This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3630303a3a2f34302d3430203d3e20323639373330.roa
File:                     323830333a353136303a3630303a3a2f34302d3430203d3e20323639373330.roa (raw, json)
Hash identifier:          bMQexijRjRCpUG6mVaVZgbtN3K0RLqTZEza9ShLQUhw=
Subject key identifier:   31:C1:7F:CC:F9:AF:C5:4E:84:42:15:EC:A9:88:91:1F:12:FD:DD:BF
Certificate issuer:       /CN=E5929BB59C0C723C97245BF0DCF866772F479B73
Certificate serial:       68D99D17E3332C915EC8C40E45C8108EBA92CE82
Authority key identifier: E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3630303a3a2f34302d3430203d3e20323639373330.roa
Signing time:             Fri 19 Dec 2025 14:55:30 +0000
ROA not before:           Fri 19 Dec 2025 14:50:30 +0000
ROA not after:            Fri 18 Dec 2026 14:55:30 +0000
asID:                     269730
IP address blocks:        2803:5160:600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 17:04:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d9:9d:17:e3:33:2c:91:5e:c8:c4:0e:45:c8:10:8e:ba:92:ce:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5929BB59C0C723C97245BF0DCF866772F479B73
        Validity
            Not Before: Dec 19 14:50:30 2025 GMT
            Not After : Dec 18 14:55:30 2026 GMT
        Subject: CN=31C17FCCF9AFC54E844215ECA988911F12FDDDBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c8:d4:59:8a:e9:8f:6b:70:a3:95:5e:10:f6:
                    ee:02:af:a2:ac:b6:41:cd:b4:5d:a2:45:1d:c9:93:
                    40:cd:7c:b5:a2:3c:d5:79:8d:58:20:38:60:88:2f:
                    3c:71:e4:52:8f:fa:95:da:9e:24:a3:42:ab:60:e6:
                    d7:2c:53:09:1b:86:12:00:1c:8b:3a:48:d3:8b:c2:
                    66:23:69:d7:bd:50:e9:21:0f:c4:d7:14:5b:b3:72:
                    fa:52:01:03:65:6f:cd:aa:7f:57:20:f4:35:df:b7:
                    80:03:5a:c0:0e:b5:aa:bb:8d:2b:fe:40:44:4a:17:
                    d8:cb:09:51:93:00:45:a7:8c:57:60:f2:5e:ea:1c:
                    56:2f:c0:17:1e:5c:ec:af:de:10:ff:57:e8:82:7e:
                    87:38:d7:59:c9:b2:12:8e:fb:c6:32:d6:42:f9:8e:
                    d6:9f:60:5b:e0:a8:35:e6:8c:6d:f7:8b:4d:64:df:
                    17:85:aa:d4:af:ab:a6:51:21:78:fc:36:30:cf:cd:
                    3c:d3:05:5e:db:24:1b:3b:b8:b8:20:0d:4e:7a:dd:
                    ab:40:84:49:0b:8c:93:19:89:a3:ac:cc:f6:98:1a:
                    f6:84:f4:f2:e8:e6:f6:a8:02:3e:a9:ad:4c:6b:0c:
                    92:69:1d:5b:d8:00:5a:24:f1:40:a0:da:bc:0a:b0:
                    86:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C1:7F:CC:F9:AF:C5:4E:84:42:15:EC:A9:88:91:1F:12:FD:DD:BF
            X509v3 Authority Key Identifier:
                keyid:E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3630303a3a2f34302d3430203d3e20323639373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5160:600::/40

