This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/323830333a653563303a3a2f34382d3438203d3e20323636373235.roa
File:                     323830333a653563303a3a2f34382d3438203d3e20323636373235.roa (raw, json)
Hash identifier:          RsVo6JuCPBczEQMFI4FmgA5/co8FCbYB7KxpRe2Gw38=
Subject key identifier:   2D:9D:F2:BD:5F:23:18:96:B0:B2:35:15:3D:98:9D:BC:C6:5A:C0:3A
Certificate issuer:       /CN=9BE1895C8F64AEC52209EA2FDE7D308AED2DA640
Certificate serial:       521D738CA1122947A8DBE7DB9585F7CDC16C7AAC
Authority key identifier: 9B:E1:89:5C:8F:64:AE:C5:22:09:EA:2F:DE:7D:30:8A:ED:2D:A6:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/323830333a653563303a3a2f34382d3438203d3e20323636373235.roa
Signing time:             Tue 06 Jan 2026 19:23:15 +0000
ROA not before:           Tue 06 Jan 2026 19:18:15 +0000
ROA not after:            Tue 05 Jan 2027 19:23:15 +0000
asID:                     266725
IP address blocks:        2803:e5c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 06:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:1d:73:8c:a1:12:29:47:a8:db:e7:db:95:85:f7:cd:c1:6c:7a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BE1895C8F64AEC52209EA2FDE7D308AED2DA640
        Validity
            Not Before: Jan  6 19:18:15 2026 GMT
            Not After : Jan  5 19:23:15 2027 GMT
        Subject: CN=2D9DF2BD5F231896B0B235153D989DBCC65AC03A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8f:d7:50:7b:7a:d1:c2:01:ca:0a:46:3b:a1:
                    e3:c2:90:44:d6:e5:c5:f6:1e:9a:eb:1a:e5:86:21:
                    b7:8b:00:d6:35:bc:1f:22:09:ba:15:87:84:a4:99:
                    01:d1:ba:fb:40:e2:fc:26:5f:c2:c8:64:7d:6e:ad:
                    02:ec:a6:58:89:c4:d5:20:9d:a9:95:62:6b:5f:2b:
                    17:33:7c:0f:59:a5:dc:49:e4:ad:dd:d2:87:91:fa:
                    bb:77:13:95:8c:e0:80:4d:a2:1f:63:e2:45:a3:09:
                    51:50:03:68:18:4c:ea:0a:11:09:55:26:b9:b2:2b:
                    6d:2a:00:28:34:42:ed:73:b3:7b:af:d8:b6:50:c5:
                    4c:74:2d:18:96:15:e2:45:ce:62:da:8e:00:2e:5c:
                    4c:b6:7e:15:5b:29:47:03:f2:e1:86:0e:9f:f1:c6:
                    3e:fe:0e:2f:73:51:ff:08:2f:0b:80:b2:61:65:7f:
                    f9:8d:d6:d0:22:95:58:8b:12:08:b0:3c:d4:ba:22:
                    c1:d8:72:7a:02:35:1e:d3:48:03:37:69:11:ea:d8:
                    13:56:9b:c5:ea:4f:0c:3c:13:dc:d4:fe:8e:d2:6d:
                    93:13:85:60:70:f5:84:cd:05:43:1c:fd:f9:d8:01:
                    e9:a9:c1:f2:66:74:ee:42:39:8d:ef:a8:b9:34:93:
                    73:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:9D:F2:BD:5F:23:18:96:B0:B2:35:15:3D:98:9D:BC:C6:5A:C0:3A
            X509v3 Authority Key Identifier:
                keyid:9B:E1:89:5C:8F:64:AE:C5:22:09:EA:2F:DE:7D:30:8A:ED:2D:A6:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/323830333a653563303a3a2f34382d3438203d3e20323636373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e5c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:06:b3:a6:81:e9:c6:80:de:f0:2f:c2:a3:a0:b3:5b:da:dd:
         e6:72:bd:79:14:5f:5c:5d:6d:7d:06:46:00:72:2c:ef:fd:b5:
         9e:ee:2a:7e:39:be:ac:a4:58:04:38:5e:e2:59:ca:7b:16:c0:
         24:07:cc:28:14:15:3e:9a:7e:70:34:15:f7:e8:16:36:8e:c5:
         36:93:74:96:0d:e0:9d:42:d4:5f:0b:c1:95:eb:c9:75:f3:00:
         fe:13:9d:7a:40:0c:66:62:73:47:9b:11:f9:28:46:f1:7a:1e:
         7d:8f:f6:0f:f1:18:9f:bb:b4:51:75:cc:29:f5:68:68:ec:44:
         64:24:79:ca:c3:7e:f0:ad:f9:b3:c1:84:5a:92:90:e7:bf:b4:
         12:62:cf:fe:11:19:17:9a:a1:01:45:70:78:80:15:f8:61:58:
         91:02:5a:a3:b9:c1:91:2d:e0:aa:a9:7e:6e:62:dd:d0:55:1f:
         b9:04:c6:65:ca:a3:e3:16:57:86:9a:26:62:15:eb:55:4f:f4:
         dc:d9:67:03:47:30:6b:6b:cb:a2:8a:9f:46:59:4d:d4:80:c8:
         db:62:1a:17:4b:e8:01:80:5f:08:28:1f:fb:30:5f:91:00:f8:
         b9:82:9f:8c:64:7a:25:9a:95:c8:99:05:1e:5a:99:dc:ee:1f:
         38:8c:e6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 06:43:12 2026 by rpki-client