This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/323830333a356265303a3130303a3a2f34302d3430203d3e20323731393033.roa
File:                     323830333a356265303a3130303a3a2f34302d3430203d3e20323731393033.roa (raw, json)
Hash identifier:          r7SGRFkqxYgsLSoDVUn0hcispiZAfL35/NUSRR5wEWM=
Subject key identifier:   83:7D:EC:96:BC:13:3A:DC:E1:E6:40:2E:3A:5E:60:09:DF:E3:02:B9
Certificate issuer:       /CN=1EA7572730570E0D627708051828C84C8111A53E
Certificate serial:       5FB55151A5B6442DB4AA045966B32F3ED74DDEFE
Authority key identifier: 1E:A7:57:27:30:57:0E:0D:62:77:08:05:18:28:C8:4C:81:11:A5:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EA7572730570E0D627708051828C84C8111A53E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/323830333a356265303a3130303a3a2f34302d3430203d3e20323731393033.roa
Signing time:             Tue 06 Jan 2026 19:11:44 +0000
ROA not before:           Tue 06 Jan 2026 19:06:44 +0000
ROA not after:            Tue 05 Jan 2027 19:11:44 +0000
asID:                     271903
IP address blocks:        2803:5be0:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/1EA7572730570E0D627708051828C84C8111A53E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/1EA7572730570E0D627708051828C84C8111A53E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EA7572730570E0D627708051828C84C8111A53E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:b5:51:51:a5:b6:44:2d:b4:aa:04:59:66:b3:2f:3e:d7:4d:de:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EA7572730570E0D627708051828C84C8111A53E
        Validity
            Not Before: Jan  6 19:06:44 2026 GMT
            Not After : Jan  5 19:11:44 2027 GMT
        Subject: CN=837DEC96BC133ADCE1E6402E3A5E6009DFE302B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:96:26:e2:7f:16:92:da:db:47:60:10:c5:70:
                    9c:f9:90:92:b6:22:7c:07:22:53:b4:8b:2a:62:09:
                    37:8a:34:5a:c7:d7:44:2b:16:f8:d5:1d:92:dc:9d:
                    b6:cb:ce:b8:e3:f1:9f:86:b8:5e:16:4c:bc:a1:da:
                    82:8b:20:57:93:4e:a5:7f:22:9b:ee:db:ee:ae:e6:
                    58:5b:d9:aa:22:8e:0d:25:00:5b:73:b6:b5:3a:07:
                    78:61:11:6d:09:84:f5:8e:3d:76:78:56:0d:c7:fb:
                    0b:18:89:30:41:9f:e9:02:c7:26:5c:20:3e:e7:27:
                    f7:9b:74:69:81:4a:4b:34:d9:83:cd:15:e4:b4:25:
                    9a:2d:95:50:56:d7:8f:fa:54:97:49:4d:25:11:5b:
                    fc:00:6b:69:5a:8c:e5:df:a3:4c:ee:d6:55:33:65:
                    09:eb:94:49:27:48:85:5c:17:d4:39:2d:5e:c7:36:
                    0c:f0:2b:e0:9c:49:8c:c0:6d:ea:df:5b:b7:af:89:
                    e5:80:3a:ae:84:ce:6a:fa:38:fb:7e:d7:37:dc:d7:
                    81:3a:ee:4d:b8:6f:5d:a0:67:d2:9a:3e:6b:d7:a9:
                    e1:ed:0e:7b:68:7b:f3:cb:26:b5:9a:52:45:b4:f7:
                    c7:6a:a9:65:1d:c7:cd:39:4b:14:41:4f:a9:ce:d5:
                    91:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:7D:EC:96:BC:13:3A:DC:E1:E6:40:2E:3A:5E:60:09:DF:E3:02:B9
            X509v3 Authority Key Identifier:
                keyid:1E:A7:57:27:30:57:0E:0D:62:77:08:05:18:28:C8:4C:81:11:A5:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/1EA7572730570E0D627708051828C84C8111A53E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EA7572730570E0D627708051828C84C8111A53E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/323830333a356265303a3130303a3a2f34302d3430203d3e20323731393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5be0:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         80:b4:24:83:15:08:41:a9:74:fd:a7:50:8b:04:25:11:4f:30:
         a8:08:78:91:37:2a:6d:62:c1:c6:e4:2b:ac:e2:ae:9a:4d:ae:
         ad:29:f0:c8:13:a9:94:5d:dc:7d:e1:e7:be:56:3f:ce:73:06:
         66:a9:8a:af:c2:b5:af:b4:a7:14:5b:3d:2a:d2:70:e9:c7:ac:
         2c:77:6e:78:e4:d4:d2:04:30:0f:e0:61:21:83:56:0c:23:f9:
         4f:65:49:a4:7b:28:6a:e1:9f:c9:4a:6b:c5:58:46:55:1c:f0:
         4f:75:91:bf:c6:a6:2a:a3:2e:3b:59:e9:89:5d:0f:fd:7a:b3:
         b7:5d:be:0f:09:75:c8:c6:b8:21:f3:69:fb:a0:51:b2:4f:76:
         2b:71:e6:fb:c7:df:b9:b7:12:1e:d6:58:5b:92:16:c4:e7:9a:
         c7:80:ab:8a:c3:7e:14:97:95:46:c5:3f:84:ed:dc:dc:2d:ac:
         47:d4:11:06:2c:d9:24:85:78:d1:f4:7c:00:46:79:2b:28:84:
         f8:15:3d:95:39:20:d7:1f:37:bc:67:51:fc:ec:28:74:86:63:
         2e:37:76:eb:f1:f2:0b:72:73:4e:a6:48:0a:3c:9c:f3:f8:8b:
         4a:14:b7:0c:9e:eb:84:d8:98:b5:7a:05:50:5e:a1:ef:1f:b8:
         bc:8e:27:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:59:31 2026 by rpki-client