This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/323830333a316135303a34303a3a2f34322d3432203d3e20323734303539.roa
File:                     323830333a316135303a34303a3a2f34322d3432203d3e20323734303539.roa (raw, json)
Hash identifier:          FN1Mh3w6vw6DLEDkqb556nGPRfHyWqId/8urJZnH8DU=
Subject key identifier:   A1:20:93:94:4E:4F:E8:51:60:D2:A6:B2:A5:81:92:7F:A9:2A:61:9C
Certificate issuer:       /CN=B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C
Certificate serial:       0C0E406E0616D483C1F273DA1A16C41D5DE30EE0
Authority key identifier: B1:9D:CD:B6:4E:50:6E:AC:5C:80:E9:A6:A0:E2:2F:0D:F2:5D:72:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/323830333a316135303a34303a3a2f34322d3432203d3e20323734303539.roa
Signing time:             Mon 29 Dec 2025 21:00:00 +0000
ROA not before:           Mon 29 Dec 2025 20:55:00 +0000
ROA not after:            Mon 28 Dec 2026 21:00:00 +0000
asID:                     274059
IP address blocks:        2803:1a50:40::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 10:39:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:0e:40:6e:06:16:d4:83:c1:f2:73:da:1a:16:c4:1d:5d:e3:0e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C
        Validity
            Not Before: Dec 29 20:55:00 2025 GMT
            Not After : Dec 28 21:00:00 2026 GMT
        Subject: CN=A12093944E4FE85160D2A6B2A581927FA92A619C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ae:f3:5f:a0:38:d4:39:9d:16:a3:cf:9e:a0:
                    06:79:bc:36:0a:0c:27:1f:d2:a1:5c:89:cf:d5:5a:
                    e5:aa:3f:fa:8e:a6:96:d0:ef:85:93:8a:9f:e4:20:
                    f9:3a:64:1b:35:8c:7a:9c:5a:84:bb:a1:83:16:42:
                    5a:cb:3b:fe:1d:14:68:64:04:f7:a6:35:6b:97:4d:
                    4b:93:a2:14:3c:47:9a:3f:15:69:9b:6c:2e:3b:0f:
                    76:65:bd:5b:25:ca:a9:77:7a:d3:0a:d5:45:d1:44:
                    af:82:3a:cd:9e:eb:25:e6:f6:5e:3e:b5:cd:2f:7a:
                    44:33:e6:47:8f:de:f1:6f:6d:a4:ff:21:4a:5e:56:
                    bb:cb:22:2a:f2:81:65:21:a7:91:f7:1c:4a:17:08:
                    56:07:08:b7:5d:ba:be:af:28:b8:69:c3:e1:55:0c:
                    73:07:cb:2f:77:8c:a3:16:d4:8d:68:23:db:8f:9b:
                    ca:6f:8e:8c:41:c6:3c:b4:63:c7:a9:80:b9:72:ce:
                    ca:4e:71:b2:ce:d7:e1:2d:3b:a2:67:31:42:80:d2:
                    6c:ce:72:37:cf:46:f8:63:99:90:c0:47:02:2a:aa:
                    33:e9:ac:87:77:b0:a3:ae:ba:39:9a:47:76:b0:71:
                    82:4a:98:b5:45:27:ee:67:13:8c:75:ef:c7:95:4f:
                    20:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:20:93:94:4E:4F:E8:51:60:D2:A6:B2:A5:81:92:7F:A9:2A:61:9C
            X509v3 Authority Key Identifier:
                keyid:B1:9D:CD:B6:4E:50:6E:AC:5C:80:E9:A6:A0:E2:2F:0D:F2:5D:72:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/323830333a316135303a34303a3a2f34322d3432203d3e20323734303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1a50:40::/42

