This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/064DB5FFE31B39723D1C044052FD1146984F45E9D66B08AC418FFA7DB7CCDDCE/0/323830333a383331303a3a2f33322d3438203d3e20323732303539.roa
File:                     323830333a383331303a3a2f33322d3438203d3e20323732303539.roa (raw, json)
Hash identifier:          5JGu+tJpF5bxmviuII8AB867cSIncnAC1uqDtvGZX00=
Subject key identifier:   8E:2B:A1:EE:5C:AB:0F:5C:B4:1D:75:B0:05:4B:8C:4E:B7:9E:3A:FA
Certificate issuer:       /CN=4B4905962394174DB3A50FE565148CE8821022EC
Certificate serial:       112B27CEF1FF72B1735704589842D33BC4C6428F
Authority key identifier: 4B:49:05:96:23:94:17:4D:B3:A5:0F:E5:65:14:8C:E8:82:10:22:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B4905962394174DB3A50FE565148CE8821022EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/064DB5FFE31B39723D1C044052FD1146984F45E9D66B08AC418FFA7DB7CCDDCE/0/323830333a383331303a3a2f33322d3438203d3e20323732303539.roa
Signing time:             Tue 06 Jan 2026 19:39:23 +0000
ROA not before:           Tue 06 Jan 2026 19:34:23 +0000
ROA not after:            Tue 05 Jan 2027 19:39:23 +0000
asID:                     272059
IP address blocks:        2803:8310::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/064DB5FFE31B39723D1C044052FD1146984F45E9D66B08AC418FFA7DB7CCDDCE/0/4B4905962394174DB3A50FE565148CE8821022EC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/064DB5FFE31B39723D1C044052FD1146984F45E9D66B08AC418FFA7DB7CCDDCE/0/4B4905962394174DB3A50FE565148CE8821022EC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B4905962394174DB3A50FE565148CE8821022EC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 17:28:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:2b:27:ce:f1:ff:72:b1:73:57:04:58:98:42:d3:3b:c4:c6:42:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B4905962394174DB3A50FE565148CE8821022EC
        Validity
            Not Before: Jan  6 19:34:23 2026 GMT
            Not After : Jan  5 19:39:23 2027 GMT
        Subject: CN=8E2BA1EE5CAB0F5CB41D75B0054B8C4EB79E3AFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:93:1b:20:34:24:0d:d8:2e:67:d6:7c:09:1b:
                    a0:68:93:68:15:63:bb:02:b0:62:76:ae:0c:7e:e8:
                    a9:9f:1c:c2:a4:48:33:93:27:a7:8e:91:7b:0d:ac:
                    f6:7d:2e:44:8e:97:d7:b8:1b:7c:38:60:23:3e:d2:
                    ab:5e:84:cd:22:bb:cf:6c:aa:28:b0:5c:e9:07:ea:
                    4b:d1:c7:df:3b:65:a2:a1:7c:e2:06:8c:fe:11:23:
                    da:32:e9:6e:c8:39:14:8b:7d:b3:92:1a:df:32:65:
                    cc:83:dc:30:c0:d4:ab:8e:37:e6:7d:51:c4:d6:e4:
                    ee:82:b5:06:ef:7f:8c:c6:83:b6:ca:51:ce:22:5a:
                    58:c3:2c:ff:b4:f8:ad:be:26:bf:40:26:a3:af:37:
                    1a:f7:05:fa:e9:46:58:a8:42:e7:34:02:82:27:12:
                    d1:52:21:25:bd:96:e1:76:dc:fe:c2:bf:7b:d8:25:
                    00:07:39:39:05:e8:92:b0:d6:3a:fb:28:2b:03:b6:
                    06:ba:ca:3b:12:a0:18:50:2b:ed:d9:aa:6e:d8:6e:
                    37:6a:24:92:a4:6d:dd:df:5e:f9:ec:9e:57:26:e2:
                    de:f0:e1:cb:d7:7d:6f:6a:c8:7a:7b:bb:f5:ca:a6:
                    39:cd:1a:87:80:94:2d:7b:3b:fc:86:18:d8:c5:6e:
                    08:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:2B:A1:EE:5C:AB:0F:5C:B4:1D:75:B0:05:4B:8C:4E:B7:9E:3A:FA
            X509v3 Authority Key Identifier:
                keyid:4B:49:05:96:23:94:17:4D:B3:A5:0F:E5:65:14:8C:E8:82:10:22:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/064DB5FFE31B39723D1C044052FD1146984F45E9D66B08AC418FFA7DB7CCDDCE/0/4B4905962394174DB3A50FE565148CE8821022EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B4905962394174DB3A50FE565148CE8821022EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/064DB5FFE31B39723D1C044052FD1146984F45E9D66B08AC418FFA7DB7CCDDCE/0/323830333a383331303a3a2f33322d3438203d3e20323732303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8310::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:54:df:1c:a1:95:96:54:29:ea:23:50:79:05:64:1e:1e:d7:
         30:ef:10:cc:4e:5f:47:9f:3f:8f:61:ce:a4:66:99:80:13:d5:
         b8:cc:6a:eb:cb:d8:1f:58:1f:cf:f7:f1:12:17:72:0a:73:1b:
         d6:9e:eb:2f:91:68:eb:7d:f6:59:9e:f3:f1:c2:8b:f3:f7:79:
         d8:7f:e6:bb:ae:96:e8:ad:81:4c:ca:45:35:4e:6a:d9:6d:92:
         1a:1e:34:3a:e8:c2:d8:d6:ac:7c:23:c9:c1:65:d0:47:12:23:
         e5:44:4f:3f:84:a0:1a:f2:c1:46:6c:94:ae:32:52:9a:f1:02:
         8b:e5:cc:2f:8f:41:df:4c:fc:25:17:8a:b4:f8:54:00:56:ef:
         c7:42:5a:37:fa:59:89:20:3f:7c:7d:96:cc:e2:5b:b6:bd:5d:
         0b:96:1d:33:c6:21:01:56:d5:f8:b1:20:90:3e:80:03:84:e2:
         57:83:14:42:a5:ab:c2:f1:43:9c:36:17:46:08:5b:2e:06:75:
         7b:33:2e:28:83:99:aa:95:50:cd:4f:0f:4f:4a:e2:bc:95:bd:
         e3:4f:43:67:35:cc:5f:93:43:47:65:8f:0b:c9:a3:7e:69:b3:
         06:93:38:8b:68:3a:29:09:87:60:62:6a:98:d0:cd:1d:82:e0:
         e4:bd:90:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 04:10:21 2026 by rpki-client