This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/323830303a6261303a3a2f33322d3438203d3e20323633383132.roa
File:                     323830303a6261303a3a2f33322d3438203d3e20323633383132.roa (raw, json)
Hash identifier:          ANGRN6LyIoMLclOgYSSS/rhTXIpCQ2ep/DnINA2JdGM=
Subject key identifier:   25:0D:6F:42:14:BD:54:54:5E:9F:59:C4:31:55:6D:DA:2B:12:93:81
Certificate issuer:       /CN=DB097B1D95BB51C9F513FC53429F30EA207C1549
Certificate serial:       665F4DE9B7F95049292DC08438E8C052E2071C09
Authority key identifier: DB:09:7B:1D:95:BB:51:C9:F5:13:FC:53:42:9F:30:EA:20:7C:15:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/323830303a6261303a3a2f33322d3438203d3e20323633383132.roa
Signing time:             Tue 06 Jan 2026 19:44:52 +0000
ROA not before:           Tue 06 Jan 2026 19:39:52 +0000
ROA not after:            Tue 05 Jan 2027 19:44:52 +0000
asID:                     263812
IP address blocks:        2800:ba0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 11:55:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:5f:4d:e9:b7:f9:50:49:29:2d:c0:84:38:e8:c0:52:e2:07:1c:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB097B1D95BB51C9F513FC53429F30EA207C1549
        Validity
            Not Before: Jan  6 19:39:52 2026 GMT
            Not After : Jan  5 19:44:52 2027 GMT
        Subject: CN=250D6F4214BD54545E9F59C431556DDA2B129381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f1:f9:7a:8a:c9:0d:83:97:4e:85:5d:8b:92:
                    2d:7e:ef:f3:00:14:28:c1:fb:c1:f7:0e:7c:aa:37:
                    55:65:2d:4e:55:0b:4b:b2:26:c0:6e:36:65:59:8d:
                    2a:94:dd:18:36:ca:bb:24:46:be:d0:27:c2:50:88:
                    ad:7e:ac:3b:09:fb:6d:c5:c8:95:4c:e8:e3:ff:2c:
                    c1:41:ab:79:ea:93:1d:3a:d8:e6:c1:e0:c1:a6:42:
                    52:df:06:76:3c:1b:2b:ef:af:41:fd:ae:40:31:18:
                    05:8d:f3:6e:de:7c:5e:c2:7b:da:08:ae:e5:88:7a:
                    bf:45:1c:f3:3e:59:0b:e7:67:88:03:6e:09:c1:5c:
                    9f:e4:03:f6:f4:c3:74:c7:99:ba:74:9b:c0:9c:33:
                    a7:96:32:ad:7a:94:73:4a:2e:47:20:34:3e:3a:9f:
                    b8:5d:31:c5:e6:9e:8b:f6:4d:d3:df:05:d8:e5:44:
                    9e:0f:bc:d4:2f:0a:62:5d:8f:75:45:97:30:aa:1e:
                    fe:f8:a5:fc:8e:07:a2:15:30:d4:fd:4c:4f:1f:dc:
                    2d:c3:1d:ac:c8:cf:a5:24:2b:c9:d4:22:e0:0d:71:
                    5d:da:a4:af:45:0d:bb:fc:93:30:f5:07:35:6e:79:
                    53:f0:90:f5:e6:10:b4:ce:e8:b0:e7:9e:27:f2:37:
                    b9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:0D:6F:42:14:BD:54:54:5E:9F:59:C4:31:55:6D:DA:2B:12:93:81
            X509v3 Authority Key Identifier:
                keyid:DB:09:7B:1D:95:BB:51:C9:F5:13:FC:53:42:9F:30:EA:20:7C:15:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/323830303a6261303a3a2f33322d3438203d3e20323633383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:ba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:c6:b9:31:9b:82:e1:f1:47:5a:30:ed:85:e4:47:6f:f6:c4:
