This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E4E99759ACF013EA166F0DA90DBE63F30FAB64CCF1310D5F0FA69271B35D85AC/0/323830333a356365303a3a2f33322d3430203d3e20323730303636.roa
File:                     323830333a356365303a3a2f33322d3430203d3e20323730303636.roa (raw, json)
Hash identifier:          P57nz1nvD56Y+GfuZUr4HtyE0MZGzl0zygPOlpSyiWc=
Subject key identifier:   B5:AB:0D:3F:57:65:5D:1B:38:B9:7F:D8:53:39:01:49:14:50:6C:32
Certificate issuer:       /CN=52C33A1BA9015DB4E50D07D3A35E931827FFAC41
Certificate serial:       7B0796188A5736006CAD49006EEF6A0FA0C1E72A
Authority key identifier: 52:C3:3A:1B:A9:01:5D:B4:E5:0D:07:D3:A3:5E:93:18:27:FF:AC:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52C33A1BA9015DB4E50D07D3A35E931827FFAC41.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E4E99759ACF013EA166F0DA90DBE63F30FAB64CCF1310D5F0FA69271B35D85AC/0/323830333a356365303a3a2f33322d3430203d3e20323730303636.roa
Signing time:             Tue 06 Jan 2026 19:18:38 +0000
ROA not before:           Tue 06 Jan 2026 19:13:38 +0000
ROA not after:            Tue 05 Jan 2027 19:18:38 +0000
asID:                     270066
IP address blocks:        2803:5ce0::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E4E99759ACF013EA166F0DA90DBE63F30FAB64CCF1310D5F0FA69271B35D85AC/0/52C33A1BA9015DB4E50D07D3A35E931827FFAC41.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E4E99759ACF013EA166F0DA90DBE63F30FAB64CCF1310D5F0FA69271B35D85AC/0/52C33A1BA9015DB4E50D07D3A35E931827FFAC41.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52C33A1BA9015DB4E50D07D3A35E931827FFAC41.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:07:96:18:8a:57:36:00:6c:ad:49:00:6e:ef:6a:0f:a0:c1:e7:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52C33A1BA9015DB4E50D07D3A35E931827FFAC41
        Validity
            Not Before: Jan  6 19:13:38 2026 GMT
            Not After : Jan  5 19:18:38 2027 GMT
        Subject: CN=B5AB0D3F57655D1B38B97FD85339014914506C32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d4:a9:43:f2:10:69:11:6d:8b:fc:7c:d0:ce:
                    7f:5b:57:f9:65:cf:ce:f7:98:71:fe:57:6e:b3:9e:
                    69:7f:43:07:1c:05:87:04:da:c3:e2:82:93:47:18:
                    b7:91:d0:d1:2a:80:64:79:e4:3f:a5:81:bc:73:30:
                    83:6d:d0:2b:7d:37:b3:e8:24:48:62:0e:b1:95:04:
                    93:f2:88:33:a5:cf:b4:5c:b9:36:ec:59:ee:d9:47:
                    cc:d8:f8:9e:55:c2:94:25:a7:c9:cc:28:7f:cb:e1:
                    be:cd:d6:9e:86:25:77:92:e9:d3:ec:d4:e1:46:d8:
                    fd:2e:67:40:63:6a:3a:d4:1f:22:da:45:8d:19:71:
                    19:fb:eb:f2:6d:4b:02:12:55:9b:0d:95:63:37:b8:
                    ba:d7:c3:a4:a6:9b:86:43:a6:e5:44:b4:04:88:29:
                    0d:c3:f7:f1:2f:3e:ce:10:f1:a7:2f:68:49:ed:e1:
                    49:1f:ae:03:b1:50:bc:7d:b5:38:13:2c:e7:77:ad:
                    d9:d7:c6:f6:2a:f6:93:51:e8:ae:80:77:c9:2c:70:
                    97:e9:00:ff:3d:a6:57:d8:e5:4d:89:f1:eb:b0:0b:
                    3c:57:d3:d5:60:6e:91:e4:ee:b3:ed:66:c8:83:7a:
                    2e:4c:fb:40:22:6d:ae:22:e1:98:09:3d:19:44:63:
                    f7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:AB:0D:3F:57:65:5D:1B:38:B9:7F:D8:53:39:01:49:14:50:6C:32
            X509v3 Authority Key Identifier:
                keyid:52:C3:3A:1B:A9:01:5D:B4:E5:0D:07:D3:A3:5E:93:18:27:FF:AC:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E4E99759ACF013EA166F0DA90DBE63F30FAB64CCF1310D5F0FA69271B35D85AC/0/52C33A1BA9015DB4E50D07D3A35E931827FFAC41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52C33A1BA9015DB4E50D07D3A35E931827FFAC41.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E4E99759ACF013EA166F0DA90DBE63F30FAB64CCF1310D5F0FA69271B35D85AC/0/323830333a356365303a3a2f33322d3430203d3e20323730303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:81:b0:e3:d9:6b:07:47:3b:16:6a:8b:14:c7:92:b6:33:61:
         c1:63:ea:d9:1e:ad:0e:b0:a4:8b:8b:35:60:45:2a:7f:c0:b8:
         fb:a0:6d:95:6f:8c:54:a8:37:40:84:d8:0f:c7:9b:67:75:c0:
         c4:1a:2b:e3:d9:48:60:ac:56:37:19:19:b7:c0:05:b5:ab:e7:
         01:d4:79:eb:85:63:98:5b:77:b6:a6:ff:68:6a:8c:da:23:f5:
         9f:fc:80:93:d0:65:d0:ee:e5:34:43:a8:48:71:86:ed:64:28:
         fd:61:3e:88:d1:65:88:a7:42:4a:c0:ba:eb:21:1c:11:9d:be:
         8e:74:a6:e3:21:bf:47:33:51:47:17:2c:75:5e:3a:f5:fb:d0:
         06:9d:1c:ef:85:c4:5c:1c:87:de:76:e9:74:36:2f:a1:c8:c0:
         79:09:b4:a9:65:2c:1f:1e:b0:53:e3:92:8c:18:e0:ff:dd:0d:
         6e:21:75:bc:51:aa:a9:21:d9:6b:34:84:2b:4d:c0:c0:ee:d1:
         a9:ad:4e:59:99:af:c9:29:4e:fb:9d:36:45:02:0d:4e:d7:dc:
         13:e7:1d:70:cf:42:53:bf:87:fa:eb:d8:48:31:b2:01:f2:61:
         5f:6b:d2:e9:66:5f:6c:e4:75:67:20:2c:5a:41:d7:ea:ed:82:
         15:ab:24:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:57:33 2026 by rpki-client