This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a6230303a3a2f34302d3430203d3e20323639373330.roa
File:                     323830333a353136303a6230303a3a2f34302d3430203d3e20323639373330.roa (raw, json)
Hash identifier:          z7IztqHBfcpbn84ZcCyw6z6l8PsrA2exSXpS6Fc2IqM=
Subject key identifier:   02:FD:FB:87:0F:40:EB:23:DA:EC:D8:91:68:6B:5A:87:1A:19:D0:F8
Certificate issuer:       /CN=E5929BB59C0C723C97245BF0DCF866772F479B73
Certificate serial:       028524DF8C89EDB98144806B904FD7ADCE560295
Authority key identifier: E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a6230303a3a2f34302d3430203d3e20323639373330.roa
Signing time:             Fri 19 Dec 2025 14:55:23 +0000
ROA not before:           Fri 19 Dec 2025 14:50:23 +0000
ROA not after:            Fri 18 Dec 2026 14:55:23 +0000
asID:                     269730
IP address blocks:        2803:5160:b00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 17:04:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:85:24:df:8c:89:ed:b9:81:44:80:6b:90:4f:d7:ad:ce:56:02:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5929BB59C0C723C97245BF0DCF866772F479B73
        Validity
            Not Before: Dec 19 14:50:23 2025 GMT
            Not After : Dec 18 14:55:23 2026 GMT
        Subject: CN=02FDFB870F40EB23DAECD891686B5A871A19D0F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4e:ae:30:99:be:32:73:b7:9e:0b:79:b2:e9:
                    53:3a:c3:a5:ee:9a:0e:e7:0f:ea:95:df:8f:f4:c4:
                    ad:b3:2f:3a:84:fc:ea:de:d1:6d:c7:ec:53:d9:fc:
                    9d:28:25:7a:0a:98:07:aa:c7:1b:bb:19:19:6f:31:
                    41:10:07:34:e7:be:b9:bf:b3:ac:36:03:be:69:e8:
                    2a:a4:77:82:c2:f4:0a:06:fc:ef:91:89:90:ef:a9:
                    e0:ef:9d:54:d5:c2:87:ba:c8:8c:50:6f:5d:45:d0:
                    7f:bf:22:26:5b:33:89:f3:47:05:11:71:36:9f:bf:
                    8f:66:06:56:b6:3d:4a:e3:f7:53:01:15:bd:9d:e7:
                    3c:20:a4:f7:2f:ba:6d:e5:fb:ea:3f:c2:c0:2b:b9:
                    89:77:f2:c2:26:0a:3d:8a:6a:53:81:fc:6c:39:68:
                    35:1f:e0:98:d3:b5:d5:37:03:58:26:75:c1:b6:39:
                    e2:35:fa:7c:4c:17:20:c1:42:e4:34:cc:08:96:4d:
                    2d:19:6e:da:6e:33:f8:e5:82:28:6a:8b:51:18:cc:
                    80:35:5f:19:b7:d8:52:85:fa:07:f7:2f:f5:8b:82:
                    e0:d1:bf:ec:86:db:4a:a4:ac:fc:57:16:f3:7e:22:
                    31:8b:eb:01:d9:91:82:df:76:78:e2:a5:fc:cc:44:
                    c9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:FD:FB:87:0F:40:EB:23:DA:EC:D8:91:68:6B:5A:87:1A:19:D0:F8
            X509v3 Authority Key Identifier:
                keyid:E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a6230303a3a2f34302d3430203d3e20323639373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5160:b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         62:c8:32:9f:d5:9a:bd:37:1c:e5:75:60:03:91:27:7c:be:dd:
