e:84:c4:
         4e:0a:a4:ee:8e:6a:29:df:c7:cd:1b:a8:cc:ca:8f:a4:05:b8:
         b2:28:18:10:7d:83:27:99:10:8a:1b:55:31:6a:89:3b:7d:ca:
         22:ea:0d:27:47:c9:a3:50:cb:cf:e3:03:cf:f8:c9:cc:1a:74:
         84:01:e8:db:d8:a5:ed:42:af:a5:85:c4:0d:48:80:54:31:dc:
         25:dc:ba:09:99:1f:78:39:74:bf:d9:d0:d8:bf:89:33:dd:c4:
         fa:b5:27:e6:70:56:e7:3b:2b:6f:f3:5b:bf:b3:9e:f4:fd:ff:
         51:44:c4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 20:34:04 2026 by rpki-client