This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23E0ADF9AE86293D41DA88AE1D38141EA98368B999EF68E3198EF9E54EF1C62F/0/323830333a613930303a3a2f33322d3438203d3e203532343230.roa
File:                     323830333a613930303a3a2f33322d3438203d3e203532343230.roa (raw, json)
Hash identifier:          c3kWQBkAclYOLS6FELfk1nY3aSNWsXtxnwadCUkucFo=
Subject key identifier:   50:DD:1A:8C:9A:24:BD:6B:F0:89:A8:6A:58:2A:9E:F2:E2:1C:39:52
Certificate issuer:       /CN=5EEF74EC549BBA3A98586948A652EF1E67729F08
Certificate serial:       66975E45AF73964D41F675EA666565BFCB54BB2D
Authority key identifier: 5E:EF:74:EC:54:9B:BA:3A:98:58:69:48:A6:52:EF:1E:67:72:9F:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EEF74EC549BBA3A98586948A652EF1E67729F08.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23E0ADF9AE86293D41DA88AE1D38141EA98368B999EF68E3198EF9E54EF1C62F/0/323830333a613930303a3a2f33322d3438203d3e203532343230.roa
Signing time:             Tue 06 Jan 2026 19:34:06 +0000
ROA not before:           Tue 06 Jan 2026 19:29:06 +0000
ROA not after:            Tue 05 Jan 2027 19:34:06 +0000
asID:                     52420
IP address blocks:        2803:a900::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23E0ADF9AE86293D41DA88AE1D38141EA98368B999EF68E3198EF9E54EF1C62F/0/5EEF74EC549BBA3A98586948A652EF1E67729F08.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23E0ADF9AE86293D41DA88AE1D38141EA98368B999EF68E3198EF9E54EF1C62F/0/5EEF74EC549BBA3A98586948A652EF1E67729F08.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EEF74EC549BBA3A98586948A652EF1E67729F08.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 15:36:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:97:5e:45:af:73:96:4d:41:f6:75:ea:66:65:65:bf:cb:54:bb:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EEF74EC549BBA3A98586948A652EF1E67729F08
        Validity
            Not Before: Jan  6 19:29:06 2026 GMT
            Not After : Jan  5 19:34:06 2027 GMT
        Subject: CN=50DD1A8C9A24BD6BF089A86A582A9EF2E21C3952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7b:04:b4:fc:20:00:c2:48:cd:26:92:79:35:
                    2c:dc:0d:02:9e:ab:31:a0:b2:24:98:d7:49:f4:ce:
                    3b:bb:4a:88:d0:7d:d3:0d:dc:8e:a1:8f:93:7f:43:
                    45:0c:10:7c:30:e5:cd:bc:57:2b:e1:6c:5f:60:2d:
                    b0:0f:11:28:9c:b0:a1:e5:01:be:b5:d0:17:80:16:
                    04:41:2f:f2:95:12:62:19:68:a5:d4:ec:60:98:f9:
                    b1:3b:48:8b:7e:9c:bb:e9:a2:32:46:9d:71:3e:ae:
                    ba:f2:55:e9:cf:ae:a5:11:21:f2:10:ca:0f:52:46:
                    b3:fb:28:8c:77:78:3e:66:0a:f9:e0:cb:fd:21:19:
                    cd:cc:76:16:99:dd:f6:d8:48:5a:2b:e9:65:ee:a1:
                    05:02:b7:b7:4e:b9:be:0a:65:22:36:df:d8:88:e2:
                    bf:87:8b:68:9b:f5:eb:b1:59:d7:97:56:42:a2:56:
                    e7:df:20:ad:8e:0b:b2:17:82:57:f1:c8:ff:f0:8d:
                    de:c9:10:7d:33:78:f4:5f:58:75:e7:f6:ca:98:7d:
                    04:6d:63:1b:50:6f:73:b6:2c:9b:ae:28:44:a7:ac:
                    ed:3a:49:07:d6:ba:b4:ce:2e:0e:fe:57:b9:ca:82:
                    b5:69:8e:7d:cc:fa:ff:33:42:bb:5f:6a:c9:04:50:
                    94:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:DD:1A:8C:9A:24:BD:6B:F0:89:A8:6A:58:2A:9E:F2:E2:1C:39:52
            X509v3 Authority Key Identifier:
                keyid:5E:EF:74:EC:54:9B:BA:3A:98:58:69:48:A6:52:EF:1E:67:72:9F:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23E0ADF9AE86293D41DA88AE1D38141EA98368B999EF68E3198EF9E54EF1C62F/0/5EEF74EC549BBA3A98586948A652EF1E67729F08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EEF74EC549BBA3A98586948A652EF1E67729F08.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23E0ADF9AE86293D41DA88AE1D38141EA98368B999EF68E3198EF9E54EF1C62F/0/323830333a613930303a3a2f33322d3438203d3e203532343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a900::/32

    Signature Algorithm: sha256WithRSAEncryption
         ce:32:fd:51:4a:75:a1:ec:c5:c1:74:74:e0:fc:da:0e:83:53:
         06:e4:9c:39:ed:4e:90:e9:6f:b0:f7:43:f0:7f:77:ec:83:46:
         b6:1f:9a:03:e2:13:61:2a:47:30:17:89:49:3a:0b:d7:cd:62:
         c4:b1:e0:59:c1:f2:7d:28:90:76:cb:ed:8b:90:1b:d1:e7:8e:
         6f:2b:3b:87:39:d3:b2:3a:e3:a9:45:be:80:29:1d:ee:95:78:
         c2:8f:e3:e6:9f:bf:cd:93:cd:3e:d4:f8:83:51:61:ca:38:8c:
         ed:0a:d8:49:85:5e:0e:be:46:23:8a:bc:fd:fc:d6:db:bd:51:
         dd:77:fc:ae:89:d1:61:78:e9:6b:f8:74:44:4c:0b:cf:8b:5b:
         de:a8:a9:87:07:9a:30:81:9b:e9:66:a9:a0:d7:a5:ac:7e:11:
         49:38:eb:2e:ae:2e:e0:95:48:ff:42:dd:87:85:fe:e1:42:40:
         50:2d:e8:90:44:4d:80:67:30:e0:3d:17:40:71:81:ad:7a:b7:
         e3:0a:01:97:02:5d:bf:fd:55:93:ae:ca:1d:a7:15:94:f7:84:
         ce:6f:72:27:dc:75:fc:d6:dd:03:d1:15:82:04:82:2d:c0:ad:
         24:47:58:af:c8:10:33:5d:38:3e:d5:78:48:6a:c9:4f:a3:86:
         1b:27:65:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:19:20 2026 by rpki-client