This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E5A7BC69D0EB1845D2FDE3FC5E5564FAF1DA99B9BDADBF0ACB44307D088829D9/0/323830333a393835303a3a2f33322d3332203d3e20323733313136.roa
File:                     323830333a393835303a3a2f33322d3332203d3e20323733313136.roa (raw, json)
Hash identifier:          trDNBcCGPmCXBXfTb0jaK/PaP570RGJwhngK6ZdGAjg=
Subject key identifier:   EB:DD:E7:3C:FB:AB:F8:C1:D8:C8:29:C0:FD:CA:74:7F:8C:5F:99:F3
Certificate issuer:       /CN=E51AFE0ACF27786A371E93DAA45AD232AFF6F8CF
Certificate serial:       4D55434D14EF1B5756D72814A4151CC9D7DAADC9
Authority key identifier: E5:1A:FE:0A:CF:27:78:6A:37:1E:93:DA:A4:5A:D2:32:AF:F6:F8:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E51AFE0ACF27786A371E93DAA45AD232AFF6F8CF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E5A7BC69D0EB1845D2FDE3FC5E5564FAF1DA99B9BDADBF0ACB44307D088829D9/0/323830333a393835303a3a2f33322d3332203d3e20323733313136.roa
Signing time:             Tue 06 Jan 2026 19:18:17 +0000
ROA not before:           Tue 06 Jan 2026 19:13:17 +0000
ROA not after:            Tue 05 Jan 2027 19:18:17 +0000
asID:                     273116
IP address blocks:        2803:9850::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E5A7BC69D0EB1845D2FDE3FC5E5564FAF1DA99B9BDADBF0ACB44307D088829D9/0/E51AFE0ACF27786A371E93DAA45AD232AFF6F8CF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5A7BC69D0EB1845D2FDE3FC5E5564FAF1DA99B9BDADBF0ACB44307D088829D9/0/E51AFE0ACF27786A371E93DAA45AD232AFF6F8CF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E51AFE0ACF27786A371E93DAA45AD232AFF6F8CF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 08:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:55:43:4d:14:ef:1b:57:56:d7:28:14:a4:15:1c:c9:d7:da:ad:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E51AFE0ACF27786A371E93DAA45AD232AFF6F8CF
        Validity
            Not Before: Jan  6 19:13:17 2026 GMT
            Not After : Jan  5 19:18:17 2027 GMT
        Subject: CN=EBDDE73CFBABF8C1D8C829C0FDCA747F8C5F99F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:88:4e:ee:56:3d:0c:d3:da:47:54:e3:1a:ca:
                    3c:a1:05:99:27:94:7e:3e:bc:a1:00:83:1f:27:02:
                    24:01:52:ae:b4:17:b1:cc:1e:7c:0c:60:29:8f:44:
                    9b:ad:42:55:9c:ac:38:4f:c4:00:f9:9e:ef:23:2c:
                    80:27:2e:ca:53:8f:a5:32:6f:12:21:1f:8e:c6:7d:
                    71:63:c2:ea:24:49:f8:47:b8:7c:0d:89:2b:57:47:
                    7a:91:78:69:a3:fe:24:3e:dd:ee:98:25:ac:14:19:
                    12:53:8a:95:4b:69:35:87:12:e3:f5:c8:a4:fe:5a:
                    69:b7:32:85:e3:b6:83:85:ff:e9:c1:86:29:ed:8b:
                    29:55:27:6d:59:3f:d3:fc:26:c1:ad:eb:58:f1:68:
                    b1:ef:39:88:46:97:c5:76:39:3d:e6:69:9d:d3:f1:
                    da:05:57:4c:f7:cb:80:7f:85:44:91:6d:8c:63:2e:
                    04:d3:f7:85:dc:88:4d:55:4b:f0:55:ce:e9:5c:f4:
                    ae:9e:de:b6:34:0f:16:b3:d1:38:1b:5d:6c:4b:63:
                    69:c9:59:8a:db:60:e5:aa:b9:96:66:e5:df:53:11:
                    08:5f:ee:2c:55:ce:82:0f:66:b2:61:fd:3c:85:f6:
                    5f:a8:81:03:ea:b1:db:69:70:de:29:52:90:2c:90:
                    c8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:DD:E7:3C:FB:AB:F8:C1:D8:C8:29:C0:FD:CA:74:7F:8C:5F:99:F3
            X509v3 Authority Key Identifier:
                keyid:E5:1A:FE:0A:CF:27:78:6A:37:1E:93:DA:A4:5A:D2:32:AF:F6:F8:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E5A7BC69D0EB1845D2FDE3FC5E5564FAF1DA99B9BDADBF0ACB44307D088829D9/0/E51AFE0ACF27786A371E93DAA45AD232AFF6F8CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E51AFE0ACF27786A371E93DAA45AD232AFF6F8CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E5A7BC69D0EB1845D2FDE3FC5E5564FAF1DA99B9BDADBF0ACB44307D088829D9/0/323830333a393835303a3a2f33322d3332203d3e20323733313136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9850::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:26:0e:53:5b:69:1e:35:d8:d8:3a:e4:4c:0b:46:67:69:1e:
         24:aa:af:a1:94:a1:b1:71:9f:03:97:a5:9d:f0:a5:fa:93:09:
         de:90:c8:3d:05:6f:fa:06:9d:b6:bd:41:28:d2:25:70:b8:12:
         6c:e2:ec:61:22:84:50:34:24:06:61:9e:ae:86:82:2e:d8:2e:
         7a:9d:d8:eb:47:05:c4:61:bc:fd:27:ab:2e:44:67:44:2d:10:
         a9:84:0e:03:7b:1c:61:c6:64:52:a3:29:ce:7c:a7:d4:be:a4:
         b8:ff:6e:f1:69:c1:2d:52:46:ae:ea:dd:42:5a:dc:60:85:99:
         7c:13:38:60:31:3c:a2:43:7a:0a:d0:a7:e6:ca:7c:5d:71:85:
         cc:98:f7:f8:c2:34:3a:09:e7:af:c6:69:73:15:42:3b:c3:db:
         10:16:45:81:d2:6c:2c:ee:db:9e:16:25:77:4c:7e:33:e3:8e:
         09:48:d4:c2:ad:a0:9f:ce:06:34:e3:c0:b5:78:25:21:cf:ae:
         f3:b0:d5:d5:95:ec:a7:56:ff:bc:09:9e:cb:e1:3b:6e:51:4b:
         c3:c8:4e:02:a3:a3:89:f0:0d:70:59:7a:bf:c8:b9:14:3d:33:
         fd:42:e6:83:af:d5:6b:6f:9e:56:a6:84:1e:10:4b:89:ea:b3:
         90:54:2f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 08:11:37 2026 by rpki-client