This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/323830333a656131303a343a3a2f34382d3438203d3e20323731393237.roa
File:                     323830333a656131303a343a3a2f34382d3438203d3e20323731393237.roa (raw, json)
Hash identifier:          qKSNiQ6p8I/lkXNhx/HErkWXINZ19UIZel4nNqJXC08=
Subject key identifier:   D3:8C:24:50:42:4C:D7:19:13:B4:E7:73:7E:F2:CB:F0:31:87:36:35
Certificate issuer:       /CN=5AC74DB2E733289AD330B5CC47EFF7E610D2236E
Certificate serial:       59C54CD08B62A5AA7050DD61F87B25127602AE86
Authority key identifier: 5A:C7:4D:B2:E7:33:28:9A:D3:30:B5:CC:47:EF:F7:E6:10:D2:23:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/323830333a656131303a343a3a2f34382d3438203d3e20323731393237.roa
Signing time:             Tue 06 Jan 2026 19:39:41 +0000
ROA not before:           Tue 06 Jan 2026 19:34:41 +0000
ROA not after:            Tue 05 Jan 2027 19:39:41 +0000
asID:                     271927
IP address blocks:        2803:ea10:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 18:31:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:c5:4c:d0:8b:62:a5:aa:70:50:dd:61:f8:7b:25:12:76:02:ae:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AC74DB2E733289AD330B5CC47EFF7E610D2236E
        Validity
            Not Before: Jan  6 19:34:41 2026 GMT
            Not After : Jan  5 19:39:41 2027 GMT
        Subject: CN=D38C2450424CD71913B4E7737EF2CBF031873635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:40:a5:57:23:fb:11:79:ae:ea:63:3a:46:0d:
                    e6:ef:7a:ab:c7:b3:0b:c4:14:96:99:cb:05:63:c5:
                    a9:55:aa:27:b6:ce:f7:a3:f5:14:82:0f:75:c3:2d:
                    ce:0a:dd:e8:e5:60:d9:e8:b7:4c:1a:bb:9c:37:31:
                    2e:68:b3:a1:0f:28:df:42:19:8a:f0:55:9f:8a:be:
                    15:ad:5c:0b:bc:1d:04:f1:93:41:46:7f:b5:88:e0:
                    9a:29:dd:0d:70:72:be:ad:62:21:7d:ae:e3:8a:9e:
                    b8:37:8f:8f:03:e1:42:fe:bb:a1:c8:02:6a:01:d1:
                    50:e7:54:2d:75:b2:1a:64:46:5a:46:21:b8:5e:d5:
                    73:45:28:e7:88:02:f3:d9:5f:36:ef:2f:7f:4a:2f:
                    61:ff:0c:fc:ee:23:95:f3:d8:60:14:f6:cf:db:50:
                    e3:6e:d6:42:2a:95:fb:de:c0:35:f5:3b:5b:b3:51:
                    ab:c6:e6:37:df:b5:fd:31:49:18:0e:29:a1:78:e7:
                    70:73:35:ff:53:3a:c4:15:2c:ae:05:a7:d2:48:85:
                    0d:87:a4:7c:90:75:fd:e8:d1:c6:50:66:86:f6:f2:
                    06:39:14:0f:ef:d1:4c:d6:c1:0c:65:b1:bf:5a:e5:
                    5d:e3:ef:17:c1:1b:b5:c6:2c:4f:26:8f:6a:82:18:
                    05:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:8C:24:50:42:4C:D7:19:13:B4:E7:73:7E:F2:CB:F0:31:87:36:35
            X509v3 Authority Key Identifier:
                keyid:5A:C7:4D:B2:E7:33:28:9A:D3:30:B5:CC:47:EF:F7:E6:10:D2:23:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/323830333a656131303a343a3a2f34382d3438203d3e20323731393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ea10:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:b4:e8:03:02:5a:cd:eb:1d:ad:8c:39:03:16:5f:22:3b:b9:
