This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5F383C52DD577D2D1AF1BAFB4267EED76B9B5540FFD452F7C66C0129A8204519/0/323830333a613563303a3a2f33322d3438203d3e20323733303031.roa
File:                     323830333a613563303a3a2f33322d3438203d3e20323733303031.roa (raw, json)
Hash identifier:          j+BCdjxorOn98CDXjrGUx9WOmNI4WV2L57Z8MP3XoiE=
Subject key identifier:   F2:02:10:76:B4:3F:57:69:B6:86:C6:E4:FD:F3:BE:17:11:C1:31:7D
Certificate issuer:       /CN=2F03E5143F966EB03984AA596151B47F0A7C38E2
Certificate serial:       1D2248B2DCC5FE44DDB39979EE38203AC53FF560
Authority key identifier: 2F:03:E5:14:3F:96:6E:B0:39:84:AA:59:61:51:B4:7F:0A:7C:38:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F03E5143F966EB03984AA596151B47F0A7C38E2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5F383C52DD577D2D1AF1BAFB4267EED76B9B5540FFD452F7C66C0129A8204519/0/323830333a613563303a3a2f33322d3438203d3e20323733303031.roa
Signing time:             Tue 06 Jan 2026 18:57:30 +0000
ROA not before:           Tue 06 Jan 2026 18:52:30 +0000
ROA not after:            Tue 05 Jan 2027 18:57:30 +0000
asID:                     273001
IP address blocks:        2803:a5c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5F383C52DD577D2D1AF1BAFB4267EED76B9B5540FFD452F7C66C0129A8204519/0/2F03E5143F966EB03984AA596151B47F0A7C38E2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5F383C52DD577D2D1AF1BAFB4267EED76B9B5540FFD452F7C66C0129A8204519/0/2F03E5143F966EB03984AA596151B47F0A7C38E2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F03E5143F966EB03984AA596151B47F0A7C38E2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:22:48:b2:dc:c5:fe:44:dd:b3:99:79:ee:38:20:3a:c5:3f:f5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F03E5143F966EB03984AA596151B47F0A7C38E2
        Validity
            Not Before: Jan  6 18:52:30 2026 GMT
            Not After : Jan  5 18:57:30 2027 GMT
        Subject: CN=F2021076B43F5769B686C6E4FDF3BE1711C1317D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3a:4e:e9:10:9f:e5:28:94:3d:79:b7:15:0e:
                    de:fe:95:44:00:47:e8:db:31:2f:8a:c0:82:d4:64:
                    45:75:9d:1e:35:04:9c:ed:ec:1d:00:47:d3:22:86:
                    8d:3b:cb:ee:bb:c0:cb:51:8d:6c:c8:d8:29:00:ae:
                    46:4c:32:86:36:3d:57:03:aa:c6:70:44:6b:ab:ba:
                    92:bb:dd:43:4e:6a:63:f4:a1:1f:8f:b4:83:c9:97:
                    eb:56:5a:8c:93:39:7f:7d:d2:64:f5:b3:76:47:6a:
                    b8:bb:7b:a6:15:e3:86:95:7b:0a:1c:4f:c8:2a:61:
                    69:6e:e0:59:ed:2e:c0:b8:84:7d:f1:95:7f:4b:5e:
                    56:ad:a2:c6:b9:5b:4a:db:e5:c0:a7:91:87:ab:6e:
                    67:e7:4e:a2:dd:39:f8:b9:cf:ef:ad:61:1e:ae:5f:
                    ae:73:2d:da:6c:56:10:ec:b2:1b:ab:f2:f7:47:a0:
                    fd:99:11:7c:c6:8e:10:4d:f8:7b:72:0f:95:7f:10:
                    9f:0b:c3:18:0b:b5:a2:78:00:6b:d9:bd:22:fd:5b:
                    a4:dc:3d:cb:d6:61:da:bb:6d:77:fc:8a:3f:91:12:
                    28:96:2e:df:8c:9b:89:47:3b:1b:c2:54:9f:62:15:
                    19:e0:81:de:c4:53:07:ac:c9:96:3a:05:e0:21:d7:
                    de:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:02:10:76:B4:3F:57:69:B6:86:C6:E4:FD:F3:BE:17:11:C1:31:7D
            X509v3 Authority Key Identifier:
                keyid:2F:03:E5:14:3F:96:6E:B0:39:84:AA:59:61:51:B4:7F:0A:7C:38:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5F383C52DD577D2D1AF1BAFB4267EED76B9B5540FFD452F7C66C0129A8204519/0/2F03E5143F966EB03984AA596151B47F0A7C38E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F03E5143F966EB03984AA596151B47F0A7C38E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5F383C52DD577D2D1AF1BAFB4267EED76B9B5540FFD452F7C66C0129A8204519/0/323830333a613563303a3a2f33322d3438203d3e20323733303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a5c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:d6:e1:a9:36:2a:75:21:c1:be:ab:95:19:ef:17:85:d2:0b:
         3e:0e:72:c1:2a:1c:b6:3a:26:42:02:29:be:c2:e8:20:88:6d:
         b0:e0:12:06:28:9f:03:1f:d6:7d:56:3c:44:cd:64:21:b6:ea:
         3d:79:78:36:cc:d5:63:d7:a4:2b:8c:da:7b:f1:93:ee:47:cf:
         73:b7:9e:93:dd:ba:d0:1a:e9:16:43:1e:e9:57:e4:d4:49:b4:
         98:d0:4b:ba:5c:dd:40:12:32:6d:49:37:4c:99:a5:4c:bb:5e:
         40:78:4a:1e:09:c7:d7:e1:ef:89:1f:40:1c:aa:d7:0a:71:99:
         a0:01:e6:c6:5a:cf:54:a9:21:9c:a8:e4:f8:66:82:05:64:87:
         55:56:8d:a1:09:72:4f:7f:68:8b:b9:6f:76:7e:bb:6a:47:47:
         2d:b9:ed:bc:4d:d6:29:4d:cf:0a:0c:c6:fb:54:9f:22:88:e8:
         fb:49:0d:40:9d:e5:ee:c7:f9:21:53:e7:bd:90:9a:47:a0:c0:
         62:03:f4:7e:1e:f0:1b:6b:84:1b:79:59:b0:96:26:15:5e:ee:
         6a:6b:aa:94:60:3a:51:fa:35:2f:a1:32:ed:ac:09:34:fa:64:
         4a:9b:82:c3:81:66:1f:11:1d:3d:de:99:8f:c0:b1:19:a2:86:
         e6:0d:10:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:00:28 2026 by rpki-client