This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87F0ED2128675276C08144AE1A9B9B3882E0E3D6E29C5898C6AF9F98852AB1FC/0/323830333a356131303a3a2f33322d3438203d3e20323731393330.roa
File:                     323830333a356131303a3a2f33322d3438203d3e20323731393330.roa (raw, json)
Hash identifier:          IoNqJXOTA1CuYscQY6xeSw5uXs8935Tl1x285YpY/aY=
Subject key identifier:   D1:23:6A:D9:4B:3A:3C:06:49:69:AA:0A:CF:50:81:7C:60:70:A5:E1
Certificate issuer:       /CN=E93FA671B6BB58186AC92380F285964D21BE8982
Certificate serial:       357768CF651EEC017AEBCBEC2345C3E38797E40F
Authority key identifier: E9:3F:A6:71:B6:BB:58:18:6A:C9:23:80:F2:85:96:4D:21:BE:89:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E93FA671B6BB58186AC92380F285964D21BE8982.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/87F0ED2128675276C08144AE1A9B9B3882E0E3D6E29C5898C6AF9F98852AB1FC/0/323830333a356131303a3a2f33322d3438203d3e20323731393330.roa
Signing time:             Tue 06 Jan 2026 20:56:13 +0000
ROA not before:           Tue 06 Jan 2026 20:51:13 +0000
ROA not after:            Tue 05 Jan 2027 20:56:13 +0000
asID:                     271930
IP address blocks:        2803:5a10::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/87F0ED2128675276C08144AE1A9B9B3882E0E3D6E29C5898C6AF9F98852AB1FC/0/E93FA671B6BB58186AC92380F285964D21BE8982.crl
                          rsync://repository.lacnic.net/rpki/lacnic/87F0ED2128675276C08144AE1A9B9B3882E0E3D6E29C5898C6AF9F98852AB1FC/0/E93FA671B6BB58186AC92380F285964D21BE8982.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E93FA671B6BB58186AC92380F285964D21BE8982.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:77:68:cf:65:1e:ec:01:7a:eb:cb:ec:23:45:c3:e3:87:97:e4:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E93FA671B6BB58186AC92380F285964D21BE8982
        Validity
            Not Before: Jan  6 20:51:13 2026 GMT
            Not After : Jan  5 20:56:13 2027 GMT
        Subject: CN=D1236AD94B3A3C064969AA0ACF50817C6070A5E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d3:61:89:82:8b:91:39:e6:98:52:ac:a7:03:
                    42:55:df:8b:3b:eb:f2:21:8a:e8:d7:df:35:b2:81:
                    09:8e:7c:ac:fe:a6:7a:2a:a4:c2:7e:1d:bd:61:62:
                    40:ea:bc:e0:86:97:05:93:84:23:0f:8d:36:96:25:
                    e5:e0:03:82:6a:31:70:06:09:c8:a1:7f:2f:15:01:
                    42:72:dd:5f:bd:f1:3e:7f:c1:c7:c3:54:01:3f:06:
                    5c:83:01:49:63:03:f6:2b:47:00:48:db:bc:c3:d9:
                    3f:57:0a:c2:8f:79:5c:86:ff:7a:73:fa:e9:52:8b:
                    ee:f9:e5:be:35:7e:24:cb:da:c4:a9:36:73:9c:81:
                    ed:63:c5:a4:16:e8:5a:e3:f6:13:10:b0:de:d0:87:
                    3c:0e:a8:76:65:86:5c:26:32:45:3c:34:21:8b:90:
                    59:2d:c8:47:7f:fd:80:be:4f:f4:50:a9:94:25:c0:
                    9f:4a:7a:1e:09:5b:1e:59:cd:7a:de:c6:6a:3e:98:
                    5b:79:db:7f:9f:6a:bd:fe:2a:5a:8c:b9:74:b0:e8:
                    94:ec:07:f7:40:c4:5b:12:12:74:62:3a:60:26:2a:
                    51:60:7e:a3:b5:3f:33:24:fd:15:25:22:92:f6:05:
                    39:9f:29:4a:5c:ce:16:d0:50:41:38:c6:9c:44:be:
                    eb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:23:6A:D9:4B:3A:3C:06:49:69:AA:0A:CF:50:81:7C:60:70:A5:E1
            X509v3 Authority Key Identifier:
