This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3FC5A7998A9BECC6EB7251611FF8F04BFF65CDD862A8D5C6CE86542753A77108/0/323830333a3836303a3a2f33322d3438203d3e203532333939.roa
File:                     323830333a3836303a3a2f33322d3438203d3e203532333939.roa (raw, json)
Hash identifier:          4ka/phqR2TXJF59RPQALXqS+/UOOvzBDfTuuH2AQhjA=
Subject key identifier:   5D:6C:8B:EF:0C:B3:58:D5:91:71:46:EA:C1:DA:F5:C9:56:FD:D7:9C
Certificate issuer:       /CN=0A205E1E925EE30681B338EF41B0939B89AE8FB5
Certificate serial:       585ADF216BA6B2E71A891257D7B23A4F7B702E5F
Authority key identifier: 0A:20:5E:1E:92:5E:E3:06:81:B3:38:EF:41:B0:93:9B:89:AE:8F:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A205E1E925EE30681B338EF41B0939B89AE8FB5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3FC5A7998A9BECC6EB7251611FF8F04BFF65CDD862A8D5C6CE86542753A77108/0/323830333a3836303a3a2f33322d3438203d3e203532333939.roa
Signing time:             Tue 06 Jan 2026 20:57:14 +0000
ROA not before:           Tue 06 Jan 2026 20:52:14 +0000
ROA not after:            Tue 05 Jan 2027 20:57:14 +0000
asID:                     52399
IP address blocks:        2803:860::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3FC5A7998A9BECC6EB7251611FF8F04BFF65CDD862A8D5C6CE86542753A77108/0/0A205E1E925EE30681B338EF41B0939B89AE8FB5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3FC5A7998A9BECC6EB7251611FF8F04BFF65CDD862A8D5C6CE86542753A77108/0/0A205E1E925EE30681B338EF41B0939B89AE8FB5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A205E1E925EE30681B338EF41B0939B89AE8FB5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:5a:df:21:6b:a6:b2:e7:1a:89:12:57:d7:b2:3a:4f:7b:70:2e:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A205E1E925EE30681B338EF41B0939B89AE8FB5
        Validity
            Not Before: Jan  6 20:52:14 2026 GMT
            Not After : Jan  5 20:57:14 2027 GMT
        Subject: CN=5D6C8BEF0CB358D5917146EAC1DAF5C956FDD79C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:69:12:b6:10:f9:6a:55:27:69:e5:9a:ea:fd:
                    24:9d:1f:35:e6:7b:04:e7:32:91:76:a8:36:55:50:
                    ed:1b:9c:ca:03:06:ad:04:16:d4:61:03:68:e0:11:
                    3f:4c:ff:26:0f:3f:0d:10:54:4c:f1:d5:a2:cb:28:
                    ce:13:1b:5d:7c:5d:ec:af:b9:7e:5f:c6:72:f6:da:
                    d4:b1:94:aa:13:29:17:6b:00:0d:5a:7d:0c:f3:7e:
                    04:b7:2c:91:96:e1:d1:5f:87:00:0a:c7:db:e8:fb:
                    ab:a0:18:11:e2:f8:c9:7f:14:a1:c5:63:db:30:8a:
                    2a:be:8a:3c:3e:5d:cc:ef:d2:7b:cd:af:02:ef:f5:
                    39:3b:87:78:39:4c:43:10:0b:71:58:07:82:55:a1:
                    fd:13:f1:0b:62:0e:09:fe:b5:f3:f4:1e:1c:1a:3a:
                    b0:59:b3:de:27:d4:1e:81:61:d1:49:ec:4c:61:09:
                    1a:0d:9f:43:0c:1e:b8:46:f7:95:04:f4:9e:9b:14:
                    9b:db:77:20:87:e2:76:24:c5:b4:90:b6:18:69:be:
                    ef:51:b7:56:6c:95:7d:1f:75:7e:66:b3:fa:91:e8:
                    d4:bc:0d:65:c4:49:c8:8b:11:7a:6c:c0:b8:9f:9a:
                    ff:cc:f7:d6:4f:84:1d:36:85:e1:f6:12:67:96:de:
                    10:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:6C:8B:EF:0C:B3:58:D5:91:71:46:EA:C1:DA:F5:C9:56:FD:D7:9C
            X509v3 Authority Key Identifier:
