This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a316130303a3a2f34302d3430203d3e20323733313233.roa
File:                     323830333a3435303a316130303a3a2f34302d3430203d3e20323733313233.roa (raw, json)
Hash identifier:          VhHb6Q+B2RN13VZ6Xe/WsmatSwJ1RUnkUzm3piqCKbM=
Subject key identifier:   F5:CE:50:24:6A:B4:57:F3:83:CF:28:93:BA:21:11:39:DE:6E:E2:FE
Certificate issuer:       /CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
Certificate serial:       39CDA98C65D8E1664261C09B153E2E4981074B37
Authority key identifier: A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a316130303a3a2f34302d3430203d3e20323733313233.roa
Signing time:             Sat 22 Nov 2025 00:53:24 +0000
ROA not before:           Sat 22 Nov 2025 00:48:24 +0000
ROA not after:            Sat 21 Nov 2026 00:53:24 +0000
asID:                     273123
IP address blocks:        2803:450:1a00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 19:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:cd:a9:8c:65:d8:e1:66:42:61:c0:9b:15:3e:2e:49:81:07:4b:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
        Validity
            Not Before: Nov 22 00:48:24 2025 GMT
            Not After : Nov 21 00:53:24 2026 GMT
        Subject: CN=F5CE50246AB457F383CF2893BA211139DE6EE2FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:70:30:9e:6c:5e:63:91:a9:84:e3:ba:43:50:
                    5c:8f:d3:4d:fa:9a:d7:40:06:69:df:4d:e7:02:ea:
                    3a:52:99:1c:17:a5:df:30:30:7a:19:27:ea:b3:41:
                    1a:d2:33:5d:65:8e:10:1f:0d:a5:d9:9b:79:29:29:
                    f7:1e:ac:04:4e:af:83:6d:76:25:ec:e6:41:7d:4e:
                    e4:73:83:89:a3:d7:f6:46:9d:f7:34:4d:8a:5d:fb:
                    1f:07:bc:69:c0:63:ff:7f:ce:84:a8:ac:ea:49:55:
                    1f:75:4b:85:48:c5:1b:9f:b1:a5:52:63:92:89:84:
                    eb:44:d7:f1:74:82:8c:20:6d:eb:2d:5b:b3:1b:2f:
                    cb:7f:50:81:f9:37:68:83:d5:e0:92:5e:0f:c1:e6:
                    bd:7a:9c:9c:df:2a:45:2e:93:cf:8a:fa:be:70:bb:
                    4d:64:cc:d6:8a:90:8b:1a:be:c0:fb:e7:5c:f2:e9:
                    d7:28:78:10:08:7f:af:bc:87:f2:6a:67:02:22:8e:
                    94:55:cb:cb:da:81:3f:ca:af:31:f4:f9:78:10:2e:
                    06:90:fb:12:78:8f:ad:75:2a:b0:2a:1d:89:8f:6d:
                    f2:a5:e2:22:26:48:a7:2d:32:2e:b9:f9:08:23:57:
                    84:06:69:70:75:a2:9b:92:b8:c6:35:56:17:92:53:
                    fb:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:CE:50:24:6A:B4:57:F3:83:CF:28:93:BA:21:11:39:DE:6E:E2:FE
            X509v3 Authority Key Identifier:
                keyid:A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a316130303a3a2f34302d3430203d3e20323733313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:450:1a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         20:d2:1e:6a:53:37:ae:a1:b8:b2:12:39:da:c2:c8:04:b5:11:
