This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5129C365AB47E8FB91AFD952995752AF98A7033CD2733F10D4E0613E0564DA90/0/323830333a653264303a3a2f33322d3438203d3e20323734303532.roa
File:                     323830333a653264303a3a2f33322d3438203d3e20323734303532.roa (raw, json)
Hash identifier:          z7C3dU/n+TiWsGpbaGfX9JwVExh5dLKAfpqL127d9ZY=
Subject key identifier:   86:55:44:08:6E:BC:DA:17:5F:23:25:AF:BE:64:78:6D:68:54:33:1B
Certificate issuer:       /CN=8F693D9DF0B598053B1AEE3A7985404251FA756D
Certificate serial:       16B6CF5BDB10C02569BEC8E83BF5244E0B0D7425
Authority key identifier: 8F:69:3D:9D:F0:B5:98:05:3B:1A:EE:3A:79:85:40:42:51:FA:75:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F693D9DF0B598053B1AEE3A7985404251FA756D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5129C365AB47E8FB91AFD952995752AF98A7033CD2733F10D4E0613E0564DA90/0/323830333a653264303a3a2f33322d3438203d3e20323734303532.roa
Signing time:             Fri 23 Jan 2026 20:27:09 +0000
ROA not before:           Fri 23 Jan 2026 20:22:09 +0000
ROA not after:            Fri 22 Jan 2027 20:27:09 +0000
asID:                     274052
IP address blocks:        2803:e2d0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5129C365AB47E8FB91AFD952995752AF98A7033CD2733F10D4E0613E0564DA90/0/8F693D9DF0B598053B1AEE3A7985404251FA756D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5129C365AB47E8FB91AFD952995752AF98A7033CD2733F10D4E0613E0564DA90/0/8F693D9DF0B598053B1AEE3A7985404251FA756D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F693D9DF0B598053B1AEE3A7985404251FA756D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 18:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b6:cf:5b:db:10:c0:25:69:be:c8:e8:3b:f5:24:4e:0b:0d:74:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F693D9DF0B598053B1AEE3A7985404251FA756D
        Validity
            Not Before: Jan 23 20:22:09 2026 GMT
            Not After : Jan 22 20:27:09 2027 GMT
        Subject: CN=865544086EBCDA175F2325AFBE64786D6854331B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:70:d8:be:8d:6b:48:47:62:78:5d:bb:72:69:
                    f2:9f:0e:50:33:c9:4f:45:8f:bd:4a:a2:bb:98:ae:
                    5d:ca:e1:04:1e:3e:c7:9c:66:6c:54:9c:78:52:c3:
                    95:9b:e3:35:33:e9:cc:80:06:51:69:c6:98:1f:39:
                    88:20:a9:f9:1c:e4:2d:d7:32:b5:28:14:59:35:a0:
                    67:72:e9:f4:78:e8:bc:e4:23:21:74:bb:0c:cf:2d:
                    b4:09:03:15:76:15:de:b0:84:44:c6:72:ba:b7:07:
                    51:74:de:cf:9d:ab:61:54:0a:31:e2:f7:4d:4e:06:
                    5d:1a:86:4a:a8:f5:f6:5c:a7:83:73:b3:c5:03:cc:
                    55:d0:a1:9d:99:f5:34:cd:6f:f4:b6:e3:7c:d9:d2:
                    10:b8:84:16:22:14:e0:e7:25:da:35:e2:d9:b7:ca:
                    74:c0:f0:26:27:5c:3a:1a:96:d9:1c:da:3c:e2:de:
                    a9:88:8f:30:37:3a:d8:20:47:8e:b0:a5:14:6b:58:
                    12:ca:26:8a:74:d5:ee:c4:70:fa:e5:e2:48:86:bd:
                    32:92:5e:a0:5f:b4:20:07:fb:e4:c9:28:02:93:52:
                    f4:77:1b:b2:0d:db:cd:7f:3f:98:8f:33:77:24:95:
                    e6:22:3d:0c:25:6d:76:27:2a:dc:91:8a:7d:8a:72:
                    ea:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:55:44:08:6E:BC:DA:17:5F:23:25:AF:BE:64:78:6D:68:54:33:1B
            X509v3 Authority Key Identifier:
