This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/323830313a3166393a353a3a2f34382d3438203d3e203134303830.roa
File:                     323830313a3166393a353a3a2f34382d3438203d3e203134303830.roa (raw, json)
Hash identifier:          1Z+qLwaqIqBMuPHh3V+48pCxAqs9IdmjrKf7vIP2cWc=
Subject key identifier:   EA:26:5C:DA:94:F3:70:93:BD:58:0D:0F:CB:3E:66:56:92:CD:EE:38
Certificate issuer:       /CN=B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0
Certificate serial:       483DE028BC9F4AE6B358EEA5BCBC3C294A427AAF
Authority key identifier: B9:1E:C1:9B:AC:53:1E:9C:D8:2F:3D:8F:0D:2B:BC:FB:E4:15:0B:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/323830313a3166393a353a3a2f34382d3438203d3e203134303830.roa
Signing time:             Tue 06 Jan 2026 19:10:58 +0000
ROA not before:           Tue 06 Jan 2026 19:05:58 +0000
ROA not after:            Tue 05 Jan 2027 19:10:58 +0000
asID:                     14080
IP address blocks:        2801:1f9:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 01:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:3d:e0:28:bc:9f:4a:e6:b3:58:ee:a5:bc:bc:3c:29:4a:42:7a:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0
        Validity
            Not Before: Jan  6 19:05:58 2026 GMT
            Not After : Jan  5 19:10:58 2027 GMT
        Subject: CN=EA265CDA94F37093BD580D0FCB3E665692CDEE38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:46:64:fc:b0:c0:8c:e6:9f:ad:79:30:e7:a3:
                    e3:f9:c6:ac:c3:91:6c:31:d5:00:78:3d:e8:dc:cd:
                    42:af:85:dc:4a:d6:9b:ca:5b:bb:0f:28:e7:11:d6:
                    d2:7d:99:06:97:43:29:7e:e8:42:e9:66:b7:83:39:
                    7c:d8:44:3a:41:9f:bb:70:77:18:aa:a4:4f:10:a4:
                    f9:19:35:34:fa:ce:73:4b:74:66:d8:77:d6:d3:98:
                    67:35:4e:78:bf:2f:66:ad:f3:a7:02:3b:db:5d:0f:
                    92:89:ce:df:0e:35:bd:66:8c:66:eb:44:05:f7:73:
                    60:b7:4d:65:f1:d0:94:31:fc:e4:98:c8:f7:dc:fb:
                    ff:07:32:e6:15:61:e5:6e:c0:d7:2f:76:fc:ea:d9:
                    7d:f6:c0:36:77:77:d8:40:4e:6d:5b:fa:55:86:40:
                    b8:c6:0a:ea:80:77:cb:75:36:e8:c3:ba:5b:a1:29:
                    3b:a4:68:2d:90:92:e1:ea:3a:d4:d5:b4:d7:af:7b:
                    b2:73:4a:ec:a9:01:71:df:bc:f8:8b:e2:21:81:27:
                    46:03:9b:a3:cc:b7:55:bf:44:14:bc:72:1c:87:75:
                    33:ae:4b:c4:70:dc:4e:cb:ec:7e:fc:21:d7:dd:d0:
                    01:62:f6:3d:d2:d2:6c:57:13:42:3a:58:80:b7:3f:
                    8d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:26:5C:DA:94:F3:70:93:BD:58:0D:0F:CB:3E:66:56:92:CD:EE:38
            X509v3 Authority Key Identifier:
                keyid:B9:1E:C1:9B:AC:53:1E:9C:D8:2F:3D:8F:0D:2B:BC:FB:E4:15:0B:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/323830313a3166393a353a3a2f34382d3438203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f9:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:4b:06:08:d8:cf:4b:fe:0a:1c:6a:ae:b3:ef:6b:4c:44:fa:
         bb:72:bd:dc:12:cc:60:e7:bd:b7:e2:ff:a2:4d:1d:08:8c:3e:
         f4:2d:26:f8:9b:18:0f:79:31:05:7a:e7:9d:19:85:06:6b:3e:
         c8:89:9a:aa:98:04:f8:f3:01:6a:dd:ba:e8:f3:33:2b:93:65:
         8d:93:b4:dd:ed:9d:f7:70:ef:36:1d:c9:82:eb:6e:b8:b7:31:
         b6:dc:a3:be:27:bc:ad:b8:51:38:e5:b1:38:cd:b0:2e:fb:2d:
         bc:e0:08:36:d3:c2:4d:b1:75:2c:5e:a7:0f:4f:2b:4a:63:9f:
         db:1f:f5:4e:52:8e:2e:ee:70:f7:8e:12:08:3b:68:62:46:eb:
         10:62:96:f8:6d:79:69:09:11:8f:09:c0:27:ab:d8:84:2f:fa:
         7c:8e:58:07:ea:36:bc:16:3d:4d:c8:70:03:ac:47:5a:9d:ba:
         d7:ab:d1:e4:8a:1c:aa:d4:7d:ca:35:56:35:10:c6:00:5d:39:
         50:d5:11:dd:9d:6e:4d:5d:1c:5c:9f:1e:27:4d:41:81:24:df:
         c3:d1:97:33:60:87:b0:59:32:de:5d:cb:52:12:91:67:4f:06:
         76:4a:a1:ce:42:55:04:f1:52:6b:f8:62:9a:24:78:04:50:e3:
         24:2b:0f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 13:53:43 2026 by rpki-client