This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/323830303a3836303a3a2f33322d3634203d3e20323632313937.roa
File:                     323830303a3836303a3a2f33322d3634203d3e20323632313937.roa (raw, json)
Hash identifier:          2agm38jUrAodW74KXWePIv8mNIn44rGJXTbBa2nUDR0=
Subject key identifier:   92:BA:86:9D:37:DA:E1:F5:20:C6:C6:11:7F:49:1A:67:11:12:C3:C6
Certificate issuer:       /CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
Certificate serial:       1A8F299A0AEBBAECADB73D81999A7DBE08F4B2C7
Authority key identifier: E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/323830303a3836303a3a2f33322d3634203d3e20323632313937.roa
Signing time:             Tue 06 Jan 2026 19:11:08 +0000
ROA not before:           Tue 06 Jan 2026 19:06:08 +0000
ROA not after:            Tue 05 Jan 2027 19:11:08 +0000
asID:                     262197
IP address blocks:        2800:860::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 13:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:8f:29:9a:0a:eb:ba:ec:ad:b7:3d:81:99:9a:7d:be:08:f4:b2:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
        Validity
            Not Before: Jan  6 19:06:08 2026 GMT
            Not After : Jan  5 19:11:08 2027 GMT
        Subject: CN=92BA869D37DAE1F520C6C6117F491A671112C3C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:de:46:d7:5f:3f:df:fb:fa:d9:cc:29:d4:61:
                    5a:be:d3:64:6b:b8:15:2f:9b:19:2d:c8:c5:71:31:
                    e7:ef:cc:e8:81:d3:42:b7:88:0d:e4:f0:c8:d3:e7:
                    58:34:c6:54:ea:c3:60:d5:f0:00:40:20:b4:72:af:
                    94:a8:90:31:0f:17:2e:fe:1b:56:89:d9:56:0e:32:
                    e4:dc:6b:29:51:5b:17:b8:ff:be:77:85:cf:de:98:
                    fc:88:c6:c8:a7:82:eb:91:7c:06:66:43:f2:4d:fb:
                    33:19:00:2c:fc:b4:94:13:6f:a0:dc:21:43:93:30:
                    41:6d:f6:8b:c9:ee:48:ee:9e:81:1c:aa:f1:61:88:
                    bb:44:2e:30:85:1d:f7:28:4e:89:70:60:88:fb:84:
                    0f:cb:5e:6c:91:0a:d8:8a:e4:31:d1:a1:7f:fb:c4:
                    8c:d2:6e:7a:a3:d2:03:c5:36:2c:3c:91:ec:c1:eb:
                    53:13:17:22:44:5a:f5:c0:ea:21:45:b1:68:59:f3:
                    32:dd:5d:4d:70:90:c6:ca:ea:9d:dd:93:0f:62:c5:
                    33:74:a6:67:09:af:86:06:4c:2d:3f:3e:d3:ee:7b:
                    f4:89:6c:98:e5:27:1b:af:ba:80:ee:f0:d4:8d:e1:
                    c2:09:e7:bf:6e:c0:5f:2a:cb:8e:a9:50:2c:cd:24:
                    1f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:BA:86:9D:37:DA:E1:F5:20:C6:C6:11:7F:49:1A:67:11:12:C3:C6
            X509v3 Authority Key Identifier:
                keyid:E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/323830303a3836303a3a2f33322d3634203d3e20323632313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:860::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:27:0c:27:2f:f5:93:e8:c2:d6:6e:42:4d:d9:6f:c1:39:a9:
         a4:8d:45:54:59:a1:83:0a:b8:e5:bb:15:e2:3d:d6:d2:87:c4:
         25:40:f5:97:2a:a0:45:f1:df:da:e4:a7:c5:cf:6e:a9:ee:92:
         bd:0f:d7:42:fd:a3:86:6c:f8:b9:fe:b0:e3:46:86:4b:4d:0e:
         25:31:e9:0c:99:eb:3a:9d:ed:87:ff:a6:27:27:9b:87:0c:df:
         58:74:3a:a0:f7:04:68:65:d8:6a:95:45:06:ad:3e:bf:b6:4f:
         6b:3a:cd:f5:40:27:33:73:16:2b:37:d5:8f:ef:82:9e:49:f2:
         28:62:3b:8a:d5:20:6e:3d:30:a5:b4:52:bd:79:9f:56:36:bb:
         b5:32:cf:32:18:91:9a:c0:aa:69:1b:65:6f:17:59:13:cd:00:
         c5:c2:8f:53:fb:5d:8f:87:5f:9a:47:a7:fc:d9:44:94:ee:9c:
         24:f2:51:98:3c:60:61:63:91:5a:a2:f9:c7:60:6e:41:fa:7c:
         86:fc:2f:7e:69:ac:40:79:51:f8:c0:2c:11:bc:47:e1:d2:cb:
         e6:ce:49:c5:dc:b9:aa:f2:3e:4e:19:c3:81:fb:e9:fd:9d:61:
         9f:af:67:a1:e7:b3:ce:8d:4a:65:a2:70:69:19:60:f6:f7:55:
         d8:a2:53:36
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUGo8pmgrruuyttz2BmZp9vgj0sscwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTVBNTUxMEM3RkNEOTY2RTAyNDg2RDMyNTcyQkY2QkNC
MUI4RkYyRTAeFw0yNjAxMDYxOTA2MDhaFw0yNzAxMDUxOTExMDhaMDMxMTAvBgNV
BAMTKDkyQkE4NjlEMzdEQUUxRjUyMEM2QzYxMTdGNDkxQTY3MTExMkMzQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu3kbXXz/f+/rZzCnUYVq+02Rr
uBUvmxktyMVxMefvzOiB00K3iA3k8MjT51g0xlTqw2DV8ABAILRyr5SokDEPFy7+
G1aJ2VYOMuTcaylRWxe4/753hc/emPyIxsinguuRfAZmQ/JN+zMZACz8tJQTb6Dc
IUOTMEFt9ovJ7kjunoEcqvFhiLtELjCFHfcoTolwYIj7hA/LXmyRCtiK5DHRoX/7
xIzSbnqj0gPFNiw8kezB61MTFyJEWvXA6iFFsWhZ8zLdXU1wkMbK6p3dkw9ixTN0
pmcJr4YGTC0/PtPue/SJbJjlJxuvuoDu8NSN4cIJ579uwF8qy46pUCzNJB/JAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUkrqGnTfa4fUgxsYRf0kaZxESw8YwHwYDVR0j
BBgwFoAU5aVRDH/Nlm4CSG0yVyv2vLG4/y4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MkU3MDg2ODkwNENFRTdCQUNDNDgzNzlBQTNGMkUyNjkz
QUUxMzI5MTQxMUM1OEYzMzlCNDI3RjMzMEE5OEJGLzAvRTVBNTUxMEM3RkNEOTY2
RTAyNDg2RDMyNTcyQkY2QkNCMUI4RkYyRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNUE1NTEwQzdGQ0Q5NjZFMDI0
ODZEMzI1NzJCRjZCQ0IxQjhGRjJFLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTJFNzA4Njg5MDRDRUU3QkFDQzQ4Mzc5QUEzRjJFMjY5M0FFMTMyOTE0
MTFDNThGMzM5QjQyN0YzMzBBOThCRi8wLzMyMzgzMDMwM2EzODM2MzAzYTNhMmYz
MzMyMmQzNjM0MjAzZDNlMjAzMjM2MzIzMTM5Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAAhgMA0G
CSqGSIb3DQEBCwUAA4IBAQAhJwwnL/WT6MLWbkJN2W/BOamkjUVUWaGDCrjluxXi
PdbSh8QlQPWXKqBF8d/a5KfFz26p7pK9D9dC/aOGbPi5/rDjRoZLTQ4lMekMmes6
ne2H/6YnJ5uHDN9YdDqg9wRoZdhqlUUGrT6/tk9rOs31QCczcxYrN9WP74KeSfIo
YjuK1SBuPTCltFK9eZ9WNru1Ms8yGJGawKppG2VvF1kTzQDFwo9T+12Ph1+aR6f8
2USU7pwk8lGYPGBhY5FaovnHYG5B+nyG/C9+aaxAeVH4wCwRvEfh0svmzknF3Lmq
8j5OGcOB++n9nWGfr2eh57POjUplonBpGWD291XYolM2
-----END CERTIFICATE-----
Generated at Fri Jan 23 16:45:28 2026 by rpki-client