This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B97F6E450D535A00402E0FE81687ED200B1C9EE6884C4CCB2FA342D14B3D069A/0/323830333a65303a3a2f33322d3438203d3e20323639383433.roa
File:                     323830333a65303a3a2f33322d3438203d3e20323639383433.roa (raw, json)
Hash identifier:          MZjagZhbrBtg1ealY70e1eXs/Dw7mVu8gI3gSHlx9dI=
Subject key identifier:   B0:A3:C0:2F:D5:AA:24:D6:C7:E9:E9:C7:71:DF:4A:DF:28:15:95:F9
Certificate issuer:       /CN=E0013BE61C4781324203A7DB7D11674E5D707D02
Certificate serial:       5A50682F72406045FC97CA9F8B2699259982F4C6
Authority key identifier: E0:01:3B:E6:1C:47:81:32:42:03:A7:DB:7D:11:67:4E:5D:70:7D:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0013BE61C4781324203A7DB7D11674E5D707D02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B97F6E450D535A00402E0FE81687ED200B1C9EE6884C4CCB2FA342D14B3D069A/0/323830333a65303a3a2f33322d3438203d3e20323639383433.roa
Signing time:             Mon 05 Jan 2026 18:57:17 +0000
ROA not before:           Mon 05 Jan 2026 18:52:17 +0000
ROA not after:            Mon 04 Jan 2027 18:57:17 +0000
asID:                     269843
IP address blocks:        2803:e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B97F6E450D535A00402E0FE81687ED200B1C9EE6884C4CCB2FA342D14B3D069A/0/E0013BE61C4781324203A7DB7D11674E5D707D02.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B97F6E450D535A00402E0FE81687ED200B1C9EE6884C4CCB2FA342D14B3D069A/0/E0013BE61C4781324203A7DB7D11674E5D707D02.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0013BE61C4781324203A7DB7D11674E5D707D02.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 01:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:50:68:2f:72:40:60:45:fc:97:ca:9f:8b:26:99:25:99:82:f4:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0013BE61C4781324203A7DB7D11674E5D707D02
        Validity
            Not Before: Jan  5 18:52:17 2026 GMT
            Not After : Jan  4 18:57:17 2027 GMT
        Subject: CN=B0A3C02FD5AA24D6C7E9E9C771DF4ADF281595F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:23:bd:67:aa:1c:ab:bf:95:b0:a3:23:93:81:
                    d7:2a:f0:b9:0d:6a:1a:10:71:cd:be:21:a8:6f:f1:
                    df:79:94:3a:28:b5:38:ee:14:8b:92:be:30:61:ed:
                    8b:fc:9f:a4:d1:ea:b6:a0:34:a8:54:e7:71:10:c6:
                    cc:ea:7c:84:48:40:29:99:f0:76:6e:75:b0:78:0f:
                    17:a5:c2:0b:7e:5c:23:1f:67:6b:43:35:12:93:49:
                    a7:c9:67:34:1e:37:6f:6c:a4:9c:b5:18:e1:9e:4d:
                    6d:5a:75:95:ab:4b:67:7b:8c:94:a1:b6:f5:85:5f:
                    ea:5f:89:b5:ed:f5:ac:fa:34:4f:5f:da:b2:d0:1e:
                    8f:07:1a:43:98:ef:fc:e4:34:dd:da:7d:07:95:8d:
                    bc:8d:60:d7:74:ea:1f:25:94:92:86:21:46:d2:50:
                    5f:87:48:36:45:fa:eb:63:d6:22:b6:b5:f0:14:50:
                    d9:f7:3e:29:92:76:b5:7b:38:83:9e:c4:64:4f:3b:
                    d4:c3:e8:75:9a:92:6b:d7:8d:4d:29:30:4b:d7:17:
                    f0:aa:f2:70:de:06:75:17:d1:18:05:f4:d0:2a:3a:
                    03:9c:ee:4a:2c:53:7d:4e:3a:e6:48:ff:df:26:a6:
                    5c:98:61:7d:11:7c:a3:9f:04:02:45:bf:0e:ec:1b:
                    f8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A3:C0:2F:D5:AA:24:D6:C7:E9:E9:C7:71:DF:4A:DF:28:15:95:F9
            X509v3 Authority Key Identifier:
                keyid:E0:01:3B:E6:1C:47:81:32:42:03:A7:DB:7D:11:67:4E:5D:70:7D:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B97F6E450D535A00402E0FE81687ED200B1C9EE6884C4CCB2FA342D14B3D069A/0/E0013BE61C4781324203A7DB7D11674E5D707D02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0013BE61C4781324203A7DB7D11674E5D707D02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B97F6E450D535A00402E0FE81687ED200B1C9EE6884C4CCB2FA342D14B3D069A/0/323830333a65303a3a2f33322d3438203d3e20323639383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:9e:51:3e:d5:01:53:d2:98:ad:5c:c8:9c:c4:25:8d:66:53:
         af:7a:5c:3a:59:99:af:8d:cc:1a:fa:87:4b:94:9e:03:6d:b0:
         da:72:a3:c1:e2:ee:67:ba:5c:7b:e4:70:44:89:96:eb:f9:96:
         e3:0f:34:d1:0f:fe:ee:ca:70:aa:1e:f9:b5:0b:4b:ea:5b:17:
         86:54:a5:1f:db:e1:3b:d5:9f:0d:54:f6:14:c3:c2:b5:fd:53:
         69:9c:98:bf:4d:40:1f:08:28:5f:00:5e:72:be:63:e1:e1:3c:
         88:dc:7f:6c:af:97:80:98:61:94:15:e6:5e:e1:ca:cb:7a:21:
         0c:f7:91:21:fb:92:99:b3:fc:29:4c:17:0e:86:0f:fa:71:96:
         bb:82:32:27:0f:4c:05:9a:62:aa:19:e6:85:d8:09:23:54:2e:
         ab:47:fa:a4:b3:fa:0e:a8:1b:12:22:b9:39:5b:ff:65:b8:c2:
         f2:77:38:71:65:7a:f0:92:d8:02:46:75:b6:45:e7:31:d8:48:
         77:9a:f2:95:21:7b:2b:ad:eb:48:77:11:7a:13:e7:a6:1f:6d:
         e4:09:ba:09:af:bd:5f:ef:85:ae:b2:3a:5b:f4:2f:fb:40:f0:
         cf:e8:0d:9b:51:10:61:97:e0:79:31:f4:10:f5:27:73:88:18:
         d2:be:0f:74
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUWlBoL3JAYEX8l8qfiyaZJZmC9MYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTAwMTNCRTYxQzQ3ODEzMjQyMDNBN0RCN0QxMTY3NEU1
RDcwN0QwMjAeFw0yNjAxMDUxODUyMTdaFw0yNzAxMDQxODU3MTdaMDMxMTAvBgNV
BAMTKEIwQTNDMDJGRDVBQTI0RDZDN0U5RTlDNzcxREY0QURGMjgxNTk1RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuI71nqhyrv5WwoyOTgdcq8LkN
ahoQcc2+Iahv8d95lDootTjuFIuSvjBh7Yv8n6TR6ragNKhU53EQxszqfIRIQCmZ
8HZudbB4Dxelwgt+XCMfZ2tDNRKTSafJZzQeN29spJy1GOGeTW1adZWrS2d7jJSh
tvWFX+pfibXt9az6NE9f2rLQHo8HGkOY7/zkNN3afQeVjbyNYNd06h8llJKGIUbS
UF+HSDZF+utj1iK2tfAUUNn3PimSdrV7OIOexGRPO9TD6HWakmvXjU0pMEvXF/Cq
8nDeBnUX0RgF9NAqOgOc7kosU31OOuZI/98mplyYYX0RfKOfBAJFvw7sG/ifAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUsKPAL9WqJNbH6enHcd9K3ygVlfkwHwYDVR0j
BBgwFoAU4AE75hxHgTJCA6fbfRFnTl1wfQIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9COTdGNkU0NTBENTM1QTAwNDAyRTBGRTgxNjg3RUQyMDBC
MUM5RUU2ODg0QzRDQ0IyRkEzNDJEMTRCM0QwNjlBLzAvRTAwMTNCRTYxQzQ3ODEz
MjQyMDNBN0RCN0QxMTY3NEU1RDcwN0QwMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMDAxM0JFNjFDNDc4MTMyNDIw
M0E3REI3RDExNjc0RTVENzA3RDAyLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjk3RjZFNDUwRDUzNUEwMDQwMkUwRkU4MTY4N0VEMjAwQjFDOUVFNjg4
NEM0Q0NCMkZBMzQyRDE0QjNEMDY5QS8wLzMyMzgzMDMzM2E2NTMwM2EzYTJmMzMz
MjJkMzQzODIwM2QzZTIwMzIzNjM5MzgzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMA4DANBgkq
hkiG9w0BAQsFAAOCAQEAl55RPtUBU9KYrVzInMQljWZTr3pcOlmZr43MGvqHS5Se
A22w2nKjweLuZ7pce+RwRImW6/mW4w800Q/+7spwqh75tQtL6lsXhlSlH9vhO9Wf
DVT2FMPCtf1TaZyYv01AHwgoXwBecr5j4eE8iNx/bK+XgJhhlBXmXuHKy3ohDPeR
IfuSmbP8KUwXDoYP+nGWu4IyJw9MBZpiqhnmhdgJI1Quq0f6pLP6DqgbEiK5OVv/
ZbjC8nc4cWV68JLYAkZ1tkXnMdhId5rylSF7K63rSHcRehPnph9t5Am6Ca+9X++F
rrI6W/Qv+0Dwz+gNm1EQYZfgeTH0EPUnc4gY0r4PdA==
-----END CERTIFICATE-----
Generated at Tue Jan 13 03:23:21 2026 by rpki-client