This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5CAF293FC3AA169F9690CE471F4B18FEA4540C0274DAA76E908E4E0BBE15EA90/0/323830333a373838303a3a2f33322d3438203d3e20323633373639.roa
File:                     323830333a373838303a3a2f33322d3438203d3e20323633373639.roa (raw, json)
Hash identifier:          cSYeBuFM5XvniBHpuY3mr+KlcH6qu/OHol3cdZH5UcI=
Subject key identifier:   2D:7D:E0:D3:50:16:49:0B:A1:58:9F:D2:F6:97:05:24:5F:A4:7F:B7
Certificate issuer:       /CN=1A49578DBEACE7E265A25522F50005E6878A40E4
Certificate serial:       56A3C30BAD49B72DD3560EA36D1D5C6B1969E518
Authority key identifier: 1A:49:57:8D:BE:AC:E7:E2:65:A2:55:22:F5:00:05:E6:87:8A:40:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A49578DBEACE7E265A25522F50005E6878A40E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5CAF293FC3AA169F9690CE471F4B18FEA4540C0274DAA76E908E4E0BBE15EA90/0/323830333a373838303a3a2f33322d3438203d3e20323633373639.roa
Signing time:             Tue 09 Dec 2025 16:05:00 +0000
ROA not before:           Tue 09 Dec 2025 16:00:00 +0000
ROA not after:            Tue 08 Dec 2026 16:05:00 +0000
asID:                     263769
IP address blocks:        2803:7880::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5CAF293FC3AA169F9690CE471F4B18FEA4540C0274DAA76E908E4E0BBE15EA90/0/1A49578DBEACE7E265A25522F50005E6878A40E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5CAF293FC3AA169F9690CE471F4B18FEA4540C0274DAA76E908E4E0BBE15EA90/0/1A49578DBEACE7E265A25522F50005E6878A40E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A49578DBEACE7E265A25522F50005E6878A40E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 06:24:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:a3:c3:0b:ad:49:b7:2d:d3:56:0e:a3:6d:1d:5c:6b:19:69:e5:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A49578DBEACE7E265A25522F50005E6878A40E4
        Validity
            Not Before: Dec  9 16:00:00 2025 GMT
            Not After : Dec  8 16:05:00 2026 GMT
        Subject: CN=2D7DE0D35016490BA1589FD2F69705245FA47FB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8d:17:d0:7f:db:e8:db:91:f2:f6:e6:43:b4:
                    6c:cd:b0:e4:2e:9f:fc:db:d7:b2:d4:b0:43:6c:f6:
                    0a:97:50:bb:9c:24:f7:39:1f:ea:98:db:3c:86:8f:
                    e8:e6:e9:9d:f5:20:41:cc:c3:c3:ed:13:88:52:1e:
                    b7:6a:c8:2c:7d:c7:45:88:63:fd:de:5c:f5:11:d3:
                    ed:3e:42:3d:87:2d:b3:e7:36:c0:0f:43:e4:f7:ff:
                    25:af:ab:89:40:0c:69:e8:15:50:47:e3:bf:d7:6d:
                    b5:04:29:12:b0:21:53:4c:41:e4:8a:8a:f0:c1:9f:
                    84:c0:bb:ed:42:3d:ad:0d:76:26:5b:d2:6e:ab:0d:
                    f8:6f:a0:51:d6:ab:a5:ca:b8:c3:fb:05:07:72:94:
                    45:7b:6c:5d:59:ee:25:76:2d:e1:8a:85:d6:c4:d8:
                    d0:40:ca:56:75:d6:39:27:02:95:d1:ac:ef:c3:47:
                    03:2d:b1:1c:9f:24:5f:94:e9:05:ba:6c:e0:2b:2b:
                    52:25:6c:fb:b9:3f:c4:d8:62:64:cd:d4:26:97:16:
                    73:56:7f:3a:f1:6d:85:0c:b9:65:7d:30:8f:6a:b9:
                    22:b7:44:07:38:28:35:d3:75:60:d7:a9:65:d6:e0:
                    ed:24:67:47:1a:16:7c:e5:35:65:a8:d1:c9:ba:b0:
                    93:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:7D:E0:D3:50:16:49:0B:A1:58:9F:D2:F6:97:05:24:5F:A4:7F:B7
            X509v3 Authority Key Identifier:
                keyid:1A:49:57:8D:BE:AC:E7:E2:65:A2:55:22:F5:00:05:E6:87:8A:40:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5CAF293FC3AA169F9690CE471F4B18FEA4540C0274DAA76E908E4E0BBE15EA90/0/1A49578DBEACE7E265A25522F50005E6878A40E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A49578DBEACE7E265A25522F50005E6878A40E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5CAF293FC3AA169F9690CE471F4B18FEA4540C0274DAA76E908E4E0BBE15EA90/0/323830333a373838303a3a2f33322d3438203d3e20323633373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7880::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:b9:b8:f0:1e:80:ae:a1:1a:75:d6:b9:f6:80:bf:63:d5:6c:
         67:0c:60:24:9f:6b:57:fd:4f:4c:34:20:87:28:01:fe:8a:3b:
         a4:c2:ad:8c:32:5c:d2:cb:d0:52:b8:15:46:4f:28:cf:df:54:
         40:6e:79:cf:7e:14:73:0c:0a:05:6a:70:a5:bc:9c:fb:0c:98:
         0e:64:6e:37:60:d1:21:f9:1f:aa:04:a5:30:cc:8c:46:ad:d0:
         19:23:46:35:9e:00:f2:7c:37:20:71:58:30:8d:b0:ea:f0:25:
         2c:e4:7e:c7:cd:fb:19:0c:68:db:1d:cc:8d:7c:b6:4d:c1:ba:
         f3:02:17:5f:29:53:aa:60:92:79:b4:8c:46:6a:5e:ed:fd:f7:
         a9:ad:b9:c5:97:5a:9a:34:14:04:6a:19:4c:e4:e5:6a:b8:0a:
         0e:77:33:76:2b:92:4a:26:f1:91:7a:19:95:f7:1c:65:58:bc:
         68:44:e9:0e:aa:27:cf:d6:20:30:70:df:6d:17:46:c8:60:95:
         48:b9:ff:a8:dd:7c:12:f9:ff:4c:b0:55:fc:0b:2d:db:90:ee:
         b9:42:c1:3c:c9:f8:53:0e:ca:5a:08:60:29:f5:20:c5:a7:44:
         b6:9c:ab:76:2e:a9:73:80:20:66:2b:c3:a3:4c:b7:38:fa:15:
         2f:ee:fe:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 14:54:36 2025 by rpki-client