         0a:ca:9c:eb:72:34:25:bf:6c:5c:e5:3b:60:0b:f1:29:80:d0:
         db:aa:a7:9b:32:fa:09:45:8f:82:fe:82:22:51:cd:23:b3:60:
         05:ac:d9:51:c8:95:38:99:af:9e:ce:1e:81:41:13:67:d3:ba:
         d7:6e:d6:d5:d3:fb:47:f3:36:66:3a:7f:2f:c7:18:ba:ed:ea:
         47:20:70:3d:77:de:db:6d:78:d0:ec:07:95:d3:1d:d4:08:81:
         f3:e5:b1:b8:ce:90:92:d2:79:00:82:fb:d1:a1:3c:11:82:6b:
         79:64:0f:22:c8:d7:61:53:ef:a8:20:d8:47:fc:46:ec:3f:41:
         0f:1e:c2:de:f5:9f:89:2d:96:bc:36:e5:0f:2a:df:bb:75:75:
         a6:41:e9:de:a9:7b:f8:8a:b4:62:0e:c2:8a:45:8a:8b:1a:13:
         b2:92:6a:d6:6a:7f:78:e7:18:1c:01:22:93:2d:18:93:73:4d:
         f4:9f:e3:84:7a:27:fa:fc:b6:54:e2:0b:bf:ca:89:c5:da:9b:
         fc:2c:a6:ee:9d:58:cf:1e:f5:69:8e:11:c1:a1:be:e3:b0:e7:
         44:01:a4:fd:44:00:86:60:58:99:77:06:ae:ad:44:e5:bb:ca:
         0a:9d:2d:83
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUAoUk34yJ7bmBRIBrkE/Xrc5WApUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTU5MjlCQjU5QzBDNzIzQzk3MjQ1QkYwRENGODY2Nzcy
RjQ3OUI3MzAeFw0yNTEyMTkxNDUwMjNaFw0yNjEyMTgxNDU1MjNaMDMxMTAvBgNV
BAMTKDAyRkRGQjg3MEY0MEVCMjNEQUVDRDg5MTY4NkI1QTg3MUExOUQwRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUTq4wmb4yc7eeC3my6VM6w6Xu
mg7nD+qV34/0xK2zLzqE/Ore0W3H7FPZ/J0oJXoKmAeqxxu7GRlvMUEQBzTnvrm/
s6w2A75p6Cqkd4LC9AoG/O+RiZDvqeDvnVTVwoe6yIxQb11F0H+/IiZbM4nzRwUR
cTafv49mBla2PUrj91MBFb2d5zwgpPcvum3l++o/wsAruYl38sImCj2KalOB/Gw5
aDUf4JjTtdU3A1gmdcG2OeI1+nxMFyDBQuQ0zAiWTS0ZbtpuM/jlgihqi1EYzIA1
Xxm32FKF+gf3L/WLguDRv+yG20qkrPxXFvN+IjGL6wHZkYLfdnjipfzMRMnLAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUAv37hw9A6yPa7NiRaGtahxoZ0PgwHwYDVR0j
BBgwFoAU5ZKbtZwMcjyXJFvw3Phmdy9Hm3MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMEFBMEE2NkMxQzAyRDJGMDY2N0JERjZEQUZERDY3QzJB
ODEzRkVGQkVENkQwRjQ2Mzk1MUEwNDI4ODQwNzdDLzAvRTU5MjlCQjU5QzBDNzIz
Qzk3MjQ1QkYwRENGODY2NzcyRjQ3OUI3My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNTkyOUJCNTlDMEM3MjNDOTcy
NDVCRjBEQ0Y4NjY3NzJGNDc5QjczLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDBBQTBBNjZDMUMwMkQyRjA2NjdCREY2REFGREQ2N0MyQTgxM0ZFRkJF
RDZEMEY0NjM5NTFBMDQyODg0MDc3Qy8wLzMyMzgzMDMzM2EzNTMxMzYzMDNhNjIz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNjM5MzczMzMwLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKANRYAswDQYJKoZIhvcNAQELBQADggEBAGLIMp/Vmr03HOV1YAORJ3y+3QrK
nOtyNCW/bFzlO2AL8SmA0Nuqp5sy+glFj4L+giJRzSOzYAWs2VHIlTiZr57OHoFB
E2fTutdu1tXT+0fzNmY6fy/HGLrt6kcgcD133ttteNDsB5XTHdQIgfPlsbjOkJLS
eQCC+9GhPBGCa3lkDyLI12FT76gg2Ef8Ruw/QQ8ewt71n4ktlrw25Q8q37t1daZB
6d6pe/iKtGIOwopFiosaE7KSatZqf3jnGBwBIpMtGJNzTfSf44R6J/r8tlTiC7/K
icXam/wspu6dWM8e9WmOEcGhvuOw50QBpP1EAIZgWJl3Bq6tROW7ygqdLYM=
-----END CERTIFICATE-----
Generated at Sun Dec 21 13:25:07 2025 by rpki-client