This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/323830303a3439303a343830303a3a2f34302d3430203d3e203237393531.roa
File:                     323830303a3439303a343830303a3a2f34302d3430203d3e203237393531.roa (raw, json)
Hash identifier:          KPh1jHr96eVS5d1Jd0mOdba1kd99Lq9Ane5vnzEaxF0=
Subject key identifier:   D0:B7:F5:5F:C7:7B:38:B5:6F:ED:B8:EA:72:97:9E:1D:AC:73:C5:84
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       40BEE7547974A259DAE76C9BE179841845896BF0
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/323830303a3439303a343830303a3a2f34302d3430203d3e203237393531.roa
Signing time:             Tue 06 Jan 2026 20:48:46 +0000
ROA not before:           Tue 06 Jan 2026 20:43:46 +0000
ROA not after:            Tue 05 Jan 2027 20:48:46 +0000
asID:                     27951
IP address blocks:        2800:490:4800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 18:05:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:be:e7:54:79:74:a2:59:da:e7:6c:9b:e1:79:84:18:45:89:6b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Jan  6 20:43:46 2026 GMT
            Not After : Jan  5 20:48:46 2027 GMT
        Subject: CN=D0B7F55FC77B38B56FEDB8EA72979E1DAC73C584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:42:3e:ec:37:ce:94:c8:59:4d:04:c5:8c:15:
                    42:ec:24:01:d5:3e:b2:3e:b5:4f:9c:7e:c1:a9:23:
                    3a:81:0b:97:1d:91:d2:3d:d8:ed:cb:5b:0f:93:f7:
                    06:92:02:74:56:30:a2:42:92:7f:13:bc:16:8f:bc:
                    c5:a0:1b:a5:1b:65:63:d6:e7:ce:da:01:d2:05:e8:
                    8a:4c:1b:fa:cf:88:85:43:ff:db:4a:62:ac:c8:97:
                    97:46:a4:34:b7:d9:78:b7:53:eb:d6:a3:01:21:e6:
                    d8:84:f0:97:e5:34:4f:7f:6f:cd:00:7f:28:c2:45:
                    2c:bd:6b:b5:b7:9d:52:96:88:fb:d0:b4:80:37:4a:
                    3d:95:07:dc:aa:a0:76:13:01:21:40:1c:44:20:06:
                    eb:d4:f3:98:57:a6:6a:15:a9:5d:90:f7:a5:c6:af:
                    70:4b:16:b9:17:a5:98:c7:e0:7c:a2:d3:7e:54:9b:
                    eb:7b:75:0b:5b:f7:e6:4a:99:aa:ca:e4:8f:9e:13:
                    a1:96:63:c2:aa:c1:eb:48:81:86:22:bd:43:db:74:
                    9e:81:dd:dd:96:fc:90:75:da:d0:c6:49:62:4e:54:
                    5b:e3:79:10:ff:2a:47:8f:17:c5:14:f3:b3:d4:df:
                    cc:c8:16:5b:d2:03:5f:78:e8:eb:db:e5:17:01:d4:
                    ef:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B7:F5:5F:C7:7B:38:B5:6F:ED:B8:EA:72:97:9E:1D:AC:73:C5:84
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/323830303a3439303a343830303a3a2f34302d3430203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:490:4800::/40

    Signature Algorithm: sha256WithRSAEncryption
         29:d9:b2:24:fa:ab:bd:93:e4:cf:32:b8:93:60:a5:7d:04:7e:
         c0:e8:a2:6f:d2:5d:01:ac:9b:d2:c2:ee:f9:85:b5:0f:22:8a:
         9f:76:51:15:a8:5b:de:b5:0f:57:3f:1b:86:eb:2b:de:7b:30:
         8a:66:47:73:7f:35:ac:bc:86:fc:ea:05:5a:ad:a8:db:94:2d:
         98:b8:7b:51:94:19:68:2c:18:20:e7:41:02:0f:a1:f2:b0:be:
         90:f9:6f:d1:2c:aa:2a:52:1a:ba:24:dd:b5:cf:5f:43:63:e8:
         5a:3a:4c:22:c3:5d:7c:9d:a6:5e:7d:67:98:6b:bd:31:32:bd:
         d9:aa:f2:ba:41:77:10:63:83:12:95:4a:59:59:c7:61:63:50:
         2e:0a:73:2e:84:cc:a2:c2:f9:da:d6:d2:f0:15:60:f2:c7:03:
         ee:91:03:38:9a:04:80:50:15:7c:58:cc:d5:1b:b3:42:3d:85:
         ec:20:74:88:b1:37:ea:f8:30:95:73:2a:2f:62:0e:05:c5:51:
         fe:01:28:7d:44:0d:b8:31:4a:65:6a:72:e3:23:09:8a:1f:e9:
         1f:e3:8b:07:45:16:2c:ea:21:e4:66:7b:48:5b:5c:3c:50:ea:
         c2:44:68:c7:d2:2e:10:38:05:7c:1e:7f:64:bc:65:f8:f6:5c:
         b2:35:91:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 09:26:14 2026 by rpki-client