This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2BE879972F4E90E8FDCB6500D36E6A4A9FF77B0274706A399C0923D38FFEF25B/0/323830333a616335303a3a2f33322d3438203d3e20323733313433.roa
File:                     323830333a616335303a3a2f33322d3438203d3e20323733313433.roa (raw, json)
Hash identifier:          J9kpH/gRMAqICHGe5Xodlez3CrCd2Scgxoqqd/lGAxk=
Subject key identifier:   AE:6F:69:C0:01:C9:EA:5F:27:38:B3:B9:C2:AE:FC:AD:67:DC:1C:C9
Certificate issuer:       /CN=5359D5652EB8B1C42FF1914CA8586A67AE35A163
Certificate serial:       40CB85F2E0ACB3D3F20323CBEC4CBBBE2F8293C6
Authority key identifier: 53:59:D5:65:2E:B8:B1:C4:2F:F1:91:4C:A8:58:6A:67:AE:35:A1:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5359D5652EB8B1C42FF1914CA8586A67AE35A163.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2BE879972F4E90E8FDCB6500D36E6A4A9FF77B0274706A399C0923D38FFEF25B/0/323830333a616335303a3a2f33322d3438203d3e20323733313433.roa
Signing time:             Sat 29 Nov 2025 12:00:00 +0000
ROA not before:           Sat 29 Nov 2025 11:55:00 +0000
ROA not after:            Sat 28 Nov 2026 12:00:00 +0000
asID:                     273143
IP address blocks:        2803:ac50::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2BE879972F4E90E8FDCB6500D36E6A4A9FF77B0274706A399C0923D38FFEF25B/0/5359D5652EB8B1C42FF1914CA8586A67AE35A163.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2BE879972F4E90E8FDCB6500D36E6A4A9FF77B0274706A399C0923D38FFEF25B/0/5359D5652EB8B1C42FF1914CA8586A67AE35A163.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5359D5652EB8B1C42FF1914CA8586A67AE35A163.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 18:44:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:cb:85:f2:e0:ac:b3:d3:f2:03:23:cb:ec:4c:bb:be:2f:82:93:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5359D5652EB8B1C42FF1914CA8586A67AE35A163
        Validity
            Not Before: Nov 29 11:55:00 2025 GMT
            Not After : Nov 28 12:00:00 2026 GMT
        Subject: CN=AE6F69C001C9EA5F2738B3B9C2AEFCAD67DC1CC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:59:ed:34:6a:30:05:d2:48:b8:80:9f:f6:3a:
                    c4:ab:a3:ee:44:66:0a:86:a5:57:85:26:66:04:b6:
                    4b:96:e0:14:ef:7f:4b:c5:5b:eb:f4:ee:ab:71:8a:
                    84:fb:7f:2e:d3:e2:10:f2:5f:61:26:1c:c1:20:aa:
                    7c:4b:3e:c1:8d:05:59:df:bd:48:51:e6:3f:f9:d9:
                    ba:61:ad:3f:a3:d4:bc:e9:58:77:f6:e3:f2:1e:4f:
                    7e:96:28:5f:3c:3a:49:86:6a:31:e6:e3:14:e7:76:
                    98:8a:ad:01:aa:f5:cf:83:6a:6f:a7:50:87:95:1d:
                    3d:6e:83:67:c4:c0:2f:be:67:94:57:6b:8d:91:85:
                    26:e9:5f:c4:39:33:84:71:32:71:d1:14:f4:be:74:
                    e9:86:26:15:4e:de:11:80:76:ff:65:6e:4b:c9:c1:
                    57:d5:c3:96:e5:69:ec:51:08:ea:bc:63:e4:e6:a1:
                    0d:20:11:35:5e:fd:8f:4c:8e:54:8e:e1:5f:73:87:
                    ad:6d:f8:05:47:28:79:0f:e1:b9:42:1d:56:eb:44:
                    bd:c5:e9:c1:09:53:08:c9:e4:d8:49:49:2e:4d:35:
                    20:b8:bd:a7:e7:ab:51:26:90:c6:34:20:d3:c1:30:
                    92:43:22:ce:a2:d6:08:e0:c5:3c:f5:f0:2a:d5:2c:
                    66:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:6F:69:C0:01:C9:EA:5F:27:38:B3:B9:C2:AE:FC:AD:67:DC:1C:C9
            X509v3 Authority Key Identifier:
                keyid:53:59:D5:65:2E:B8:B1:C4:2F:F1:91:4C:A8:58:6A:67:AE:35:A1:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2BE879972F4E90E8FDCB6500D36E6A4A9FF77B0274706A399C0923D38FFEF25B/0/5359D5652EB8B1C42FF1914CA8586A67AE35A163.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5359D5652EB8B1C42FF1914CA8586A67AE35A163.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2BE879972F4E90E8FDCB6500D36E6A4A9FF77B0274706A399C0923D38FFEF25B/0/323830333a616335303a3a2f33322d3438203d3e20323733313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ac50::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:4f:3c:65:6a:0e:bc:ab:34:72:0a:ed:4a:e0:f6:6b:e9:4d:
         d9:cc:99:1d:5a:ab:96:ba:76:a6:f6:42:31:61:a4:24:9c:b4:
         0c:d1:18:1d:19:9e:93:c9:da:e7:01:1b:13:22:91:6a:e1:f4:
         2e:0f:a5:25:7b:d7:c2:0f:39:c0:e4:0c:06:fb:2d:62:00:f3:
         6a:ce:d3:45:e2:81:45:df:52:55:26:97:14:d8:11:fd:37:53:
         a9:dc:fa:f6:a4:57:46:42:ef:89:52:e7:23:36:22:bf:8e:0a:
         16:c3:c0:2e:aa:16:09:3f:29:da:53:3a:72:69:22:b8:8c:b4:
         99:c0:93:1c:94:2c:0f:5b:2e:d5:4b:56:80:4b:11:84:77:26:
         1f:60:aa:29:d1:bd:60:78:fe:71:0d:a3:9a:c8:5c:9e:2b:04:
         b9:bb:6c:fd:5e:6a:f3:16:e7:2f:05:db:03:b0:ee:c2:8a:4e:
         e0:e4:64:30:26:6a:6f:5e:1c:ac:46:fc:5c:77:8e:96:27:99:
         c7:6e:f5:8b:81:78:4d:4d:2c:ec:34:f0:a8:3d:b6:ea:2d:af:
         b8:6c:cb:90:07:26:84:a6:31:96:04:d8:98:76:38:90:a2:b6:
         d8:3a:68:73:a0:40:da:c2:9c:f5:5f:f5:ca:3b:5b:d2:c2:85:
         59:97:31:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:11:17 2025 by rpki-client