This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5F383C52DD577D2D1AF1BAFB4267EED76B9B5540FFD452F7C66C0129A8204519/0/323830333a613563303a363030303a3a2f33362d3336203d3e20323733303031.roa
File:                     323830333a613563303a363030303a3a2f33362d3336203d3e20323733303031.roa (raw, json)
Hash identifier:          L8i1QVsGfYx7203Io4/0d0LxL7WCTYbD/egvziB46NM=
Subject key identifier:   3E:69:45:6F:35:3D:4D:1B:4A:82:24:36:37:C0:8B:86:1B:40:0D:E5
Certificate issuer:       /CN=2F03E5143F966EB03984AA596151B47F0A7C38E2
Certificate serial:       31340A643145B57CA3F14D7108219B0CAB18E860
Authority key identifier: 2F:03:E5:14:3F:96:6E:B0:39:84:AA:59:61:51:B4:7F:0A:7C:38:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F03E5143F966EB03984AA596151B47F0A7C38E2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5F383C52DD577D2D1AF1BAFB4267EED76B9B5540FFD452F7C66C0129A8204519/0/323830333a613563303a363030303a3a2f33362d3336203d3e20323733303031.roa
Signing time:             Tue 06 Jan 2026 18:57:31 +0000
ROA not before:           Tue 06 Jan 2026 18:52:31 +0000
ROA not after:            Tue 05 Jan 2027 18:57:31 +0000
asID:                     273001
IP address blocks:        2803:a5c0:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5F383C52DD577D2D1AF1BAFB4267EED76B9B5540FFD452F7C66C0129A8204519/0/2F03E5143F966EB03984AA596151B47F0A7C38E2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5F383C52DD577D2D1AF1BAFB4267EED76B9B5540FFD452F7C66C0129A8204519/0/2F03E5143F966EB03984AA596151B47F0A7C38E2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F03E5143F966EB03984AA596151B47F0A7C38E2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:34:0a:64:31:45:b5:7c:a3:f1:4d:71:08:21:9b:0c:ab:18:e8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F03E5143F966EB03984AA596151B47F0A7C38E2
        Validity
            Not Before: Jan  6 18:52:31 2026 GMT
            Not After : Jan  5 18:57:31 2027 GMT
        Subject: CN=3E69456F353D4D1B4A82243637C08B861B400DE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:af:f3:68:3a:f3:ea:ea:82:e9:e7:94:ce:47:
                    8f:98:25:50:c9:ee:61:c1:df:29:68:15:f4:f4:11:
                    24:bf:ec:0a:52:4e:82:5c:bc:2e:30:bb:e6:38:85:
                    95:27:94:5d:7b:6c:13:33:9d:31:f5:6d:c7:0e:21:
                    0d:21:df:3c:d6:51:1c:ea:77:43:97:b9:33:63:9e:
                    bb:1c:98:e0:f0:ca:1e:ef:9a:22:37:53:2c:1c:47:
                    42:c6:1c:9f:96:6a:d0:b7:8f:a8:33:c3:ad:2c:61:
                    b7:bb:40:15:80:45:f3:68:78:69:84:85:6c:b7:e4:
                    c2:86:85:cc:c2:1a:4f:40:44:14:57:21:40:5f:70:
                    02:81:fb:f8:0f:f8:98:53:bf:2e:fe:19:a8:90:75:
                    c0:ba:e8:01:3e:f5:f5:00:21:ff:08:34:08:23:28:
                    45:fa:a0:28:ed:8c:0d:cf:71:a9:7a:ec:1d:66:9e:
                    3f:cf:85:c2:08:4d:64:88:c7:11:29:79:7f:33:58:
                    74:9d:97:8c:06:a3:6c:d1:4d:cf:6d:0c:6d:e0:5f:
                    c0:67:1e:ea:f0:de:f6:87:af:fc:8e:da:6d:ef:bd:
                    2b:87:be:78:1a:03:31:9e:d3:86:ec:32:db:98:23:
                    d1:2c:57:60:6e:e2:f7:ef:d6:1b:67:35:21:f0:e5:
                    b9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:69:45:6F:35:3D:4D:1B:4A:82:24:36:37:C0:8B:86:1B:40:0D:E5
            X509v3 Authority Key Identifier:
                keyid:2F:03:E5:14:3F:96:6E:B0:39:84:AA:59:61:51:B4:7F:0A:7C:38:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5F383C52DD577D2D1AF1BAFB4267EED76B9B5540FFD452F7C66C0129A8204519/0/2F03E5143F966EB03984AA596151B47F0A7C38E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F03E5143F966EB03984AA596151B47F0A7C38E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5F383C52DD577D2D1AF1BAFB4267EED76B9B5540FFD452F7C66C0129A8204519/0/323830333a613563303a363030303a3a2f33362d3336203d3e20323733303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a5c0:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1e:80:89:15:28:30:51:53:9a:13:85:fa:dc:33:ed:88:72:d6:
         7c:2a:ac:9b:ce:c8:aa:37:c8:02:03:ea:5b:8b:fb:66:60:6a:
         e9:64:23:dd:3e:f1:a2:df:c4:c6:13:6d:dd:8b:9d:fc:17:6f:
         f1:95:e4:07:90:00:27:7d:aa:64:ac:76:af:31:cd:68:7c:2a:
         c1:08:bb:23:b3:df:d9:80:8c:ea:ef:0c:a3:c2:96:6c:e8:06:
         58:66:85:2c:44:32:d3:be:5b:00:80:8b:e7:0f:bc:b7:6c:a2:
         c7:7b:31:e1:eb:e6:c8:af:a9:da:46:98:4c:bb:41:eb:dc:54:
         5b:c0:d4:f0:a1:bb:db:0f:f2:d0:8e:60:1f:09:5d:21:ba:3d:
         ff:2e:d1:53:2b:b0:2b:ca:6f:8b:46:d6:48:3f:40:fb:5b:8f:
         7d:91:f5:b9:c1:93:7f:82:1b:ba:2e:54:8a:05:0b:82:48:4f:
         09:ec:9e:1c:75:e3:b4:fc:4c:54:d8:86:9e:c6:48:aa:48:85:
         2c:12:82:21:bf:c8:98:c0:b1:b9:36:88:be:73:f8:ee:52:c4:
         fe:5e:c1:55:8e:be:26:fa:ae:95:d0:c4:ab:a3:bf:6c:a2:8e:
         e9:32:58:eb:c7:10:78:f1:52:49:14:32:aa:ed:b6:cf:aa:a0:
         cf:c1:99:ad
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:00:23 2026 by rpki-client