This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/323830333a316135303a34303a3a2f34322d3432203d3e20323639393830.roa
File:                     323830333a316135303a34303a3a2f34322d3432203d3e20323639393830.roa (raw, json)
Hash identifier:          Sl4AIG0G+ibcqcZ98EgUcwKTZIhKVRosFcc3nNoP1lk=
Subject key identifier:   2B:2E:E3:C3:B9:B7:65:A6:B2:EB:A5:91:89:DE:77:B6:8A:3B:B9:B3
Certificate issuer:       /CN=B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C
Certificate serial:       0A5B3040E548294B460ADEBB80C33D7786FA76FF
Authority key identifier: B1:9D:CD:B6:4E:50:6E:AC:5C:80:E9:A6:A0:E2:2F:0D:F2:5D:72:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/323830333a316135303a34303a3a2f34322d3432203d3e20323639393830.roa
Signing time:             Mon 29 Dec 2025 21:05:00 +0000
ROA not before:           Mon 29 Dec 2025 21:00:00 +0000
ROA not after:            Mon 28 Dec 2026 21:05:00 +0000
asID:                     269980
IP address blocks:        2803:1a50:40::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 10:39:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:5b:30:40:e5:48:29:4b:46:0a:de:bb:80:c3:3d:77:86:fa:76:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C
        Validity
            Not Before: Dec 29 21:00:00 2025 GMT
            Not After : Dec 28 21:05:00 2026 GMT
        Subject: CN=2B2EE3C3B9B765A6B2EBA59189DE77B68A3BB9B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8a:99:e8:95:ec:63:6b:34:c4:be:ca:1e:4c:
                    46:d7:b2:3b:6b:8f:c7:8a:cf:b4:6e:c3:ab:6e:ec:
                    d8:0b:b4:3f:96:ec:d6:e5:49:2e:17:f1:24:4d:32:
                    3a:3d:42:b8:56:8b:69:bf:01:7e:eb:ca:c9:ea:9d:
                    d5:5a:2b:f3:07:29:60:fc:74:76:6d:9c:5a:ee:b6:
                    56:14:41:c3:9e:4b:77:63:c9:1e:a8:9d:3b:a8:50:
                    5b:18:fb:b6:05:7b:dd:1d:37:80:d4:a2:69:01:38:
                    ef:e0:cb:36:b5:a7:b1:4c:00:f3:46:19:9b:60:00:
                    5e:24:b5:3c:ae:c9:b0:77:4f:46:03:7f:08:43:0e:
                    bb:f5:5f:d0:3e:a0:08:c8:db:ce:13:a4:7d:1f:27:
                    ed:fd:be:90:bd:d3:3e:6b:cd:02:e1:85:5b:e9:0a:
                    b6:83:5e:c4:4c:50:f2:2b:12:81:99:ca:91:11:ff:
                    7d:df:c5:bd:79:6d:cf:3b:ce:62:99:13:ce:33:96:
                    c6:65:67:17:98:19:71:18:5f:e1:a3:e4:e9:ed:57:
                    1e:59:27:18:38:08:fc:4e:e4:6f:48:af:d1:df:6f:
                    4e:27:0c:de:a3:90:8b:f1:ab:60:a9:f7:b7:b1:a9:
                    1b:d5:77:ff:f1:a9:85:6c:11:27:4f:66:ba:91:f4:
                    7f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:2E:E3:C3:B9:B7:65:A6:B2:EB:A5:91:89:DE:77:B6:8A:3B:B9:B3
            X509v3 Authority Key Identifier:
                keyid:B1:9D:CD:B6:4E:50:6E:AC:5C:80:E9:A6:A0:E2:2F:0D:F2:5D:72:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/323830333a316135303a34303a3a2f34322d3432203d3e20323639393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1a50:40::/42

    Signature Algorithm: sha256WithRSAEncryption
         8b:2e:eb:9c:56:04:73:6c:09:ff:d9:d9:a3:4b:25:fd:87:c3:
         64:33:15:c7:07:52:15:56:d5:e0:0c:b7:c4:7a:6e:17:04:71:
         d9:9f:95:fe:11:0b:e0:db:7b:71:96:7a:ed:f3:df:f1:1b:b8:
         2d:5a:08:6d:4a:d4:be:c5:bf:fb:6c:7b:a5:ed:f0:0e:5f:8e:
         e3:20:e2:61:69:d2:51:9a:92:9e:8a:b0:f9:00:8a:77:3e:3b:
         a7:58:39:3e:4b:49:cc:45:c5:f3:8c:fd:09:1f:27:d5:22:e4:
         72:e6:cb:f4:c9:f5:a1:ad:e1:38:0d:a1:82:35:a3:3c:5f:b6:
         2c:56:b5:b3:70:b2:85:e1:3b:60:6b:13:5c:8d:48:65:0f:ac:
         f5:80:2a:3f:39:07:58:f0:d0:d6:67:81:9c:8f:b6:47:54:85:
         ae:64:12:f3:fa:7f:a7:26:83:e4:e1:73:72:bb:13:1a:6a:cf:
         1a:e3:4d:06:77:a9:45:6d:7b:ce:f5:97:2e:c8:7d:2c:f4:cd:
         6b:25:0c:40:19:e1:a3:c2:f6:f7:66:3a:f3:48:65:1e:57:44:
         11:d5:aa:08:1a:c5:38:d3:fa:8a:04:9d:88:42:1b:c5:01:e6:
         58:c8:2e:b1:f5:71:7f:ed:72:e9:f2:63:f3:a9:95:05:91:ae:
         f9:5f:7e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:15:42 2026 by rpki-client