This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DA9596D212E8B66A1192B768B89FF2DAE8E4961D3D9E226AC4978FC6E6AD9F56/0/323830333a356338303a3a2f33322d3438203d3e203239383032.roa
File:                     323830333a356338303a3a2f33322d3438203d3e203239383032.roa (raw, json)
Hash identifier:          uqFaKnkzTiEEeT1IZsWmIdxO6iE482tfO1RNKFdtWk0=
Subject key identifier:   40:B9:C5:5B:25:0D:4D:56:D6:99:D4:35:C0:9E:ED:5C:87:58:74:7F
Certificate issuer:       /CN=E95D7FD5CE56E96E336A6E85C6DE12078D92206F
Certificate serial:       4B75AE01792120D0ECE7C24CAC95FE4A335E1075
Authority key identifier: E9:5D:7F:D5:CE:56:E9:6E:33:6A:6E:85:C6:DE:12:07:8D:92:20:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E95D7FD5CE56E96E336A6E85C6DE12078D92206F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DA9596D212E8B66A1192B768B89FF2DAE8E4961D3D9E226AC4978FC6E6AD9F56/0/323830333a356338303a3a2f33322d3438203d3e203239383032.roa
Signing time:             Tue 06 Jan 2026 19:13:51 +0000
ROA not before:           Tue 06 Jan 2026 19:08:51 +0000
ROA not after:            Tue 05 Jan 2027 19:13:51 +0000
asID:                     29802
IP address blocks:        2803:5c80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DA9596D212E8B66A1192B768B89FF2DAE8E4961D3D9E226AC4978FC6E6AD9F56/0/E95D7FD5CE56E96E336A6E85C6DE12078D92206F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DA9596D212E8B66A1192B768B89FF2DAE8E4961D3D9E226AC4978FC6E6AD9F56/0/E95D7FD5CE56E96E336A6E85C6DE12078D92206F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E95D7FD5CE56E96E336A6E85C6DE12078D92206F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 11:36:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:75:ae:01:79:21:20:d0:ec:e7:c2:4c:ac:95:fe:4a:33:5e:10:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95D7FD5CE56E96E336A6E85C6DE12078D92206F
        Validity
            Not Before: Jan  6 19:08:51 2026 GMT
            Not After : Jan  5 19:13:51 2027 GMT
        Subject: CN=40B9C55B250D4D56D699D435C09EED5C8758747F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0f:49:64:97:21:fc:96:9d:30:9d:1d:56:17:
                    49:93:39:8c:4c:d1:ff:be:07:34:a0:72:76:c0:b7:
                    4d:84:25:81:ee:16:e6:ea:94:34:2a:eb:37:f3:bd:
                    82:5c:a4:85:c3:ba:26:d4:cf:08:38:31:aa:e9:82:
                    1f:68:27:e8:b8:c3:9a:de:d2:7a:73:1a:02:30:16:
                    ad:f0:33:e8:5d:01:08:a2:dc:97:9a:55:d3:09:f1:
                    52:24:f5:ff:d1:b5:0d:26:48:be:a3:50:fc:3c:77:
                    87:e9:9d:30:44:5e:8a:bf:80:78:2e:8d:42:61:ea:
                    65:64:36:51:ff:3f:c8:00:88:90:d1:f1:bc:91:67:
                    e1:01:52:b5:7c:b8:5a:4f:43:02:df:6c:70:b5:34:
                    09:ff:58:d7:fd:7c:0c:e3:a7:37:9e:50:75:0c:54:
                    50:7c:82:a9:99:9a:86:af:06:d5:84:11:3d:0a:79:
                    1b:95:83:06:f1:9f:dd:af:07:7e:62:88:cf:91:a2:
                    2f:fe:1a:b6:24:41:20:fb:9b:e0:be:26:f2:bb:fd:
                    6e:36:90:0f:f5:2c:2f:08:77:83:5d:62:b2:aa:25:
                    41:e3:09:9b:77:10:0f:28:50:e7:4f:d0:16:a2:c0:
                    69:90:0e:c1:87:ec:d3:5d:cb:f1:e1:68:cf:39:57:
                    15:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B9:C5:5B:25:0D:4D:56:D6:99:D4:35:C0:9E:ED:5C:87:58:74:7F
            X509v3 Authority Key Identifier:
                keyid:E9:5D:7F:D5:CE:56:E9:6E:33:6A:6E:85:C6:DE:12:07:8D:92:20:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DA9596D212E8B66A1192B768B89FF2DAE8E4961D3D9E226AC4978FC6E6AD9F56/0/E95D7FD5CE56E96E336A6E85C6DE12078D92206F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E95D7FD5CE56E96E336A6E85C6DE12078D92206F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DA9596D212E8B66A1192B768B89FF2DAE8E4961D3D9E226AC4978FC6E6AD9F56/0/323830333a356338303a3a2f33322d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5c80::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:19:27:1e:8e:80:8b:88:fb:e4:63:90:d4:e7:69:58:43:75:
         71:d1:47:5d:30:1a:cb:a1:42:0c:14:cb:d3:90:c5:a3:b7:ab:
         d6:38:83:7c:1d:7b:07:23:87:cb:4b:ae:91:e4:c2:92:6b:e8:
         45:4b:7e:cf:25:4a:6d:ff:1c:3a:98:c9:35:6e:df:ab:6a:7e:
         6b:bd:87:30:7c:ca:d7:55:f9:39:55:75:56:46:10:85:27:5f:
         cb:78:3a:5e:5a:4f:c3:7b:ec:ee:8d:28:86:69:b1:a1:05:41:
         bf:43:87:33:26:67:0c:14:39:f7:62:86:a3:eb:24:e5:fa:24:
         22:4c:70:40:fa:1e:bc:b6:8a:77:d2:70:8c:a3:25:4f:64:9f:
         76:9d:f6:76:6f:17:36:6e:1f:79:03:b5:e5:56:4e:29:6b:3c:
         26:30:a2:5e:b6:6c:ae:fa:98:3a:54:a3:eb:d3:ab:2c:3e:7e:
         96:47:98:93:84:f8:a6:bc:60:30:b2:f1:f2:29:ed:60:47:36:
         03:0d:e6:6b:7c:8e:09:24:ce:ca:66:35:a7:69:f3:a6:11:37:
         7e:c9:ac:c8:5b:54:ee:fd:1c:1e:29:4b:74:56:d3:9c:55:3e:
         95:5d:a8:ea:10:44:18:b3:15:99:06:ae:c0:a7:a6:4c:38:3f:
         79:29:6d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:17:42 2026 by rpki-client