This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/323830333a616334303a3a2f33322d3332203d3e20323633373935.roa
File:                     323830333a616334303a3a2f33322d3332203d3e20323633373935.roa (raw, json)
Hash identifier:          9B1y75EZe/dpuuc6s6oweRyyiElscb+jub99c1TVnag=
Subject key identifier:   98:21:92:65:D7:FB:6E:F2:62:05:DA:2C:12:48:06:3A:72:93:50:CB
Certificate issuer:       /CN=59ABF2BF7C74865B759064BBB0DA49EAE0CC3647
Certificate serial:       5CA1E4D0984F974D73BDD60ECA2E34395F8ACC08
Authority key identifier: 59:AB:F2:BF:7C:74:86:5B:75:90:64:BB:B0:DA:49:EA:E0:CC:36:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/323830333a616334303a3a2f33322d3332203d3e20323633373935.roa
Signing time:             Tue 06 Jan 2026 19:40:32 +0000
ROA not before:           Tue 06 Jan 2026 19:35:32 +0000
ROA not after:            Tue 05 Jan 2027 19:40:32 +0000
asID:                     263795
IP address blocks:        2803:ac40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:a1:e4:d0:98:4f:97:4d:73:bd:d6:0e:ca:2e:34:39:5f:8a:cc:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59ABF2BF7C74865B759064BBB0DA49EAE0CC3647
        Validity
            Not Before: Jan  6 19:35:32 2026 GMT
            Not After : Jan  5 19:40:32 2027 GMT
        Subject: CN=98219265D7FB6EF26205DA2C1248063A729350CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a7:97:9d:55:80:38:70:8b:b1:27:6f:b0:84:
                    e5:f8:7e:ce:03:ca:50:c7:c5:ce:c0:17:54:2c:91:
                    2c:18:09:f1:ac:92:83:c1:a7:81:52:41:9b:9a:a5:
                    fd:f1:12:e0:16:17:0c:6d:5f:1e:a0:41:d7:1e:ff:
                    51:f0:c2:83:52:ec:15:71:7a:4f:c8:43:51:68:33:
                    4d:89:4f:8a:b0:13:8b:f7:3b:49:67:2e:60:c0:f3:
                    22:49:0d:66:15:48:8b:96:dc:5a:51:6b:a2:f2:78:
                    81:34:5e:5d:0c:b9:ae:72:39:11:6e:73:aa:98:b6:
                    be:18:f1:5b:d5:ee:99:24:c4:59:8b:b0:0f:2d:2e:
                    46:4a:62:9a:86:53:33:5a:8b:b7:03:a6:cd:9e:3e:
                    b7:4c:b3:17:5b:12:51:90:a0:63:14:87:6f:da:d5:
                    e2:2c:33:e8:34:76:6a:52:db:74:60:95:55:39:cd:
                    ae:5d:8e:22:08:8f:a6:6d:a2:aa:d7:7f:f6:3b:03:
                    1a:42:bf:36:50:b0:4e:62:c7:b5:51:a2:81:31:8f:
                    a4:b6:1e:a1:25:c4:bd:43:ba:dc:3c:9b:4c:2d:f5:
                    d5:75:ad:96:d7:8e:d9:14:28:c3:c7:14:f7:78:3a:
                    3b:29:02:a8:63:77:8a:cd:56:0a:40:da:d3:6a:11:
                    40:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:21:92:65:D7:FB:6E:F2:62:05:DA:2C:12:48:06:3A:72:93:50:CB
            X509v3 Authority Key Identifier:
                keyid:59:AB:F2:BF:7C:74:86:5B:75:90:64:BB:B0:DA:49:EA:E0:CC:36:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/323830333a616334303a3a2f33322d3332203d3e20323633373935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ac40::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:da:56:83:e2:fa:ca:b8:c3:bf:8d:1e:7c:ed:1d:7a:97:70:
         60:ed:c8:58:d3:35:e4:d1:1e:ed:76:d8:3d:c5:3f:4c:23:38:
         9e:c1:23:b5:da:3a:43:c1:12:d0:2f:cd:c6:99:3c:45:48:ea:
         bd:40:0b:86:df:21:8f:b7:b0:b4:5b:8e:f1:39:1f:a8:75:9d:
         10:c5:8b:bb:8e:d8:40:35:45:de:46:87:0d:ef:6a:4e:5d:74:
         f3:00:d4:62:0d:8e:56:cf:67:2c:67:e0:58:48:cf:27:97:a5:
         91:91:71:59:82:ca:fd:90:73:6c:d4:79:db:d4:4e:ba:f3:5a:
         e4:c0:85:b2:59:b1:ee:52:30:cc:6d:0e:8f:a4:d4:6e:66:b9:
         7b:f0:ce:f0:04:f1:f7:f2:63:ad:b4:5e:63:7f:22:04:b4:8f:
         cc:00:d4:09:84:3b:28:06:6c:94:53:bd:f9:6c:62:cf:70:7b:
         45:77:ea:b3:0d:e0:ce:61:6d:5c:36:b2:c6:74:a8:e3:c3:32:
         b5:51:47:e5:7a:c5:09:8b:a2:27:f4:e0:8f:98:cd:ea:42:89:
         6b:04:81:fa:fc:1b:f2:84:83:fc:5b:4e:56:5a:07:c0:84:38:
         6f:08:b2:77:1a:38:59:4c:d6:a2:b2:67:7e:a2:4a:77:22:3e:
         93:d2:78:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 14:33:10 2026 by rpki-client