                keyid:8F:69:3D:9D:F0:B5:98:05:3B:1A:EE:3A:79:85:40:42:51:FA:75:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5129C365AB47E8FB91AFD952995752AF98A7033CD2733F10D4E0613E0564DA90/0/8F693D9DF0B598053B1AEE3A7985404251FA756D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F693D9DF0B598053B1AEE3A7985404251FA756D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5129C365AB47E8FB91AFD952995752AF98A7033CD2733F10D4E0613E0564DA90/0/323830333a653264303a3a2f33322d3438203d3e20323734303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e2d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:75:cb:3e:00:e1:ab:1f:b8:14:2b:4d:35:48:cc:0e:32:67:
         b0:38:89:8f:d7:0e:69:db:20:c9:5c:b8:67:0b:7b:7d:94:f9:
         b6:7e:b3:e6:64:42:27:54:ad:ff:c9:2b:d7:1d:26:fd:6d:42:
         bc:39:c2:09:e1:2c:a2:c7:aa:19:e3:10:9e:32:5c:4f:ff:5e:
         3b:d9:f5:c2:32:63:27:21:c7:b8:68:4c:9f:42:4a:29:be:68:
         56:5a:f1:e2:56:10:5a:f1:ec:e1:19:ea:54:de:34:98:12:8c:
         9c:c3:34:8c:c1:8c:1d:68:4a:4b:b8:e3:cd:58:17:2e:21:62:
         24:e9:02:c7:9e:86:75:98:6d:6e:cc:2f:68:1e:e3:11:4f:35:
         e9:32:e7:46:27:02:ee:ae:e9:6c:f3:51:f6:47:01:dd:f0:81:
         e4:f5:8d:d0:28:84:cf:15:c8:5e:b2:f0:e2:a9:54:92:2d:7c:
         ea:07:7d:ef:4a:e7:c3:b3:bf:26:12:f8:67:12:a0:4a:3a:96:
         57:7e:6f:dd:fc:ed:89:20:81:c5:03:2b:23:f1:6d:1d:64:50:
         77:39:2a:f5:28:98:a4:9f:4c:5a:02:83:a4:cc:64:35:aa:cf:
         fd:ed:30:7c:ff:26:41:f4:f7:e0:b5:28:b3:b9:a6:6d:e0:95:
         68:99:0d:55
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUFrbPW9sQwCVpvsjoO/UkTgsNdCUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEY2OTNEOURGMEI1OTgwNTNCMUFFRTNBNzk4NTQwNDI1
MUZBNzU2RDAeFw0yNjAxMjMyMDIyMDlaFw0yNzAxMjIyMDI3MDlaMDMxMTAvBgNV
BAMTKDg2NTU0NDA4NkVCQ0RBMTc1RjIzMjVBRkJFNjQ3ODZENjg1NDMzMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdcNi+jWtIR2J4XbtyafKfDlAz
yU9Fj71KoruYrl3K4QQePsecZmxUnHhSw5Wb4zUz6cyABlFpxpgfOYggqfkc5C3X
MrUoFFk1oGdy6fR46LzkIyF0uwzPLbQJAxV2Fd6whETGcrq3B1F03s+dq2FUCjHi
901OBl0ahkqo9fZcp4Nzs8UDzFXQoZ2Z9TTNb/S243zZ0hC4hBYiFODnJdo14tm3
ynTA8CYnXDoaltkc2jzi3qmIjzA3OtggR46wpRRrWBLKJop01e7EcPrl4kiGvTKS
XqBftCAH++TJKAKTUvR3G7IN281/P5iPM3ckleYiPQwlbXYnKtyRin2Kcuq5AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUhlVECG682hdfIyWvvmR4bWhUMxswHwYDVR0j
BBgwFoAUj2k9nfC1mAU7Gu46eYVAQlH6dW0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MTI5QzM2NUFCNDdFOEZCOTFBRkQ5NTI5OTU3NTJBRjk4
QTcwMzNDRDI3MzNGMTBENEUwNjEzRTA1NjREQTkwLzAvOEY2OTNEOURGMEI1OTgw
NTNCMUFFRTNBNzk4NTQwNDI1MUZBNzU2RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RjY5M0Q5REYwQjU5ODA1M0Ix
QUVFM0E3OTg1NDA0MjUxRkE3NTZELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTEyOUMzNjVBQjQ3RThGQjkxQUZEOTUyOTk1NzUyQUY5OEE3MDMzQ0Qy
NzMzRjEwRDRFMDYxM0UwNTY0REE5MC8wLzMyMzgzMDMzM2E2NTMyNjQzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczNDMwMzUzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD4tAw
DQYJKoZIhvcNAQELBQADggEBAK51yz4A4asfuBQrTTVIzA4yZ7A4iY/XDmnbIMlc
uGcLe32U+bZ+s+ZkQidUrf/JK9cdJv1tQrw5wgnhLKLHqhnjEJ4yXE//XjvZ9cIy
Yychx7hoTJ9CSim+aFZa8eJWEFrx7OEZ6lTeNJgSjJzDNIzBjB1oSku4481YFy4h
YiTpAseehnWYbW7ML2ge4xFPNeky50YnAu6u6WzzUfZHAd3wgeT1jdAohM8VyF6y
8OKpVJItfOoHfe9K58OzvyYS+GcSoEo6lld+b9387YkggcUDKyPxbR1kUHc5KvUo
mKSfTFoCg6TMZDWqz/3tMHz/JkH09+C1KLO5pm3glWiZDVU=
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:54:37 2026 by rpki-client