This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25E66E6E20579163B502223B71B9DA3511AD417FEC7D054C5C9E8825E7DCD7EA/0/323830333a383931303a3a2f33392d3339203d3e203634313334.roa
File:                     323830333a383931303a3a2f33392d3339203d3e203634313334.roa (raw, json)
Hash identifier:          dEDuk/4kFbhdG1jshvNmfPsAPFWP3kP1UKRrjADQWmw=
Subject key identifier:   FC:AB:2E:6D:FB:72:68:9D:31:FA:67:E5:06:09:DF:3E:B7:4B:28:D6
Certificate issuer:       /CN=5E04FF1D1502CAA08A7AD24783C2E137D6AFC709
Certificate serial:       754CDE075E297576325096268D19E4C401018565
Authority key identifier: 5E:04:FF:1D:15:02:CA:A0:8A:7A:D2:47:83:C2:E1:37:D6:AF:C7:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E04FF1D1502CAA08A7AD24783C2E137D6AFC709.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25E66E6E20579163B502223B71B9DA3511AD417FEC7D054C5C9E8825E7DCD7EA/0/323830333a383931303a3a2f33392d3339203d3e203634313334.roa
Signing time:             Sat 27 Dec 2025 18:56:19 +0000
ROA not before:           Sat 27 Dec 2025 18:51:19 +0000
ROA not after:            Sat 26 Dec 2026 18:56:19 +0000
asID:                     64134
IP address blocks:        2803:8910::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25E66E6E20579163B502223B71B9DA3511AD417FEC7D054C5C9E8825E7DCD7EA/0/5E04FF1D1502CAA08A7AD24783C2E137D6AFC709.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25E66E6E20579163B502223B71B9DA3511AD417FEC7D054C5C9E8825E7DCD7EA/0/5E04FF1D1502CAA08A7AD24783C2E137D6AFC709.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E04FF1D1502CAA08A7AD24783C2E137D6AFC709.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 13:22:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:4c:de:07:5e:29:75:76:32:50:96:26:8d:19:e4:c4:01:01:85:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E04FF1D1502CAA08A7AD24783C2E137D6AFC709
        Validity
            Not Before: Dec 27 18:51:19 2025 GMT
            Not After : Dec 26 18:56:19 2026 GMT
        Subject: CN=FCAB2E6DFB72689D31FA67E50609DF3EB74B28D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c1:fe:96:c2:32:53:5c:c2:09:3b:5b:67:64:
                    ef:c2:7c:19:69:84:ac:42:28:ee:59:7f:7b:b3:83:
                    5d:07:5f:78:50:8d:74:77:8f:89:22:e3:96:df:a5:
                    cc:75:8c:eb:c2:25:8f:6a:4b:59:cd:8e:41:05:8e:
                    dd:56:d4:6f:79:a4:73:e6:cd:ff:01:e6:9c:b2:8f:
                    1d:bd:cf:ef:07:72:a0:f7:cc:d8:7c:d7:46:93:ad:
                    fa:a2:17:32:da:3a:36:9f:13:82:9e:39:79:73:3c:
                    c9:cd:cf:05:d5:c7:a8:ec:d2:93:1c:35:56:1e:10:
                    bc:fa:3a:c3:1d:b4:c0:e4:a5:29:ae:ea:2f:fc:93:
                    48:30:bc:a1:ef:33:80:9d:db:36:76:ec:19:28:fe:
                    73:c4:7b:c3:e4:27:57:36:6f:1d:71:11:de:10:8c:
                    e2:21:be:4c:10:ab:2e:d4:c6:6e:ab:71:69:d3:6e:
                    4b:bd:04:e6:98:b7:c5:8a:31:0c:09:7f:0f:71:c1:
                    2d:49:76:f0:82:74:d3:22:92:38:d0:02:ae:6d:f1:
                    c9:ef:b8:39:cd:de:92:94:0c:c1:0e:f0:a0:55:c3:
                    76:4b:22:f2:53:56:11:d7:54:4b:a3:f7:eb:e3:8e:
                    4b:bb:11:7f:9f:35:06:a7:88:95:0b:15:b1:5a:b9:
                    0e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:AB:2E:6D:FB:72:68:9D:31:FA:67:E5:06:09:DF:3E:B7:4B:28:D6
            X509v3 Authority Key Identifier:
                keyid:5E:04:FF:1D:15:02:CA:A0:8A:7A:D2:47:83:C2:E1:37:D6:AF:C7:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25E66E6E20579163B502223B71B9DA3511AD417FEC7D054C5C9E8825E7DCD7EA/0/5E04FF1D1502CAA08A7AD24783C2E137D6AFC709.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E04FF1D1502CAA08A7AD24783C2E137D6AFC709.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25E66E6E20579163B502223B71B9DA3511AD417FEC7D054C5C9E8825E7DCD7EA/0/323830333a383931303a3a2f33392d3339203d3e203634313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8910::/39

    Signature Algorithm: sha256WithRSAEncryption
         7b:6f:c9:b7:e8:e1:61:48:5a:ee:f0:ed:e7:c2:00:61:5f:5c:
         5f:6f:6f:35:e0:7a:05:98:82:29:cf:01:8a:73:b8:df:eb:21:
         61:15:44:8e:05:b6:e5:c9:79:8d:19:4f:d3:c0:dd:f5:29:f3:
         89:18:54:d1:a8:7f:f5:7b:f1:78:75:0d:25:38:db:45:44:20:
         f2:07:11:8d:11:5b:da:32:c4:3e:99:a0:f3:1b:0d:ef:d5:5f:
         36:30:d7:35:23:47:30:6a:82:db:e9:a8:77:73:92:66:1d:00:
         55:32:84:8d:13:40:9d:16:06:57:6d:b4:7a:c4:98:49:5c:fb:
         30:24:90:bd:79:48:c2:b4:aa:38:4c:17:9e:6e:95:8c:8c:29:
         77:12:1c:59:5b:ec:2c:ef:90:5c:be:d1:33:50:b7:68:e8:03:
         37:a1:b6:76:af:80:43:e2:b1:7e:22:98:90:2c:2f:b0:e5:84:
         a8:ae:6a:0c:02:5b:df:0b:27:bc:c0:6c:48:ef:89:d4:13:86:
         6d:b6:c0:1d:a1:d7:ad:1a:36:33:d6:28:f0:2a:8f:87:2e:73:
         54:8f:0e:8d:80:d0:bb:40:cb:fc:38:d6:c0:6f:39:6e:b5:6a:
         4f:26:c5:d5:55:77:cd:8d:b0:52:77:cb:4e:8e:49:c5:57:56:
         4b:b0:1e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 22:49:35 2026 by rpki-client