This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/323830333a623139303a3630303a3a2f34302d3430203d3e20323732393339.roa
File:                     323830333a623139303a3630303a3a2f34302d3430203d3e20323732393339.roa (raw, json)
Hash identifier:          8aw1ZEBzMqRwan5xScDs3fVb6TiwqhhCNsQ6tkXECrM=
Subject key identifier:   DC:CD:A1:BC:9E:83:6E:CE:B5:C9:39:D5:81:5C:8E:37:32:F1:7A:06
Certificate issuer:       /CN=E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8
Certificate serial:       20C5F6FCC7BFF6743F330A1910F10A76759154DC
Authority key identifier: E5:B3:F4:03:2F:D6:8E:C9:C0:5F:AD:BA:43:7C:34:59:E3:C7:A2:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/323830333a623139303a3630303a3a2f34302d3430203d3e20323732393339.roa
Signing time:             Tue 06 Jan 2026 19:11:07 +0000
ROA not before:           Tue 06 Jan 2026 19:06:07 +0000
ROA not after:            Tue 05 Jan 2027 19:11:07 +0000
asID:                     272939
IP address blocks:        2803:b190:600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 01:20:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:c5:f6:fc:c7:bf:f6:74:3f:33:0a:19:10:f1:0a:76:75:91:54:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8
        Validity
            Not Before: Jan  6 19:06:07 2026 GMT
            Not After : Jan  5 19:11:07 2027 GMT
        Subject: CN=DCCDA1BC9E836ECEB5C939D5815C8E3732F17A06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3b:e5:74:01:73:42:46:df:b0:b5:47:c6:28:
                    b1:c4:4c:2c:eb:4e:96:4c:2b:65:6a:0f:ac:e7:ee:
                    83:01:3f:f0:f5:bd:f5:fc:a1:f3:82:2a:5f:a1:c4:
                    de:63:f5:94:52:1a:8e:5f:5c:53:69:b6:69:e3:54:
                    92:f4:48:85:74:02:78:ce:0f:9a:86:af:9f:f5:ca:
                    88:a5:e5:de:e4:61:86:40:bc:e3:5d:85:e5:e9:67:
                    b0:15:16:14:1f:73:e5:50:22:cb:e9:6d:b6:36:f6:
                    3c:9a:48:07:a0:cf:c5:ec:af:7d:ce:cf:16:4a:f5:
                    f5:42:ac:e5:b1:64:25:ef:0e:44:a6:ca:d1:aa:a5:
                    63:a4:b1:11:4e:1e:a4:e8:f1:f2:6d:4a:c6:09:b7:
                    71:b5:ec:ad:50:71:1a:c3:d7:ad:4e:b0:8e:34:8c:
                    9c:78:02:6b:71:3f:e5:cb:12:57:a6:2e:b8:0d:5f:
                    d7:47:41:de:30:39:c1:ab:5b:f4:a1:03:f0:a1:c3:
                    6d:ad:39:31:80:1f:46:66:26:df:66:9d:97:5a:d3:
                    72:84:d8:f3:0b:0d:f4:ce:3b:01:85:91:ac:4a:53:
                    aa:c3:55:4e:f9:af:d5:77:de:15:82:82:df:dc:82:
                    d0:dc:f4:1e:b8:d9:12:f7:8d:a9:85:79:6d:38:b3:
                    ac:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:CD:A1:BC:9E:83:6E:CE:B5:C9:39:D5:81:5C:8E:37:32:F1:7A:06
            X509v3 Authority Key Identifier:
                keyid:E5:B3:F4:03:2F:D6:8E:C9:C0:5F:AD:BA:43:7C:34:59:E3:C7:A2:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/323830333a623139303a3630303a3a2f34302d3430203d3e20323732393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b190:600::/40

    Signature Algorithm: sha256WithRSAEncryption
         b9:5b:ad:92:36:11:a7:94:44:48:45:14:ed:dc:93:67:46:c6:
         c1:b6:1d:ab:99:55:35:b2:80:a5:b0:9f:80:2e:f5:d9:86:fc:
         60:a8:be:a0:9a:ec:63:8f:4b:b3:48:e3:63:54:f1:30:21:18:
         61:0f:57:92:db:c1:c8:fe:a7:3c:c8:0f:5c:aa:c7:45:fb:d5:
         7e:f7:ca:13:04:ae:f4:81:65:12:38:55:d2:63:42:d5:d8:a4:
         e5:ff:56:41:49:15:9b:ea:ae:67:b3:c7:56:c8:a3:99:ff:95:
         b1:17:68:1d:e6:f7:d5:7b:1c:dc:f3:42:2f:53:00:4c:79:af:
         93:8a:cc:49:ed:dd:01:60:f1:49:13:b6:49:69:13:1b:3c:92:
         df:6a:70:90:ef:96:c5:c7:3c:63:19:cf:49:ae:b4:f3:9d:ca:
         1f:6a:b2:5c:a5:55:a8:29:17:fd:73:23:73:ae:07:35:a4:e6:
         3c:2f:ce:de:74:3a:70:98:70:70:4a:28:58:0b:16:1d:77:1f:
         48:8f:d6:08:0b:aa:8a:37:18:db:64:ca:dd:56:42:8f:0f:6a:
         26:7b:8e:2f:28:c8:5f:66:dc:b7:5e:c4:31:d3:26:a3:31:23:
         ec:0c:c0:d6:3e:db:11:97:d4:4d:51:dc:4b:dc:21:58:60:27:
         fe:2a:73:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:06:14 2026 by rpki-client