This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5208EA4E8F019B8A55E7B5D3B5675FB5C0B070440DED2C5E9F74CB49F979D48F/0/323830333a343739303a3a2f33322d3438203d3e2030.roa
File:                     323830333a343739303a3a2f33322d3438203d3e2030.roa (raw, json)
Hash identifier:          zHrkP9llV5gGUQANgkqfP768raRxCLR2wBmDsebOFaw=
Subject key identifier:   49:5F:0B:C0:CE:5F:6B:F7:9F:C0:90:3C:2D:1F:62:71:58:2D:44:0C
Certificate issuer:       /CN=72B53BA6E0BEF80076D9A16F66DA927965BC5585
Certificate serial:       58BE1912C12809ED0E9CB6D6B4347FC231D28F56
Authority key identifier: 72:B5:3B:A6:E0:BE:F8:00:76:D9:A1:6F:66:DA:92:79:65:BC:55:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/72B53BA6E0BEF80076D9A16F66DA927965BC5585.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5208EA4E8F019B8A55E7B5D3B5675FB5C0B070440DED2C5E9F74CB49F979D48F/0/323830333a343739303a3a2f33322d3438203d3e2030.roa
Signing time:             Wed 19 Nov 2025 15:53:09 +0000
ROA not before:           Wed 19 Nov 2025 15:48:09 +0000
ROA not after:            Wed 18 Nov 2026 15:53:09 +0000
asID:                     0
IP address blocks:        2803:4790::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5208EA4E8F019B8A55E7B5D3B5675FB5C0B070440DED2C5E9F74CB49F979D48F/0/72B53BA6E0BEF80076D9A16F66DA927965BC5585.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5208EA4E8F019B8A55E7B5D3B5675FB5C0B070440DED2C5E9F74CB49F979D48F/0/72B53BA6E0BEF80076D9A16F66DA927965BC5585.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/72B53BA6E0BEF80076D9A16F66DA927965BC5585.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Nov 2025 18:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:be:19:12:c1:28:09:ed:0e:9c:b6:d6:b4:34:7f:c2:31:d2:8f:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72B53BA6E0BEF80076D9A16F66DA927965BC5585
        Validity
            Not Before: Nov 19 15:48:09 2025 GMT
            Not After : Nov 18 15:53:09 2026 GMT
        Subject: CN=495F0BC0CE5F6BF79FC0903C2D1F6271582D440C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:df:fd:1d:3c:91:ac:58:7f:10:37:c7:c3:2f:
                    b1:62:34:8a:99:f8:d4:25:61:65:da:e2:43:34:d2:
                    30:9e:54:95:c1:8f:de:f5:ed:c5:51:44:91:d0:30:
                    55:08:97:28:1c:e7:16:b6:9f:4c:e0:89:6b:27:98:
                    6b:1a:3a:ac:1a:4b:68:22:e2:eb:99:ca:ea:71:c9:
                    23:63:2b:78:b1:85:22:98:73:a2:55:1c:80:34:93:
                    9c:5c:38:ee:5e:e4:96:38:6e:fc:aa:c7:df:87:32:
                    d5:d1:06:16:a9:00:16:80:81:77:ff:be:8f:6f:9d:
                    b8:57:1e:ca:42:f9:6f:3c:85:58:44:c6:24:3c:cf:
                    f1:f9:c1:f5:5c:67:f1:d4:50:77:a4:95:15:52:ed:
                    ad:b1:8f:01:4d:1f:b1:30:af:91:69:2f:a9:32:20:
                    ca:18:5e:72:f2:a4:3f:88:03:1f:ce:cc:23:86:d4:
                    11:eb:a0:fd:32:dd:8b:97:15:6d:64:5b:63:19:44:
                    02:18:c8:b3:c7:2f:05:3c:99:10:81:ea:6b:68:36:
                    18:19:e0:22:b8:8d:26:17:5d:76:8e:c0:47:6e:8f:
                    69:89:f8:b1:b2:c5:e6:53:5d:3d:08:6e:09:3b:f9:
                    1d:b4:60:ea:9e:64:87:35:85:26:a5:56:6b:23:f2:
                    1e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:5F:0B:C0:CE:5F:6B:F7:9F:C0:90:3C:2D:1F:62:71:58:2D:44:0C
            X509v3 Authority Key Identifier:
                keyid:72:B5:3B:A6:E0:BE:F8:00:76:D9:A1:6F:66:DA:92:79:65:BC:55:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5208EA4E8F019B8A55E7B5D3B5675FB5C0B070440DED2C5E9F74CB49F979D48F/0/72B53BA6E0BEF80076D9A16F66DA927965BC5585.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/72B53BA6E0BEF80076D9A16F66DA927965BC5585.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5208EA4E8F019B8A55E7B5D3B5675FB5C0B070440DED2C5E9F74CB49F979D48F/0/323830333a343739303a3a2f33322d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4790::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:bd:53:20:e0:4f:4a:c4:a8:1e:1f:cf:29:95:9a:ba:89:92:
         2d:57:da:48:98:c4:bc:77:04:0c:83:6b:66:af:cb:99:ba:64:
         f2:f3:51:99:6b:22:f8:7e:15:fe:cc:98:49:aa:14:80:74:15:
         a8:4f:e2:cf:3f:f0:44:37:dc:dd:c8:ee:e2:4a:66:d2:ec:e1:
         5d:52:02:7c:3a:67:3b:4a:50:f0:ce:ea:f9:25:ff:dd:0a:d3:
         80:68:97:55:34:0a:8a:07:2a:ad:f7:a8:1c:d5:8c:bb:75:8b:
         6f:cf:f9:28:65:24:7a:b9:5c:4d:49:db:1e:33:37:99:35:be:
         2d:8c:8a:1d:be:29:6b:db:23:d6:15:5d:2e:a5:e5:48:01:ec:
         08:92:ca:1b:65:e5:0b:c2:9b:80:94:30:00:1f:43:5d:5e:e2:
         9d:db:00:db:28:96:33:4c:3b:48:1f:f9:84:0d:cd:03:5a:37:
         9e:22:b0:d0:28:e9:eb:b7:64:6d:ed:37:92:d1:ee:80:dc:ab:
         6f:c6:07:be:e3:b5:7f:f4:02:56:21:5e:cd:a2:94:0a:bd:a2:
         40:c9:ca:9e:e0:0a:66:09:31:d5:6f:e5:c5:ab:8b:38:7f:49:
         f9:0d:0c:ca:df:94:c8:29:8a:81:e4:1e:57:38:41:9f:0f:f9:
         1f:c6:51:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:43:49 2025 by rpki-client