This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/323830333a356265303a3230303a3a2f34302d3430203d3e20323731393033.roa
File:                     323830333a356265303a3230303a3a2f34302d3430203d3e20323731393033.roa (raw, json)
Hash identifier:          V6hgAZ5NpV+F7BK3ypPrU0+fYaZekAMvTt0V7Fp7fLA=
Subject key identifier:   58:B7:A3:CC:F7:C5:9D:F1:A5:B0:3D:31:B9:2F:68:D1:66:9E:4A:D2
Certificate issuer:       /CN=1EA7572730570E0D627708051828C84C8111A53E
Certificate serial:       245DAF4571345D0F2254A61C70FB7902AFCA3769
Authority key identifier: 1E:A7:57:27:30:57:0E:0D:62:77:08:05:18:28:C8:4C:81:11:A5:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EA7572730570E0D627708051828C84C8111A53E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/323830333a356265303a3230303a3a2f34302d3430203d3e20323731393033.roa
Signing time:             Tue 06 Jan 2026 19:11:44 +0000
ROA not before:           Tue 06 Jan 2026 19:06:44 +0000
ROA not after:            Tue 05 Jan 2027 19:11:44 +0000
asID:                     271903
IP address blocks:        2803:5be0:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/1EA7572730570E0D627708051828C84C8111A53E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/1EA7572730570E0D627708051828C84C8111A53E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EA7572730570E0D627708051828C84C8111A53E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:5d:af:45:71:34:5d:0f:22:54:a6:1c:70:fb:79:02:af:ca:37:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EA7572730570E0D627708051828C84C8111A53E
        Validity
            Not Before: Jan  6 19:06:44 2026 GMT
            Not After : Jan  5 19:11:44 2027 GMT
        Subject: CN=58B7A3CCF7C59DF1A5B03D31B92F68D1669E4AD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:aa:e4:a2:5c:da:9d:ea:13:85:24:9c:d4:ff:
                    41:c7:a3:b2:61:f9:4a:ee:2a:bb:3b:d1:1e:58:15:
                    ff:b6:5e:eb:85:88:b8:50:87:d9:76:dc:02:27:d9:
                    42:8b:eb:c2:69:8c:c4:a4:03:f9:d2:6c:71:cb:7f:
                    51:fc:be:4d:b1:aa:ee:b0:92:ea:79:af:9d:f1:27:
                    ce:22:dc:c4:75:ec:f3:a5:bc:bc:27:ef:65:dd:f2:
                    e6:af:41:d5:7b:63:ee:a0:57:9b:57:20:5f:b3:d3:
                    22:fe:f3:a4:53:fa:a4:f6:4a:6f:e7:10:bc:72:e5:
                    b5:32:d1:1b:b7:7a:dc:db:a5:34:ff:e4:21:8f:8a:
                    e0:46:2c:ed:13:02:40:68:a9:e8:9f:3a:a1:4b:c7:
                    85:79:59:20:43:25:fd:7f:d8:43:8a:5a:43:d1:e6:
                    2c:4c:8c:f0:07:c2:1b:f0:8f:b4:5e:ba:7e:cb:7f:
                    36:7f:e8:6b:00:04:89:ea:ae:9f:74:8b:80:cf:3c:
                    36:94:2c:d1:84:9b:a9:90:f9:ae:c0:84:7a:96:60:
                    da:fb:d6:f8:c7:6f:97:ca:8c:51:67:6b:86:8f:3e:
                    bb:0b:3f:16:67:76:09:5a:81:52:1a:d4:dd:f9:ec:
                    ed:2d:0f:2e:91:ec:be:27:a4:91:a0:d5:c8:99:fc:
                    e2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B7:A3:CC:F7:C5:9D:F1:A5:B0:3D:31:B9:2F:68:D1:66:9E:4A:D2
            X509v3 Authority Key Identifier:
                keyid:1E:A7:57:27:30:57:0E:0D:62:77:08:05:18:28:C8:4C:81:11:A5:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/1EA7572730570E0D627708051828C84C8111A53E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EA7572730570E0D627708051828C84C8111A53E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/323830333a356265303a3230303a3a2f34302d3430203d3e20323731393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5be0:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         31:47:4b:ab:e4:50:a0:fe:32:8b:33:23:78:71:ee:ad:83:a0:
         07:93:84:3f:be:8a:ca:e8:4a:0d:f5:a6:26:66:40:c3:af:9d:
         d7:f4:71:e3:2d:b8:2a:20:7a:d9:f9:31:fb:ef:d9:4d:f1:98:
         1c:d7:ba:c6:c3:5b:46:79:19:ad:e6:75:0b:7b:d7:36:17:27:
         ba:82:2c:85:85:99:62:76:40:01:a2:b5:be:bb:57:eb:6d:cb:
         a5:5d:93:70:2c:69:b5:f6:61:f8:f6:85:da:4e:4a:ec:ff:5c:
         2f:5b:00:c0:aa:e1:05:7c:9c:19:f6:e0:cc:e1:ac:48:2d:aa:
         cc:46:91:3d:46:46:3a:c6:61:e0:82:dd:3c:5a:0b:09:d4:8e:
         83:d5:85:f2:30:d7:38:94:d9:2a:67:71:98:01:91:ed:e8:b6:
         1b:26:1d:cd:66:d4:fe:26:04:57:62:8b:9c:57:cd:37:25:05:
         47:dd:60:f1:c4:47:96:27:e5:2e:9c:36:32:c6:e0:1f:de:5e:
         27:92:70:39:9f:a6:19:40:a7:31:c4:85:c8:2c:d3:f9:19:8b:
         7d:88:49:0f:9f:eb:65:ba:17:53:c4:96:aa:57:b4:86:18:05:
         7e:96:eb:d0:06:2d:93:35:75:af:67:b3:bf:c4:dc:d1:d9:a9:
         24:2e:b0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:57:17 2026 by rpki-client