This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/597EBC297BBD824DD56B6F5C398686DA66CAC830FA9CBD54BD8F24CE3AA7A50F/0/323830333a653265303a3a2f33322d3332203d3e20323639393233.roa
File:                     323830333a653265303a3a2f33322d3332203d3e20323639393233.roa (raw, json)
Hash identifier:          AP3oVt4xPsAqIcW8dZcqdUulz4NzieDSASjs93rxbes=
Subject key identifier:   4A:70:56:9E:5D:58:EE:9F:A8:4C:97:FF:1A:C4:D0:FC:9D:64:DC:BF
Certificate issuer:       /CN=4D56876B86897911DD0C6CF938CF6E3FEB03C360
Certificate serial:       0205E6289DDE95AC5C82B1039A5E6ADFF4C406CE
Authority key identifier: 4D:56:87:6B:86:89:79:11:DD:0C:6C:F9:38:CF:6E:3F:EB:03:C3:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D56876B86897911DD0C6CF938CF6E3FEB03C360.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/597EBC297BBD824DD56B6F5C398686DA66CAC830FA9CBD54BD8F24CE3AA7A50F/0/323830333a653265303a3a2f33322d3332203d3e20323639393233.roa
Signing time:             Tue 06 Jan 2026 19:14:26 +0000
ROA not before:           Tue 06 Jan 2026 19:09:26 +0000
ROA not after:            Tue 05 Jan 2027 19:14:26 +0000
asID:                     269923
IP address blocks:        2803:e2e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/597EBC297BBD824DD56B6F5C398686DA66CAC830FA9CBD54BD8F24CE3AA7A50F/0/4D56876B86897911DD0C6CF938CF6E3FEB03C360.crl
                          rsync://repository.lacnic.net/rpki/lacnic/597EBC297BBD824DD56B6F5C398686DA66CAC830FA9CBD54BD8F24CE3AA7A50F/0/4D56876B86897911DD0C6CF938CF6E3FEB03C360.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D56876B86897911DD0C6CF938CF6E3FEB03C360.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 03:59:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:05:e6:28:9d:de:95:ac:5c:82:b1:03:9a:5e:6a:df:f4:c4:06:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D56876B86897911DD0C6CF938CF6E3FEB03C360
        Validity
            Not Before: Jan  6 19:09:26 2026 GMT
            Not After : Jan  5 19:14:26 2027 GMT
        Subject: CN=4A70569E5D58EE9FA84C97FF1AC4D0FC9D64DCBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a8:bc:2f:0b:7d:2f:ea:6c:96:9b:99:5d:41:
                    e0:54:f4:97:be:4f:1e:22:bb:04:fa:c6:f4:48:2a:
                    ae:7a:96:2c:88:e7:af:ef:11:88:3f:b2:2f:e0:18:
                    69:c3:ad:ec:d6:0c:03:c5:58:ae:90:33:41:eb:3e:
                    bf:3b:ce:86:1d:c9:73:99:ac:5b:9f:f0:f7:03:57:
                    c6:de:24:99:52:16:98:a2:b2:94:5e:43:ff:0e:a2:
                    e7:47:32:4d:e4:4e:8b:e4:4d:96:94:a9:7a:28:be:
                    18:0d:ab:ac:6b:e8:99:a1:07:fc:8d:3b:04:4e:f6:
                    a1:2c:21:dd:fc:6b:d1:30:4e:4c:76:55:4d:e3:8d:
                    9b:57:c1:89:15:69:8c:f0:d2:e5:20:2c:66:19:c6:
                    2c:ae:d0:45:4f:c0:fe:cc:e4:51:e6:77:b9:e2:7f:
                    8c:26:dc:18:36:78:c9:58:22:d9:1c:25:aa:bb:d6:
                    2c:62:f2:29:4c:ff:4c:09:bf:c7:0e:d7:0b:a0:ef:
                    0b:38:28:6f:c6:58:85:86:32:1c:77:0f:bc:0a:cf:
                    60:bc:8f:8f:1a:90:ee:4c:d7:2f:df:40:49:8c:df:
                    4b:1c:50:9a:14:32:52:a3:5d:2f:8b:0c:dd:49:66:
                    bc:67:17:b9:d1:41:2e:28:7c:42:3d:4c:32:b2:29:
                    48:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:70:56:9E:5D:58:EE:9F:A8:4C:97:FF:1A:C4:D0:FC:9D:64:DC:BF
            X509v3 Authority Key Identifier:
                keyid:4D:56:87:6B:86:89:79:11:DD:0C:6C:F9:38:CF:6E:3F:EB:03:C3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/597EBC297BBD824DD56B6F5C398686DA66CAC830FA9CBD54BD8F24CE3AA7A50F/0/4D56876B86897911DD0C6CF938CF6E3FEB03C360.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D56876B86897911DD0C6CF938CF6E3FEB03C360.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/597EBC297BBD824DD56B6F5C398686DA66CAC830FA9CBD54BD8F24CE3AA7A50F/0/323830333a653265303a3a2f33322d3332203d3e20323639393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e2e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:18:e0:e4:66:46:04:a2:1a:5b:94:ef:e1:ec:7f:01:7b:7c:
         00:75:e4:9b:b4:0b:7b:4a:c1:23:8b:71:d6:ca:5c:88:25:7c:
         56:92:1c:4d:ee:1c:3e:72:e4:2e:ab:51:e1:c7:5d:33:71:98:
         96:2f:d4:0c:8d:37:30:74:0f:ca:59:9c:07:a3:b1:f7:08:87:
         d3:29:03:c3:6d:08:4c:6f:39:86:09:50:96:42:5f:74:b4:5c:
         2b:0b:35:87:45:02:4c:d7:b8:3a:13:b1:b6:b1:26:4a:1a:d2:
         38:84:b1:ff:b3:85:51:29:80:d0:41:4c:68:a5:2b:df:f4:be:
         87:a1:4e:b7:f3:e6:dd:cd:c7:d8:e8:6b:55:f8:d8:94:fc:0d:
         63:c1:43:64:31:4e:71:4e:6b:fd:12:f7:d2:3b:5c:85:f7:04:
         f0:2d:01:2c:90:64:f4:80:2d:61:7f:0e:57:51:56:35:60:2b:
         c6:48:8b:9e:d0:25:88:e2:bc:1e:fb:31:76:48:fa:11:68:a7:
         cd:3c:89:aa:69:ca:0d:30:86:e3:15:44:52:ea:00:33:3f:6d:
         56:90:ae:f7:d5:09:7d:65:80:68:31:6e:0a:38:27:aa:0e:34:
         df:ff:85:30:e8:9c:72:3c:79:72:f9:e6:11:d2:70:fd:d1:d6:
         ad:f7:a8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 03:23:35 2026 by rpki-client