This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D08C1E06ADE72FB8092DD3A617DAD405FE9F7A3D2CB30D96BADFE802A409CD0/0/323830333a3465303a3a2f33322d3335203d3e20323632323133.roa
File:                     323830333a3465303a3a2f33322d3335203d3e20323632323133.roa (raw, json)
Hash identifier:          3thTJL+VmZhm42yEfQ1UUlsoxKL9Mc7Gc/Sgy9AvXdI=
Subject key identifier:   D4:42:BB:0B:BB:67:10:B1:1D:88:55:3C:DF:17:C7:8A:34:7E:09:1F
Certificate issuer:       /CN=5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D
Certificate serial:       49DA7F128131670D32E77364883EFFE2F1B6E1C5
Authority key identifier: 5E:20:38:E8:41:92:BA:FB:E7:BC:D3:AC:CA:5B:C5:B4:3E:61:DA:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D08C1E06ADE72FB8092DD3A617DAD405FE9F7A3D2CB30D96BADFE802A409CD0/0/323830333a3465303a3a2f33322d3335203d3e20323632323133.roa
Signing time:             Tue 06 Jan 2026 19:37:28 +0000
ROA not before:           Tue 06 Jan 2026 19:32:28 +0000
ROA not after:            Tue 05 Jan 2027 19:37:28 +0000
asID:                     262213
IP address blocks:        2803:4e0::/32 maxlen: 35
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D08C1E06ADE72FB8092DD3A617DAD405FE9F7A3D2CB30D96BADFE802A409CD0/0/5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D08C1E06ADE72FB8092DD3A617DAD405FE9F7A3D2CB30D96BADFE802A409CD0/0/5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 23:49:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:da:7f:12:81:31:67:0d:32:e7:73:64:88:3e:ff:e2:f1:b6:e1:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D
        Validity
            Not Before: Jan  6 19:32:28 2026 GMT
            Not After : Jan  5 19:37:28 2027 GMT
        Subject: CN=D442BB0BBB6710B11D88553CDF17C78A347E091F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d4:69:7f:ce:22:9e:c5:b7:52:f9:4c:7f:44:
                    6e:4f:ec:fa:82:21:9f:fd:f4:93:31:fd:6c:71:22:
                    d3:47:38:e7:1d:2f:11:90:8e:fa:e0:03:74:0d:47:
                    7b:f3:fa:8c:b4:46:f9:d1:a6:b2:e0:1a:13:87:41:
                    f1:f5:8a:27:b2:91:21:08:bc:ac:dd:18:1f:0d:c5:
                    35:85:9c:b9:58:bc:92:e1:f6:47:11:91:98:d9:da:
                    28:f6:e1:fc:e4:1c:0c:b7:d8:37:53:6c:79:e1:e7:
                    15:e0:4c:85:8b:00:d9:75:d6:87:74:14:0d:24:b9:
                    25:c4:b4:5f:55:5a:a6:79:30:f4:33:37:50:37:69:
                    b7:36:b8:d2:34:48:95:1c:39:c2:b9:e6:f8:2d:13:
                    d8:09:7b:28:9d:2f:be:81:17:d4:f3:5d:73:e3:63:
                    1f:73:c0:0c:50:92:31:17:fb:65:1c:ee:07:07:5d:
                    26:e7:f0:b2:a0:53:3c:65:ac:5e:50:38:cf:58:31:
                    ca:c3:cf:54:0d:93:8c:51:f9:35:e1:3d:70:77:e4:
                    c2:79:57:04:6e:21:bf:bd:4d:36:83:71:0c:47:2d:
                    88:94:3c:3f:4b:1f:2c:b3:47:46:db:a2:f5:6f:ce:
                    2c:34:30:51:2e:61:4f:dd:94:d7:38:48:b2:c4:94:
                    3d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:42:BB:0B:BB:67:10:B1:1D:88:55:3C:DF:17:C7:8A:34:7E:09:1F
            X509v3 Authority Key Identifier:
                keyid:5E:20:38:E8:41:92:BA:FB:E7:BC:D3:AC:CA:5B:C5:B4:3E:61:DA:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D08C1E06ADE72FB8092DD3A617DAD405FE9F7A3D2CB30D96BADFE802A409CD0/0/5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D08C1E06ADE72FB8092DD3A617DAD405FE9F7A3D2CB30D96BADFE802A409CD0/0/323830333a3465303a3a2f33322d3335203d3e20323632323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:07:f5:2e:a0:95:a0:34:91:dc:95:8c:e3:b5:3d:46:e7:22:
         ea:96:e8:5b:87:ac:32:21:15:4e:85:8c:1c:be:fb:6c:5b:b3:
         80:3d:ce:99:20:75:e6:87:f5:8a:1f:67:85:76:e4:73:fe:47:
         e5:db:b0:fb:25:07:ca:d9:9b:d8:41:25:28:b6:6e:d5:1a:68:
         9f:1b:17:5a:f3:c6:8b:22:3f:d9:e1:23:9a:9d:a9:72:a5:32:
         1d:7e:86:09:3a:5a:d4:e2:ec:9a:4c:c7:78:70:20:47:5b:12:
         cc:4f:61:b2:c3:e7:12:38:a4:44:96:15:26:e6:3b:a4:55:c4:
         97:17:f5:f0:2f:bb:43:4d:00:1a:1d:68:5b:40:56:d4:cd:fd:
         c0:ea:da:85:f1:5f:52:a4:a8:e5:22:a3:13:65:26:d6:0f:52:
         b6:ec:8e:68:ca:f4:3d:7c:e1:7f:85:3e:72:86:ea:60:f9:86:
         ad:9f:1a:3c:8a:79:f4:fb:94:47:92:94:83:28:28:52:0a:b3:
         39:b2:f4:db:e6:4f:0a:5f:60:fa:31:2b:80:33:0b:2b:a8:b9:
         c0:4c:28:31:36:4e:e6:9e:10:05:58:f8:ba:13:69:bc:a1:92:
         bb:f2:22:1b:bf:74:df:ee:dc:2e:5f:6a:fd:ef:de:e0:1d:92:
         39:bf:c9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 10:40:11 2026 by rpki-client