    Signature Algorithm: sha256WithRSAEncryption
         87:55:52:5e:6e:79:2c:27:89:e0:d5:db:5b:18:8c:18:33:1c:
         d6:01:f9:45:3d:b5:f3:fa:9d:2c:9d:50:3e:8f:df:a3:2b:33:
         fd:78:35:10:07:37:99:2a:5a:2a:78:1b:13:b1:a3:51:a0:f6:
         1c:98:d2:96:d6:11:aa:b3:80:4b:98:0e:bc:c3:cb:aa:f0:c0:
         da:03:a8:a9:df:92:0d:cc:2a:e4:fd:81:0f:54:ec:ee:b6:6e:
         ef:5e:39:74:1c:9e:0b:dc:39:83:a3:94:2d:b1:af:4f:fc:8c:
         73:f2:85:6b:9d:63:bf:19:1e:4d:40:a0:b2:29:88:b6:5a:d5:
         b2:49:1a:d0:71:a7:fd:a6:61:a3:f1:88:e8:0f:ec:0f:86:eb:
         a6:1c:9b:b6:00:93:33:24:cc:72:00:ce:2f:17:41:e3:3e:05:
         59:05:b3:94:71:c3:ce:13:4e:87:78:05:d0:17:44:15:15:02:
         ef:a7:ef:eb:f2:82:89:1a:06:c3:dd:6e:bc:16:b3:f8:e7:a8:
         67:03:d9:34:2b:bb:e6:9c:4f:60:ff:19:e7:4e:3a:19:12:0e:
         41:52:03:5d:66:1f:cc:e3:a5:d4:fd:4c:e6:88:4d:a1:4b:a0:
         6e:00:97:07:db:f8:73:ea:f6:a2:35:ac:b8:ab:e1:29:55:91:
         1b:77:df:3c
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUaNmdF+MzLJFeyMQORcgQjrqSzoIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTU5MjlCQjU5QzBDNzIzQzk3MjQ1QkYwRENGODY2Nzcy
RjQ3OUI3MzAeFw0yNTEyMTkxNDUwMzBaFw0yNjEyMTgxNDU1MzBaMDMxMTAvBgNV
BAMTKDMxQzE3RkNDRjlBRkM1NEU4NDQyMTVFQ0E5ODg5MTFGMTJGREREQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUyNRZiumPa3CjlV4Q9u4Cr6Ks
tkHNtF2iRR3Jk0DNfLWiPNV5jVggOGCILzxx5FKP+pXaniSjQqtg5tcsUwkbhhIA
HIs6SNOLwmYjade9UOkhD8TXFFuzcvpSAQNlb82qf1cg9DXft4ADWsAOtaq7jSv+
QERKF9jLCVGTAEWnjFdg8l7qHFYvwBceXOyv3hD/V+iCfoc411nJshKO+8Yy1kL5
jtafYFvgqDXmjG33i01k3xeFqtSvq6ZRIXj8NjDPzTzTBV7bJBs7uLggDU563atA
hEkLjJMZiaOszPaYGvaE9PLo5vaoAj6prUxrDJJpHVvYAFok8UCg2rwKsIZLAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUMcF/zPmvxU6EQhXsqYiRHxL93b8wHwYDVR0j
BBgwFoAU5ZKbtZwMcjyXJFvw3Phmdy9Hm3MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMEFBMEE2NkMxQzAyRDJGMDY2N0JERjZEQUZERDY3QzJB
ODEzRkVGQkVENkQwRjQ2Mzk1MUEwNDI4ODQwNzdDLzAvRTU5MjlCQjU5QzBDNzIz
Qzk3MjQ1QkYwRENGODY2NzcyRjQ3OUI3My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNTkyOUJCNTlDMEM3MjNDOTcy
NDVCRjBEQ0Y4NjY3NzJGNDc5QjczLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDBBQTBBNjZDMUMwMkQyRjA2NjdCREY2REFGREQ2N0MyQTgxM0ZFRkJF
RDZEMEY0NjM5NTFBMDQyODg0MDc3Qy8wLzMyMzgzMDMzM2EzNTMxMzYzMDNhMzYz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNjM5MzczMzMwLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKANRYAYwDQYJKoZIhvcNAQELBQADggEBAIdVUl5ueSwnieDV21sYjBgzHNYB
+UU9tfP6nSydUD6P36MrM/14NRAHN5kqWip4GxOxo1Gg9hyY0pbWEaqzgEuYDrzD
y6rwwNoDqKnfkg3MKuT9gQ9U7O62bu9eOXQcngvcOYOjlC2xr0/8jHPyhWudY78Z
Hk1AoLIpiLZa1bJJGtBxp/2mYaPxiOgP7A+G66Ycm7YAkzMkzHIAzi8XQeM+BVkF
s5Rxw84TTod4BdAXRBUVAu+n7+vygokaBsPdbrwWs/jnqGcD2TQru+acT2D/GedO
OhkSDkFSA11mH8zjpdT9TOaITaFLoG4Alwfb+HPq9qI1rLir4SlVkRt33zw=
-----END CERTIFICATE-----
Generated at Sun Dec 21 13:25:10 2025 by rpki-client