                keyid:0A:20:5E:1E:92:5E:E3:06:81:B3:38:EF:41:B0:93:9B:89:AE:8F:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3FC5A7998A9BECC6EB7251611FF8F04BFF65CDD862A8D5C6CE86542753A77108/0/0A205E1E925EE30681B338EF41B0939B89AE8FB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A205E1E925EE30681B338EF41B0939B89AE8FB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3FC5A7998A9BECC6EB7251611FF8F04BFF65CDD862A8D5C6CE86542753A77108/0/323830333a3836303a3a2f33322d3438203d3e203532333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:860::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:12:f6:7a:8b:64:e4:74:86:22:94:03:8b:c7:72:e6:30:96:
         38:56:b0:3b:56:5c:4b:6b:77:3c:50:76:29:c1:4b:c7:bb:87:
         08:6a:ca:78:3f:c3:4f:78:85:a5:a4:ec:e9:07:5a:a7:dd:5b:
         4f:e3:2d:68:06:b8:bd:7b:5a:e1:22:91:ce:70:07:7c:ed:9f:
         80:1c:ef:2d:6f:b0:d8:44:b9:ad:04:3a:60:8f:18:ac:2a:04:
         87:a9:7b:a6:59:20:42:96:14:4c:d1:52:7e:3c:aa:bd:9d:49:
         1b:89:09:dd:f0:16:a7:e3:8f:74:da:57:d7:c3:49:4e:2e:11:
         bf:0c:09:f5:22:d7:af:30:27:d4:9e:66:6a:b2:a6:53:05:db:
         78:a5:9f:c1:d6:61:11:5b:c3:4a:93:6f:41:23:f9:64:7f:31:
         da:97:b7:1b:9c:72:ae:1b:21:71:54:b3:bb:9f:3a:17:a8:38:
         cb:54:c0:ce:c3:df:39:fe:11:ad:9e:d1:2f:ae:db:60:af:2f:
         d7:ba:2e:83:33:9c:41:3f:f7:b2:8e:98:94:87:47:81:e5:c2:
         b4:b6:97:7b:d0:8d:ab:13:6e:5c:35:63:0f:ff:a6:0d:53:5f:
         64:a5:9c:7d:83:b6:04:d5:0e:81:f3:81:35:3f:ad:aa:50:fa:
         ea:f1:78:c8
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUWFrfIWumsucaiRJX17I6T3twLl8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEEyMDVFMUU5MjVFRTMwNjgxQjMzOEVGNDFCMDkzOUI4
OUFFOEZCNTAeFw0yNjAxMDYyMDUyMTRaFw0yNzAxMDUyMDU3MTRaMDMxMTAvBgNV
BAMTKDVENkM4QkVGMENCMzU4RDU5MTcxNDZFQUMxREFGNUM5NTZGREQ3OUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGaRK2EPlqVSdp5Zrq/SSdHzXm
ewTnMpF2qDZVUO0bnMoDBq0EFtRhA2jgET9M/yYPPw0QVEzx1aLLKM4TG118Xeyv
uX5fxnL22tSxlKoTKRdrAA1afQzzfgS3LJGW4dFfhwAKx9vo+6ugGBHi+Ml/FKHF
Y9swiiq+ijw+Xczv0nvNrwLv9Tk7h3g5TEMQC3FYB4JVof0T8QtiDgn+tfP0Hhwa
OrBZs94n1B6BYdFJ7ExhCRoNn0MMHrhG95UE9J6bFJvbdyCH4nYkxbSQthhpvu9R
t1ZslX0fdX5ms/qR6NS8DWXESciLEXpswLifmv/M99ZPhB02heH2EmeW3hBLAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUXWyL7wyzWNWRcUbqwdr1yVb915wwHwYDVR0j
BBgwFoAUCiBeHpJe4waBszjvQbCTm4muj7UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRkM1QTc5OThBOUJFQ0M2RUI3MjUxNjExRkY4RjA0QkZG
NjVDREQ4NjJBOEQ1QzZDRTg2NTQyNzUzQTc3MTA4LzAvMEEyMDVFMUU5MjVFRTMw
NjgxQjMzOEVGNDFCMDkzOUI4OUFFOEZCNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQTIwNUUxRTkyNUVFMzA2ODFC
MzM4RUY0MUIwOTM5Qjg5QUU4RkI1LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0ZDNUE3OTk4QTlCRUNDNkVCNzI1MTYxMUZGOEYwNEJGRjY1Q0REODYy
QThENUM2Q0U4NjU0Mjc1M0E3NzEwOC8wLzMyMzgzMDMzM2EzODM2MzAzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzNTMyMzMzOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMIYDANBgkq
hkiG9w0BAQsFAAOCAQEATRL2eotk5HSGIpQDi8dy5jCWOFawO1ZcS2t3PFB2KcFL
x7uHCGrKeD/DT3iFpaTs6Qdap91bT+MtaAa4vXta4SKRznAHfO2fgBzvLW+w2ES5
rQQ6YI8YrCoEh6l7plkgQpYUTNFSfjyqvZ1JG4kJ3fAWp+OPdNpX18NJTi4RvwwJ
9SLXrzAn1J5marKmUwXbeKWfwdZhEVvDSpNvQSP5ZH8x2pe3G5xyrhshcVSzu586
F6g4y1TAzsPfOf4RrZ7RL67bYK8v17ougzOcQT/3so6YlIdHgeXCtLaXe9CNqxNu
XDVjD/+mDVNfZKWcfYO2BNUOgfOBNT+tqlD66vF4yA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:30:57 2026 by rpki-client