This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/323830333a356265303a3a2f34302d3430203d3e20323731393033.roa
File:                     323830333a356265303a3a2f34302d3430203d3e20323731393033.roa (raw, json)
Hash identifier:          z0VmBO7BesojU8ZE21y6RvcvcyyEuSPJ/KO0yJgS0h0=
Subject key identifier:   F1:1E:47:C2:05:01:72:F7:5C:AF:28:6D:2B:16:29:DC:61:BB:AC:38
Certificate issuer:       /CN=1EA7572730570E0D627708051828C84C8111A53E
Certificate serial:       662053EFDDFDAFE582BC9B9086B649C1EEB74582
Authority key identifier: 1E:A7:57:27:30:57:0E:0D:62:77:08:05:18:28:C8:4C:81:11:A5:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EA7572730570E0D627708051828C84C8111A53E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/323830333a356265303a3a2f34302d3430203d3e20323731393033.roa
Signing time:             Tue 06 Jan 2026 19:11:44 +0000
ROA not before:           Tue 06 Jan 2026 19:06:44 +0000
ROA not after:            Tue 05 Jan 2027 19:11:44 +0000
asID:                     271903
IP address blocks:        2803:5be0::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/1EA7572730570E0D627708051828C84C8111A53E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/1EA7572730570E0D627708051828C84C8111A53E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EA7572730570E0D627708051828C84C8111A53E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:20:53:ef:dd:fd:af:e5:82:bc:9b:90:86:b6:49:c1:ee:b7:45:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EA7572730570E0D627708051828C84C8111A53E
        Validity
            Not Before: Jan  6 19:06:44 2026 GMT
            Not After : Jan  5 19:11:44 2027 GMT
        Subject: CN=F11E47C2050172F75CAF286D2B1629DC61BBAC38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:57:ea:a7:7a:94:66:56:3f:6f:a2:88:6f:53:
                    d5:4d:87:1e:7e:3a:60:16:62:25:28:ad:d8:9a:9d:
                    1c:78:0f:7d:e5:f1:46:80:e8:f5:8e:99:30:6f:72:
                    6f:54:a3:67:a4:50:52:95:3b:32:ae:15:f8:2b:06:
                    b3:72:13:82:2f:64:03:dd:7f:0d:be:42:57:dc:fb:
                    67:e1:28:fd:f7:d8:bf:70:50:51:26:74:68:13:f5:
                    73:ba:93:75:3c:40:43:33:93:fb:fc:41:82:f9:50:
                    55:f9:93:4c:e1:3a:af:4d:3a:f4:bc:06:9e:03:d4:
                    ce:f2:a9:89:66:c1:0a:d4:05:15:88:5a:23:a9:7f:
                    be:07:5d:65:82:c4:1d:3e:f3:3d:4b:30:7d:af:2e:
                    d1:65:ef:fc:98:4f:30:91:00:7f:00:ba:60:15:68:
                    d8:84:9f:ad:cc:4a:de:35:04:e4:d3:d1:b8:5b:aa:
                    b7:c1:b8:62:ae:78:5b:5f:4f:73:52:de:a5:ba:00:
                    60:bf:a9:65:d8:31:7c:b9:1e:4f:36:2f:2b:5b:1c:
                    69:3f:ae:3c:b6:ba:e8:32:45:e5:62:92:f4:68:5b:
                    09:da:a1:ae:75:01:05:d1:d5:ca:af:56:96:23:68:
                    78:6c:de:75:6e:42:82:49:66:47:f5:ec:65:c7:df:
                    21:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:1E:47:C2:05:01:72:F7:5C:AF:28:6D:2B:16:29:DC:61:BB:AC:38
            X509v3 Authority Key Identifier:
                keyid:1E:A7:57:27:30:57:0E:0D:62:77:08:05:18:28:C8:4C:81:11:A5:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/1EA7572730570E0D627708051828C84C8111A53E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EA7572730570E0D627708051828C84C8111A53E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/323830333a356265303a3a2f34302d3430203d3e20323731393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5be0::/40

    Signature Algorithm: sha256WithRSAEncryption
         34:4d:5a:24:ce:9e:70:c6:bc:3b:67:68:45:09:be:98:2a:48:
         42:ba:f1:31:7d:0b:1a:a9:da:db:fb:18:93:a8:7a:86:c6:35:
         d7:61:e2:a4:32:a5:e5:8f:89:28:dc:e1:02:d0:5c:34:bd:4e:
         b7:84:f4:b9:27:f8:d5:50:20:9a:72:00:fd:b4:1f:af:53:a7:
         7e:3b:ae:53:a3:51:bf:1b:33:dc:d8:18:1a:6b:24:24:25:4c:
         21:44:ec:b1:f9:db:ff:4f:fe:29:7d:c1:ab:8d:40:7e:34:93:
         77:e0:01:23:87:54:fb:6e:bd:01:ac:d3:88:e2:b5:52:0b:4e:
         58:88:51:ae:16:b5:ea:f7:f7:87:29:c3:e1:67:06:bc:58:23:
         1d:11:b1:79:e4:6f:2e:3f:29:9f:9d:43:7c:32:b5:74:de:5d:
         a2:17:23:79:78:a2:96:98:ee:89:ac:5c:fe:a7:8a:49:69:87:
         7c:3f:0f:33:c0:81:42:c9:d6:f5:88:ef:9c:2b:bf:fa:d2:a4:
         eb:7a:96:6e:6b:a5:e4:f2:b0:25:65:c2:6f:6f:5d:77:b4:b9:
         9e:d0:1f:78:da:a0:1e:ac:87:83:8b:21:30:13:a3:ed:c6:b8:
         39:6d:a8:4f:73:df:b8:af:05:07:ad:f6:75:d7:ea:55:d0:c3:
         63:be:d6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:33:11 2026 by rpki-client