This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8A7E9C6F49D37CAC4E698A4CEA7B1D069C6A263B3A2B414F1E18703C030A4FC9/0/323830303a6266303a3a2f33322d3438203d3e203237393437.roa
File:                     323830303a6266303a3a2f33322d3438203d3e203237393437.roa (raw, json)
Hash identifier:          kiXeOONy+gIy3fy2LgfG+jwyBV+trcf4QHs7qDclP1E=
Subject key identifier:   25:5F:45:4F:56:9D:71:02:F8:9A:5B:A8:CE:F0:BB:5C:A0:01:6F:2E
Certificate issuer:       /CN=639E50C67AC676F9C8404AC3A746CC4B724483E3
Certificate serial:       599F73A22BD01F7434BA4EE6DE550AB2B0E1A7A5
Authority key identifier: 63:9E:50:C6:7A:C6:76:F9:C8:40:4A:C3:A7:46:CC:4B:72:44:83:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/639E50C67AC676F9C8404AC3A746CC4B724483E3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8A7E9C6F49D37CAC4E698A4CEA7B1D069C6A263B3A2B414F1E18703C030A4FC9/0/323830303a6266303a3a2f33322d3438203d3e203237393437.roa
Signing time:             Tue 06 Jan 2026 20:53:04 +0000
ROA not before:           Tue 06 Jan 2026 20:48:04 +0000
ROA not after:            Tue 05 Jan 2027 20:53:04 +0000
asID:                     27947
IP address blocks:        2800:bf0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8A7E9C6F49D37CAC4E698A4CEA7B1D069C6A263B3A2B414F1E18703C030A4FC9/0/639E50C67AC676F9C8404AC3A746CC4B724483E3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8A7E9C6F49D37CAC4E698A4CEA7B1D069C6A263B3A2B414F1E18703C030A4FC9/0/639E50C67AC676F9C8404AC3A746CC4B724483E3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/639E50C67AC676F9C8404AC3A746CC4B724483E3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 25 Jan 2026 09:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:9f:73:a2:2b:d0:1f:74:34:ba:4e:e6:de:55:0a:b2:b0:e1:a7:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639E50C67AC676F9C8404AC3A746CC4B724483E3
        Validity
            Not Before: Jan  6 20:48:04 2026 GMT
            Not After : Jan  5 20:53:04 2027 GMT
        Subject: CN=255F454F569D7102F89A5BA8CEF0BB5CA0016F2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:38:06:9f:bf:4f:79:85:9f:48:d0:f7:b4:78:
                    46:11:40:a0:86:ee:13:81:ad:3e:18:65:08:a1:22:
                    63:c1:cc:a2:09:23:cc:ad:da:d0:52:a0:ae:bb:c6:
                    f0:f1:52:54:66:eb:31:15:8f:80:b3:ae:92:77:c5:
                    75:be:39:27:17:70:70:6e:2f:88:5a:82:40:2a:a9:
                    de:6c:0c:1c:f6:c1:21:14:dd:21:c4:0d:dc:32:26:
                    dd:c2:8a:a0:70:3b:f5:03:74:31:84:60:6c:b3:70:
                    77:4e:e9:ca:6a:df:fe:0c:43:a9:fb:94:50:f7:a2:
                    16:51:27:91:3d:a6:d4:86:82:29:11:fa:e7:2f:eb:
                    3a:71:0b:ff:5b:24:5e:4f:c8:6b:c8:be:dc:28:e0:
                    fa:31:ba:5f:55:a1:4a:0a:af:1d:9e:61:da:60:a4:
                    6a:cf:c8:20:70:ed:7f:48:61:7f:11:43:f0:df:c2:
                    fb:7a:aa:b0:62:14:f1:f7:42:67:42:d8:6a:72:52:
                    aa:c5:d9:70:0d:81:a6:22:90:ae:a2:fe:c9:9b:71:
                    5c:5f:5d:4f:75:0f:10:3d:da:7e:c7:3b:ac:e4:ef:
                    4c:49:6c:95:97:ed:53:37:5e:5c:22:ef:9d:d0:5f:
                    6c:8e:e1:76:a0:31:47:ec:ff:8c:25:44:1a:ce:a1:
                    57:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:5F:45:4F:56:9D:71:02:F8:9A:5B:A8:CE:F0:BB:5C:A0:01:6F:2E
            X509v3 Authority Key Identifier:
                keyid:63:9E:50:C6:7A:C6:76:F9:C8:40:4A:C3:A7:46:CC:4B:72:44:83:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8A7E9C6F49D37CAC4E698A4CEA7B1D069C6A263B3A2B414F1E18703C030A4FC9/0/639E50C67AC676F9C8404AC3A746CC4B724483E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/639E50C67AC676F9C8404AC3A746CC4B724483E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8A7E9C6F49D37CAC4E698A4CEA7B1D069C6A263B3A2B414F1E18703C030A4FC9/0/323830303a6266303a3a2f33322d3438203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:bf0::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:ac:78:56:19:e5:0c:6d:12:a0:3d:da:ca:e0:34:ab:fd:93:
         8e:1d:93:16:71:59:5f:23:cd:97:7a:a9:1e:5a:83:32:44:09:
         99:b4:de:3a:81:f7:19:75:ad:b6:d6:ee:4b:65:d0:e6:34:3b:
         53:0f:fa:a7:2f:d8:7a:65:7a:bf:62:43:92:26:89:4c:47:8f:
         09:13:f2:ac:eb:a0:07:03:7f:3f:e3:9a:b5:bd:56:36:75:eb:
         fc:5d:6a:cf:cf:fc:a8:39:56:bc:ca:6c:1c:66:41:e8:93:a5:
         44:93:79:71:3d:2e:fb:2d:13:a2:7a:af:65:32:0f:20:eb:1d:
         ed:19:d8:1f:ab:8e:2c:70:f4:fd:8f:94:ba:c8:ee:c7:65:a6:
         42:8e:89:a2:42:5c:31:17:91:01:6c:1f:70:62:e8:9e:5b:1f:
         88:2a:9a:20:44:5d:50:1a:9c:6c:2a:0e:29:8f:a2:bd:de:94:
         50:c1:f8:69:82:69:25:04:01:cb:ce:27:37:4b:0e:ff:ad:d4:
         2c:46:03:20:aa:d7:46:83:09:6f:62:c2:01:44:34:f6:3f:35:
         63:55:b8:64:bd:65:c0:26:ad:a9:eb:d0:7c:7a:54:ac:fc:df:
         f7:d6:8e:bd:39:35:c4:1b:04:64:e2:6c:87:8a:26:5d:0f:d0:
         f0:e3:6a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 17:37:23 2026 by rpki-client