This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/323830333a626130303a6430303a3a2f34302d3430203d3e203532323836.roa
File:                     323830333a626130303a6430303a3a2f34302d3430203d3e203532323836.roa (raw, json)
Hash identifier:          jCujdtrbR4YMG6NMgkbwyrjh1r35CRj2HdxGBnYpqA8=
Subject key identifier:   2E:A0:BE:63:F1:53:5E:AB:63:4B:94:45:2C:FA:A7:43:85:05:AB:B4
Certificate issuer:       /CN=241DE049AC3C932631785D79E6569AB7CF57A340
Certificate serial:       70A6D0FDED5D10238DB4B717A396D83F2B2BA5C7
Authority key identifier: 24:1D:E0:49:AC:3C:93:26:31:78:5D:79:E6:56:9A:B7:CF:57:A3:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/241DE049AC3C932631785D79E6569AB7CF57A340.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/323830333a626130303a6430303a3a2f34302d3430203d3e203532323836.roa
Signing time:             Tue 06 Jan 2026 18:59:33 +0000
ROA not before:           Tue 06 Jan 2026 18:54:33 +0000
ROA not after:            Tue 05 Jan 2027 18:59:33 +0000
asID:                     52286
IP address blocks:        2803:ba00:d00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/241DE049AC3C932631785D79E6569AB7CF57A340.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/241DE049AC3C932631785D79E6569AB7CF57A340.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/241DE049AC3C932631785D79E6569AB7CF57A340.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:a6:d0:fd:ed:5d:10:23:8d:b4:b7:17:a3:96:d8:3f:2b:2b:a5:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=241DE049AC3C932631785D79E6569AB7CF57A340
        Validity
            Not Before: Jan  6 18:54:33 2026 GMT
            Not After : Jan  5 18:59:33 2027 GMT
        Subject: CN=2EA0BE63F1535EAB634B94452CFAA7438505ABB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4b:2b:9c:37:f6:ff:66:dc:34:29:f4:8d:93:
                    b3:67:a6:aa:23:45:79:09:c3:12:8c:cf:ca:24:d6:
                    55:96:1b:25:3d:53:e8:38:5a:e7:c5:b6:15:11:8e:
                    74:7d:7b:20:70:8e:d9:f8:53:e6:bb:4f:2b:91:08:
                    82:78:61:08:90:e0:a7:64:87:1f:ef:41:d4:ed:b6:
                    d6:ac:68:80:6b:c2:dd:0a:23:80:26:d5:9b:a4:d3:
                    3a:1f:d9:3a:e3:22:71:df:fa:0a:9e:c0:7b:f3:52:
                    0c:f5:6c:87:17:99:98:58:c7:70:5a:52:bc:50:3b:
                    d3:d0:c2:64:fd:c1:64:76:31:3b:af:6d:73:f1:3d:
                    ac:58:15:93:3c:13:6f:81:9b:5b:c0:b1:ea:f7:6a:
                    ce:dd:ae:e2:e0:63:20:ee:5d:29:70:ad:23:8d:10:
                    eb:cb:60:98:89:48:44:65:09:52:1e:00:74:45:3f:
                    10:7f:ff:ff:91:8d:ec:df:3d:ad:e1:41:e3:6c:72:
                    0b:9a:03:01:1f:7e:69:ff:79:88:88:61:43:1f:38:
                    ab:e5:e6:8c:b2:49:02:d9:c2:10:be:2b:bd:11:3f:
                    2c:43:6d:03:a9:82:25:65:ae:f7:78:c1:c3:28:1b:
                    20:4e:e2:5f:c4:c3:f3:6c:22:59:5c:e3:2a:46:73:
                    52:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A0:BE:63:F1:53:5E:AB:63:4B:94:45:2C:FA:A7:43:85:05:AB:B4
            X509v3 Authority Key Identifier:
                keyid:24:1D:E0:49:AC:3C:93:26:31:78:5D:79:E6:56:9A:B7:CF:57:A3:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/241DE049AC3C932631785D79E6569AB7CF57A340.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/241DE049AC3C932631785D79E6569AB7CF57A340.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/323830333a626130303a6430303a3a2f34302d3430203d3e203532323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ba00:d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         55:fc:db:47:1b:02:86:a9:f8:df:2b:11:db:d6:fb:c3:e7:68:
         99:84:0a:a6:2c:8c:69:8b:0c:30:81:d8:da:9f:63:44:e0:28:
         aa:22:bc:fc:cc:0d:a8:f5:00:6c:6f:54:bf:db:9f:72:ec:01:
         8b:34:cd:6e:16:28:de:bc:7f:73:9e:83:33:85:f8:eb:7e:70:
         60:c4:ac:fd:d4:f8:c1:c8:76:3d:60:bb:de:0b:11:38:12:05:
         1a:8c:e4:01:8b:df:07:5c:e2:91:66:af:83:ed:25:f5:af:d7:
         3d:71:13:b8:42:e3:7e:b7:e7:fc:c4:fb:62:f8:66:df:58:c8:
         a6:a3:a6:49:36:ad:d1:be:c3:65:9e:0f:05:ca:71:f8:9d:80:
         dc:f4:ca:88:b5:e6:ec:15:5d:94:bd:e5:c3:87:3e:65:7c:90:
         b4:55:87:bf:c2:31:2c:82:78:27:19:f6:09:9a:ef:33:6a:53:
         2a:fe:78:27:8f:a0:ff:a9:50:9b:c2:38:01:b9:a6:02:37:94:
         d6:2d:de:d1:86:bb:90:99:f4:e9:9f:ae:c2:51:37:ab:e6:e3:
         0b:b1:f6:f4:3f:d9:17:0b:8c:78:5a:db:38:49:e1:57:70:4e:
         4d:e1:08:8a:f9:44:63:e9:57:df:5f:21:b2:dc:fa:22:4b:c1:
         44:15:94:fd
-----BEGIN CERTIFICATE-----
MIIFxjCCBK6gAwIBAgIUcKbQ/e1dECONtLcXo5bYPysrpccwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQxREUwNDlBQzNDOTMyNjMxNzg1RDc5RTY1NjlBQjdD
RjU3QTM0MDAeFw0yNjAxMDYxODU0MzNaFw0yNzAxMDUxODU5MzNaMDMxMTAvBgNV
BAMTKDJFQTBCRTYzRjE1MzVFQUI2MzRCOTQ0NTJDRkFBNzQzODUwNUFCQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDSyucN/b/Ztw0KfSNk7Nnpqoj
RXkJwxKMz8ok1lWWGyU9U+g4WufFthURjnR9eyBwjtn4U+a7TyuRCIJ4YQiQ4Kdk
hx/vQdTtttasaIBrwt0KI4Am1Zuk0zof2TrjInHf+gqewHvzUgz1bIcXmZhYx3Ba
UrxQO9PQwmT9wWR2MTuvbXPxPaxYFZM8E2+Bm1vAser3as7druLgYyDuXSlwrSON
EOvLYJiJSERlCVIeAHRFPxB///+RjezfPa3hQeNscguaAwEffmn/eYiIYUMfOKvl
5oyySQLZwhC+K70RPyxDbQOpgiVlrvd4wcMoGyBO4l/Ew/NsIllc4ypGc1K5AgMB
AAGjggLQMIICzDAdBgNVHQ4EFgQULqC+Y/FTXqtjS5RFLPqnQ4UFq7QwHwYDVR0j
BBgwFoAUJB3gSaw8kyYxeF155laat89Xo0AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81RDhGNTFCMUQxNjU3QkYzNjY2MTQ1MTFBMjA1ODFCREVE
MDNCMzJGQkNENUU5RDQ3MUFGOTg2QkE0MzYyMTFCLzAvMjQxREUwNDlBQzNDOTMy
NjMxNzg1RDc5RTY1NjlBQjdDRjU3QTM0MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNDFERTA0OUFDM0M5MzI2MzE3
ODVENzlFNjU2OUFCN0NGNTdBMzQwLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUQ4RjUxQjFEMTY1N0JGMzY2NjE0NTExQTIwNTgxQkRFRDAzQjMyRkJD
RDVFOUQ0NzFBRjk4NkJBNDM2MjExQi8wLzMyMzgzMDMzM2E2MjYxMzAzMDNhNjQz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzUzMjMyMzgzNi5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMG
ACgDugANMA0GCSqGSIb3DQEBCwUAA4IBAQBV/NtHGwKGqfjfKxHb1vvD52iZhAqm
LIxpiwwwgdjan2NE4CiqIrz8zA2o9QBsb1S/259y7AGLNM1uFijevH9znoMzhfjr
fnBgxKz91PjByHY9YLveCxE4EgUajOQBi98HXOKRZq+D7SX1r9c9cRO4QuN+t+f8
xPti+GbfWMimo6ZJNq3RvsNlng8FynH4nYDc9MqItebsFV2UveXDhz5lfJC0VYe/
wjEsgngnGfYJmu8zalMq/ngnj6D/qVCbwjgBuaYCN5TWLd7RhruQmfTpn67CUTer
5uMLsfb0P9kXC4x4Wts4SeFXcE5N4QiK+URj6VffXyGy3PoiS8FEFZT9
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:45:29 2026 by rpki-client