This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/323830333a326139303a3730303a3a2f34302d3430203d3e20323732383737.roa
File:                     323830333a326139303a3730303a3a2f34302d3430203d3e20323732383737.roa (raw, json)
Hash identifier:          5oalePTy3dFzi9QtQ+/XrYigdgqFmZBVIRSeHQ/NwV8=
Subject key identifier:   D3:3B:C4:E5:9D:95:F7:EC:31:8C:6A:7F:C8:96:20:90:61:33:76:5B
Certificate issuer:       /CN=E19BC5FA671BC143D11A298D8E45D012F8B59DB8
Certificate serial:       77F19A7043A28BACED6E21A62763CA5D7ECD6E19
Authority key identifier: E1:9B:C5:FA:67:1B:C1:43:D1:1A:29:8D:8E:45:D0:12:F8:B5:9D:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/323830333a326139303a3730303a3a2f34302d3430203d3e20323732383737.roa
Signing time:             Tue 06 Jan 2026 19:26:55 +0000
ROA not before:           Tue 06 Jan 2026 19:21:55 +0000
ROA not after:            Tue 05 Jan 2027 19:26:55 +0000
asID:                     272877
IP address blocks:        2803:2a90:700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 10:10:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:f1:9a:70:43:a2:8b:ac:ed:6e:21:a6:27:63:ca:5d:7e:cd:6e:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E19BC5FA671BC143D11A298D8E45D012F8B59DB8
        Validity
            Not Before: Jan  6 19:21:55 2026 GMT
            Not After : Jan  5 19:26:55 2027 GMT
        Subject: CN=D33BC4E59D95F7EC318C6A7FC89620906133765B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7d:a6:5c:ad:0b:64:75:87:3f:14:3a:de:51:
                    53:b1:ae:d8:fb:e9:96:e0:46:b0:1d:fb:2e:d4:d9:
                    7c:01:1f:d2:e1:36:63:24:8c:ab:5d:74:da:60:0c:
                    f2:89:8d:f2:51:fc:16:d5:1c:7f:0c:a8:04:e6:b3:
                    ea:00:b6:d2:ce:5b:e7:f6:66:bb:9a:86:80:2b:c0:
                    76:11:62:31:87:18:22:32:d3:76:0b:ae:bc:f2:d2:
                    89:06:d5:ad:41:bc:d8:8d:78:0c:38:99:ed:8b:31:
                    2a:bc:46:fd:f6:ac:66:dd:29:31:e4:ed:95:21:3f:
                    d3:10:f3:b4:c0:2f:4e:78:d1:33:95:01:14:a5:ed:
                    ca:32:ff:3f:bd:a0:ed:58:69:36:ff:35:2e:9c:ba:
                    15:b9:80:4b:bc:2b:b3:b9:67:b9:64:36:a2:9f:6d:
                    f7:67:7e:b0:a3:2a:6d:42:3a:a4:6a:99:1c:b7:e6:
                    fa:61:76:eb:3d:26:a5:65:8f:c8:00:97:08:5c:d5:
                    28:68:e9:fb:50:c5:84:9c:be:7b:5f:4f:22:46:b3:
                    24:20:d7:8a:55:de:d5:e6:80:79:1f:ab:76:d1:3e:
                    c3:57:da:f4:4d:80:2b:63:e2:b0:16:1b:9a:d5:b0:
                    e9:1d:66:30:46:c5:10:5a:3c:6f:0a:a0:c0:9e:94:
                    6f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:3B:C4:E5:9D:95:F7:EC:31:8C:6A:7F:C8:96:20:90:61:33:76:5B
            X509v3 Authority Key Identifier:
                keyid:E1:9B:C5:FA:67:1B:C1:43:D1:1A:29:8D:8E:45:D0:12:F8:B5:9D:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/323830333a326139303a3730303a3a2f34302d3430203d3e20323732383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2a90:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         d5:40:11:5e:83:66:08:9c:e9:db:25:f9:e0:c8:1b:9d:10:fb:
