This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0735EA22DDA461FBB5E15927E935AAA75CC50234C528933D6EB901422B8A78BA/0/323830333a353031303a3a2f33322d3332203d3e20323731383033.roa
File:                     323830333a353031303a3a2f33322d3332203d3e20323731383033.roa (raw, json)
Hash identifier:          95SjHkvAjFLgeSNWz7CcoQPl0zJqCfqNIpETIjl0lKM=
Subject key identifier:   58:92:D3:71:7C:9D:C3:F4:8F:27:D4:A6:77:B7:3D:81:A0:9A:BE:F6
Certificate issuer:       /CN=BC2E4CD2EE871C1F846BEE09B544CE8CCF99DCEC
Certificate serial:       0DF694ABA2719545AD8C72C82726B3F8DA66880E
Authority key identifier: BC:2E:4C:D2:EE:87:1C:1F:84:6B:EE:09:B5:44:CE:8C:CF:99:DC:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC2E4CD2EE871C1F846BEE09B544CE8CCF99DCEC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0735EA22DDA461FBB5E15927E935AAA75CC50234C528933D6EB901422B8A78BA/0/323830333a353031303a3a2f33322d3332203d3e20323731383033.roa
Signing time:             Tue 06 Jan 2026 19:17:40 +0000
ROA not before:           Tue 06 Jan 2026 19:12:40 +0000
ROA not after:            Tue 05 Jan 2027 19:17:40 +0000
asID:                     271803
IP address blocks:        2803:5010::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0735EA22DDA461FBB5E15927E935AAA75CC50234C528933D6EB901422B8A78BA/0/BC2E4CD2EE871C1F846BEE09B544CE8CCF99DCEC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0735EA22DDA461FBB5E15927E935AAA75CC50234C528933D6EB901422B8A78BA/0/BC2E4CD2EE871C1F846BEE09B544CE8CCF99DCEC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC2E4CD2EE871C1F846BEE09B544CE8CCF99DCEC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:f6:94:ab:a2:71:95:45:ad:8c:72:c8:27:26:b3:f8:da:66:88:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC2E4CD2EE871C1F846BEE09B544CE8CCF99DCEC
        Validity
            Not Before: Jan  6 19:12:40 2026 GMT
            Not After : Jan  5 19:17:40 2027 GMT
        Subject: CN=5892D3717C9DC3F48F27D4A677B73D81A09ABEF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d6:d4:d6:57:cc:48:e9:86:74:3e:3e:a9:5a:
                    76:41:a7:ad:b9:88:ff:3b:b4:d9:50:64:15:6f:8b:
                    ba:c5:a4:22:29:7a:49:80:af:15:28:b9:49:01:44:
                    60:26:83:81:4e:2d:f1:b5:73:e6:18:20:fb:6e:d2:
                    bd:ff:17:57:83:67:21:c7:5e:29:42:70:85:2b:37:
                    1b:5d:cd:62:5e:fc:57:7f:48:39:2d:a3:9c:86:d7:
                    9f:4a:b0:5c:02:69:2c:5f:ee:a9:7b:f3:b4:2e:bd:
                    09:74:88:8f:9c:62:bd:d1:a4:7a:2e:b4:34:98:75:
                    f0:2a:31:d5:9b:14:3d:95:a7:ca:5f:ee:56:f8:e6:
                    4c:bb:86:37:35:84:ea:a0:88:76:2f:22:aa:51:09:
                    7c:c3:dd:63:cc:36:74:28:35:ed:24:19:a6:2b:ff:
                    37:2d:13:4e:eb:f2:e8:74:2a:77:2d:7e:d2:ea:a5:
                    49:15:59:ca:f5:14:cd:44:b7:76:e2:8a:07:f0:3b:
                    06:bf:de:55:f2:d2:4d:08:ab:fe:d4:64:1f:a6:c3:
                    d6:e3:59:66:b9:31:a4:5f:1c:b6:60:ea:af:07:75:
                    30:2f:8e:fc:dd:6a:e8:be:3e:2a:24:08:6e:0e:e6:
                    5b:58:b1:5d:9c:aa:6b:1c:fd:f4:d1:0b:9c:00:e2:
                    13:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:92:D3:71:7C:9D:C3:F4:8F:27:D4:A6:77:B7:3D:81:A0:9A:BE:F6
            X509v3 Authority Key Identifier:
