This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D480B8677CF715BF17224C10EC07A310FFBD6D900314B8F0CDC5E62C1097B75B/0/323830333a396438303a3a2f33322d3438203d3e203236363137.roa
File:                     323830333a396438303a3a2f33322d3438203d3e203236363137.roa (raw, json)
Hash identifier:          EuNsAk6ZgFJP+d7gCCV3GSys7jKaFnVTd3WbsPNOeFw=
Subject key identifier:   B9:FF:6F:D6:E1:1C:AB:13:88:C0:DC:2B:5C:77:DE:55:46:0D:60:AB
Certificate issuer:       /CN=5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5
Certificate serial:       7572F500CC53EB10FB00CB041EFB93ADDAD4D395
Authority key identifier: 5B:5D:29:B9:FD:18:B3:30:10:11:AB:FD:EC:89:A5:E5:56:A2:DD:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D480B8677CF715BF17224C10EC07A310FFBD6D900314B8F0CDC5E62C1097B75B/0/323830333a396438303a3a2f33322d3438203d3e203236363137.roa
Signing time:             Tue 06 Jan 2026 19:40:23 +0000
ROA not before:           Tue 06 Jan 2026 19:35:23 +0000
ROA not after:            Tue 05 Jan 2027 19:40:23 +0000
asID:                     26617
IP address blocks:        2803:9d80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D480B8677CF715BF17224C10EC07A310FFBD6D900314B8F0CDC5E62C1097B75B/0/5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D480B8677CF715BF17224C10EC07A310FFBD6D900314B8F0CDC5E62C1097B75B/0/5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 01:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:72:f5:00:cc:53:eb:10:fb:00:cb:04:1e:fb:93:ad:da:d4:d3:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5
        Validity
            Not Before: Jan  6 19:35:23 2026 GMT
            Not After : Jan  5 19:40:23 2027 GMT
        Subject: CN=B9FF6FD6E11CAB1388C0DC2B5C77DE55460D60AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0f:0c:1a:c6:fa:45:d7:5e:1c:a2:98:a6:5b:
                    90:c0:01:e1:0e:a9:22:60:9d:ae:42:5d:f8:f8:89:
                    e4:a0:6c:98:a1:0e:d0:61:d5:0c:b6:b3:41:ef:12:
                    c3:9c:25:3f:91:68:1e:73:31:3c:44:00:b9:d0:86:
                    5c:5e:40:aa:e8:68:22:37:e8:57:a9:32:d3:49:bb:
                    16:2f:d1:fc:d8:28:41:81:82:15:4e:97:da:f1:44:
                    8b:70:8b:00:fb:a7:95:0f:84:1c:4c:34:14:96:de:
                    fd:88:cc:52:a7:c4:8d:6f:9a:e6:6f:e1:24:23:12:
                    59:4c:17:37:5d:8e:f4:e4:bc:6d:28:fe:18:05:14:
                    5c:42:d3:b1:21:54:63:41:ce:97:fe:44:69:1f:6f:
                    6c:f8:51:33:83:52:98:e1:53:86:a0:54:f6:57:e4:
                    82:0c:cb:fe:af:92:6b:dd:64:8e:52:04:a3:21:fc:
                    39:7d:71:1c:eb:20:00:27:ae:00:2e:1c:38:2f:3e:
                    ea:f9:5f:46:56:07:6e:d1:d0:19:9f:ab:ad:5b:38:
                    d6:52:42:a4:9d:a0:8b:a3:0d:c0:5a:ae:75:ad:b8:
                    ac:52:6d:53:fb:f2:88:8a:93:25:f0:86:ab:d1:c2:
                    4c:48:9f:4c:81:3b:b2:91:95:eb:74:72:fc:f1:76:
                    20:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:FF:6F:D6:E1:1C:AB:13:88:C0:DC:2B:5C:77:DE:55:46:0D:60:AB
            X509v3 Authority Key Identifier:
                keyid:5B:5D:29:B9:FD:18:B3:30:10:11:AB:FD:EC:89:A5:E5:56:A2:DD:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D480B8677CF715BF17224C10EC07A310FFBD6D900314B8F0CDC5E62C1097B75B/0/5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D480B8677CF715BF17224C10EC07A310FFBD6D900314B8F0CDC5E62C1097B75B/0/323830333a396438303a3a2f33322d3438203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9d80::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:55:f4:f5:23:38:07:d8:a2:73:58:dd:eb:da:ca:c3:69:7e:
         20:fd:5c:46:6a:33:b0:1a:88:89:29:fa:c6:a6:17:08:1d:67:
         e7:65:5e:c1:b3:5d:86:32:5a:2b:77:50:0f:1f:09:6c:fa:38:
         8b:ac:fa:37:83:95:eb:03:9c:dc:83:4c:a1:07:c9:9d:b5:81:
         19:38:0f:71:19:0d:21:53:06:83:56:b1:a4:ee:85:8a:d0:06:
         04:30:f4:20:db:25:7a:6a:62:b7:3b:d2:a2:00:e1:35:86:b5:
         0f:cb:32:6b:e8:8f:26:f5:6f:56:db:98:69:a1:85:47:e1:2d:
         2b:a0:60:7e:ee:71:c3:28:75:52:6e:8b:0e:c8:ad:65:8c:1b:
         3f:44:89:20:1a:cf:ec:2b:14:58:e6:9f:e1:41:2f:bb:d7:3b:
         23:f8:69:1d:0c:f1:b7:10:df:e1:95:34:c7:e0:d3:2b:b6:28:
         20:e3:1c:a8:95:a0:5e:95:41:4c:15:f5:5f:d8:23:99:0c:e6:
         55:af:a8:06:88:b0:fe:fa:5b:2c:2d:73:d5:8d:93:3f:83:a6:
         70:04:2f:4c:34:83:cc:5e:b7:85:52:55:62:33:55:6a:df:3f:
         d0:ad:b9:b2:fd:9b:7f:9a:f3:20:a4:bf:1e:99:32:d1:65:4c:
         f7:03:e2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:30:24 2026 by rpki-client