This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/323830333a633863303a3a2f33322d3332203d3e20323634373736.roa
File:                     323830333a633863303a3a2f33322d3332203d3e20323634373736.roa (raw, json)
Hash identifier:          +nY2jkWTGldA4kd/JIKFX/SB4i6ri7939PR4O6IpsCg=
Subject key identifier:   59:59:17:55:02:5D:C9:19:C9:04:EE:4B:06:E5:51:47:27:78:BF:6E
Certificate issuer:       /CN=21412A097D724851BE961D093E8521CC77A7B163
Certificate serial:       43DD4BD5995D38056E6DE11D7780656CD7EE272E
Authority key identifier: 21:41:2A:09:7D:72:48:51:BE:96:1D:09:3E:85:21:CC:77:A7:B1:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21412A097D724851BE961D093E8521CC77A7B163.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/323830333a633863303a3a2f33322d3332203d3e20323634373736.roa
Signing time:             Tue 06 Jan 2026 19:00:50 +0000
ROA not before:           Tue 06 Jan 2026 18:55:50 +0000
ROA not after:            Tue 05 Jan 2027 19:00:50 +0000
asID:                     264776
IP address blocks:        2803:c8c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.crl
                          rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21412A097D724851BE961D093E8521CC77A7B163.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 20:20:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:dd:4b:d5:99:5d:38:05:6e:6d:e1:1d:77:80:65:6c:d7:ee:27:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21412A097D724851BE961D093E8521CC77A7B163
        Validity
            Not Before: Jan  6 18:55:50 2026 GMT
            Not After : Jan  5 19:00:50 2027 GMT
        Subject: CN=59591755025DC919C904EE4B06E551472778BF6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f1:34:e6:9c:1b:09:39:a8:52:4f:30:08:cf:
                    f5:64:89:78:9b:ea:1c:c0:d4:46:de:d0:c4:70:83:
                    bc:28:5a:fa:7e:17:91:d6:95:a9:3f:90:25:d1:41:
                    9f:29:8c:9d:6e:de:76:fa:20:41:a4:31:de:fa:c0:
                    41:3e:c8:f6:7f:f1:38:66:a9:6f:c9:38:34:f5:23:
                    0d:2d:c4:72:3f:19:33:78:ce:2b:be:95:99:9a:d0:
                    40:e4:68:b4:26:e7:be:dd:b1:d9:85:d2:fa:6f:0f:
                    51:aa:e2:b8:4b:d8:84:80:72:44:47:82:a6:05:4e:
                    d0:6d:f9:16:b0:9b:e7:70:ea:83:99:da:a9:1f:39:
                    ff:68:d7:1a:70:7a:fe:ea:91:9c:7e:bf:bf:e4:64:
                    96:44:f2:89:a7:7d:bf:45:68:b3:6f:a4:35:e4:5f:
                    6f:da:a4:6a:43:a4:75:e5:8a:b1:ca:10:b4:0c:1d:
                    64:b3:bd:59:f8:2c:2d:4e:2f:a2:ce:93:4e:38:6b:
                    a0:83:54:8e:04:85:98:9f:89:3d:c8:68:a1:6f:b1:
                    b9:22:cd:24:75:78:39:03:c8:57:d5:22:c2:aa:64:
                    f9:c3:a7:d0:fb:cd:eb:54:9f:aa:81:f5:cb:22:69:
                    0d:16:bc:6b:f6:cd:63:bc:02:3c:6f:c8:8c:4e:fd:
                    05:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:59:17:55:02:5D:C9:19:C9:04:EE:4B:06:E5:51:47:27:78:BF:6E
            X509v3 Authority Key Identifier:
                keyid:21:41:2A:09:7D:72:48:51:BE:96:1D:09:3E:85:21:CC:77:A7:B1:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21412A097D724851BE961D093E8521CC77A7B163.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/323830333a633863303a3a2f33322d3332203d3e20323634373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c8c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:2c:70:b0:42:85:ae:54:f1:d7:4e:d8:f3:0b:fd:97:d6:e9:
         02:31:5a:fa:51:b4:f4:d6:78:20:81:37:fb:13:10:80:16:a7:
         7b:ae:05:75:d2:9c:d1:e9:00:27:98:1e:31:b9:89:25:15:ad:
         e9:1f:00:3f:11:fa:8a:be:21:cd:0a:00:fe:4d:84:2e:b4:7f:
         45:13:39:17:b0:ce:9f:5b:39:59:66:23:51:10:d6:b0:dd:59:
         c8:84:da:99:d2:b9:33:74:de:49:17:fe:8c:1f:44:38:ad:ca:
         dc:56:69:17:7e:b3:21:b7:4f:0f:55:51:ac:c9:0b:09:21:89:
         95:48:83:ad:ca:10:5d:40:2b:13:b0:83:c3:30:b9:c5:0b:2c:
         62:c2:55:b7:f4:92:00:06:d7:98:ee:2d:39:93:0b:cb:15:46:
         45:df:ec:6d:da:68:03:36:03:8b:b9:89:11:16:17:8b:b1:87:
         e7:fe:b7:e5:a6:0a:5f:a2:c6:33:6a:c9:67:96:91:ee:f3:5b:
         81:d7:2d:bb:c9:82:9c:3e:22:9d:52:dd:a1:63:ed:8b:10:13:
         05:4b:01:7e:23:df:aa:d5:7c:c5:28:f3:0f:2d:52:44:ec:db:
         09:50:69:61:88:55:1c:d1:0b:34:26:87:8c:73:39:c3:33:3e:
         e4:61:0f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 13:31:29 2026 by rpki-client