This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0434853173CE0B5198644701F5B2882F655588676B47D78C8522D4C52498BFD1/0/323830333a646331303a3a2f33322d3634203d3e20323731383831.roa
File:                     323830333a646331303a3a2f33322d3634203d3e20323731383831.roa (raw, json)
Hash identifier:          oErjNv8b1oW5EuBwJB78Laynxb88Eqc3X27xVFcWH7s=
Subject key identifier:   65:09:2D:8B:6F:1A:48:10:B9:79:68:D4:5B:FF:4B:38:71:5C:F8:07
Certificate issuer:       /CN=4B5260CA1AC2523F94022706248B4D5E9A1729ED
Certificate serial:       2A89039D8FFD6E8954A3B22BB49518C195E99EB4
Authority key identifier: 4B:52:60:CA:1A:C2:52:3F:94:02:27:06:24:8B:4D:5E:9A:17:29:ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B5260CA1AC2523F94022706248B4D5E9A1729ED.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0434853173CE0B5198644701F5B2882F655588676B47D78C8522D4C52498BFD1/0/323830333a646331303a3a2f33322d3634203d3e20323731383831.roa
Signing time:             Tue 06 Jan 2026 19:28:07 +0000
ROA not before:           Tue 06 Jan 2026 19:23:07 +0000
ROA not after:            Tue 05 Jan 2027 19:28:07 +0000
asID:                     271881
IP address blocks:        2803:dc10::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0434853173CE0B5198644701F5B2882F655588676B47D78C8522D4C52498BFD1/0/4B5260CA1AC2523F94022706248B4D5E9A1729ED.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0434853173CE0B5198644701F5B2882F655588676B47D78C8522D4C52498BFD1/0/4B5260CA1AC2523F94022706248B4D5E9A1729ED.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B5260CA1AC2523F94022706248B4D5E9A1729ED.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 15:37:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:89:03:9d:8f:fd:6e:89:54:a3:b2:2b:b4:95:18:c1:95:e9:9e:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B5260CA1AC2523F94022706248B4D5E9A1729ED
        Validity
            Not Before: Jan  6 19:23:07 2026 GMT
            Not After : Jan  5 19:28:07 2027 GMT
        Subject: CN=65092D8B6F1A4810B97968D45BFF4B38715CF807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1d:7e:b0:16:14:c3:1a:ca:b2:f9:d9:01:a4:
                    9f:ea:bb:16:a2:03:53:e5:56:ab:24:53:c9:d9:e3:
                    3a:61:be:46:81:49:fc:e3:23:bf:1e:ea:18:74:99:
                    d6:63:6a:80:ac:44:08:6f:8b:da:94:6f:30:05:4f:
                    58:dd:2b:9b:42:3a:05:ef:39:03:2b:93:2c:77:5f:
                    e1:d5:62:97:9f:e1:7b:4c:6e:72:df:87:4e:c9:0b:
                    5b:c1:1f:72:a1:44:59:58:26:db:61:cd:9b:d0:b5:
                    54:fc:7d:b2:7a:bc:15:af:c3:99:fa:a1:46:3e:4b:
                    5c:a9:6c:06:02:f1:6d:74:ab:f3:7e:56:58:36:e9:
                    cd:d6:21:5d:7d:46:03:cf:28:f1:ad:95:62:2b:c4:
                    d2:c0:00:4d:1d:cc:80:d4:20:79:71:60:93:94:c6:
                    1b:1c:75:66:85:45:bd:ab:fe:a4:0a:92:d5:35:e3:
                    b3:c4:41:62:49:17:f4:9f:03:49:d9:5b:64:25:75:
                    a4:1b:ed:89:ce:f8:35:1c:8b:34:6d:ac:d3:a8:cc:
                    bf:5d:d5:69:f2:b6:c6:d9:f3:2f:c2:e4:2e:2a:e3:
                    59:2a:03:88:c3:91:91:82:ca:e8:39:a8:41:94:b4:
                    89:35:21:8f:16:d4:75:14:79:c0:36:e8:d8:c1:d3:
                    69:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:09:2D:8B:6F:1A:48:10:B9:79:68:D4:5B:FF:4B:38:71:5C:F8:07
            X509v3 Authority Key Identifier:
                keyid:4B:52:60:CA:1A:C2:52:3F:94:02:27:06:24:8B:4D:5E:9A:17:29:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0434853173CE0B5198644701F5B2882F655588676B47D78C8522D4C52498BFD1/0/4B5260CA1AC2523F94022706248B4D5E9A1729ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B5260CA1AC2523F94022706248B4D5E9A1729ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0434853173CE0B5198644701F5B2882F655588676B47D78C8522D4C52498BFD1/0/323830333a646331303a3a2f33322d3634203d3e20323731383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dc10::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:49:dc:05:03:c1:25:96:f1:d9:c4:5c:e8:87:95:d9:69:6c:
         9a:4e:76:6d:a9:78:de:6f:08:10:e3:4e:eb:87:dc:df:3c:09:
         60:a2:ca:92:cf:5b:40:b5:2a:4a:df:5e:af:c7:24:cb:25:52:
         0c:0e:48:16:42:44:2f:c3:a7:30:f7:be:46:b2:58:97:66:05:
         08:23:82:b2:c6:82:2a:61:52:6b:af:a2:f5:e3:7e:88:dd:c0:
         93:61:8a:f8:e4:f3:43:76:c2:e9:bc:4c:ab:eb:54:7e:54:24:
         63:c9:e7:45:8e:a3:7c:9e:29:70:c6:36:43:4b:e1:54:d2:51:
         48:b4:1f:55:1e:9a:7e:83:98:30:86:e5:12:1f:f6:aa:bc:60:
         35:f4:81:22:8f:23:25:19:02:e7:0d:e2:94:4d:dd:bc:d5:fc:
         47:39:46:14:3b:f1:76:e3:a6:8d:71:6e:bd:e3:08:34:c4:ea:
         cb:f1:79:13:57:5f:0b:84:5b:ca:b5:d2:67:79:b5:c4:11:9d:
         5b:70:70:32:eb:6a:f6:b9:9d:c3:01:db:79:6a:10:b7:a9:02:
         b1:42:49:d6:7a:e9:2c:a2:91:27:76:9a:52:63:4f:33:c3:d4:
         94:ff:20:aa:56:7c:f3:40:59:de:4c:d1:f3:30:d7:fd:82:05:
         a4:c7:f2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 06:34:46 2026 by rpki-client