This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/323830333a326139303a3830303a3a2f34302d3430203d3e20323732383737.roa
File:                     323830333a326139303a3830303a3a2f34302d3430203d3e20323732383737.roa (raw, json)
Hash identifier:          5r7kVN0tnJzmZywHZchv0jMlwwqIRvuyilHfZ9V03gs=
Subject key identifier:   3D:3F:00:AB:AE:75:C7:9F:9C:C4:89:17:37:E3:60:1E:91:22:6A:BA
Certificate issuer:       /CN=E19BC5FA671BC143D11A298D8E45D012F8B59DB8
Certificate serial:       25528B84A010AA4DD36942DE28DEC7B304290607
Authority key identifier: E1:9B:C5:FA:67:1B:C1:43:D1:1A:29:8D:8E:45:D0:12:F8:B5:9D:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/323830333a326139303a3830303a3a2f34302d3430203d3e20323732383737.roa
Signing time:             Tue 06 Jan 2026 19:26:56 +0000
ROA not before:           Tue 06 Jan 2026 19:21:56 +0000
ROA not after:            Tue 05 Jan 2027 19:26:56 +0000
asID:                     272877
IP address blocks:        2803:2a90:800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 10:10:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:52:8b:84:a0:10:aa:4d:d3:69:42:de:28:de:c7:b3:04:29:06:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E19BC5FA671BC143D11A298D8E45D012F8B59DB8
        Validity
            Not Before: Jan  6 19:21:56 2026 GMT
            Not After : Jan  5 19:26:56 2027 GMT
        Subject: CN=3D3F00ABAE75C79F9CC4891737E3601E91226ABA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ec:cf:07:2b:32:6d:f0:99:50:00:a5:6a:f2:
                    b1:20:da:cf:52:ab:e6:a6:e3:c2:76:f0:ba:75:b0:
                    e6:7d:fd:cd:b3:67:5b:53:7e:96:6f:e1:21:85:05:
                    a9:bf:54:f5:8a:65:c5:99:b8:7d:ed:63:a9:68:13:
                    d2:8c:c6:2c:62:f3:16:33:f1:39:44:4d:f8:f9:ae:
                    1a:73:d7:0e:6f:a7:0d:0f:f6:1d:2f:8d:14:f1:80:
                    12:64:86:ec:84:0e:5e:6a:bb:a7:92:2d:d5:9f:c0:
                    a4:83:b9:19:ad:79:67:ff:72:bc:4f:f1:c2:ea:fd:
                    41:5c:da:f8:f6:34:69:f3:6b:25:30:90:b4:10:e6:
                    66:b4:f1:6b:74:4d:03:39:d4:50:d1:60:20:06:79:
                    8e:7c:16:e3:f4:4b:11:83:d8:ca:a3:e8:7c:fc:69:
                    e0:72:f5:6b:3b:49:8c:71:e8:9f:c4:45:8f:ee:9a:
                    a5:17:f2:f1:5c:63:8a:b0:33:8a:86:9f:24:c4:76:
                    f4:5f:2a:c5:fc:9d:b4:67:48:51:1c:15:c1:be:24:
                    2c:91:16:19:40:16:ff:6d:b3:7e:b2:b4:95:a5:77:
                    87:22:fd:a8:95:60:28:df:94:89:85:14:1a:58:f2:
                    29:8c:cc:72:4f:a5:09:88:96:47:b8:ac:18:75:e8:
                    0e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:3F:00:AB:AE:75:C7:9F:9C:C4:89:17:37:E3:60:1E:91:22:6A:BA
            X509v3 Authority Key Identifier:
                keyid:E1:9B:C5:FA:67:1B:C1:43:D1:1A:29:8D:8E:45:D0:12:F8:B5:9D:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/323830333a326139303a3830303a3a2f34302d3430203d3e20323732383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2a90:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         5c:92:a8:a4:6a:26:f9:28:3c:2a:18:b2:a1:81:b2:1c:a5:2d:
         31:bb:72:7e:84:ef:48:9f:83:51:49:63:9d:28:69:97:73:6c:
         c4:5a:a9:e3:ae:3f:7a:df:01:d5:d0:0c:cc:1e:39:c1:18:64:
         f2:a3:e2:f4:65:b4:72:3e:d6:96:8a:ed:3e:85:be:64:20:c8:
         5e:72:dd:2d:89:9a:25:92:e5:cf:8d:21:2e:1d:d3:93:fd:61:
         02:67:7f:82:ca:95:0d:77:d4:70:e5:0e:00:e3:d7:68:d3:1f:
         47:4d:94:24:6c:39:1b:a5:17:5f:17:0f:f6:2a:33:f2:8c:50:
         fd:d3:d5:05:6e:fe:75:b0:54:71:f3:85:01:38:d3:75:47:c4:
         90:c1:bf:05:98:9d:fe:7b:11:6e:e5:47:ba:a1:c6:c0:79:51:
         92:3c:af:69:74:b3:2f:d4:f7:97:3a:8b:53:f9:b9:fe:8e:d1:
         0e:28:bc:f9:0d:34:16:58:03:2c:d5:0a:67:8b:e4:85:ce:78:
         30:2e:7d:64:7c:ab:c9:ce:da:06:40:02:12:b5:76:2b:e0:63:
         43:71:aa:9e:91:67:64:7a:d5:ab:d6:88:fd:fe:ae:3e:57:11:
         20:3a:e2:f3:e8:dd:c0:11:1b:b8:03:89:bb:83:36:39:b9:f6:
         b3:f5:fd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:18:52 2026 by rpki-client