                keyid:BC:2E:4C:D2:EE:87:1C:1F:84:6B:EE:09:B5:44:CE:8C:CF:99:DC:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0735EA22DDA461FBB5E15927E935AAA75CC50234C528933D6EB901422B8A78BA/0/BC2E4CD2EE871C1F846BEE09B544CE8CCF99DCEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC2E4CD2EE871C1F846BEE09B544CE8CCF99DCEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0735EA22DDA461FBB5E15927E935AAA75CC50234C528933D6EB901422B8A78BA/0/323830333a353031303a3a2f33322d3332203d3e20323731383033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5010::/32

    Signature Algorithm: sha256WithRSAEncryption
         c3:e4:8b:7e:03:af:02:7d:19:d3:eb:a0:c5:56:5b:c6:a9:f8:
         56:a1:6e:87:24:9e:06:79:45:d8:00:70:69:23:7a:7f:03:79:
         9e:f2:74:be:24:e4:ac:f9:30:5c:c7:eb:04:52:96:f4:5d:fb:
         e0:2e:c2:a5:bf:a8:f7:dd:1d:30:fa:2f:ef:e4:fb:78:bc:09:
         d5:af:04:2a:ea:45:b5:6e:cc:cc:33:c5:39:63:fe:53:da:88:
         46:27:1b:30:f2:e3:91:0a:bb:b7:e1:06:52:e0:6a:0a:61:37:
         83:53:cc:ed:97:1f:c1:c9:32:79:6e:3a:4a:c2:e8:3a:17:0c:
         19:7b:d7:0b:21:b0:85:31:99:2b:91:71:a5:6e:64:87:57:c8:
         86:3b:41:df:e2:b3:20:ea:0a:9f:ef:4b:3b:5b:9d:56:c1:7c:
         f2:51:a3:48:36:e4:47:f9:bc:77:36:a9:28:28:e8:7f:88:3f:
         c3:49:bc:e9:d7:6f:08:f0:37:00:fa:e9:23:51:89:51:a6:3e:
         15:f8:ca:dd:d0:e3:ec:1b:de:90:ac:ad:31:77:4d:75:66:4e:
         bd:20:2e:e7:f2:71:d6:dd:68:7b:e3:55:18:be:d3:e5:bc:45:
         52:dc:5b:f4:37:aa:4d:2d:8e:01:47:a1:1b:57:57:ae:7f:3c:
         f1:eb:b0:3c
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUDfaUq6JxlUWtjHLIJyaz+NpmiA4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkMyRTRDRDJFRTg3MUMxRjg0NkJFRTA5QjU0NENFOEND
Rjk5RENFQzAeFw0yNjAxMDYxOTEyNDBaFw0yNzAxMDUxOTE3NDBaMDMxMTAvBgNV
BAMTKDU4OTJEMzcxN0M5REMzRjQ4RjI3RDRBNjc3QjczRDgxQTA5QUJFRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS1tTWV8xI6YZ0Pj6pWnZBp625
iP87tNlQZBVvi7rFpCIpekmArxUouUkBRGAmg4FOLfG1c+YYIPtu0r3/F1eDZyHH
XilCcIUrNxtdzWJe/Fd/SDkto5yG159KsFwCaSxf7ql787QuvQl0iI+cYr3RpHou
tDSYdfAqMdWbFD2Vp8pf7lb45ky7hjc1hOqgiHYvIqpRCXzD3WPMNnQoNe0kGaYr
/zctE07r8uh0KnctftLqpUkVWcr1FM1Et3biigfwOwa/3lXy0k0Iq/7UZB+mw9bj
WWa5MaRfHLZg6q8HdTAvjvzdaui+PiokCG4O5ltYsV2cqmsc/fTRC5wA4hMfAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUWJLTcXydw/SPJ9Smd7c9gaCavvYwHwYDVR0j
BBgwFoAUvC5M0u6HHB+Ea+4JtUTOjM+Z3OwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNzM1RUEyMkREQTQ2MUZCQjVFMTU5MjdFOTM1QUFBNzVD
QzUwMjM0QzUyODkzM0Q2RUI5MDE0MjJCOEE3OEJBLzAvQkMyRTRDRDJFRTg3MUMx
Rjg0NkJFRTA5QjU0NENFOENDRjk5RENFQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQzJFNENEMkVFODcxQzFGODQ2
QkVFMDlCNTQ0Q0U4Q0NGOTlEQ0VDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDczNUVBMjJEREE0NjFGQkI1RTE1OTI3RTkzNUFBQTc1Q0M1MDIzNEM1
Mjg5MzNENkVCOTAxNDIyQjhBNzhCQS8wLzMyMzgzMDMzM2EzNTMwMzEzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMTM4MzAzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDUBAw
DQYJKoZIhvcNAQELBQADggEBAMPki34DrwJ9GdProMVWW8ap+FahbockngZ5RdgA
cGkjen8DeZ7ydL4k5Kz5MFzH6wRSlvRd++AuwqW/qPfdHTD6L+/k+3i8CdWvBCrq
RbVuzMwzxTlj/lPaiEYnGzDy45EKu7fhBlLgagphN4NTzO2XH8HJMnluOkrC6DoX
DBl71wshsIUxmSuRcaVuZIdXyIY7Qd/isyDqCp/vSztbnVbBfPJRo0g25Ef5vHc2
qSgo6H+IP8NJvOnXbwjwNwD66SNRiVGmPhX4yt3Q4+wb3pCsrTF3TXVmTr0gLufy
cdbdaHvjVRi+0+W8RVLcW/Q3qk0tjgFHoRtXV65/PPHrsDw=
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:05:19 2026 by rpki-client