This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C5A669E66E0226898970860795E838DAFA0421E6969F99415AB8BD789BF07A8A/0/323830333a363432303a3a2f33322d3332203d3e20323634363638.roa
File:                     323830333a363432303a3a2f33322d3332203d3e20323634363638.roa (raw, json)
Hash identifier:          G2TjwP+cAprLCkHc4DfWoiNEXLoXmxCsbFZkNMd+E1A=
Subject key identifier:   F2:99:BA:57:C6:91:3B:71:EA:D3:C8:2E:45:07:5B:8F:42:15:05:04
Certificate issuer:       /CN=5CB5BC2178578E05EB3BA17A1C805009B3BB65EB
Certificate serial:       1EF573ABA39478029EEC9E9F58AB0FA727BC82CC
Authority key identifier: 5C:B5:BC:21:78:57:8E:05:EB:3B:A1:7A:1C:80:50:09:B3:BB:65:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CB5BC2178578E05EB3BA17A1C805009B3BB65EB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C5A669E66E0226898970860795E838DAFA0421E6969F99415AB8BD789BF07A8A/0/323830333a363432303a3a2f33322d3332203d3e20323634363638.roa
Signing time:             Tue 06 Jan 2026 19:18:10 +0000
ROA not before:           Tue 06 Jan 2026 19:13:10 +0000
ROA not after:            Tue 05 Jan 2027 19:18:10 +0000
asID:                     264668
IP address blocks:        2803:6420::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C5A669E66E0226898970860795E838DAFA0421E6969F99415AB8BD789BF07A8A/0/5CB5BC2178578E05EB3BA17A1C805009B3BB65EB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C5A669E66E0226898970860795E838DAFA0421E6969F99415AB8BD789BF07A8A/0/5CB5BC2178578E05EB3BA17A1C805009B3BB65EB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CB5BC2178578E05EB3BA17A1C805009B3BB65EB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:f5:73:ab:a3:94:78:02:9e:ec:9e:9f:58:ab:0f:a7:27:bc:82:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CB5BC2178578E05EB3BA17A1C805009B3BB65EB
        Validity
            Not Before: Jan  6 19:13:10 2026 GMT
            Not After : Jan  5 19:18:10 2027 GMT
        Subject: CN=F299BA57C6913B71EAD3C82E45075B8F42150504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3b:34:73:6b:62:48:57:af:d0:45:1d:e6:0e:
                    ec:84:f7:ea:93:4b:cc:64:87:81:05:13:2c:02:b7:
                    1e:cb:9a:1f:6e:b9:cd:6f:ef:2d:74:38:9e:c1:d0:
                    bb:62:a8:b2:56:3b:57:72:89:97:1a:34:49:91:ec:
                    81:35:fb:16:a4:75:6f:03:41:91:c5:c5:94:a8:b7:
                    67:09:99:a3:ca:08:5e:ec:d5:8d:cf:65:3a:c7:48:
                    ff:8e:f8:a3:b2:e5:ed:3f:c4:8b:fb:15:22:99:71:
                    a0:a7:80:fc:96:dd:76:a4:2b:a9:66:fb:2d:16:0e:
                    ab:2e:09:8b:db:5c:50:a3:5c:5d:c0:0e:bd:10:5a:
                    d8:a2:ff:0f:4d:95:2f:ab:38:61:27:1d:f7:a0:dd:
                    60:c1:30:12:6d:b4:6f:72:62:8e:34:4c:af:a4:f4:
                    99:86:c6:5c:db:56:f1:bb:87:50:80:87:4a:a8:27:
                    c1:e7:c9:90:b0:b0:68:ff:b0:77:27:d0:02:e2:75:
                    5d:e2:d3:bc:db:55:37:a4:bc:25:7a:ff:5f:ee:d2:
                    6d:dc:1f:55:33:ca:d2:c9:98:b7:29:41:29:91:1c:
                    aa:29:61:f4:37:28:5e:a0:79:f4:f1:65:f9:26:95:
                    e6:5d:82:94:c4:58:c4:73:43:21:85:b6:9c:04:8e:
                    66:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:99:BA:57:C6:91:3B:71:EA:D3:C8:2E:45:07:5B:8F:42:15:05:04
            X509v3 Authority Key Identifier:
                keyid:5C:B5:BC:21:78:57:8E:05:EB:3B:A1:7A:1C:80:50:09:B3:BB:65:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C5A669E66E0226898970860795E838DAFA0421E6969F99415AB8BD789BF07A8A/0/5CB5BC2178578E05EB3BA17A1C805009B3BB65EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CB5BC2178578E05EB3BA17A1C805009B3BB65EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C5A669E66E0226898970860795E838DAFA0421E6969F99415AB8BD789BF07A8A/0/323830333a363432303a3a2f33322d3332203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6420::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:0c:de:7a:18:b1:34:a4:a4:9b:91:57:32:16:95:72:59:9e:
         71:d8:13:e8:0d:78:a2:48:5b:85:8f:20:ba:09:b1:29:86:99:
         ae:9a:49:c7:f1:fe:78:3a:47:32:5c:f3:1c:c6:13:da:1d:ad:
         77:67:61:e0:77:d7:a7:70:0c:1e:df:67:82:ab:49:74:c9:0b:
         ab:96:db:d8:2a:d3:13:d9:33:bb:48:a9:dc:e8:e8:aa:b4:53:
         77:4a:f5:0a:4c:88:b2:ef:af:5c:0c:e8:60:28:a3:3c:41:a3:
         44:4c:5d:89:fa:bc:6c:ae:58:dc:4e:a8:a1:6a:a3:88:4d:85:
         61:9a:d9:c2:3f:ba:0e:ac:6b:64:3a:a7:28:7f:a6:1b:40:f4:
         89:69:3d:1d:73:f6:ba:23:22:21:8d:42:15:10:a7:c4:66:fc:
         73:f1:ad:96:78:81:d1:d6:49:a0:45:19:66:8f:e8:1a:9a:7d:
         b9:ec:a8:cf:ae:09:e1:11:6a:67:d2:2f:55:1d:33:f8:47:fb:
         d7:5e:54:84:67:5d:bc:5e:3e:e9:10:a7:ad:ec:9a:be:43:74:
         7e:a0:ce:c0:f7:f2:ba:77:14:34:f0:3e:12:2c:d7:c0:74:03:
         ec:e2:62:5d:c5:cd:47:71:a7:1e:70:21:0a:f8:4b:cc:8d:3c:
         9c:7c:9d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 11:23:04 2026 by rpki-client