This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0627D59BE184F8B29796A2BEBD56A14B047EEA593DB9E0A4508C5E3EFE594FED/0/323830333a333365303a3a2f33322d3438203d3e20323731393437.roa
File:                     323830333a333365303a3a2f33322d3438203d3e20323731393437.roa (raw, json)
Hash identifier:          VRtBm3kFdEyFgPJu+jwy02bMsXDCeWrFZnYznKhnBU4=
Subject key identifier:   4C:FC:CD:A8:04:88:A0:60:79:76:9A:F0:5D:35:10:E1:32:5F:21:28
Certificate issuer:       /CN=F9368AF94C94EE2BA9F2475A45784CF8CEC616B7
Certificate serial:       1551A80770B8CA3D80A79ED1D875DADE8F6527B4
Authority key identifier: F9:36:8A:F9:4C:94:EE:2B:A9:F2:47:5A:45:78:4C:F8:CE:C6:16:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9368AF94C94EE2BA9F2475A45784CF8CEC616B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0627D59BE184F8B29796A2BEBD56A14B047EEA593DB9E0A4508C5E3EFE594FED/0/323830333a333365303a3a2f33322d3438203d3e20323731393437.roa
Signing time:             Tue 06 Jan 2026 19:36:18 +0000
ROA not before:           Tue 06 Jan 2026 19:31:18 +0000
ROA not after:            Tue 05 Jan 2027 19:36:18 +0000
asID:                     271947
IP address blocks:        2803:33e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0627D59BE184F8B29796A2BEBD56A14B047EEA593DB9E0A4508C5E3EFE594FED/0/F9368AF94C94EE2BA9F2475A45784CF8CEC616B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0627D59BE184F8B29796A2BEBD56A14B047EEA593DB9E0A4508C5E3EFE594FED/0/F9368AF94C94EE2BA9F2475A45784CF8CEC616B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9368AF94C94EE2BA9F2475A45784CF8CEC616B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:51:a8:07:70:b8:ca:3d:80:a7:9e:d1:d8:75:da:de:8f:65:27:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9368AF94C94EE2BA9F2475A45784CF8CEC616B7
        Validity
            Not Before: Jan  6 19:31:18 2026 GMT
            Not After : Jan  5 19:36:18 2027 GMT
        Subject: CN=4CFCCDA80488A06079769AF05D3510E1325F2128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:55:d1:90:0d:00:fa:d5:5f:9a:47:fc:c1:ce:
                    4c:4b:e4:4f:95:dc:8d:17:45:66:14:01:26:8f:e0:
                    58:9e:c2:0a:42:99:7b:c3:e9:4d:60:5f:b8:05:a3:
                    68:2a:3f:11:b0:70:89:c6:57:0a:0c:97:57:c4:16:
                    58:42:93:c7:c7:0a:e5:f0:04:15:17:e6:2d:1a:b9:
                    be:8d:33:37:7e:7a:64:55:0a:21:be:43:fc:26:11:
                    26:c3:18:e1:f4:2a:51:1f:ea:f1:9a:b3:b6:df:aa:
                    51:67:b9:a1:8d:31:ee:d7:e0:01:9c:87:d3:00:97:
                    4f:1d:24:03:fb:92:78:8e:4a:75:83:4d:36:23:f1:
                    d2:77:ce:d2:7e:a2:cb:cd:09:81:00:67:68:37:c7:
                    92:62:e3:2a:52:21:03:85:1d:6c:37:f3:19:73:c9:
                    20:12:d8:a5:2a:0c:12:71:47:bf:fd:1c:f2:69:7e:
                    29:32:08:bf:40:3a:7d:19:d2:2b:94:c3:d1:30:db:
                    90:ab:cb:f5:17:5d:83:7c:71:1c:6e:4e:4f:77:b5:
                    00:9d:93:27:a4:3c:98:07:73:5c:7d:cc:02:c8:33:
                    23:a9:71:f6:85:7e:d1:df:0f:9b:55:9f:52:c4:a5:
                    3b:5f:6d:6a:a5:cd:35:df:28:c0:6f:34:58:f7:75:
                    86:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:FC:CD:A8:04:88:A0:60:79:76:9A:F0:5D:35:10:E1:32:5F:21:28
            X509v3 Authority Key Identifier:
                keyid:F9:36:8A:F9:4C:94:EE:2B:A9:F2:47:5A:45:78:4C:F8:CE:C6:16:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0627D59BE184F8B29796A2BEBD56A14B047EEA593DB9E0A4508C5E3EFE594FED/0/F9368AF94C94EE2BA9F2475A45784CF8CEC616B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9368AF94C94EE2BA9F2475A45784CF8CEC616B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0627D59BE184F8B29796A2BEBD56A14B047EEA593DB9E0A4508C5E3EFE594FED/0/323830333a333365303a3a2f33322d3438203d3e20323731393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:33e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:68:5e:07:45:59:17:ae:d4:08:f4:5b:38:e1:de:55:f3:44:
         98:dc:11:99:a9:5e:a0:5d:a7:4a:20:1a:28:2f:ad:2c:ea:40:
         18:13:88:bc:39:d5:5a:a7:f7:08:98:cb:cd:63:17:45:40:08:
         41:28:eb:11:01:f2:66:d1:fd:10:3e:61:ce:5a:ac:0a:f9:79:
         52:5e:7c:63:3b:17:d3:65:06:78:d9:f2:c6:1b:e2:13:48:83:
         3c:b0:af:6f:1d:2c:96:5e:51:cf:fd:05:8b:66:38:55:21:ec:
         c8:ef:15:12:99:ce:9f:c3:03:54:ef:85:bc:c6:f1:d9:cf:27:
         6f:56:68:f6:11:21:c2:b3:04:5a:b0:c0:ed:11:0b:bf:88:f3:
         0b:1b:35:63:04:b8:78:cd:78:e9:46:43:f1:89:6c:76:8a:4c:
         c5:9d:39:9d:bb:d8:69:cf:55:21:7c:35:a3:94:d7:cb:ae:f7:
         e9:29:de:32:15:cb:44:0b:4a:7e:bb:ad:e9:87:b9:95:6a:8a:
         d2:d2:b9:6e:e5:3f:0b:7d:ea:ec:40:10:55:65:74:1a:48:5d:
         68:bd:4f:ba:67:82:e8:77:7a:33:3a:9b:90:50:35:9a:14:35:
         82:b9:0e:33:57:ee:08:f4:93:2e:03:1d:1b:b1:2a:27:0b:b6:
         dd:5e:3f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 13:52:07 2026 by rpki-client