    Signature Algorithm: sha256WithRSAEncryption
         8c:f7:d1:47:6e:c3:4a:88:79:a6:7b:77:04:6d:2c:26:e3:2e:
         a8:00:1a:98:4e:1f:6d:82:61:31:56:97:a9:7d:a6:9f:c6:d1:
         07:f8:e8:fc:30:c8:35:01:36:b8:31:9b:d9:d9:11:f2:ed:50:
         78:f7:ac:5a:d6:dd:8b:17:22:75:45:28:11:aa:e7:da:62:d2:
         aa:aa:9e:b9:16:15:70:14:de:21:89:38:f2:95:76:f3:63:c7:
         bc:e9:92:05:cb:5e:8b:00:74:a4:3f:d7:c2:05:ca:33:2e:52:
         aa:c7:2f:53:28:df:c4:f3:82:16:bd:a8:20:05:4c:c5:69:46:
         15:5c:5d:8b:3e:b1:5d:02:11:a2:f4:69:33:60:d5:ca:b6:c4:
         b7:8a:26:7d:0e:98:78:39:64:4c:2e:1d:5c:7c:37:6d:b7:51:
         fe:32:07:38:5f:6c:a9:70:49:95:c5:7a:c3:37:82:60:e0:05:
         c9:e7:97:81:d7:58:10:03:d4:ec:41:b4:3d:73:3d:cf:8f:5b:
         c7:92:c5:47:6e:c4:ef:10:ee:0b:a5:5e:44:1d:8f:e3:76:4e:
         a2:34:13:04:46:f4:a4:61:67:c3:b9:be:28:d5:11:4c:57:8b:
         19:7e:a3:b6:d8:27:bf:7a:bb:45:8f:b2:ca:e7:f0:5a:e7:ba:
         e5:a5:66:ec
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUDA5AbgYW1IPB8nPaGhbEHV3jDuAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjE5RENEQjY0RTUwNkVBQzVDODBFOUE2QTBFMjJGMERG
MjVENzIzQzAeFw0yNTEyMjkyMDU1MDBaFw0yNjEyMjgyMTAwMDBaMDMxMTAvBgNV
BAMTKEExMjA5Mzk0NEU0RkU4NTE2MEQyQTZCMkE1ODE5MjdGQTkyQTYxOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCirvNfoDjUOZ0Wo8+eoAZ5vDYK
DCcf0qFcic/VWuWqP/qOppbQ74WTip/kIPk6ZBs1jHqcWoS7oYMWQlrLO/4dFGhk
BPemNWuXTUuTohQ8R5o/FWmbbC47D3ZlvVslyql3etMK1UXRRK+COs2e6yXm9l4+
tc0vekQz5keP3vFvbaT/IUpeVrvLIirygWUhp5H3HEoXCFYHCLddur6vKLhpw+FV
DHMHyy93jKMW1I1oI9uPm8pvjoxBxjy0Y8epgLlyzspOcbLO1+EtO6JnMUKA0mzO
cjfPRvhjmZDARwIqqjPprId3sKOuujmaR3awcYJKmLVFJ+5nE4x178eVTyA3AgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUoSCTlE5P6FFg0qaypYGSf6kqYZwwHwYDVR0j
BBgwFoAUsZ3Ntk5QbqxcgOmmoOIvDfJdcjwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EOTMyQjY5Q0JFMzQxNDAzMjdEMzgwMjk3MEJGRkZCRTkx
MTJDMEM4NEI0QUQ1OEMyOEQ0NEUxNTc4NTUwMDYxLzAvQjE5RENEQjY0RTUwNkVB
QzVDODBFOUE2QTBFMjJGMERGMjVENzIzQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMTlEQ0RCNjRFNTA2RUFDNUM4
MEU5QTZBMEUyMkYwREYyNUQ3MjNDLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDkzMkI2OUNCRTM0MTQwMzI3RDM4MDI5NzBCRkZGQkU5MTEyQzBDODRC
NEFENThDMjhENDRFMTU3ODU1MDA2MS8wLzMyMzgzMDMzM2EzMTYxMzUzMDNhMzQz
MDNhM2EyZjM0MzIyZDM0MzIyMDNkM2UyMDMyMzczNDMwMzUzOS5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
BigDGlAAQDANBgkqhkiG9w0BAQsFAAOCAQEAjPfRR27DSoh5pnt3BG0sJuMuqAAa
mE4fbYJhMVaXqX2mn8bRB/jo/DDINQE2uDGb2dkR8u1QePesWtbdixcidUUoEarn
2mLSqqqeuRYVcBTeIYk48pV282PHvOmSBcteiwB0pD/XwgXKMy5SqscvUyjfxPOC
Fr2oIAVMxWlGFVxdiz6xXQIRovRpM2DVyrbEt4omfQ6YeDlkTC4dXHw3bbdR/jIH
OF9sqXBJlcV6wzeCYOAFyeeXgddYEAPU7EG0PXM9z49bx5LFR27E7xDuC6VeRB2P
43ZOojQTBEb0pGFnw7m+KNURTFeLGX6jttgnv3q7RY+yyufwWue65aVm7A==
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:15:42 2026 by rpki-client