This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B938E0A55766E180F3875CA3B727D1C561C4F24EED17CC25FF9EB0ABD1B16F0/0/323830333a396638303a3a2f33322d3332203d3e20323633373335.roa
File:                     323830333a396638303a3a2f33322d3332203d3e20323633373335.roa (raw, json)
Hash identifier:          cdJqp+b+qAN3qczzZ3v7HzT1nctw38C4uZuUefuLY5w=
Subject key identifier:   F2:32:F9:43:88:D0:5D:AB:61:97:62:F7:4F:B0:5F:6C:E8:B4:16:A8
Certificate issuer:       /CN=2457663DFAA2799A1AD03DC43FCAF8D319422BD5
Certificate serial:       6AAE1A607ED8F84FA2879456DE34D0CCD3A1331F
Authority key identifier: 24:57:66:3D:FA:A2:79:9A:1A:D0:3D:C4:3F:CA:F8:D3:19:42:2B:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2457663DFAA2799A1AD03DC43FCAF8D319422BD5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5B938E0A55766E180F3875CA3B727D1C561C4F24EED17CC25FF9EB0ABD1B16F0/0/323830333a396638303a3a2f33322d3332203d3e20323633373335.roa
Signing time:             Tue 06 Jan 2026 20:57:53 +0000
ROA not before:           Tue 06 Jan 2026 20:52:53 +0000
ROA not after:            Tue 05 Jan 2027 20:57:53 +0000
asID:                     263735
IP address blocks:        2803:9f80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5B938E0A55766E180F3875CA3B727D1C561C4F24EED17CC25FF9EB0ABD1B16F0/0/2457663DFAA2799A1AD03DC43FCAF8D319422BD5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5B938E0A55766E180F3875CA3B727D1C561C4F24EED17CC25FF9EB0ABD1B16F0/0/2457663DFAA2799A1AD03DC43FCAF8D319422BD5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2457663DFAA2799A1AD03DC43FCAF8D319422BD5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 07:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:ae:1a:60:7e:d8:f8:4f:a2:87:94:56:de:34:d0:cc:d3:a1:33:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2457663DFAA2799A1AD03DC43FCAF8D319422BD5
        Validity
            Not Before: Jan  6 20:52:53 2026 GMT
            Not After : Jan  5 20:57:53 2027 GMT
        Subject: CN=F232F94388D05DAB619762F74FB05F6CE8B416A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b4:50:50:d1:44:e2:c4:34:4b:28:af:88:e5:
                    b2:98:44:2f:f0:30:a3:f0:87:99:5d:7b:26:02:5d:
                    34:db:61:6c:fe:2b:aa:fa:86:f9:81:de:09:60:2a:
                    73:c1:9a:ff:23:55:b6:94:0d:01:b9:b1:9b:73:fe:
                    92:fe:7e:02:2f:be:e5:ab:e8:f7:13:7a:a4:ab:ee:
                    66:52:8b:f0:14:d0:cf:cc:6b:99:5e:d2:c8:29:c2:
                    5d:1a:9c:6e:73:e6:ec:eb:5b:61:ee:3e:8f:32:a2:
                    b6:eb:96:06:68:43:80:ac:35:a2:10:84:54:1a:12:
                    f3:95:d1:03:de:27:ff:69:35:72:a7:01:bc:42:50:
                    f5:04:b4:0e:c8:1a:3a:d2:f3:92:14:69:88:29:af:
                    e2:53:c3:dd:ed:ad:8b:0d:88:d7:d4:52:c4:1b:17:
                    9e:1f:91:28:90:4a:3c:fd:9e:7b:8a:c5:ad:09:25:
                    a6:a9:4e:61:26:cd:a7:a5:cf:93:43:0d:96:4d:6a:
                    0f:36:32:c3:9c:aa:6c:9d:5d:ef:66:5c:0a:2e:20:
                    42:ea:0b:fe:ad:40:b4:26:9a:5a:e8:d7:1c:f6:ce:
                    e6:2f:99:99:e9:16:cf:93:c3:c6:4b:1d:e6:98:c3:
                    77:f0:03:c2:11:5b:8c:33:ba:ef:b9:36:f9:ab:f8:
                    d1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:32:F9:43:88:D0:5D:AB:61:97:62:F7:4F:B0:5F:6C:E8:B4:16:A8
            X509v3 Authority Key Identifier:
                keyid:24:57:66:3D:FA:A2:79:9A:1A:D0:3D:C4:3F:CA:F8:D3:19:42:2B:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5B938E0A55766E180F3875CA3B727D1C561C4F24EED17CC25FF9EB0ABD1B16F0/0/2457663DFAA2799A1AD03DC43FCAF8D319422BD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2457663DFAA2799A1AD03DC43FCAF8D319422BD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B938E0A55766E180F3875CA3B727D1C561C4F24EED17CC25FF9EB0ABD1B16F0/0/323830333a396638303a3a2f33322d3332203d3e20323633373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:f2:aa:ee:58:80:6e:5b:ba:e5:8a:e6:f9:11:85:dc:fc:ea:
         ad:3a:3e:27:97:bd:8d:b0:4a:8c:eb:19:61:b3:5b:af:59:ea:
         9f:28:fb:ed:c9:0e:28:09:87:ce:1a:1e:02:d3:e8:dd:36:89:
         80:52:db:84:06:e6:ec:03:ab:71:2f:c1:08:0f:fb:98:6d:e2:
         8f:fb:9c:e2:52:4a:22:c9:d3:e7:51:79:e6:1e:0c:d5:82:7e:
         fb:92:6e:e5:ea:d2:3d:0c:26:29:11:c2:33:bd:53:d0:cb:24:
         0d:37:a2:2c:e1:14:11:a6:9c:9c:3c:e2:63:1b:89:2f:8c:3b:
         dd:18:d9:4b:c5:e3:c3:78:34:58:61:e4:66:58:0f:a5:97:04:
         d7:70:6a:5c:f9:04:2e:36:4d:7e:ed:42:42:85:5e:80:84:32:
         6f:75:29:2c:b2:06:34:aa:12:40:27:b2:4d:a6:32:e3:2b:39:
         dc:ca:f1:5f:45:9f:55:86:a3:ec:7e:fc:9e:e9:2f:ad:4e:14:
         30:1b:5b:ec:f6:2f:9a:91:e6:a6:68:67:cc:89:c6:3f:4b:42:
         f2:c6:0c:6c:46:a0:db:8b:de:ff:42:f4:c4:3f:d1:55:7a:88:
         b2:b0:2a:a6:8a:e7:f8:7a:db:44:12:d2:cc:25:c0:f9:a4:7c:
         fd:29:79:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:20:02 2026 by rpki-client