This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F9B3110B85FD4F3738A60D77EA0752113A39B688C1FF4D7E99482D3A108C4D3/0/323830333a356231303a3a2f33322d3438203d3e20323732303833.roa
File:                     323830333a356231303a3a2f33322d3438203d3e20323732303833.roa (raw, json)
Hash identifier:          0CDmxvUuhVHawzWX1NQbSwPwICcicUGUVKpusc+gBkk=
Subject key identifier:   5E:08:60:AF:D5:B5:59:46:1E:F0:3B:A8:FF:3A:CB:85:A8:41:A2:11
Certificate issuer:       /CN=66E4E7ABD710F8310CAE36811B3645B9867BD8EE
Certificate serial:       3FAD4E1F26E19E14DB1B6891D16CB17F7CCCAC79
Authority key identifier: 66:E4:E7:AB:D7:10:F8:31:0C:AE:36:81:1B:36:45:B9:86:7B:D8:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66E4E7ABD710F8310CAE36811B3645B9867BD8EE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F9B3110B85FD4F3738A60D77EA0752113A39B688C1FF4D7E99482D3A108C4D3/0/323830333a356231303a3a2f33322d3438203d3e20323732303833.roa
Signing time:             Tue 06 Jan 2026 18:57:55 +0000
ROA not before:           Tue 06 Jan 2026 18:52:55 +0000
ROA not after:            Tue 05 Jan 2027 18:57:55 +0000
asID:                     272083
IP address blocks:        2803:5b10::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0F9B3110B85FD4F3738A60D77EA0752113A39B688C1FF4D7E99482D3A108C4D3/0/66E4E7ABD710F8310CAE36811B3645B9867BD8EE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0F9B3110B85FD4F3738A60D77EA0752113A39B688C1FF4D7E99482D3A108C4D3/0/66E4E7ABD710F8310CAE36811B3645B9867BD8EE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66E4E7ABD710F8310CAE36811B3645B9867BD8EE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:ad:4e:1f:26:e1:9e:14:db:1b:68:91:d1:6c:b1:7f:7c:cc:ac:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66E4E7ABD710F8310CAE36811B3645B9867BD8EE
        Validity
            Not Before: Jan  6 18:52:55 2026 GMT
            Not After : Jan  5 18:57:55 2027 GMT
        Subject: CN=5E0860AFD5B559461EF03BA8FF3ACB85A841A211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:79:8a:24:46:16:f2:88:a0:20:0a:36:a4:e3:
                    2e:18:62:49:61:ed:d7:18:d3:43:f1:7e:54:ae:ab:
                    a1:6e:ab:34:43:f1:1f:14:50:ad:39:c6:54:e6:4c:
                    39:04:dc:4b:2f:36:58:b7:dd:10:4a:db:37:08:c7:
                    37:42:49:2c:cd:a1:34:db:a8:b2:da:94:dd:43:2f:
                    58:24:75:40:0f:62:7d:32:64:a1:2d:b7:85:56:26:
                    a7:45:71:bc:d4:25:b1:3d:c3:34:f0:98:c0:6d:14:
                    d8:67:91:28:5c:a6:b6:a8:0c:e8:b2:71:70:d0:60:
                    64:0a:75:1b:d9:b2:db:bb:ee:44:6d:36:b9:a7:36:
                    b1:28:55:92:b9:44:48:62:b5:f0:a4:34:92:0f:1c:
                    01:8c:d3:13:de:0e:dc:1b:1e:46:61:7e:1a:79:f2:
                    f9:ed:e4:b1:8b:aa:5a:d1:b3:53:f5:fb:14:12:e4:
                    91:8a:64:ca:49:3a:44:5e:41:0e:19:2e:32:8e:65:
                    74:df:8a:33:a9:17:ed:f4:e0:37:58:2a:13:ee:f6:
                    f3:30:3d:b7:29:d3:a5:5a:4b:19:80:2c:dc:cb:5e:
                    b2:63:ec:46:bd:ea:29:83:d8:c1:ce:85:e1:75:41:
                    b2:e3:f9:d5:ae:ba:ec:50:21:46:e3:fa:79:6b:6d:
                    73:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:08:60:AF:D5:B5:59:46:1E:F0:3B:A8:FF:3A:CB:85:A8:41:A2:11
            X509v3 Authority Key Identifier:
                keyid:66:E4:E7:AB:D7:10:F8:31:0C:AE:36:81:1B:36:45:B9:86:7B:D8:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F9B3110B85FD4F3738A60D77EA0752113A39B688C1FF4D7E99482D3A108C4D3/0/66E4E7ABD710F8310CAE36811B3645B9867BD8EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66E4E7ABD710F8310CAE36811B3645B9867BD8EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F9B3110B85FD4F3738A60D77EA0752113A39B688C1FF4D7E99482D3A108C4D3/0/323830333a356231303a3a2f33322d3438203d3e20323732303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5b10::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:61:96:9a:b7:2e:58:5e:c2:37:27:79:45:46:96:a2:30:a0:
         ea:52:18:8b:c1:da:9d:44:f0:2a:df:66:3d:b6:5f:64:96:40:
         fb:83:4d:61:ac:0a:53:dc:63:d1:dd:25:7c:83:b9:be:62:eb:
         fb:24:47:9d:ec:6b:5b:94:ad:f2:71:94:55:86:f7:46:b5:6e:
         35:97:23:b6:a2:d3:88:a6:f8:29:b2:2e:a1:84:c3:69:69:c1:
         8e:7c:62:68:9b:85:ec:15:cf:3f:09:2e:7e:e4:c8:d9:6e:21:
         0a:bc:01:e2:19:45:c8:4c:af:ba:2f:bb:21:59:51:1d:2f:2b:
         6c:d0:65:d5:18:8f:8b:06:70:bf:8d:71:06:7b:32:0f:dc:af:
         b9:65:66:b3:00:c4:7c:e9:b3:af:b7:35:a5:10:1d:00:e3:62:
         2e:dc:57:a1:e4:62:7c:cb:cc:0d:c9:f6:d5:2d:e1:41:93:1c:
         33:f7:2c:91:31:91:ee:e2:d6:ea:bb:e6:64:3d:9d:4e:77:fb:
         a3:24:15:fb:38:2e:91:04:f7:b1:40:79:96:39:85:d2:0b:0b:
         cc:4c:d6:62:8e:09:3d:4b:15:30:6c:5b:9c:f9:92:83:49:94:
         6f:44:e0:24:51:50:92:12:29:b0:ec:69:bb:5e:c9:63:4a:2b:
         08:df:13:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:28:40 2026 by rpki-client