         30:08:9f:05:a4:c0:ef:f0:c2:41:01:69:20:8a:dc:12:37:56:
         77:fd:ae:6a:5b:6e:37:38:84:8a:4d:9e:27:3f:11:46:03:3e:
         e7:f0:9d:f9:fa:d7:7c:bb:7f:98:fb:b4:23:e0:cd:63:f6:7f:
         c3:56:dc:47:21:5a:1f:7f:67:d2:06:bd:9f:7c:c3:ad:8c:c3:
         80:cd:88:c8:6d:a4:8b:e2:1c:1b:2c:08:e9:f1:51:16:36:1b:
         53:a1:d1:1f:fa:b2:92:a7:9f:a7:6d:d0:6e:b3:32:e2:7f:71:
         5d:80:94:32:eb:92:b6:2d:f9:82:b1:2a:c7:9a:ce:e3:71:91:
         37:6a:72:a8:3a:07:36:28:17:07:be:c7:18:ca:4d:b7:4a:6b:
         0f:81:3c:28:a9:c5:fd:81:78:e5:d3:02:0a:3e:76:2b:f7:a5:
         40:92:71:c2:5d:d7:94:42:06:3a:93:b7:ba:38:dc:c8:a2:93:
         d1:92:a6:6e:aa:97:82:4a:e9:cd:c7:9e:cf:ba:a1:f7:4e:7f:
         80:d5:13:0a:81:5d:f8:44:c1:46:be:a9:ed:a6:5a:1f:42:bf:
         93:32:d3:f7:bc:a4:8c:c3:54:9b:d9:c8:fa:be:ed:32:9c:99:
         ca:dc:86:e0
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUZl9N6bf5UEkpLcCEOOjAUuIHHAkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREIwOTdCMUQ5NUJCNTFDOUY1MTNGQzUzNDI5RjMwRUEy
MDdDMTU0OTAeFw0yNjAxMDYxOTM5NTJaFw0yNzAxMDUxOTQ0NTJaMDMxMTAvBgNV
BAMTKDI1MEQ2RjQyMTRCRDU0NTQ1RTlGNTlDNDMxNTU2RERBMkIxMjkzODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG8fl6iskNg5dOhV2Lki1+7/MA
FCjB+8H3DnyqN1VlLU5VC0uyJsBuNmVZjSqU3Rg2yrskRr7QJ8JQiK1+rDsJ+23F
yJVM6OP/LMFBq3nqkx062ObB4MGmQlLfBnY8Gyvvr0H9rkAxGAWN827efF7Ce9oI
ruWIer9FHPM+WQvnZ4gDbgnBXJ/kA/b0w3THmbp0m8CcM6eWMq16lHNKLkcgND46
n7hdMcXmnov2TdPfBdjlRJ4PvNQvCmJdj3VFlzCqHv74pfyOB6IVMNT9TE8f3C3D
HazIz6UkK8nUIuANcV3apK9FDbv8kzD1BzVueVPwkPXmELTO6LDnnifyN7njAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUJQ1vQhS9VFRen1nEMVVt2isSk4EwHwYDVR0j
BBgwFoAU2wl7HZW7Ucn1E/xTQp8w6iB8FUkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQjFFOTM3NTYwMUYxMjE4MTA4OTRGMDQ2QjNEM0NFQ0VB
NEVDODE2Q0Q1MzAwOTBBMEU5NzE3QjA5M0VCRjQ3LzAvREIwOTdCMUQ5NUJCNTFD
OUY1MTNGQzUzNDI5RjMwRUEyMDdDMTU0OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQjA5N0IxRDk1QkI1MUM5RjUx
M0ZDNTM0MjlGMzBFQTIwN0MxNTQ5LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUIxRTkzNzU2MDFGMTIxODEwODk0RjA0NkIzRDNDRUNFQTRFQzgxNkNE
NTMwMDkwQTBFOTcxN0IwOTNFQkY0Ny8wLzMyMzgzMDMwM2E2MjYxMzAzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzMjM2MzMzODMxMzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAAugMA0G
CSqGSIb3DQEBCwUAA4IBAQAFxrkxm4Lh8UdaMO2F5Edv9sQwCJ8FpMDv8MJBAWkg
itwSN1Z3/a5qW243OISKTZ4nPxFGAz7n8J35+td8u3+Y+7Qj4M1j9n/DVtxHIVof
f2fSBr2ffMOtjMOAzYjIbaSL4hwbLAjp8VEWNhtTodEf+rKSp5+nbdBuszLif3Fd
gJQy65K2LfmCsSrHms7jcZE3anKoOgc2KBcHvscYyk23SmsPgTwoqcX9gXjl0wIK
PnYr96VAknHCXdeUQgY6k7e6ONzIopPRkqZuqpeCSunNx57PuqH3Tn+A1RMKgV34
RMFGvqntplofQr+TMtP3vKSMw1Sb2cj6vu0ynJnK3Ibg
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:22:34 2026 by rpki-client