                keyid:E9:3F:A6:71:B6:BB:58:18:6A:C9:23:80:F2:85:96:4D:21:BE:89:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/87F0ED2128675276C08144AE1A9B9B3882E0E3D6E29C5898C6AF9F98852AB1FC/0/E93FA671B6BB58186AC92380F285964D21BE8982.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E93FA671B6BB58186AC92380F285964D21BE8982.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87F0ED2128675276C08144AE1A9B9B3882E0E3D6E29C5898C6AF9F98852AB1FC/0/323830333a356131303a3a2f33322d3438203d3e20323731393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5a10::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:eb:d0:4b:48:b0:90:da:7e:2a:6e:63:a0:6e:4f:0a:ba:62:
         c9:8e:d3:dd:b6:e2:34:71:b3:26:20:22:da:e4:ac:0d:a7:8a:
         5a:26:07:e6:8d:2e:85:94:4e:0b:3c:bf:7d:fe:ee:71:53:27:
         43:1d:25:4c:1d:3d:0d:67:18:d5:c8:77:48:a9:88:8d:cd:19:
         18:30:c8:5e:f1:10:c9:d1:3b:2d:e7:37:27:4a:b9:e1:b0:2e:
         bc:09:f6:51:65:7e:cb:96:ba:f0:64:82:db:a1:7e:fa:ac:14:
         c5:ba:09:0b:3b:79:ab:cd:3f:93:d9:21:ae:5f:c9:15:d3:6c:
         bc:9a:19:80:c2:c3:38:e3:9b:5c:fc:41:71:4e:d1:bf:17:0e:
         14:4a:fa:33:59:05:8c:e5:e8:84:dd:b6:00:90:2c:b1:ff:37:
         0d:5e:57:d8:f5:10:94:52:9f:ff:d3:23:0f:2e:9b:48:18:c2:
         b7:a3:f1:3a:94:7f:fa:ad:cc:12:a4:de:ef:3f:8e:ed:47:c5:
         51:9c:4a:10:43:46:3f:63:23:99:90:64:36:bc:f9:74:c9:c7:
         3d:39:33:91:11:bb:20:76:ef:d7:e8:7a:88:81:d2:b3:fe:76:
         f3:24:76:22:d6:9f:ad:13:20:bf:90:d4:ab:58:7f:42:90:cb:
         c0:9f:cf:dd
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUNXdoz2Ue7AF668vsI0XD44eX5A8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTkzRkE2NzFCNkJCNTgxODZBQzkyMzgwRjI4NTk2NEQy
MUJFODk4MjAeFw0yNjAxMDYyMDUxMTNaFw0yNzAxMDUyMDU2MTNaMDMxMTAvBgNV
BAMTKEQxMjM2QUQ5NEIzQTNDMDY0OTY5QUEwQUNGNTA4MTdDNjA3MEE1RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg02GJgouROeaYUqynA0JV34s7
6/IhiujX3zWygQmOfKz+pnoqpMJ+Hb1hYkDqvOCGlwWThCMPjTaWJeXgA4JqMXAG
Ccihfy8VAUJy3V+98T5/wcfDVAE/BlyDAUljA/YrRwBI27zD2T9XCsKPeVyG/3pz
+ulSi+755b41fiTL2sSpNnOcge1jxaQW6Frj9hMQsN7QhzwOqHZlhlwmMkU8NCGL
kFktyEd//YC+T/RQqZQlwJ9Keh4JWx5ZzXrexmo+mFt523+far3+KlqMuXSw6JTs
B/dAxFsSEnRiOmAmKlFgfqO1PzMk/RUlIpL2BTmfKUpczhbQUEE4xpxEvuutAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU0SNq2Us6PAZJaaoKz1CBfGBwpeEwHwYDVR0j
BBgwFoAU6T+mcba7WBhqySOA8oWWTSG+iYIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84N0YwRUQyMTI4Njc1Mjc2QzA4MTQ0QUUxQTlCOUIzODgy
RTBFM0Q2RTI5QzU4OThDNkFGOUY5ODg1MkFCMUZDLzAvRTkzRkE2NzFCNkJCNTgx
ODZBQzkyMzgwRjI4NTk2NEQyMUJFODk4Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FOTNGQTY3MUI2QkI1ODE4NkFD
OTIzODBGMjg1OTY0RDIxQkU4OTgyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODdGMEVEMjEyODY3NTI3NkMwODE0NEFFMUE5QjlCMzg4MkUwRTNENkUy
OUM1ODk4QzZBRjlGOTg4NTJBQjFGQy8wLzMyMzgzMDMzM2EzNTYxMzEzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMTM5MzMzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDWhAw
DQYJKoZIhvcNAQELBQADggEBACfr0EtIsJDafipuY6BuTwq6YsmO09224jRxsyYg
ItrkrA2nilomB+aNLoWUTgs8v33+7nFTJ0MdJUwdPQ1nGNXId0ipiI3NGRgwyF7x
EMnROy3nNydKueGwLrwJ9lFlfsuWuvBkgtuhfvqsFMW6CQs7eavNP5PZIa5fyRXT
bLyaGYDCwzjjm1z8QXFO0b8XDhRK+jNZBYzl6ITdtgCQLLH/Nw1eV9j1EJRSn//T
Iw8um0gYwrej8TqUf/qtzBKk3u8/ju1HxVGcShBDRj9jI5mQZDa8+XTJxz05M5ER
uyB279foeoiB0rP+dvMkdiLWn60TIL+Q1KtYf0KQy8Cfz90=
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:04:42 2026 by rpki-client