This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25E66E6E20579163B502223B71B9DA3511AD417FEC7D054C5C9E8825E7DCD7EA/0/323830333a383931303a313a3a2f34382d3438203d3e203634313334.roa
File:                     323830333a383931303a313a3a2f34382d3438203d3e203634313334.roa (raw, json)
Hash identifier:          06Obl1klsdLvG0kpWN6ofDzhH/eMFFQUY/ssdHlAuI8=
Subject key identifier:   91:31:0A:51:DC:CB:03:10:4F:F4:FC:8A:E5:56:09:DC:9E:45:94:73
Certificate issuer:       /CN=5E04FF1D1502CAA08A7AD24783C2E137D6AFC709
Certificate serial:       57A48E6BAF3C6B359259AD3C1F0C28619C4C296C
Authority key identifier: 5E:04:FF:1D:15:02:CA:A0:8A:7A:D2:47:83:C2:E1:37:D6:AF:C7:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E04FF1D1502CAA08A7AD24783C2E137D6AFC709.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25E66E6E20579163B502223B71B9DA3511AD417FEC7D054C5C9E8825E7DCD7EA/0/323830333a383931303a313a3a2f34382d3438203d3e203634313334.roa
Signing time:             Sat 27 Dec 2025 20:56:23 +0000
ROA not before:           Sat 27 Dec 2025 20:51:23 +0000
ROA not after:            Sat 26 Dec 2026 20:56:23 +0000
asID:                     64134
IP address blocks:        2803:8910:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25E66E6E20579163B502223B71B9DA3511AD417FEC7D054C5C9E8825E7DCD7EA/0/5E04FF1D1502CAA08A7AD24783C2E137D6AFC709.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25E66E6E20579163B502223B71B9DA3511AD417FEC7D054C5C9E8825E7DCD7EA/0/5E04FF1D1502CAA08A7AD24783C2E137D6AFC709.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E04FF1D1502CAA08A7AD24783C2E137D6AFC709.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 11:15:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:a4:8e:6b:af:3c:6b:35:92:59:ad:3c:1f:0c:28:61:9c:4c:29:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E04FF1D1502CAA08A7AD24783C2E137D6AFC709
        Validity
            Not Before: Dec 27 20:51:23 2025 GMT
            Not After : Dec 26 20:56:23 2026 GMT
        Subject: CN=91310A51DCCB03104FF4FC8AE55609DC9E459473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:17:b8:7b:61:1f:ad:cf:7e:6e:d7:5b:56:aa:
                    10:93:65:6c:47:aa:f9:d1:b9:05:72:67:52:91:8b:
                    af:5d:59:73:b8:18:ce:18:d3:e1:93:62:44:c7:4b:
                    6e:0e:4f:de:dc:71:24:4a:24:90:d9:f9:bd:58:fd:
                    32:54:3a:25:ed:32:34:52:45:fa:23:19:f7:fb:57:
                    fa:b9:b2:f1:83:0e:15:22:76:b8:ec:11:86:2d:39:
                    8b:97:18:4a:9a:51:b7:72:a7:24:be:7d:00:34:49:
                    f7:44:59:e1:90:fd:53:32:3f:7c:56:4f:f5:99:eb:
                    c8:0c:17:a3:01:3b:10:2a:97:6f:52:ec:25:2c:2f:
                    4b:2f:f0:da:23:c4:f5:56:8e:d4:c7:ed:b9:3d:0f:
                    3a:00:19:1a:99:a2:8b:39:7b:40:26:6e:65:9d:f6:
                    1c:de:b7:37:df:ae:db:d6:5f:e3:5c:d6:b5:b8:70:
                    4e:7a:8f:e9:aa:a7:c3:9e:92:c0:0f:e1:9e:8e:f8:
                    f2:cd:33:57:58:03:29:19:c8:c0:b4:3b:2b:50:5a:
                    36:1a:5e:73:4f:38:5f:24:71:4f:bc:47:c3:2a:7f:
                    c0:8d:dc:53:04:93:dc:d2:7d:be:65:6e:34:11:d2:
                    ef:d8:1c:39:2e:2a:0f:ef:a0:19:2a:d7:37:40:31:
                    a5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:31:0A:51:DC:CB:03:10:4F:F4:FC:8A:E5:56:09:DC:9E:45:94:73
            X509v3 Authority Key Identifier:
                keyid:5E:04:FF:1D:15:02:CA:A0:8A:7A:D2:47:83:C2:E1:37:D6:AF:C7:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25E66E6E20579163B502223B71B9DA3511AD417FEC7D054C5C9E8825E7DCD7EA/0/5E04FF1D1502CAA08A7AD24783C2E137D6AFC709.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E04FF1D1502CAA08A7AD24783C2E137D6AFC709.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25E66E6E20579163B502223B71B9DA3511AD417FEC7D054C5C9E8825E7DCD7EA/0/323830333a383931303a313a3a2f34382d3438203d3e203634313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8910:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:90:8a:d9:0f:ac:92:2a:12:f2:db:bc:c0:90:b7:1f:d7:3a:
         8a:45:49:6d:ef:1f:d4:88:64:e8:b7:98:4a:3c:a7:c4:1f:75:
         e3:79:85:76:fe:39:b6:99:34:45:09:fc:22:67:62:41:87:46:
         e8:4a:7e:d6:26:7c:9b:f1:4b:5f:b7:cc:59:03:41:0c:45:82:
         95:fd:a9:71:75:60:09:2d:62:3c:c8:45:5c:0d:79:60:81:b3:
         82:73:64:3f:79:8e:ea:2f:42:db:1e:e9:70:62:01:ab:61:67:
         ab:d3:43:76:07:0d:b4:f5:ba:1d:1f:3f:3e:11:6a:3f:c4:2e:
         3c:e0:f7:95:9e:cc:29:2c:9a:90:30:61:b1:4b:eb:bc:59:70:
         be:c7:9e:54:8b:f3:7e:6c:db:cf:c7:b0:0e:e0:a8:95:31:23:
         5f:89:30:56:e8:c9:75:ff:14:53:b6:c7:94:8a:27:67:41:5d:
         5e:34:56:71:b1:65:c7:49:37:fa:b6:e4:15:64:9a:17:03:11:
         1f:89:0b:d3:98:05:11:11:49:77:eb:40:de:c8:58:62:74:01:
         90:ed:2b:fa:b8:f7:7a:84:c7:a8:79:c5:bf:b8:b6:c7:7e:3f:
         54:e2:b2:56:f0:83:1e:1f:f6:58:c9:d1:6b:1d:2a:6e:08:5b:
         46:37:6e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:05:51 2026 by rpki-client