         f8:c7:82:3a:fd:be:4a:b6:7b:70:34:ef:ac:31:fa:b8:52:26:
         8f:2f:34:83:a8:72:df:ef:2d:27:43:5c:c9:21:eb:e0:74:a0:
         29:c9:11:47:ef:17:22:3f:c3:a0:9e:6e:38:58:2c:f6:2b:92:
         0d:82:ce:58:67:33:40:3e:d2:14:d1:71:06:02:5c:d2:ea:18:
         c0:b2:c9:20:fa:c0:f0:95:43:cc:dc:13:34:4b:b1:8b:dc:09:
         fb:87:6e:b5:2e:4b:d3:ce:07:e6:19:c6:9c:d3:32:af:d5:1b:
         14:b4:10:1a:1b:c5:dc:6e:d6:37:a5:92:fc:54:50:91:6f:45:
         f2:b8:df:93:ca:8e:03:ed:16:9f:cc:a5:79:90:ba:50:aa:5c:
         22:bb:5b:f6:63:57:53:63:a8:07:46:5a:5d:44:34:07:94:03:
         a4:97:22:b5:a0:b5:6e:57:43:eb:14:03:ec:18:18:67:e6:bd:
         46:11:0f:e9:c0:df:e3:2f:3d:e4:36:89:bd:c4:82:aa:35:d0:
         12:ba:88:53:9c:cf:e1:6d:46:22:ad:7b:78:86:5f:96:6e:f9:
         ee:42:ca:30:4a:98:df:87:8d:65:e1:5b:da:f3:09:ef:d2:f0:
         82:ad:c6:33
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUOc2pjGXY4WZCYcCbFT4uSYEHSzcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE5OEZBODcxNzRCOEIwMEZCQTlGNjVEQ0YxQjYwNTQ3
NkE0QjlGRDAeFw0yNTExMjIwMDQ4MjRaFw0yNjExMjEwMDUzMjRaMDMxMTAvBgNV
BAMTKEY1Q0U1MDI0NkFCNDU3RjM4M0NGMjg5M0JBMjExMTM5REU2RUUyRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCEcDCebF5jkamE47pDUFyP0036
mtdABmnfTecC6jpSmRwXpd8wMHoZJ+qzQRrSM11ljhAfDaXZm3kpKfcerAROr4Nt
diXs5kF9TuRzg4mj1/ZGnfc0TYpd+x8HvGnAY/9/zoSorOpJVR91S4VIxRufsaVS
Y5KJhOtE1/F0gowgbestW7MbL8t/UIH5N2iD1eCSXg/B5r16nJzfKkUuk8+K+r5w
u01kzNaKkIsavsD751zy6dcoeBAIf6+8h/JqZwIijpRVy8vagT/KrzH0+XgQLgaQ
+xJ4j611KrAqHYmPbfKl4iImSKctMi65+QgjV4QGaXB1opuSuMY1VheSU/s5AgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQU9c5QJGq0V/ODzyiTuiEROd5u4v4wHwYDVR0j
BBgwFoAUoZj6hxdLiwD7qfZdzxtgVHakuf0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82RTI4NUE1NUI2RTlDMzU4RDAyNzc4NEE0QkFEOTc2RTlF
N0I4RjM3OEVGNUYzOUI4N0I3QjE3QTQzMDYzQTA0LzAvQTE5OEZBODcxNzRCOEIw
MEZCQTlGNjVEQ0YxQjYwNTQ3NkE0QjlGRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMTk4RkE4NzE3NEI4QjAwRkJB
OUY2NURDRjFCNjA1NDc2QTRCOUZELmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkUyODVBNTVCNkU5QzM1OEQwMjc3ODRBNEJBRDk3NkU5RTdCOEYzNzhF
RjVGMzlCODdCN0IxN0E0MzA2M0EwNC8wLzMyMzgzMDMzM2EzNDM1MzAzYTMxNjEz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNzMzMzEzMjMzLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAMEUBowDQYJKoZIhvcNAQELBQADggEBACDSHmpTN66huLISOdrCyAS1EfjH
gjr9vkq2e3A076wx+rhSJo8vNIOoct/vLSdDXMkh6+B0oCnJEUfvFyI/w6CebjhY
LPYrkg2CzlhnM0A+0hTRcQYCXNLqGMCyySD6wPCVQ8zcEzRLsYvcCfuHbrUuS9PO
B+YZxpzTMq/VGxS0EBobxdxu1jelkvxUUJFvRfK435PKjgPtFp/MpXmQulCqXCK7
W/ZjV1NjqAdGWl1ENAeUA6SXIrWgtW5XQ+sUA+wYGGfmvUYRD+nA3+MvPeQ2ib3E
gqo10BK6iFOcz+FtRiKte3iGX5Zu+e5CyjBKmN+HjWXhW9rzCe/S8IKtxjM=
-----END CERTIFICATE-----
Generated at Sun Dec 7 15:19:04 2025 by rpki-client