         9c:20:dc:d4:da:0f:bd:5c:a7:9f:6d:d8:96:5a:a0:bb:9f:64:
         fd:77:a9:3a:ba:f3:37:fe:81:e1:ec:4d:f6:52:e1:22:07:a1:
         ed:12:42:0f:0a:e7:53:c5:8c:78:fc:7a:69:52:7e:51:93:29:
         c3:9b:22:63:a1:05:d5:20:b7:06:f8:ed:e6:71:3e:15:f2:43:
         b5:fa:37:6b:4c:ab:9a:76:57:e3:02:4b:64:0d:c6:32:64:c0:
         d0:dd:b6:fd:a3:64:b6:69:a3:4e:49:c3:a1:48:c9:99:0e:7e:
         9c:76:3c:fa:92:a8:95:68:85:c8:bd:19:a4:ad:9f:48:73:55:
         a6:d4:82:3a:46:02:51:b7:c2:59:f6:1c:5d:ce:d2:d4:10:80:
         b7:41:32:1d:a8:58:ba:dc:51:e4:19:53:a5:08:ce:53:e8:e3:
         77:88:1a:6c:32:41:1a:c3:39:4c:80:48:78:4f:fc:b5:d8:05:
         43:86:61:84:6c:d3:f3:74:1f:1b:96:e7:11:cf:05:a2:f1:92:
         20:4a:e5:72:ce:ad:a9:4d:c3:04:38:6b:f4:d5:56:65:a2:65:
         8b:a0:16:1d:ac:10:a2:43:48:2e:7e:67:77:b2:c8:70:50:67:
         b0:d8:18:f1
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUd/GacEOii6ztbiGmJ2PKXX7NbhkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTE5QkM1RkE2NzFCQzE0M0QxMUEyOThEOEU0NUQwMTJG
OEI1OURCODAeFw0yNjAxMDYxOTIxNTVaFw0yNzAxMDUxOTI2NTVaMDMxMTAvBgNV
BAMTKEQzM0JDNEU1OUQ5NUY3RUMzMThDNkE3RkM4OTYyMDkwNjEzMzc2NUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9faZcrQtkdYc/FDreUVOxrtj7
6ZbgRrAd+y7U2XwBH9LhNmMkjKtddNpgDPKJjfJR/BbVHH8MqATms+oAttLOW+f2
ZruahoArwHYRYjGHGCIy03YLrrzy0okG1a1BvNiNeAw4me2LMSq8Rv32rGbdKTHk
7ZUhP9MQ87TAL0540TOVARSl7coy/z+9oO1YaTb/NS6cuhW5gEu8K7O5Z7lkNqKf
bfdnfrCjKm1COqRqmRy35vphdus9JqVlj8gAlwhc1Sho6ftQxYScvntfTyJGsyQg
14pV3tXmgHkfq3bRPsNX2vRNgCtj4rAWG5rVsOkdZjBGxRBaPG8KoMCelG+LAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQU0zvE5Z2V9+wxjGp/yJYgkGEzdlswHwYDVR0j
BBgwFoAU4ZvF+mcbwUPRGimNjkXQEvi1nbgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81OTcyRDVDQzM0OThDOUQzOENDQTRFREVEMTgzNEVGQTk4
OTdDNjI0MTY4MTRERUNEM0REODQ4QUE5NzczNzdBLzAvRTE5QkM1RkE2NzFCQzE0
M0QxMUEyOThEOEU0NUQwMTJGOEI1OURCOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMTlCQzVGQTY3MUJDMTQzRDEx
QTI5OEQ4RTQ1RDAxMkY4QjU5REI4LmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTk3MkQ1Q0MzNDk4QzlEMzhDQ0E0RURFRDE4MzRFRkE5ODk3QzYyNDE2
ODE0REVDRDNERDg0OEFBOTc3Mzc3QS8wLzMyMzgzMDMzM2EzMjYxMzkzMDNhMzcz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNzMyMzgzNzM3LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAMqkAcwDQYJKoZIhvcNAQELBQADggEBANVAEV6DZgic6dsl+eDIG50Q+5wg
3NTaD71cp59t2JZaoLufZP13qTq68zf+geHsTfZS4SIHoe0SQg8K51PFjHj8emlS
flGTKcObImOhBdUgtwb47eZxPhXyQ7X6N2tMq5p2V+MCS2QNxjJkwNDdtv2jZLZp
o05Jw6FIyZkOfpx2PPqSqJVohci9GaStn0hzVabUgjpGAlG3wln2HF3O0tQQgLdB
Mh2oWLrcUeQZU6UIzlPo43eIGmwyQRrDOUyASHhP/LXYBUOGYYRs0/N0HxuW5xHP
BaLxkiBK5XLOralNwwQ4a/TVVmWiZYugFh2sEKJDSC5+Z3eyyHBQZ7DYGPE=
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:19:15 2026 by rpki-client