This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/323830333a616230303a3a2f33322d3634203d3e203532343731.roa
File:                     323830333a616230303a3a2f33322d3634203d3e203532343731.roa (raw, json)
Hash identifier:          CUiDqTdw6svgu/uSktX7qbjpF6ZwMgQQvKqUvzePqsE=
Subject key identifier:   0A:59:7E:7F:2C:61:35:09:69:38:35:8E:D2:B6:2A:AD:C3:77:20:05
Certificate issuer:       /CN=5B9D96661EC85627A1F4994E893F26FFC408AFAC
Certificate serial:       3CEB6BC094A26C40D2AF14325C3DCFBA8F70C5EB
Authority key identifier: 5B:9D:96:66:1E:C8:56:27:A1:F4:99:4E:89:3F:26:FF:C4:08:AF:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/323830333a616230303a3a2f33322d3634203d3e203532343731.roa
Signing time:             Tue 06 Jan 2026 19:13:28 +0000
ROA not before:           Tue 06 Jan 2026 19:08:28 +0000
ROA not after:            Tue 05 Jan 2027 19:13:28 +0000
asID:                     52471
IP address blocks:        2803:ab00::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:eb:6b:c0:94:a2:6c:40:d2:af:14:32:5c:3d:cf:ba:8f:70:c5:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B9D96661EC85627A1F4994E893F26FFC408AFAC
        Validity
            Not Before: Jan  6 19:08:28 2026 GMT
            Not After : Jan  5 19:13:28 2027 GMT
        Subject: CN=0A597E7F2C6135096938358ED2B62AADC3772005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8a:70:00:74:78:7c:66:08:fa:f8:20:f4:83:
                    b4:68:90:a4:81:06:ec:e6:88:20:5c:44:88:78:d8:
                    d5:ae:2f:9e:09:70:e4:59:20:e4:77:9c:27:b4:31:
                    8c:b1:92:c7:4f:4b:db:11:6b:1d:71:d9:df:3d:b6:
                    23:a5:93:cf:06:07:70:b7:52:7b:8a:af:65:71:41:
                    32:b8:83:93:e3:c0:b6:95:59:f5:e5:53:57:f2:83:
                    43:80:06:b8:c6:32:d2:79:26:58:3a:4e:45:91:93:
                    2b:12:ee:c2:ca:3b:f3:62:2f:21:2b:7f:78:39:92:
                    4e:af:21:5f:2f:82:18:db:68:4f:aa:7d:59:96:62:
                    0c:ab:ff:75:a1:4c:a6:e6:07:96:e8:f4:98:92:fc:
                    29:fb:28:48:0f:79:fa:10:f1:d9:96:e5:b5:06:72:
                    86:ab:bb:a5:5b:3f:b1:1e:d1:e3:21:e0:70:96:8a:
                    ce:de:7b:06:b9:98:23:d0:b9:d5:ee:2f:a5:92:51:
                    b0:f4:80:c4:d8:a1:15:8e:93:26:dd:92:8b:bb:e1:
                    94:fc:6b:3a:c5:be:09:2a:2c:7b:33:3e:49:bd:16:
                    07:63:cd:c0:a3:4a:1d:b7:a5:11:dc:74:1b:51:a3:
                    67:1f:9f:2e:3c:5b:ed:5b:86:13:00:8d:84:04:fa:
                    c1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:59:7E:7F:2C:61:35:09:69:38:35:8E:D2:B6:2A:AD:C3:77:20:05
            X509v3 Authority Key Identifier:
                keyid:5B:9D:96:66:1E:C8:56:27:A1:F4:99:4E:89:3F:26:FF:C4:08:AF:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/323830333a616230303a3a2f33322d3634203d3e203532343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ab00::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:d4:ed:fb:8e:4d:3a:c9:80:57:52:9a:5c:84:9c:93:58:15:
         dc:5f:36:76:0a:9e:fb:38:f9:19:e1:4b:6b:f1:1f:85:bf:7f:
         92:79:cb:ff:33:69:db:8f:54:06:48:26:3c:e6:e4:e4:d7:f8:
         c8:8b:f1:be:8d:c7:31:c6:34:56:d0:02:3f:b9:16:e5:b3:fe:
         27:eb:f1:66:f7:a0:bb:62:5c:68:14:e4:38:c4:08:aa:ce:c7:
         48:33:45:87:d4:f2:c9:38:d8:d9:4e:66:56:54:e4:c1:e3:40:
         80:71:17:c9:52:7e:11:db:e0:f3:0c:67:23:ee:ab:52:f7:8e:
         0b:e4:f9:c9:ee:d1:56:0b:68:96:a4:45:20:35:01:f7:bd:37:
         28:c3:5d:7f:97:35:5a:3b:c1:49:79:8d:41:b1:ed:1b:ba:82:
         bb:4f:64:3e:90:05:6d:03:89:d3:76:54:c9:af:ee:6a:07:b0:
         dd:d6:10:1f:cf:28:68:0c:19:91:6a:3a:0e:38:9b:f8:22:96:
         37:30:c6:be:ce:00:25:e9:7a:e7:ee:73:4d:44:67:3a:f0:84:
         02:72:94:4f:3a:f7:09:82:c9:a3:29:2b:ac:a8:0f:84:43:2d:
         85:10:dc:9c:ca:70:fe:70:0b:60:28:fa:f6:ad:27:ba:b2:f4:
         98:bd:46:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 08:23:22 2026 by rpki-client