This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/323830333a326139303a6230303a3a2f34302d3430203d3e20323732383737.roa
File:                     323830333a326139303a6230303a3a2f34302d3430203d3e20323732383737.roa (raw, json)
Hash identifier:          W0fcvDX8USEA0FnCelz8BMyX9nTsrSZ2O00PTuYu7o0=
Subject key identifier:   C5:FD:A4:D9:AB:00:BF:FF:D3:3A:5B:98:F1:EA:26:CA:FA:C6:9F:22
Certificate issuer:       /CN=E19BC5FA671BC143D11A298D8E45D012F8B59DB8
Certificate serial:       306F13C7EBBF3227D767CE4511EB1A41C001BAC9
Authority key identifier: E1:9B:C5:FA:67:1B:C1:43:D1:1A:29:8D:8E:45:D0:12:F8:B5:9D:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/323830333a326139303a6230303a3a2f34302d3430203d3e20323732383737.roa
Signing time:             Tue 06 Jan 2026 19:26:55 +0000
ROA not before:           Tue 06 Jan 2026 19:21:55 +0000
ROA not after:            Tue 05 Jan 2027 19:26:55 +0000
asID:                     272877
IP address blocks:        2803:2a90:b00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 10:10:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:6f:13:c7:eb:bf:32:27:d7:67:ce:45:11:eb:1a:41:c0:01:ba:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E19BC5FA671BC143D11A298D8E45D012F8B59DB8
        Validity
            Not Before: Jan  6 19:21:55 2026 GMT
            Not After : Jan  5 19:26:55 2027 GMT
        Subject: CN=C5FDA4D9AB00BFFFD33A5B98F1EA26CAFAC69F22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c1:c4:c1:e2:10:8d:c8:f7:ec:c1:01:72:6f:
                    38:12:33:bf:c0:8b:15:6c:48:b1:29:de:79:9a:b8:
                    72:6c:82:c2:56:2b:d1:5a:1f:a0:eb:1e:55:45:76:
                    d2:b4:08:13:a6:68:7d:b0:a6:22:1a:60:45:be:4c:
                    05:1e:02:b9:14:b2:13:e5:7f:ef:ab:26:e3:9d:1c:
                    8c:d3:a0:c1:42:e1:bd:60:90:5e:b1:d7:14:f1:87:
                    f2:aa:25:4e:4d:fa:70:ce:71:44:a6:ec:93:61:30:
                    e2:af:15:5f:4f:9d:9f:af:2f:35:e7:b6:64:88:da:
                    f3:03:c7:b7:e0:3e:38:68:7d:88:b9:4c:49:6c:af:
                    4c:a4:d8:f3:f9:15:b4:31:c1:0c:33:87:fb:9b:8c:
                    79:a7:47:07:f0:ce:0f:dc:e5:33:08:c5:dc:c1:27:
                    b6:f8:5a:05:52:41:e0:6e:6f:f9:45:fa:43:51:91:
                    ce:45:0a:89:d2:e2:40:09:a3:82:5e:d0:84:5a:1e:
                    02:1b:14:23:8d:64:9c:99:ff:42:04:d4:8f:4a:37:
                    68:af:5e:b3:4e:b8:e7:e9:21:a1:63:3b:71:26:02:
                    15:06:04:6d:ab:40:71:f3:98:5c:de:9a:d5:94:94:
                    00:f5:f9:99:b2:db:e0:2c:fa:f5:e5:72:c4:b4:b6:
                    6c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:FD:A4:D9:AB:00:BF:FF:D3:3A:5B:98:F1:EA:26:CA:FA:C6:9F:22
            X509v3 Authority Key Identifier:
                keyid:E1:9B:C5:FA:67:1B:C1:43:D1:1A:29:8D:8E:45:D0:12:F8:B5:9D:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/323830333a326139303a6230303a3a2f34302d3430203d3e20323732383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2a90:b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         b4:bf:7b:6d:43:6e:48:a0:ba:68:f1:bb:eb:c4:1a:7b:85:22:
         3e:e6:68:f7:c6:96:2c:d9:71:71:ec:1c:0e:30:33:6f:a6:c2:
         3e:c6:bd:7b:3c:62:d8:5d:c4:33:ab:ca:36:3d:73:bf:42:d5:
         48:6b:6b:38:d4:06:f5:4e:e2:91:d9:4d:f1:b0:7d:45:d7:21:
         a2:35:75:47:ec:cd:2f:14:79:a5:30:c0:8d:ef:43:82:4c:d3:
         51:45:6b:70:50:d3:b6:e7:a2:2a:81:9c:14:02:bb:40:04:4a:
         52:bf:5c:14:12:39:00:0a:74:61:11:52:4d:08:c3:c9:30:9f:
         6a:fd:34:11:1e:d6:ab:70:45:fe:c3:3e:00:7e:b6:52:b7:2f:
         d4:ac:35:da:9a:f0:ed:4f:88:fa:28:2b:9b:21:12:a1:ef:e5:
         2e:1c:72:59:47:14:76:3c:ed:43:81:7c:30:19:7d:d0:76:86:
         7d:f1:b5:a4:7f:a7:d6:b2:af:bf:98:2a:fb:62:1f:30:2e:23:
         cb:f0:cf:98:4d:f4:d4:a5:9c:1f:31:06:96:85:bf:ce:0b:f4:
         89:40:44:f6:65:72:63:c5:bd:08:25:26:14:61:58:8b:68:34:
         1e:12:4a:88:92:b2:30:a5:a4:b8:f4:87:c7:1a:b4:de:1f:ab:
         89:fa:49:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:18:42 2026 by rpki-client