This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/323830333a623139303a3530303a3a2f34302d3430203d3e20323732393339.roa
File:                     323830333a623139303a3530303a3a2f34302d3430203d3e20323732393339.roa (raw, json)
Hash identifier:          dFPqjWteZo9OVFV074TJlfSJi2Ib/XUBLPxv2y1xaBo=
Subject key identifier:   47:83:7E:E5:C6:3B:12:A9:0B:9E:BD:B4:8B:77:A9:BA:B6:E8:6D:6D
Certificate issuer:       /CN=E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8
Certificate serial:       5FFCB3B49C23FF7BEE75BA8454016C44D19C8C68
Authority key identifier: E5:B3:F4:03:2F:D6:8E:C9:C0:5F:AD:BA:43:7C:34:59:E3:C7:A2:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/323830333a623139303a3530303a3a2f34302d3430203d3e20323732393339.roa
Signing time:             Tue 06 Jan 2026 19:11:06 +0000
ROA not before:           Tue 06 Jan 2026 19:06:06 +0000
ROA not after:            Tue 05 Jan 2027 19:11:06 +0000
asID:                     272939
IP address blocks:        2803:b190:500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 03:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:fc:b3:b4:9c:23:ff:7b:ee:75:ba:84:54:01:6c:44:d1:9c:8c:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8
        Validity
            Not Before: Jan  6 19:06:06 2026 GMT
            Not After : Jan  5 19:11:06 2027 GMT
        Subject: CN=47837EE5C63B12A90B9EBDB48B77A9BAB6E86D6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:62:6d:f2:bc:ff:7c:24:c7:2c:aa:27:cd:c5:
                    6a:5a:c9:5f:f9:1b:8b:49:bf:d1:88:ef:4c:e1:b7:
                    72:4b:e7:e5:3c:80:be:41:0d:05:02:58:5e:59:fd:
                    a8:c5:ce:e7:f8:38:45:82:c1:fa:16:83:ce:30:70:
                    ae:f0:ff:88:a8:b0:d7:2a:5d:b9:56:ae:f2:96:f8:
                    d4:65:28:d5:5e:63:07:44:4c:1c:af:ba:39:15:1c:
                    99:ec:db:b0:ea:bb:67:b3:f7:f4:33:7c:5f:30:5e:
                    d2:c4:a4:40:34:9c:f6:7c:12:69:e8:d9:8d:46:5c:
                    8f:40:e2:0e:0f:87:a5:d0:9c:23:ab:c7:ef:01:b1:
                    09:2e:96:be:12:0b:56:45:00:9e:b7:e3:2f:f7:a8:
                    57:93:78:bb:c4:77:7f:a7:82:9c:99:c5:8c:d5:81:
                    57:ee:f6:ec:26:cf:3b:c4:97:2d:b7:7f:f2:2d:e7:
                    67:2f:16:84:e1:24:fd:34:09:88:c7:a9:e4:ff:15:
                    4c:64:6b:81:99:3c:b4:09:23:95:cf:e2:a8:4c:33:
                    47:6f:ee:68:af:d3:03:e5:e4:e7:17:ad:01:ab:66:
                    8b:0e:e8:5e:78:e6:2c:54:cc:13:9c:0a:f6:5f:1a:
                    13:c0:10:29:a5:ee:f5:e5:a4:90:9e:da:7b:83:c4:
                    50:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:83:7E:E5:C6:3B:12:A9:0B:9E:BD:B4:8B:77:A9:BA:B6:E8:6D:6D
            X509v3 Authority Key Identifier:
                keyid:E5:B3:F4:03:2F:D6:8E:C9:C0:5F:AD:BA:43:7C:34:59:E3:C7:A2:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/323830333a623139303a3530303a3a2f34302d3430203d3e20323732393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b190:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         93:97:bf:7a:69:51:f0:bc:5a:bf:6f:a7:c1:bb:65:ac:10:18:
