This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E1129378A5C9C175923F37D370A7F08FFF9775DD4BB43C1354201E1C3F1E6D82/0/323830333a376134303a3a2f33322d3438203d3e20323633383237.roa
File:                     323830333a376134303a3a2f33322d3438203d3e20323633383237.roa (raw, json)
Hash identifier:          lDUmdVbl4ansDubZoU2xBZfzVJhRRw39tljrvVlXxNY=
Subject key identifier:   5A:25:50:2F:AE:FF:AD:6A:4F:7B:3E:E1:AA:26:27:BC:F6:89:3A:9F
Certificate issuer:       /CN=7C582B37564569A9B9F2CE4DDB525FDF1D499374
Certificate serial:       35617291C33BFAED1D74878480D94847618DA9FA
Authority key identifier: 7C:58:2B:37:56:45:69:A9:B9:F2:CE:4D:DB:52:5F:DF:1D:49:93:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C582B37564569A9B9F2CE4DDB525FDF1D499374.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E1129378A5C9C175923F37D370A7F08FFF9775DD4BB43C1354201E1C3F1E6D82/0/323830333a376134303a3a2f33322d3438203d3e20323633383237.roa
Signing time:             Tue 06 Jan 2026 19:03:32 +0000
ROA not before:           Tue 06 Jan 2026 18:58:32 +0000
ROA not after:            Tue 05 Jan 2027 19:03:32 +0000
asID:                     263827
IP address blocks:        2803:7a40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E1129378A5C9C175923F37D370A7F08FFF9775DD4BB43C1354201E1C3F1E6D82/0/7C582B37564569A9B9F2CE4DDB525FDF1D499374.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E1129378A5C9C175923F37D370A7F08FFF9775DD4BB43C1354201E1C3F1E6D82/0/7C582B37564569A9B9F2CE4DDB525FDF1D499374.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C582B37564569A9B9F2CE4DDB525FDF1D499374.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:61:72:91:c3:3b:fa:ed:1d:74:87:84:80:d9:48:47:61:8d:a9:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C582B37564569A9B9F2CE4DDB525FDF1D499374
        Validity
            Not Before: Jan  6 18:58:32 2026 GMT
            Not After : Jan  5 19:03:32 2027 GMT
        Subject: CN=5A25502FAEFFAD6A4F7B3EE1AA2627BCF6893A9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b8:90:4f:ca:c0:90:47:bb:33:41:bb:80:9c:
                    d7:19:d4:4f:0c:cc:3b:b6:b5:de:d6:39:f8:db:9e:
                    d1:6b:33:fc:90:15:2b:1b:3c:58:b6:12:dc:3b:00:
                    50:b6:bf:b8:d7:7b:58:bf:55:6d:4c:9e:a3:1f:76:
                    c8:18:a9:1e:b1:91:dc:e1:ac:63:69:18:e1:8f:4d:
                    64:0b:81:d2:35:c0:52:74:b5:9b:6b:c9:fa:94:47:
                    90:b9:29:02:b3:ab:ec:09:86:88:3d:e5:2c:95:d6:
                    89:e4:3b:85:60:68:75:18:94:2a:34:2d:bb:15:22:
                    32:77:c8:8c:8f:7c:f0:94:95:e0:fe:cb:e7:d8:c4:
                    3e:5f:88:23:d0:95:46:61:56:3c:c4:bb:27:00:c9:
                    32:a5:18:fc:6f:6a:2d:8c:d0:00:fb:7b:ef:a7:20:
                    7f:d5:1b:2f:e9:90:c7:3b:6d:b3:cc:1d:69:a5:14:
                    44:93:4c:e5:13:76:9c:da:36:b7:6d:e2:c2:eb:6e:
                    dc:4f:27:a7:47:e7:07:d8:14:17:10:8d:ae:84:cf:
                    ba:3c:64:13:ce:72:b1:97:fb:2d:af:42:ca:05:7e:
                    a8:fa:ea:b5:7c:fb:1a:45:cf:f7:c9:bd:7c:bf:7f:
                    64:52:55:a9:a3:1c:57:99:c1:ea:11:22:9e:ca:27:
                    be:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:25:50:2F:AE:FF:AD:6A:4F:7B:3E:E1:AA:26:27:BC:F6:89:3A:9F
            X509v3 Authority Key Identifier:
                keyid:7C:58:2B:37:56:45:69:A9:B9:F2:CE:4D:DB:52:5F:DF:1D:49:93:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E1129378A5C9C175923F37D370A7F08FFF9775DD4BB43C1354201E1C3F1E6D82/0/7C582B37564569A9B9F2CE4DDB525FDF1D499374.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C582B37564569A9B9F2CE4DDB525FDF1D499374.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E1129378A5C9C175923F37D370A7F08FFF9775DD4BB43C1354201E1C3F1E6D82/0/323830333a376134303a3a2f33322d3438203d3e20323633383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:ec:c0:ef:0e:b4:7f:36:f8:72:b9:d9:02:f4:b5:23:1c:39:
         f2:3c:c2:ff:b3:cc:bc:2c:23:77:90:7f:d3:ea:c6:ba:d9:02:
         66:34:45:31:af:79:8b:ca:e4:c2:0f:ac:b2:16:b7:6f:9d:df:
         08:eb:c2:d3:b1:9b:73:c0:95:04:7a:c8:aa:fb:6b:13:6d:c3:
         e2:83:76:46:b4:8d:f7:93:90:98:c4:29:00:c4:20:00:60:d0:
         8a:5c:e4:42:44:51:76:2e:dd:af:38:2c:43:fc:cd:ee:72:e1:
         a0:7a:ae:7c:f4:9f:cd:b9:e6:6f:8e:0a:8e:f6:3f:e8:0e:99:
         2a:71:b1:56:0f:ad:42:e5:a5:65:bd:89:68:d0:49:86:78:df:
         71:c1:b2:31:ea:c9:53:9e:58:88:ec:46:93:17:d2:b3:ce:78:
         1d:90:f0:fb:ee:e4:fb:83:e2:bf:8a:f7:9a:a1:3d:21:c5:cd:
         71:76:3d:5a:c1:9e:33:7e:b7:b1:71:a5:86:f2:9f:23:13:75:
         2b:5e:85:35:2a:f0:18:47:9c:1a:12:27:06:bb:5c:05:cf:9a:
         1b:01:11:56:4b:c0:5f:84:bf:0f:98:3b:cc:b2:4b:39:4f:01:
         a2:e1:d2:99:ec:6e:8f:f9:16:ba:35:3d:2e:46:e8:cf:bd:13:
         72:82:64:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:30:06 2026 by rpki-client