This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/323830333a653032303a3a2f33322d3332203d3e20323635373934.roa
File:                     323830333a653032303a3a2f33322d3332203d3e20323635373934.roa (raw, json)
Hash identifier:          qApVDJT+qIQROxDXDK2ciPAG+Rmy7hPtC+M8SoV0UUE=
Subject key identifier:   92:6D:CF:42:1E:EC:F5:B0:AA:0F:C1:97:36:4C:C2:0A:63:13:69:EC
Certificate issuer:       /CN=958AE74C7555B3A115DBFFC8840395CE219F59B5
Certificate serial:       35B8CD93B8FBB58913DB18A9E577A37121610974
Authority key identifier: 95:8A:E7:4C:75:55:B3:A1:15:DB:FF:C8:84:03:95:CE:21:9F:59:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/323830333a653032303a3a2f33322d3332203d3e20323635373934.roa
Signing time:             Tue 06 Jan 2026 19:18:55 +0000
ROA not before:           Tue 06 Jan 2026 19:13:55 +0000
ROA not after:            Tue 05 Jan 2027 19:18:55 +0000
asID:                     265794
IP address blocks:        2803:e020::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 07:52:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:b8:cd:93:b8:fb:b5:89:13:db:18:a9:e5:77:a3:71:21:61:09:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=958AE74C7555B3A115DBFFC8840395CE219F59B5
        Validity
            Not Before: Jan  6 19:13:55 2026 GMT
            Not After : Jan  5 19:18:55 2027 GMT
        Subject: CN=926DCF421EECF5B0AA0FC197364CC20A631369EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:18:91:2a:fe:97:50:92:e9:16:06:41:4e:4d:
                    c4:d1:a0:68:eb:0f:86:f6:1c:64:aa:4a:9f:31:45:
                    ad:03:b1:2b:a5:2c:09:db:1d:b2:bc:de:f2:c4:85:
                    aa:13:b0:3d:66:75:15:9c:c3:68:f4:29:c2:88:4a:
                    32:04:cf:fd:91:c8:51:b3:aa:a0:70:a5:4a:ae:71:
                    04:e5:a0:cb:32:77:35:62:c8:4e:75:00:42:cf:b8:
                    db:ee:73:8b:4f:71:40:af:10:93:53:4f:be:b2:cb:
                    66:a4:92:34:65:7d:1c:e6:60:e0:75:64:95:cb:7f:
                    c0:fb:1e:e7:66:c6:ba:47:85:b8:e6:18:b4:ba:93:
                    2e:66:d8:c7:14:70:e7:bb:60:36:4b:26:54:a5:f4:
                    7e:f3:e3:34:1e:b6:a5:8a:eb:17:c1:d1:57:c4:56:
                    2a:68:85:14:d2:73:57:3a:37:5e:ca:b5:2c:96:d2:
                    41:64:e8:53:6f:19:94:88:72:f6:cf:31:bf:b3:44:
                    31:85:3b:a8:e1:fe:5c:95:0c:d1:5a:d1:9d:9c:5d:
                    b5:30:12:00:5d:ae:cd:90:95:c4:f1:9b:51:03:d5:
                    62:dc:02:ac:83:77:57:6a:08:cd:78:8a:25:6e:5c:
                    6d:58:83:da:54:68:5a:a9:a2:39:d5:67:0a:00:a9:
                    b6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:6D:CF:42:1E:EC:F5:B0:AA:0F:C1:97:36:4C:C2:0A:63:13:69:EC
            X509v3 Authority Key Identifier:
                keyid:95:8A:E7:4C:75:55:B3:A1:15:DB:FF:C8:84:03:95:CE:21:9F:59:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/323830333a653032303a3a2f33322d3332203d3e20323635373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e020::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:2c:60:34:ce:41:26:a0:6b:bc:5f:7c:b5:05:a8:9d:bb:f6:
         42:d9:c1:05:06:6d:2a:b7:e7:da:6f:45:67:89:d7:a9:12:0b:
         d3:d9:2b:66:41:ea:9a:d2:e7:c3:3e:d9:e7:d5:35:0d:06:af:
         c8:04:b4:ba:41:6c:3f:c2:a2:7e:90:df:a8:b1:a9:f3:ea:a5:
         f8:b4:56:41:b0:1e:89:24:88:bc:3e:27:7d:a2:a3:1c:69:b6:
         ac:cd:b1:d9:e7:8a:ac:e0:40:fa:5e:23:8c:93:9f:bb:34:02:
         3f:20:94:36:8d:2a:4e:26:b4:b8:97:b7:63:91:fd:d0:09:66:
         0d:1c:a2:70:3a:b4:9f:cb:de:9c:a0:07:6f:27:3c:41:82:ba:
         b4:2d:c9:b7:33:2a:61:53:23:50:d7:86:46:1e:75:70:c7:67:
         ae:be:18:02:ae:15:c3:02:7c:2c:c8:f1:b1:04:f7:b6:23:0a:
         dd:23:4f:91:e6:e7:64:0f:1f:da:f2:56:85:f1:a8:04:f7:47:
         1d:6b:cd:43:4c:90:fb:fd:84:cf:31:2a:d4:be:50:c3:92:07:
         1f:61:a0:d5:65:fb:8d:2b:3e:12:2d:44:b6:1d:72:4d:ee:f0:
         2a:d4:79:11:ab:90:a2:be:9f:98:c3:73:d5:54:95:30:0b:be:
         9a:3f:fb:39
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUNbjNk7j7tYkT2xip5XejcSFhCXQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTU4QUU3NEM3NTU1QjNBMTE1REJGRkM4ODQwMzk1Q0Uy
MTlGNTlCNTAeFw0yNjAxMDYxOTEzNTVaFw0yNzAxMDUxOTE4NTVaMDMxMTAvBgNV
BAMTKDkyNkRDRjQyMUVFQ0Y1QjBBQTBGQzE5NzM2NENDMjBBNjMxMzY5RUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnGJEq/pdQkukWBkFOTcTRoGjr
D4b2HGSqSp8xRa0DsSulLAnbHbK83vLEhaoTsD1mdRWcw2j0KcKISjIEz/2RyFGz
qqBwpUqucQTloMsydzViyE51AELPuNvuc4tPcUCvEJNTT76yy2akkjRlfRzmYOB1
ZJXLf8D7HudmxrpHhbjmGLS6ky5m2McUcOe7YDZLJlSl9H7z4zQetqWK6xfB0VfE
VipohRTSc1c6N17KtSyW0kFk6FNvGZSIcvbPMb+zRDGFO6jh/lyVDNFa0Z2cXbUw
EgBdrs2QlcTxm1ED1WLcAqyDd1dqCM14iiVuXG1Yg9pUaFqpojnVZwoAqbZZAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUkm3PQh7s9bCqD8GXNkzCCmMTaewwHwYDVR0j
BBgwFoAUlYrnTHVVs6EV2//IhAOVziGfWbUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BRTEzNTA0MDlCRTAzMENBQkYyOENFREUwOEQzQTI3OTlD
MzYyOEYyNDNGMDA4Q0UzNzk0Nzc4RDMyMENBODMyLzAvOTU4QUU3NEM3NTU1QjNB
MTE1REJGRkM4ODQwMzk1Q0UyMTlGNTlCNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NThBRTc0Qzc1NTVCM0ExMTVE
QkZGQzg4NDAzOTVDRTIxOUY1OUI1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUUxMzUwNDA5QkUwMzBDQUJGMjhDRURFMDhEM0EyNzk5QzM2MjhGMjQz
RjAwOENFMzc5NDc3OEQzMjBDQTgzMi8wLzMyMzgzMDMzM2E2NTMwMzIzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNTM3MzkzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD4CAw
DQYJKoZIhvcNAQELBQADggEBAEssYDTOQSaga7xffLUFqJ279kLZwQUGbSq359pv
RWeJ16kSC9PZK2ZB6prS58M+2efVNQ0Gr8gEtLpBbD/Con6Q36ixqfPqpfi0VkGw
HokkiLw+J32ioxxptqzNsdnniqzgQPpeI4yTn7s0Aj8glDaNKk4mtLiXt2OR/dAJ
Zg0conA6tJ/L3pygB28nPEGCurQtybczKmFTI1DXhkYedXDHZ66+GAKuFcMCfCzI
8bEE97YjCt0jT5Hm52QPH9ryVoXxqAT3Rx1rzUNMkPv9hM8xKtS+UMOSBx9hoNVl
+40rPhItRLYdck3u8CrUeRGrkKK+n5jDc9VUlTALvpo/+zk=
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:56 2026 by rpki-client