This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/323830333a326139303a3230303a3a2f34302d3430203d3e20323732383737.roa
File:                     323830333a326139303a3230303a3a2f34302d3430203d3e20323732383737.roa (raw, json)
Hash identifier:          NMekL4pwZnVtKXVh8jSR5iJQoRJ8ME4pgd+2Q4EC2FY=
Subject key identifier:   1D:73:0B:CF:BD:4F:B1:1E:D1:6D:9E:B9:23:34:70:C9:F3:BA:E4:D2
Certificate issuer:       /CN=E19BC5FA671BC143D11A298D8E45D012F8B59DB8
Certificate serial:       24DD30490B9B41B85C83455CAB92343113C9CE20
Authority key identifier: E1:9B:C5:FA:67:1B:C1:43:D1:1A:29:8D:8E:45:D0:12:F8:B5:9D:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/323830333a326139303a3230303a3a2f34302d3430203d3e20323732383737.roa
Signing time:             Tue 06 Jan 2026 19:26:54 +0000
ROA not before:           Tue 06 Jan 2026 19:21:54 +0000
ROA not after:            Tue 05 Jan 2027 19:26:54 +0000
asID:                     272877
IP address blocks:        2803:2a90:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 10:10:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:dd:30:49:0b:9b:41:b8:5c:83:45:5c:ab:92:34:31:13:c9:ce:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E19BC5FA671BC143D11A298D8E45D012F8B59DB8
        Validity
            Not Before: Jan  6 19:21:54 2026 GMT
            Not After : Jan  5 19:26:54 2027 GMT
        Subject: CN=1D730BCFBD4FB11ED16D9EB9233470C9F3BAE4D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c0:6e:2d:5f:82:9b:68:5c:b2:e5:68:c4:27:
                    4a:10:89:51:4b:ff:24:bc:61:73:3e:03:e2:e1:3d:
                    16:55:2a:30:f7:5c:d9:ac:63:dd:95:be:7f:fe:47:
                    34:1c:05:7c:6b:83:68:49:02:9e:ec:51:71:56:47:
                    70:f5:42:a4:50:98:36:d7:dc:71:07:e7:59:fa:f3:
                    28:19:d4:97:e5:f0:9a:00:2e:f4:bb:7f:d5:cf:aa:
                    f7:3d:31:0a:e1:33:72:ae:82:3a:37:75:44:f2:8e:
                    27:c0:49:f2:b1:c7:7b:5a:36:30:b2:f1:09:c7:38:
                    a6:cd:07:61:c6:30:c7:61:85:53:61:79:09:90:5c:
                    0e:ea:4a:6b:49:26:c8:f2:40:50:1f:1b:1e:ae:3b:
                    3f:b6:ef:f5:aa:33:e4:d5:52:72:00:ee:3a:4d:f2:
                    36:e5:ac:df:38:df:cb:31:31:39:59:0f:6f:af:57:
                    ae:c4:f4:d8:c7:6f:cd:e4:f3:33:e5:2a:bf:f4:bb:
                    db:c1:01:42:56:d7:6b:0a:23:2c:e4:fd:f4:fc:22:
                    01:31:0b:b8:5c:60:f1:f9:a8:28:17:ae:c8:72:0d:
                    df:d0:40:ad:da:53:ef:20:7b:bd:d9:66:0d:d0:ad:
                    c5:80:32:7e:2c:cc:73:e3:a8:38:ff:4e:01:82:0f:
                    62:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:73:0B:CF:BD:4F:B1:1E:D1:6D:9E:B9:23:34:70:C9:F3:BA:E4:D2
            X509v3 Authority Key Identifier:
                keyid:E1:9B:C5:FA:67:1B:C1:43:D1:1A:29:8D:8E:45:D0:12:F8:B5:9D:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/323830333a326139303a3230303a3a2f34302d3430203d3e20323732383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2a90:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         21:85:93:33:fb:f8:83:2f:b8:15:ee:00:c8:e5:01:47:0a:fd:
         96:0b:32:5f:09:4f:f7:0e:87:78:03:d4:38:5f:53:e5:5a:f5:
         13:f2:00:b4:d9:ba:54:db:19:a5:e3:fd:51:0e:f1:1d:fb:90:
         a0:05:d3:5b:63:6f:1d:a8:e4:db:d3:5b:21:cb:94:c0:8e:eb:
         e0:7f:60:f5:e0:88:ac:db:05:ca:7b:78:ea:c5:47:43:98:7a:
         6b:40:67:c3:91:be:7a:19:26:49:a3:f8:47:c0:7a:a7:29:a3:
         02:4a:4b:4b:cb:5c:f2:53:6a:1a:12:fa:96:d7:8e:7b:ed:19:
         b7:a5:88:de:aa:dc:9a:24:a7:7f:dd:bc:d0:e6:96:f6:33:81:
         b4:c1:ce:fd:15:7b:d8:97:86:38:5e:12:51:9f:99:c2:a3:45:
         44:dd:0e:94:35:62:7a:26:52:72:58:6c:d7:9e:ee:67:c5:ff:
         18:33:ae:a9:cc:53:00:a9:78:cd:76:f1:4e:43:f6:bb:50:8b:
         71:fd:21:7a:9e:4f:68:09:26:f3:8e:27:91:05:e1:c9:b1:c5:
         ff:e3:6c:91:07:d6:12:18:e2:1e:0d:23:99:89:95:50:8c:b5:
         97:a0:d2:ec:0f:7f:c3:8e:25:cc:06:1b:ad:6a:6e:79:d4:89:
         31:dd:10:58
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUJN0wSQubQbhcg0Vcq5I0MRPJziAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTE5QkM1RkE2NzFCQzE0M0QxMUEyOThEOEU0NUQwMTJG
OEI1OURCODAeFw0yNjAxMDYxOTIxNTRaFw0yNzAxMDUxOTI2NTRaMDMxMTAvBgNV
BAMTKDFENzMwQkNGQkQ0RkIxMUVEMTZEOUVCOTIzMzQ3MEM5RjNCQUU0RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSwG4tX4KbaFyy5WjEJ0oQiVFL
/yS8YXM+A+LhPRZVKjD3XNmsY92Vvn/+RzQcBXxrg2hJAp7sUXFWR3D1QqRQmDbX
3HEH51n68ygZ1Jfl8JoALvS7f9XPqvc9MQrhM3Kugjo3dUTyjifASfKxx3taNjCy
8QnHOKbNB2HGMMdhhVNheQmQXA7qSmtJJsjyQFAfGx6uOz+27/WqM+TVUnIA7jpN
8jblrN8438sxMTlZD2+vV67E9NjHb83k8zPlKr/0u9vBAUJW12sKIyzk/fT8IgEx
C7hcYPH5qCgXrshyDd/QQK3aU+8ge73ZZg3QrcWAMn4szHPjqDj/TgGCD2JvAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUHXMLz71PsR7RbZ65IzRwyfO65NIwHwYDVR0j
BBgwFoAU4ZvF+mcbwUPRGimNjkXQEvi1nbgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81OTcyRDVDQzM0OThDOUQzOENDQTRFREVEMTgzNEVGQTk4
OTdDNjI0MTY4MTRERUNEM0REODQ4QUE5NzczNzdBLzAvRTE5QkM1RkE2NzFCQzE0
M0QxMUEyOThEOEU0NUQwMTJGOEI1OURCOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMTlCQzVGQTY3MUJDMTQzRDEx
QTI5OEQ4RTQ1RDAxMkY4QjU5REI4LmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTk3MkQ1Q0MzNDk4QzlEMzhDQ0E0RURFRDE4MzRFRkE5ODk3QzYyNDE2
ODE0REVDRDNERDg0OEFBOTc3Mzc3QS8wLzMyMzgzMDMzM2EzMjYxMzkzMDNhMzIz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNzMyMzgzNzM3LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAMqkAIwDQYJKoZIhvcNAQELBQADggEBACGFkzP7+IMvuBXuAMjlAUcK/ZYL
Ml8JT/cOh3gD1DhfU+Va9RPyALTZulTbGaXj/VEO8R37kKAF01tjbx2o5NvTWyHL
lMCO6+B/YPXgiKzbBcp7eOrFR0OYemtAZ8ORvnoZJkmj+EfAeqcpowJKS0vLXPJT
ahoS+pbXjnvtGbeliN6q3Jokp3/dvNDmlvYzgbTBzv0Ve9iXhjheElGfmcKjRUTd
DpQ1YnomUnJYbNee7mfF/xgzrqnMUwCpeM128U5D9rtQi3H9IXqeT2gJJvOOJ5EF
4cmxxf/jbJEH1hIY4h4NI5mJlVCMtZeg0uwPf8OOJcwGG61qbnnUiTHdEFg=
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:19:09 2026 by rpki-client