This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a3a2f33322d3336203d3e20323633373632.roa
File:                     323830333a353138303a3a2f33322d3336203d3e20323633373632.roa (raw, json)
Hash identifier:          635xXokYusGJ1srJht5nApXTA5XgxB+R1nj7pyEO5KE=
Subject key identifier:   5D:42:F7:42:6C:AC:83:A2:83:FD:92:8F:00:6B:C7:B3:F0:1F:1E:54
Certificate issuer:       /CN=F560245552ABA4019972F9F5D1842354FC2CDB48
Certificate serial:       2C88AF549F5AE5FC229B3727F321E8E8DBAFDA53
Authority key identifier: F5:60:24:55:52:AB:A4:01:99:72:F9:F5:D1:84:23:54:FC:2C:DB:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a3a2f33322d3336203d3e20323633373632.roa
Signing time:             Tue 06 Jan 2026 19:44:46 +0000
ROA not before:           Tue 06 Jan 2026 19:39:46 +0000
ROA not after:            Tue 05 Jan 2027 19:44:46 +0000
asID:                     263762
IP address blocks:        2803:5180::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:88:af:54:9f:5a:e5:fc:22:9b:37:27:f3:21:e8:e8:db:af:da:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F560245552ABA4019972F9F5D1842354FC2CDB48
        Validity
            Not Before: Jan  6 19:39:46 2026 GMT
            Not After : Jan  5 19:44:46 2027 GMT
        Subject: CN=5D42F7426CAC83A283FD928F006BC7B3F01F1E54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c3:18:2f:14:71:4a:ae:60:05:93:be:c8:8b:
                    0f:2c:e9:83:c1:1d:d4:59:99:bb:81:11:22:bf:c4:
                    f8:7a:37:86:ae:a0:b2:82:f4:81:0d:20:de:db:0f:
                    03:6a:e1:f0:75:0a:d9:92:68:c7:74:31:03:3a:39:
                    28:5a:99:cf:42:a9:f5:ef:fa:2a:19:47:d2:83:5f:
                    7f:e4:35:4c:a3:2b:91:b3:25:3a:54:ca:d3:f9:32:
                    13:45:03:f0:16:f2:2c:06:4b:5a:7d:94:1d:d6:c4:
                    07:64:f7:dd:0e:c6:97:9f:2e:42:e3:76:8b:33:8d:
                    4a:15:ac:fd:31:2e:0e:54:99:a8:1e:4a:7f:70:60:
                    b5:71:c6:ff:0b:63:e5:3d:07:97:f2:42:2b:cc:b2:
                    6a:3f:fe:2f:95:b2:16:3b:bd:c3:b8:a2:17:7e:c7:
                    4b:4d:ea:25:b3:b3:4c:db:ee:ff:27:a7:ef:6c:eb:
                    51:38:47:f5:52:82:be:9e:b5:82:86:a3:ae:fa:42:
                    24:00:c2:67:d6:39:ff:47:07:67:8a:b6:32:fd:ea:
                    d9:36:34:cc:68:76:db:9e:46:8d:22:d7:32:34:14:
                    d4:70:1a:ee:0a:8a:bc:c9:40:71:91:6f:ef:af:55:
                    8c:65:be:96:39:9e:72:3c:db:c4:7a:b6:35:b3:89:
                    94:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:42:F7:42:6C:AC:83:A2:83:FD:92:8F:00:6B:C7:B3:F0:1F:1E:54
            X509v3 Authority Key Identifier:
                keyid:F5:60:24:55:52:AB:A4:01:99:72:F9:F5:D1:84:23:54:FC:2C:DB:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a3a2f33322d3336203d3e20323633373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5180::/32

    Signature Algorithm: sha256WithRSAEncryption
         cd:ce:9e:2e:28:64:b8:82:2f:a4:49:6e:2d:37:ca:ed:f6:62:
         cd:05:90:e5:ab:d2:21:99:e1:f2:b1:7a:27:a4:d7:c5:73:0b:
         2e:17:33:66:f6:64:84:dd:7c:eb:a1:79:c5:2f:15:26:87:c9:
         95:1e:6f:f9:2d:7d:a4:62:83:12:fc:a5:30:b2:f0:32:96:b4:
         68:d3:ed:c3:2a:18:2d:f9:dc:03:d0:0c:af:91:f0:02:37:e3:
         21:f6:d7:7d:33:dc:a2:af:71:c9:3d:11:35:dc:3b:11:9e:a8:
         06:88:b6:8d:c4:77:ec:23:02:da:58:67:e9:85:02:7d:e8:c3:
         bc:ad:af:53:84:0d:b6:c3:e1:84:ca:ab:94:ad:5c:a9:20:7e:
         4c:aa:85:db:47:c1:0b:d6:c4:55:7b:07:b1:47:c2:bb:56:7d:
         2f:b1:92:49:f4:0b:b6:d0:8e:1c:bd:12:3c:13:b5:03:25:0f:
         95:1e:49:f4:72:be:ea:e8:50:be:8f:62:93:8c:ac:3f:8c:66:
         db:d8:fb:14:b8:89:ce:40:40:53:83:8a:d3:ab:45:12:e7:c6:
         6a:eb:40:6b:f8:48:cb:d3:83:79:ad:0d:7b:ab:03:ec:25:d2:
         85:1e:ec:f7:6c:0e:ad:33:e2:f6:54:de:d3:5d:fb:96:86:33:
         a1:fc:55:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:26:37 2026 by rpki-client