This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/323830333a656131303a3161613a3a2f34382d3438203d3e20323731393237.roa
File:                     323830333a656131303a3161613a3a2f34382d3438203d3e20323731393237.roa (raw, json)
Hash identifier:          DG1tiDOC/5c5fJ0u9FYbrrtUEgugZ1AaPk+7pHXXZRA=
Subject key identifier:   B5:74:15:F6:8A:A8:C1:4A:AB:DA:50:7F:0E:FF:31:1C:81:4E:20:CF
Certificate issuer:       /CN=5AC74DB2E733289AD330B5CC47EFF7E610D2236E
Certificate serial:       2D0E83C89D713FA92A3AAFCD06D16B090B66F2D6
Authority key identifier: 5A:C7:4D:B2:E7:33:28:9A:D3:30:B5:CC:47:EF:F7:E6:10:D2:23:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/323830333a656131303a3161613a3a2f34382d3438203d3e20323731393237.roa
Signing time:             Tue 06 Jan 2026 19:39:43 +0000
ROA not before:           Tue 06 Jan 2026 19:34:43 +0000
ROA not after:            Tue 05 Jan 2027 19:39:43 +0000
asID:                     271927
IP address blocks:        2803:ea10:1aa::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 18:31:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:0e:83:c8:9d:71:3f:a9:2a:3a:af:cd:06:d1:6b:09:0b:66:f2:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AC74DB2E733289AD330B5CC47EFF7E610D2236E
        Validity
            Not Before: Jan  6 19:34:43 2026 GMT
            Not After : Jan  5 19:39:43 2027 GMT
        Subject: CN=B57415F68AA8C14AABDA507F0EFF311C814E20CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c3:1d:33:58:de:82:37:bc:ed:65:23:68:27:
                    71:dc:e7:49:2a:99:43:74:a7:89:47:14:92:57:48:
                    c4:0e:00:cb:8b:0e:9e:2c:d8:2e:66:72:26:84:6c:
                    4c:09:19:4f:3a:a0:48:99:bf:89:ad:42:24:5e:13:
                    d4:27:d6:81:b8:77:36:41:72:7a:36:5d:b2:2a:bc:
                    a7:d3:03:14:ba:19:37:72:c1:82:75:7b:e2:57:79:
                    86:de:60:bd:25:5e:89:76:79:58:b2:55:1f:13:b1:
                    d8:86:81:f4:19:9e:6e:f8:db:fb:0d:60:d3:a9:26:
                    53:9e:f2:d1:b8:e0:c8:55:eb:c8:60:f1:f8:72:aa:
                    36:8b:e5:ac:4e:6c:b7:6f:44:89:6a:36:d4:a9:64:
                    47:ae:f3:fa:da:7e:4e:21:6a:75:54:fd:b3:d5:0a:
                    b1:4b:50:15:4e:28:0d:d8:1b:ca:ff:60:a7:98:c6:
                    69:15:7e:01:5a:8e:96:7a:86:f3:eb:d0:b6:40:a1:
                    23:cb:e5:8d:7f:d1:4c:37:fe:27:e2:30:7b:3b:d2:
                    b1:1b:d1:bf:e9:fa:fe:90:ea:ec:9b:5b:06:c6:f6:
                    81:66:6b:fd:1f:38:d7:a8:d9:b2:a9:a0:b9:8e:73:
                    f6:a4:62:87:81:c0:de:ce:68:f9:65:ad:09:86:0a:
                    62:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:74:15:F6:8A:A8:C1:4A:AB:DA:50:7F:0E:FF:31:1C:81:4E:20:CF
            X509v3 Authority Key Identifier:
                keyid:5A:C7:4D:B2:E7:33:28:9A:D3:30:B5:CC:47:EF:F7:E6:10:D2:23:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/323830333a656131303a3161613a3a2f34382d3438203d3e20323731393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ea10:1aa::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:6e:ee:04:7e:e8:ab:b1:36:33:e6:d4:93:e5:2b:7f:c6:ea:
         37:c2:8f:97:97:76:b0:a1:f0:cd:77:0e:7a:97:70:00:61:eb:
         ef:a5:8e:c0:93:34:51:21:89:ae:af:da:0d:c4:1d:2b:d8:d1:
         5b:04:ab:af:22:1b:5d:a5:ee:af:b9:16:84:e2:0e:ef:23:21:
         a2:b3:7f:20:56:de:ff:9d:c4:cb:11:fc:8d:78:3a:0d:0a:7e:
         f2:d3:a3:b4:5f:a0:fe:f3:d7:3b:c2:05:cf:dd:af:e8:33:b9:
         c9:7a:df:34:de:b3:87:1a:a3:0c:d1:2a:2f:00:3c:4d:3e:52:
         9c:6b:13:7b:96:ba:56:ae:f7:8a:fd:46:f8:e5:f6:ae:62:c9:
         f7:9c:6d:6f:de:43:ec:22:5f:dd:e6:94:08:89:3a:8d:3b:05:
         29:9e:b6:86:7d:5a:0c:ce:fa:a0:b3:03:b7:8f:d6:96:39:71:
         8e:50:d8:b3:90:cb:29:93:01:8f:a2:d3:69:79:50:03:02:d3:
         d0:8e:12:17:5c:88:f6:86:01:c2:7e:e5:07:1e:68:c4:b2:89:
         b2:7c:f4:b0:19:9a:f9:16:40:39:40:bb:e0:bd:ef:05:72:66:
         8e:72:b2:f9:02:75:89:e0:d2:bf:e2:1e:55:97:c5:f1:9a:41:
         45:53:74:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 16:01:32 2026 by rpki-client