This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/323830333a653563303a31303a3a2f34382d3438203d3e20323636373235.roa
File:                     323830333a653563303a31303a3a2f34382d3438203d3e20323636373235.roa (raw, json)
Hash identifier:          hS+rO+R9kOMU6c7YHsU5PUUbbf0qzEXZcdGM1PI4QGw=
Subject key identifier:   97:D5:83:78:8B:9D:5E:42:C2:1A:06:2D:60:1D:C1:A7:A6:10:FF:4A
Certificate issuer:       /CN=9BE1895C8F64AEC52209EA2FDE7D308AED2DA640
Certificate serial:       380EFF0DA18FFC0BE7E517BCE8C0174F771AAFFE
Authority key identifier: 9B:E1:89:5C:8F:64:AE:C5:22:09:EA:2F:DE:7D:30:8A:ED:2D:A6:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/323830333a653563303a31303a3a2f34382d3438203d3e20323636373235.roa
Signing time:             Tue 06 Jan 2026 19:23:13 +0000
ROA not before:           Tue 06 Jan 2026 19:18:13 +0000
ROA not after:            Tue 05 Jan 2027 19:23:13 +0000
asID:                     266725
IP address blocks:        2803:e5c0:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Jan 2026 14:48:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:0e:ff:0d:a1:8f:fc:0b:e7:e5:17:bc:e8:c0:17:4f:77:1a:af:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BE1895C8F64AEC52209EA2FDE7D308AED2DA640
        Validity
            Not Before: Jan  6 19:18:13 2026 GMT
            Not After : Jan  5 19:23:13 2027 GMT
        Subject: CN=97D583788B9D5E42C21A062D601DC1A7A610FF4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a1:98:13:7a:51:ce:a6:43:c2:e7:32:b8:24:
                    1b:83:ab:51:a0:f7:63:ce:98:fb:f9:c4:af:a3:b2:
                    e1:dc:b1:39:dd:ec:34:77:63:df:d6:57:00:c7:b0:
                    d9:bd:c4:54:ca:25:8f:f1:f7:20:bc:a1:fe:79:20:
                    d8:81:01:28:a5:8f:61:42:71:96:1b:88:79:b6:1a:
                    b5:5b:72:19:82:01:52:36:fe:b8:6f:3a:14:7c:6e:
                    e8:ce:48:ab:ad:4b:a5:a3:43:ec:a7:ea:fe:65:a9:
                    8f:a9:ea:40:b4:93:4c:c8:87:0a:0e:60:e2:fa:75:
                    11:ca:91:f6:eb:67:c5:e2:a0:19:71:cb:b4:57:a9:
                    ee:e6:5c:98:e1:85:db:b2:61:87:8a:04:2c:eb:28:
                    28:25:8f:3c:eb:ce:53:59:7e:38:2e:67:28:1c:a0:
                    59:0d:ca:74:26:0c:e6:83:27:96:3f:e0:70:18:d3:
                    6f:1d:69:8d:15:54:69:29:70:51:7a:ec:b0:6c:3a:
                    f7:a3:2c:ee:4d:76:20:e7:6c:c8:51:b1:b3:36:c4:
                    a8:68:ad:d7:9f:f5:76:48:5f:c5:7f:0b:f8:23:ce:
                    9a:cc:52:a0:b1:e6:a0:24:6f:cc:7a:db:73:70:06:
                    8a:6f:c4:05:6d:dd:62:68:1d:b8:e0:f8:c9:9d:99:
                    d6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D5:83:78:8B:9D:5E:42:C2:1A:06:2D:60:1D:C1:A7:A6:10:FF:4A
            X509v3 Authority Key Identifier:
                keyid:9B:E1:89:5C:8F:64:AE:C5:22:09:EA:2F:DE:7D:30:8A:ED:2D:A6:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/323830333a653563303a31303a3a2f34382d3438203d3e20323636373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e5c0:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:1e:01:e7:4b:63:57:4e:59:99:76:38:18:40:71:2d:8e:38:
         c2:55:f3:62:e4:d3:33:e5:c2:66:8e:d7:fe:b4:59:0c:e7:ba:
         a9:e2:b0:a3:06:8f:8d:33:39:f0:ea:5d:37:78:3c:a9:eb:ec:
         1b:21:69:75:87:cb:6e:4a:7a:f8:47:fc:03:cf:52:0c:63:fb:
         e6:70:0b:10:39:9a:b0:de:d2:09:5b:c8:12:27:cd:d7:88:91:
         8c:38:09:29:af:1b:90:7a:f0:ac:4c:4a:75:93:c0:2b:8b:e1:
         03:b9:f8:72:45:6c:f3:ea:3c:91:7f:d2:8f:88:f2:dd:40:ff:
         95:ee:c1:7d:6e:a3:0f:0d:29:fa:a1:f6:66:88:8b:cf:7b:a2:
         9d:67:9e:61:99:0c:56:55:16:99:5b:c8:02:f9:9d:c8:b3:f8:
         ee:57:6a:68:3a:52:b0:29:ba:dd:eb:dc:32:70:6c:8f:5e:5a:
         86:67:6c:4e:89:4e:d0:87:0d:b8:3e:bc:90:92:ff:b4:59:4e:
         ae:d1:c7:dc:70:89:54:9c:c2:9b:fc:bf:67:2a:bd:a2:47:a3:
         de:02:3a:f5:37:89:f0:90:76:58:0f:ee:00:2d:d1:d8:fe:74:
         e6:18:3b:f5:85:a8:36:5d:56:64:fb:8b:e1:ef:5e:5f:ac:f1:
         cf:84:b5:72
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUOA7/DaGP/Avn5Re86MAXT3car/4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJFMTg5NUM4RjY0QUVDNTIyMDlFQTJGREU3RDMwOEFF
RDJEQTY0MDAeFw0yNjAxMDYxOTE4MTNaFw0yNzAxMDUxOTIzMTNaMDMxMTAvBgNV
BAMTKDk3RDU4Mzc4OEI5RDVFNDJDMjFBMDYyRDYwMURDMUE3QTYxMEZGNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3oZgTelHOpkPC5zK4JBuDq1Gg
92POmPv5xK+jsuHcsTnd7DR3Y9/WVwDHsNm9xFTKJY/x9yC8of55INiBASilj2FC
cZYbiHm2GrVbchmCAVI2/rhvOhR8bujOSKutS6WjQ+yn6v5lqY+p6kC0k0zIhwoO
YOL6dRHKkfbrZ8XioBlxy7RXqe7mXJjhhduyYYeKBCzrKCgljzzrzlNZfjguZygc
oFkNynQmDOaDJ5Y/4HAY028daY0VVGkpcFF67LBsOvejLO5NdiDnbMhRsbM2xKho
rdef9XZIX8V/C/gjzprMUqCx5qAkb8x623NwBopvxAVt3WJoHbjg+Mmdmda1AgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUl9WDeIudXkLCGgYtYB3Bp6YQ/0owHwYDVR0j
BBgwFoAUm+GJXI9krsUiCeov3n0wiu0tpkAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQ0RCNzNGQ0YxRTZCRDAwMkRDQjA2QkQ2MDUyNjkxRDYy
MkVEMDkxMEE3RjJGMDUxQUVDNjkyRERFOTg0QUVGLzAvOUJFMTg5NUM4RjY0QUVD
NTIyMDlFQTJGREU3RDMwOEFFRDJEQTY0MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QkUxODk1QzhGNjRBRUM1MjIw
OUVBMkZERTdEMzA4QUVEMkRBNjQwLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUNEQjczRkNGMUU2QkQwMDJEQ0IwNkJENjA1MjY5MUQ2MjJFRDA5MTBB
N0YyRjA1MUFFQzY5MkRERTk4NEFFRi8wLzMyMzgzMDMzM2E2NTM1NjMzMDNhMzEz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzNjM3MzIzNS5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgD5cAAEDANBgkqhkiG9w0BAQsFAAOCAQEAPx4B50tjV05ZmXY4GEBxLY44wlXz
YuTTM+XCZo7X/rRZDOe6qeKwowaPjTM58OpdN3g8qevsGyFpdYfLbkp6+Ef8A89S
DGP75nALEDmasN7SCVvIEifN14iRjDgJKa8bkHrwrExKdZPAK4vhA7n4ckVs8+o8
kX/Sj4jy3UD/le7BfW6jDw0p+qH2ZoiLz3uinWeeYZkMVlUWmVvIAvmdyLP47ldq
aDpSsCm63evcMnBsj15ahmdsTolO0IcNuD68kJL/tFlOrtHH3HCJVJzCm/y/Zyq9
okej3gI69TeJ8JB2WA/uAC3R2P505hg79YWoNl1WZPuL4e9eX6zxz4S1cg==
-----END CERTIFICATE-----
Generated at Wed Jan 7 19:04:35 2026 by rpki-client