This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52BBC48C2A0C5597C3459E86DCE8C62DC6FE1760E0C94E49CDA031A817F62B8B/0/323830333a313538303a3a2f33322d3332203d3e20323632313931.roa
File:                     323830333a313538303a3a2f33322d3332203d3e20323632313931.roa (raw, json)
Hash identifier:          lZcUsjggGV8SZaGvseRptncg6SFPO/2Z9rCII9EtchI=
Subject key identifier:   10:69:94:CC:67:B9:AF:94:CE:85:11:40:4A:AF:11:A5:8C:0E:1E:34
Certificate issuer:       /CN=E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8
Certificate serial:       0C76398C3582858EBA6B18C4B1CAFDB88BAC9757
Authority key identifier: E2:29:89:8B:6E:7F:B7:F3:04:8E:BD:4F:8C:DB:9F:88:94:D2:52:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52BBC48C2A0C5597C3459E86DCE8C62DC6FE1760E0C94E49CDA031A817F62B8B/0/323830333a313538303a3a2f33322d3332203d3e20323632313931.roa
Signing time:             Tue 06 Jan 2026 19:22:42 +0000
ROA not before:           Tue 06 Jan 2026 19:17:42 +0000
ROA not after:            Tue 05 Jan 2027 19:22:42 +0000
asID:                     262191
IP address blocks:        2803:1580::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52BBC48C2A0C5597C3459E86DCE8C62DC6FE1760E0C94E49CDA031A817F62B8B/0/E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52BBC48C2A0C5597C3459E86DCE8C62DC6FE1760E0C94E49CDA031A817F62B8B/0/E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Feb 2026 17:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:76:39:8c:35:82:85:8e:ba:6b:18:c4:b1:ca:fd:b8:8b:ac:97:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8
        Validity
            Not Before: Jan  6 19:17:42 2026 GMT
            Not After : Jan  5 19:22:42 2027 GMT
        Subject: CN=106994CC67B9AF94CE8511404AAF11A58C0E1E34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d1:a4:5a:a6:5c:13:8c:f0:b9:e3:f0:ae:21:
                    0d:89:c4:57:91:99:30:08:12:0b:09:aa:08:cb:9f:
                    99:b0:a1:a9:7e:e5:ea:49:ed:ab:ef:57:ea:46:20:
                    c5:9e:a9:bf:b8:ae:58:4e:bd:a1:82:87:00:13:12:
                    b1:5d:33:ba:23:3c:2b:b1:c7:91:69:70:e6:ea:81:
                    b3:9d:da:11:56:af:c3:45:05:fd:63:de:9e:7a:44:
                    f7:bc:29:e0:89:88:c0:ef:9e:8b:30:ed:63:76:f6:
                    b9:a9:1e:eb:78:12:54:6c:4d:89:18:ad:97:aa:0e:
                    64:5b:f8:36:f6:06:01:e0:1d:b6:18:b5:73:9c:c3:
                    f7:ac:e2:9c:45:f0:82:e2:9c:42:78:2d:12:ef:4f:
                    8b:b4:d5:2e:aa:46:e4:8f:dc:85:63:23:19:1c:fb:
                    c2:58:46:3e:4f:f1:fd:75:ce:e7:af:13:50:d1:ae:
                    64:9d:13:54:07:2f:04:f2:5a:28:ef:2c:9b:ba:8b:
                    36:dd:ba:83:ab:a5:26:2d:ef:6b:a4:75:6f:92:72:
                    61:c4:72:41:38:c9:5c:56:03:af:f5:fe:7c:c4:c2:
                    63:11:50:dd:a4:63:37:b7:fb:1f:eb:d3:3d:6b:81:
                    30:36:ec:43:d8:af:6a:d6:67:53:f7:f4:9d:04:17:
                    f2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:69:94:CC:67:B9:AF:94:CE:85:11:40:4A:AF:11:A5:8C:0E:1E:34
            X509v3 Authority Key Identifier:
                keyid:E2:29:89:8B:6E:7F:B7:F3:04:8E:BD:4F:8C:DB:9F:88:94:D2:52:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52BBC48C2A0C5597C3459E86DCE8C62DC6FE1760E0C94E49CDA031A817F62B8B/0/E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52BBC48C2A0C5597C3459E86DCE8C62DC6FE1760E0C94E49CDA031A817F62B8B/0/323830333a313538303a3a2f33322d3332203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1580::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:30:f4:12:6e:c8:b1:3f:a1:d3:fc:24:0f:d6:0c:47:4f:6a:
         7a:84:5d:04:bf:1d:d1:9c:ce:06:d1:3a:0f:79:cc:64:b6:5a:
         a9:d5:6d:77:82:2c:a7:2e:60:f0:92:c4:64:97:65:69:fa:77:
         cc:91:b9:67:91:d4:c3:34:14:20:0b:da:52:b8:51:c8:85:44:
         0a:d6:50:d6:65:95:7d:10:ad:47:d0:79:68:42:e1:04:4b:da:
         b9:ab:87:77:e3:0e:89:06:9c:0a:11:50:f0:03:09:2f:6e:b6:
         5a:0e:b1:e5:43:f4:31:bf:89:b4:c6:58:97:eb:c9:e1:de:d9:
         a1:7d:9b:7b:28:de:7d:19:89:1b:92:1c:94:38:5f:24:52:cf:
         17:53:4e:da:14:a1:53:9c:a2:1a:cf:54:6d:f0:84:9c:d9:88:
         4c:98:70:c0:44:84:d3:ea:04:b9:70:b4:3d:e8:c6:2a:d5:09:
         31:cc:3d:e7:54:ee:b2:3b:0e:ee:c8:1e:f5:f1:65:dd:1e:74:
         f1:79:76:8a:04:a4:34:a7:ca:1c:5c:3d:a0:d2:b0:a0:a9:c3:
         e2:e0:de:b7:88:cd:e0:71:1a:18:d7:d6:1c:79:25:88:b3:0d:
         97:9a:d8:a5:9f:f2:f8:a1:89:fc:77:fe:0e:6b:8a:b9:17:8f:
         7b:23:2a:f4
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUDHY5jDWChY66axjEscr9uIusl1cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTIyOTg5OEI2RTdGQjdGMzA0OEVCRDRGOENEQjlGODg5
NEQyNTJBODAeFw0yNjAxMDYxOTE3NDJaFw0yNzAxMDUxOTIyNDJaMDMxMTAvBgNV
BAMTKDEwNjk5NENDNjdCOUFGOTRDRTg1MTE0MDRBQUYxMUE1OEMwRTFFMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe0aRaplwTjPC54/CuIQ2JxFeR
mTAIEgsJqgjLn5mwoal+5epJ7avvV+pGIMWeqb+4rlhOvaGChwATErFdM7ojPCux
x5FpcObqgbOd2hFWr8NFBf1j3p56RPe8KeCJiMDvnosw7WN29rmpHut4ElRsTYkY
rZeqDmRb+Db2BgHgHbYYtXOcw/es4pxF8ILinEJ4LRLvT4u01S6qRuSP3IVjIxkc
+8JYRj5P8f11zuevE1DRrmSdE1QHLwTyWijvLJu6izbduoOrpSYt72ukdW+ScmHE
ckE4yVxWA6/1/nzEwmMRUN2kYze3+x/r0z1rgTA27EPYr2rWZ1P39J0EF/ILAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUEGmUzGe5r5TOhRFASq8RpYwOHjQwHwYDVR0j
BBgwFoAU4imJi25/t/MEjr1PjNufiJTSUqgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MkJCQzQ4QzJBMEM1NTk3QzM0NTlFODZEQ0U4QzYyREM2
RkUxNzYwRTBDOTRFNDlDREEwMzFBODE3RjYyQjhCLzAvRTIyOTg5OEI2RTdGQjdG
MzA0OEVCRDRGOENEQjlGODg5NEQyNTJBOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMjI5ODk4QjZFN0ZCN0YzMDQ4
RUJENEY4Q0RCOUY4ODk0RDI1MkE4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTJCQkM0OEMyQTBDNTU5N0MzNDU5RTg2RENFOEM2MkRDNkZFMTc2MEUw
Qzk0RTQ5Q0RBMDMxQTgxN0Y2MkI4Qi8wLzMyMzgzMDMzM2EzMTM1MzgzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMjMxMzkzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDFYAw
DQYJKoZIhvcNAQELBQADggEBAEUw9BJuyLE/odP8JA/WDEdPanqEXQS/HdGczgbR
Og95zGS2WqnVbXeCLKcuYPCSxGSXZWn6d8yRuWeR1MM0FCAL2lK4UciFRArWUNZl
lX0QrUfQeWhC4QRL2rmrh3fjDokGnAoRUPADCS9utloOseVD9DG/ibTGWJfryeHe
2aF9m3so3n0ZiRuSHJQ4XyRSzxdTTtoUoVOcohrPVG3whJzZiEyYcMBEhNPqBLlw
tD3oxirVCTHMPedU7rI7Du7IHvXxZd0edPF5dooEpDSnyhxcPaDSsKCpw+Lg3reI
zeBxGhjX1hx5JYizDZea2KWf8vihifx3/g5rirkXj3sjKvQ=
-----END CERTIFICATE-----
Generated at Tue Feb 10 07:35:50 2026 by rpki-client