         93:31:a7:f0:af:70:1a:60:b3:56:e8:42:47:0c:6b:bf:1f:32:
         fb:9a:a7:6a:2c:cc:fe:d5:bb:62:d5:ad:6e:43:c4:c1:8e:bd:
         5e:f5:2a:f8:bb:a7:a9:f8:9f:98:37:ad:80:6e:c3:b5:b1:45:
         34:f7:31:e4:47:de:90:51:99:f1:ea:f6:6c:ba:0a:f9:53:87:
         9f:4e:99:91:e2:5c:f5:05:18:4a:01:74:97:4a:83:1e:77:81:
         bb:6e:34:c2:a9:91:79:40:a6:b9:ee:5f:98:c3:43:20:74:b5:
         c7:ee:ba:5e:9a:f3:21:83:9f:e9:0d:8e:52:17:59:4a:9d:90:
         83:96:71:ed:21:1e:69:08:a5:da:bc:ff:19:9c:be:59:3d:17:
         80:a5:47:38:4e:25:a7:07:51:8f:5c:41:db:2f:9a:9e:0c:68:
         1a:e0:c4:5d:d9:01:5b:4d:c4:2b:f3:6f:47:74:11:74:f9:db:
         89:ba:23:b8:75:72:91:9c:a7:8a:3e:e4:1d:cb:44:70:59:fc:
         50:5b:2d:88:59:a4:9e:65:e5:57:66:7d:45:40:16:3a:68:59:
         24:c7:f6:49:d1:7a:f6:9d:f1:4b:21:54:c3:a3:1d:8a:89:ba:
         91:8d:16:7a
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUWcVM0ItipapwUN1h+HslEnYCroYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUFDNzREQjJFNzMzMjg5QUQzMzBCNUNDNDdFRkY3RTYx
MEQyMjM2RTAeFw0yNjAxMDYxOTM0NDFaFw0yNzAxMDUxOTM5NDFaMDMxMTAvBgNV
BAMTKEQzOEMyNDUwNDI0Q0Q3MTkxM0I0RTc3MzdFRjJDQkYwMzE4NzM2MzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGQKVXI/sRea7qYzpGDebveqvH
swvEFJaZywVjxalVqie2zvej9RSCD3XDLc4K3ejlYNnot0wau5w3MS5os6EPKN9C
GYrwVZ+KvhWtXAu8HQTxk0FGf7WI4Jop3Q1wcr6tYiF9ruOKnrg3j48D4UL+u6HI
AmoB0VDnVC11shpkRlpGIbhe1XNFKOeIAvPZXzbvL39KL2H/DPzuI5Xz2GAU9s/b
UONu1kIqlfvewDX1O1uzUavG5jfftf0xSRgOKaF453BzNf9TOsQVLK4Fp9JIhQ2H
pHyQdf3o0cZQZob28gY5FA/v0UzWwQxlsb9a5V3j7xfBG7XGLE8mj2qCGAWhAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQU04wkUEJM1xkTtOdzfvLL8DGHNjUwHwYDVR0j
BBgwFoAUWsdNsuczKJrTMLXMR+/35hDSI24wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CODk5NUJGODYzNzUxQTVDNjA5NTE3NzAyNThERkU0Rjgy
REI3MzkwRTYyQzFCNzYyNUE1RTFGNDE5MDEyMEE5LzAvNUFDNzREQjJFNzMzMjg5
QUQzMzBCNUNDNDdFRkY3RTYxMEQyMjM2RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81QUM3NERCMkU3MzMyODlBRDMz
MEI1Q0M0N0VGRjdFNjEwRDIyMzZFLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjg5OTVCRjg2Mzc1MUE1QzYwOTUxNzcwMjU4REZFNEY4MkRCNzM5MEU2
MkMxQjc2MjVBNUUxRjQxOTAxMjBBOS8wLzMyMzgzMDMzM2E2NTYxMzEzMDNhMzQz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzEzOTMyMzcucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
A+oQAAQwDQYJKoZIhvcNAQELBQADggEBAFe06AMCWs3rHa2MOQMWXyI7uZMxp/Cv
cBpgs1boQkcMa78fMvuap2oszP7Vu2LVrW5DxMGOvV71Kvi7p6n4n5g3rYBuw7Wx
RTT3MeRH3pBRmfHq9my6CvlTh59OmZHiXPUFGEoBdJdKgx53gbtuNMKpkXlAprnu
X5jDQyB0tcfuul6a8yGDn+kNjlIXWUqdkIOWce0hHmkIpdq8/xmcvlk9F4ClRzhO
JacHUY9cQdsvmp4MaBrgxF3ZAVtNxCvzb0d0EXT524m6I7h1cpGcp4o+5B3LRHBZ
/FBbLYhZpJ5l5VdmfUVAFjpoWSTH9knRevad8UshVMOjHYqJupGNFno=
-----END CERTIFICATE-----
Generated at Tue Jan 13 16:01:39 2026 by rpki-client