This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51D08F5CD1E57C657B421FE7DEE02589BE6FE9CC58B68DF7A871689EC9C58C27/0/323830333a353631303a3a2f33322d3634203d3e20323731393439.roa
File:                     323830333a353631303a3a2f33322d3634203d3e20323731393439.roa (raw, json)
Hash identifier:          R27rcpq7IO1OZuegt/dO5tU3lB3aYPgc16cXqzT2UZg=
Subject key identifier:   00:BA:5B:57:94:AD:FF:A7:1F:BB:99:33:E8:DB:1E:EF:74:1C:74:B9
Certificate issuer:       /CN=53B336617D5C208C7302EDE353FBAA3CA17D2995
Certificate serial:       59E35F443D33A4F355BDE38C29F5536C7FC15AAE
Authority key identifier: 53:B3:36:61:7D:5C:20:8C:73:02:ED:E3:53:FB:AA:3C:A1:7D:29:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53B336617D5C208C7302EDE353FBAA3CA17D2995.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51D08F5CD1E57C657B421FE7DEE02589BE6FE9CC58B68DF7A871689EC9C58C27/0/323830333a353631303a3a2f33322d3634203d3e20323731393439.roa
Signing time:             Tue 06 Jan 2026 19:21:54 +0000
ROA not before:           Tue 06 Jan 2026 19:16:54 +0000
ROA not after:            Tue 05 Jan 2027 19:21:54 +0000
asID:                     271949
IP address blocks:        2803:5610::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51D08F5CD1E57C657B421FE7DEE02589BE6FE9CC58B68DF7A871689EC9C58C27/0/53B336617D5C208C7302EDE353FBAA3CA17D2995.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51D08F5CD1E57C657B421FE7DEE02589BE6FE9CC58B68DF7A871689EC9C58C27/0/53B336617D5C208C7302EDE353FBAA3CA17D2995.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53B336617D5C208C7302EDE353FBAA3CA17D2995.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e3:5f:44:3d:33:a4:f3:55:bd:e3:8c:29:f5:53:6c:7f:c1:5a:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53B336617D5C208C7302EDE353FBAA3CA17D2995
        Validity
            Not Before: Jan  6 19:16:54 2026 GMT
            Not After : Jan  5 19:21:54 2027 GMT
        Subject: CN=00BA5B5794ADFFA71FBB9933E8DB1EEF741C74B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:42:63:6a:65:42:cf:13:95:f4:87:da:e2:d0:
                    ee:ea:8c:40:5d:13:25:b3:62:4b:2e:fe:91:b2:59:
                    fe:cd:75:9b:c8:64:5c:8f:64:29:cc:2b:ce:03:87:
                    8f:fb:a7:34:14:b2:ee:5d:90:06:2a:49:fc:84:14:
                    08:29:08:15:00:71:a5:5c:c3:8c:cb:cc:cf:31:ed:
                    71:27:cb:f4:f3:31:50:3d:aa:f0:2a:3e:1a:f2:53:
                    fa:18:01:ce:06:e0:30:b4:6c:b0:71:fe:5a:ba:77:
                    d2:9f:78:8c:9b:bf:51:5c:cb:66:1e:e2:a2:53:bc:
                    e8:8a:96:ac:29:7d:ee:4b:81:07:e8:7f:a2:61:d4:
                    91:09:2e:42:05:f1:0e:09:65:57:d7:70:e8:fe:ec:
                    a5:e7:a7:63:58:a2:0d:74:5e:6a:e1:2f:8a:9b:f9:
                    ae:17:80:22:10:6c:30:77:0c:8b:32:f2:66:b8:ac:
                    ec:11:4d:09:d2:7f:fc:16:fd:16:fa:6a:c5:b7:52:
                    76:44:b8:41:83:ec:9a:33:52:85:53:91:ab:4a:ab:
                    e9:89:5c:f1:71:27:b3:b6:ad:c4:95:a2:1f:37:02:
                    e4:82:51:82:15:e4:0b:c7:a5:71:15:c7:b5:08:e5:
                    72:69:c4:73:dd:0d:0c:b1:7e:8e:65:2c:ab:a3:b9:
                    f5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:BA:5B:57:94:AD:FF:A7:1F:BB:99:33:E8:DB:1E:EF:74:1C:74:B9
            X509v3 Authority Key Identifier:
                keyid:53:B3:36:61:7D:5C:20:8C:73:02:ED:E3:53:FB:AA:3C:A1:7D:29:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51D08F5CD1E57C657B421FE7DEE02589BE6FE9CC58B68DF7A871689EC9C58C27/0/53B336617D5C208C7302EDE353FBAA3CA17D2995.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53B336617D5C208C7302EDE353FBAA3CA17D2995.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51D08F5CD1E57C657B421FE7DEE02589BE6FE9CC58B68DF7A871689EC9C58C27/0/323830333a353631303a3a2f33322d3634203d3e20323731393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5610::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:e9:c7:e9:61:07:81:e3:cf:f9:72:e9:62:de:9d:0b:ca:b1:
         94:5e:54:67:6e:53:89:77:2a:0a:ee:cd:82:1e:67:6d:1c:04:
         76:0b:10:6d:7e:b0:b3:1c:40:05:3b:d5:2c:b5:1c:78:ee:20:
         9c:46:8b:b0:b1:76:7c:5c:5d:cf:37:6a:3b:35:6c:20:b3:3c:
         93:e0:55:cb:85:1e:65:2f:b3:d6:14:43:72:9f:db:3d:d2:15:
         2b:42:dc:02:7a:17:9f:40:c7:29:2c:2b:5b:ba:83:da:54:81:
         2f:ca:3c:85:58:35:b9:14:58:90:dd:93:65:ce:d6:34:c1:f8:
         e6:fe:66:db:cf:ea:37:f0:37:a1:35:d6:72:ea:0f:72:4c:24:
         f7:09:18:60:ef:f5:81:99:b7:b4:24:31:f5:51:cb:83:8c:e7:
         41:e7:50:90:71:03:06:9a:7e:f7:51:9a:ec:16:27:d4:06:21:
         0b:b3:20:7a:9b:1d:ce:ee:a0:4f:f2:0c:38:ad:9e:f3:f2:3f:
         25:9a:c2:51:64:ff:4d:e1:e6:30:cc:a3:b2:94:87:65:7e:9f:
         8f:9e:0f:5e:65:6e:9d:40:18:5c:19:9d:c9:2e:13:15:0b:c0:
         df:a2:a5:e3:8f:75:94:a8:2b:6c:4d:14:39:52:57:b5:b2:be:
         ca:53:6e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:18:29 2026 by rpki-client