This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0261522A7D1B1599601F0A1AAB8391A7D6EA0A5BDF95B045ABA001E79DD4B632/0/323830333a626238303a3a2f33322d3332203d3e20323633373031.roa
File:                     323830333a626238303a3a2f33322d3332203d3e20323633373031.roa (raw, json)
Hash identifier:          IiDnfxEC3Kt7mUjm5LU66u3lTmMv3/KafPKwbOIwu8g=
Subject key identifier:   F1:CB:6B:D3:E9:07:78:DD:01:F6:CA:C6:8A:C2:AC:C3:68:01:F5:42
Certificate issuer:       /CN=2D8AB2848654D51664AC6F45A44E5407C6B35912
Certificate serial:       5FAD1EBB5B810FD9BCFC1CB7865FF9C735C39028
Authority key identifier: 2D:8A:B2:84:86:54:D5:16:64:AC:6F:45:A4:4E:54:07:C6:B3:59:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8AB2848654D51664AC6F45A44E5407C6B35912.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0261522A7D1B1599601F0A1AAB8391A7D6EA0A5BDF95B045ABA001E79DD4B632/0/323830333a626238303a3a2f33322d3332203d3e20323633373031.roa
Signing time:             Tue 06 Jan 2026 19:16:53 +0000
ROA not before:           Tue 06 Jan 2026 19:11:53 +0000
ROA not after:            Tue 05 Jan 2027 19:16:53 +0000
asID:                     263701
IP address blocks:        2803:bb80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0261522A7D1B1599601F0A1AAB8391A7D6EA0A5BDF95B045ABA001E79DD4B632/0/2D8AB2848654D51664AC6F45A44E5407C6B35912.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0261522A7D1B1599601F0A1AAB8391A7D6EA0A5BDF95B045ABA001E79DD4B632/0/2D8AB2848654D51664AC6F45A44E5407C6B35912.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8AB2848654D51664AC6F45A44E5407C6B35912.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Jan 2026 01:36:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ad:1e:bb:5b:81:0f:d9:bc:fc:1c:b7:86:5f:f9:c7:35:c3:90:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D8AB2848654D51664AC6F45A44E5407C6B35912
        Validity
            Not Before: Jan  6 19:11:53 2026 GMT
            Not After : Jan  5 19:16:53 2027 GMT
        Subject: CN=F1CB6BD3E90778DD01F6CAC68AC2ACC36801F542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:59:49:82:a0:46:a2:9c:d7:37:53:d8:da:b5:
                    2e:6c:8b:db:cd:29:45:8c:e1:81:a1:4d:44:d7:93:
                    e9:ac:53:31:a5:b8:81:8b:45:41:d2:15:94:cc:88:
                    02:f1:8d:f9:2e:14:3f:93:ef:fe:04:9f:67:ce:5f:
                    0a:47:b3:de:7e:70:d6:c7:72:1b:52:9c:5b:c2:78:
                    cb:18:7e:8a:f8:c4:40:f1:3d:51:27:f3:36:7c:a5:
                    71:20:c2:ae:9e:e0:cd:b9:5f:1e:a8:7a:80:3a:9b:
                    6f:75:13:ef:85:88:d9:eb:e2:91:3b:53:0f:0d:f4:
                    f6:4f:34:1c:20:43:06:6d:15:49:72:52:1a:b4:27:
                    06:de:49:f9:fd:14:d9:b7:e3:f4:5f:d2:fe:d7:eb:
                    bc:17:a2:c3:e0:64:71:07:d5:54:86:9b:f9:47:2e:
                    96:8e:e8:84:44:11:a0:9f:39:21:ad:f2:d7:a6:f3:
                    2a:a1:b4:9f:6d:6e:46:21:8b:5d:ca:2c:3b:f8:0f:
                    89:fb:ef:43:94:e9:59:57:36:c2:ef:75:76:ae:08:
                    36:93:75:48:3f:01:4b:4d:fa:aa:14:9b:93:59:77:
                    39:74:3b:7f:53:bd:87:1d:8b:d4:47:c3:fc:4a:ac:
                    7a:a1:9e:4b:a0:40:6b:ab:87:7f:6b:97:6d:0b:58:
                    07:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:CB:6B:D3:E9:07:78:DD:01:F6:CA:C6:8A:C2:AC:C3:68:01:F5:42
            X509v3 Authority Key Identifier:
                keyid:2D:8A:B2:84:86:54:D5:16:64:AC:6F:45:A4:4E:54:07:C6:B3:59:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0261522A7D1B1599601F0A1AAB8391A7D6EA0A5BDF95B045ABA001E79DD4B632/0/2D8AB2848654D51664AC6F45A44E5407C6B35912.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8AB2848654D51664AC6F45A44E5407C6B35912.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0261522A7D1B1599601F0A1AAB8391A7D6EA0A5BDF95B045ABA001E79DD4B632/0/323830333a626238303a3a2f33322d3332203d3e20323633373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bb80::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:b5:1d:7b:d9:99:bd:b1:b6:fa:fa:ae:18:e9:43:58:8f:14:
         2a:cc:cb:08:e9:19:81:76:20:78:b7:f7:fc:10:24:4e:bc:fa:
         e3:b5:f7:b6:16:9b:57:11:bd:d0:96:23:43:28:9a:24:83:ff:
         e7:d9:69:b0:5b:43:51:20:78:77:4d:bc:3d:df:ce:0d:68:96:
         30:22:d1:80:33:a3:d9:8c:95:df:39:81:3c:e8:53:7a:cb:43:
         d1:f0:69:8b:b6:6b:ec:18:44:f9:98:13:2a:27:ea:27:9a:94:
         17:61:9b:50:ca:7c:c2:8c:3d:38:f8:08:0b:69:4d:7d:02:c7:
         80:ba:5e:54:4b:bf:e3:95:99:06:e1:46:76:d3:ed:2f:e1:e5:
         df:3f:03:28:2d:69:08:b6:fe:09:50:2b:5e:54:0a:07:e7:06:
         44:ef:4e:34:fb:4a:05:28:81:56:20:fd:2d:e3:31:25:01:0c:
         fd:2f:55:b5:d5:1a:92:d9:2b:97:61:43:73:be:30:ac:70:bd:
         48:8c:3c:c6:1f:f8:e6:03:34:0e:bb:71:3a:0c:8e:cb:d4:77:
         5c:e4:0e:8b:57:64:41:f5:c1:31:a5:a5:76:50:a5:9d:08:95:
         55:09:5d:d0:f0:e6:03:31:98:b6:3a:ab:ea:9f:4f:8d:1e:11:
         5f:56:7a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 16:01:30 2026 by rpki-client