This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/323830333a326139303a3430303a3a2f34302d3430203d3e20323732383737.roa
File:                     323830333a326139303a3430303a3a2f34302d3430203d3e20323732383737.roa (raw, json)
Hash identifier:          /HKeaRdNMIEYJP+NQPI+8FtP0rraSOyfnUmdYX83J8g=
Subject key identifier:   BB:A1:C0:C2:6C:F1:65:AA:72:E8:67:BE:EF:18:95:0C:50:50:B8:5B
Certificate issuer:       /CN=E19BC5FA671BC143D11A298D8E45D012F8B59DB8
Certificate serial:       30449479B86C91A23E3CF46FEB436989F2E33CE5
Authority key identifier: E1:9B:C5:FA:67:1B:C1:43:D1:1A:29:8D:8E:45:D0:12:F8:B5:9D:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/323830333a326139303a3430303a3a2f34302d3430203d3e20323732383737.roa
Signing time:             Tue 06 Jan 2026 19:26:56 +0000
ROA not before:           Tue 06 Jan 2026 19:21:56 +0000
ROA not after:            Tue 05 Jan 2027 19:26:56 +0000
asID:                     272877
IP address blocks:        2803:2a90:400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 10:10:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:44:94:79:b8:6c:91:a2:3e:3c:f4:6f:eb:43:69:89:f2:e3:3c:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E19BC5FA671BC143D11A298D8E45D012F8B59DB8
        Validity
            Not Before: Jan  6 19:21:56 2026 GMT
            Not After : Jan  5 19:26:56 2027 GMT
        Subject: CN=BBA1C0C26CF165AA72E867BEEF18950C5050B85B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:44:6e:ea:e6:17:a4:8f:18:cd:cd:dc:10:b3:
                    c1:29:73:a1:99:a0:4c:04:6e:07:97:ea:a1:47:3a:
                    2c:14:c4:16:82:b7:aa:c3:d0:2b:fe:d2:c0:0c:d0:
                    81:1c:5f:2b:7a:d0:7b:ae:70:29:c3:9c:a2:b3:73:
                    19:ee:83:d6:dc:4a:6d:7c:8a:b5:d1:ec:c0:93:ce:
                    95:70:a7:bb:2c:c1:da:9d:63:14:e6:10:6a:11:86:
                    33:e9:72:8d:cd:9a:59:87:3a:e5:93:e0:7d:59:a7:
                    39:04:44:e8:d4:96:70:5b:be:15:cb:48:89:d4:a7:
                    a1:60:43:b6:82:8b:79:af:9f:85:bf:e4:30:f6:27:
                    a9:4b:b0:82:6a:a5:40:f9:37:23:40:f8:76:fb:f4:
                    c9:28:cf:0a:40:3d:05:e0:3d:14:06:f0:a2:4b:c2:
                    79:fc:4f:c5:94:15:52:4c:05:a2:22:80:15:e2:82:
                    ac:57:f8:d2:9f:39:60:8e:f0:14:63:21:1d:2e:bf:
                    79:aa:81:bc:b5:a4:2d:24:59:34:84:07:a2:05:36:
                    4f:68:6d:7c:c5:53:15:03:e8:82:9a:c5:dd:2d:0a:
                    57:25:0d:5f:6a:7c:b8:69:d4:08:4c:6a:36:8b:7b:
                    dc:32:03:ed:47:a4:d7:c8:ef:38:22:25:7a:0a:3b:
                    57:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:A1:C0:C2:6C:F1:65:AA:72:E8:67:BE:EF:18:95:0C:50:50:B8:5B
            X509v3 Authority Key Identifier:
                keyid:E1:9B:C5:FA:67:1B:C1:43:D1:1A:29:8D:8E:45:D0:12:F8:B5:9D:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/323830333a326139303a3430303a3a2f34302d3430203d3e20323732383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2a90:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         58:79:39:75:c0:24:67:30:88:ed:9c:a7:4f:04:39:eb:0c:14:
         0e:5d:d6:a5:94:79:16:9e:c1:84:64:fd:bc:7b:f9:2a:4f:78:
         e3:78:b3:eb:10:29:4e:da:cf:33:e6:82:ca:75:ce:4c:a9:cc:
         e6:12:23:77:80:e3:fd:86:29:a5:da:03:be:91:45:b7:79:44:
         4c:88:1e:61:c6:39:df:44:28:92:b0:e9:62:3d:d1:84:77:0f:
         26:e3:d2:14:c0:c5:9e:47:9b:4b:2c:42:f4:e7:98:f7:37:5d:
         71:49:ce:df:89:c4:dd:90:d5:6f:6b:0a:39:13:05:eb:96:f8:
         73:5a:e9:f4:42:fc:86:26:d6:0c:c1:55:df:aa:63:09:2b:98:
         00:4b:ee:a1:f1:59:f8:22:85:99:d0:10:d6:0b:ac:54:b9:56:
         0d:81:8f:8a:99:23:cd:92:b8:ad:67:85:a0:58:87:6d:0b:06:
         0c:10:8c:12:6c:dd:2a:8c:5a:a8:e4:3f:63:15:31:f0:e1:89:
         a8:54:08:7b:7b:70:26:4d:8a:af:fe:28:aa:09:c7:df:61:6d:
         d5:63:f9:a1:a4:cf:d7:78:ea:e5:35:af:00:22:67:e0:33:56:
         b8:5e:32:a7:e3:7e:4d:49:d1:92:64:4f:60:9f:4b:eb:f1:83:
         0f:e1:34:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:18:55 2026 by rpki-client