         69:e5:b3:87:84:ad:cf:68:68:04:9f:9a:6b:3e:03:b3:b7:d9:
         b3:c5:40:7e:36:69:24:75:09:0f:dc:5e:8d:d8:21:fc:6a:35:
         99:6b:65:11:ae:4e:5a:82:37:c3:63:5a:bf:25:35:9c:c2:18:
         8d:7f:d1:d0:c8:ef:1e:93:e5:61:3e:2d:06:17:aa:87:3c:0d:
         50:71:1a:f1:c2:58:db:bc:71:ab:10:36:05:1b:1b:9b:c2:3d:
         6a:da:b3:6d:ed:f0:c0:a0:7c:94:e0:b3:12:fb:97:17:2b:ef:
         2f:a7:a5:d1:22:c0:2e:74:1e:45:ab:69:e5:be:ef:61:c7:75:
         a2:43:a7:32:fe:87:e0:72:7c:c6:99:f6:f5:24:1d:2f:63:69:
         54:13:ca:8b:0a:3a:dc:da:9e:1c:51:a2:83:7a:15:e2:ed:d0:
         7c:39:ba:fc:f6:c5:f8:53:4a:76:e9:82:cc:4e:7b:18:d4:94:
         ac:1c:57:f2:84:f3:3d:c1:ed:79:48:51:5e:fe:8d:9e:df:c7:
         52:c4:82:28:03:c4:e6:8a:93:34:5f:8d:0e:77:23:90:37:a8:
         ec:67:9d:b9:51:9a:26:e9:d5:ca:5b:83:78:18:ea:9c:e9:36:
         11:bc:6a:6d
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUX/yztJwj/3vudbqEVAFsRNGcjGgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTVCM0Y0MDMyRkQ2OEVDOUMwNUZBREJBNDM3QzM0NTlF
M0M3QTJBODAeFw0yNjAxMDYxOTA2MDZaFw0yNzAxMDUxOTExMDZaMDMxMTAvBgNV
BAMTKDQ3ODM3RUU1QzYzQjEyQTkwQjlFQkRCNDhCNzdBOUJBQjZFODZENkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJYm3yvP98JMcsqifNxWpayV/5
G4tJv9GI70zht3JL5+U8gL5BDQUCWF5Z/ajFzuf4OEWCwfoWg84wcK7w/4iosNcq
XblWrvKW+NRlKNVeYwdETByvujkVHJns27Dqu2ez9/QzfF8wXtLEpEA0nPZ8Emno
2Y1GXI9A4g4Ph6XQnCOrx+8BsQkulr4SC1ZFAJ634y/3qFeTeLvEd3+ngpyZxYzV
gVfu9uwmzzvEly23f/It52cvFoThJP00CYjHqeT/FUxka4GZPLQJI5XP4qhMM0dv
7miv0wPl5OcXrQGrZosO6F545ixUzBOcCvZfGhPAECml7vXlpJCe2nuDxFDHAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUR4N+5cY7EqkLnr20i3epurbobW0wHwYDVR0j
BBgwFoAU5bP0Ay/WjsnAX626Q3w0WePHoqgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wQjcwOTNGQzJFNjc3NkQxMjU3QjI1MjlDNTdBMjdFQjY4
QzcwMEIyMDMyRTUyRjQ0MDIzRTE3MkI1RTgxRjhDLzAvRTVCM0Y0MDMyRkQ2OEVD
OUMwNUZBREJBNDM3QzM0NTlFM0M3QTJBOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNUIzRjQwMzJGRDY4RUM5QzA1
RkFEQkE0MzdDMzQ1OUUzQzdBMkE4LmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEI3MDkzRkMyRTY3NzZEMTI1N0IyNTI5QzU3QTI3RUI2OEM3MDBCMjAz
MkU1MkY0NDAyM0UxNzJCNUU4MUY4Qy8wLzMyMzgzMDMzM2E2MjMxMzkzMDNhMzUz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNzMyMzkzMzM5LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAOxkAUwDQYJKoZIhvcNAQELBQADggEBAJOXv3ppUfC8Wr9vp8G7ZawQGGnl
s4eErc9oaASfmms+A7O32bPFQH42aSR1CQ/cXo3YIfxqNZlrZRGuTlqCN8NjWr8l
NZzCGI1/0dDI7x6T5WE+LQYXqoc8DVBxGvHCWNu8casQNgUbG5vCPWras23t8MCg
fJTgsxL7lxcr7y+npdEiwC50HkWraeW+72HHdaJDpzL+h+ByfMaZ9vUkHS9jaVQT
yosKOtzanhxRooN6FeLt0Hw5uvz2xfhTSnbpgsxOexjUlKwcV/KE8z3B7XlIUV7+
jZ7fx1LEgigDxOaKkzRfjQ53I5A3qOxnnblRmibp1cpbg3gY6pzpNhG8am0=
-----END CERTIFICATE-----
Generated at Mon Jan 12 14:33:31 2026 by rpki-client