This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1EDA414F342F11CF67E9733027D6DE98ACC0B35E8DD72DBF4868DA584B9E4375/0/323830333a313730303a3a2f33322d3332203d3e203532343836.roa
File:                     323830333a313730303a3a2f33322d3332203d3e203532343836.roa (raw, json)
Hash identifier:          0geyEZhhFtxUiZWxQTGPhn52kDaYAOj1l0OsdggKnes=
Subject key identifier:   C1:11:50:19:45:9E:8D:0E:61:7F:22:D7:0A:B7:9A:3C:59:89:82:AC
Certificate issuer:       /CN=D2153B62E49F8ABC50BE582BB8297728599A91FD
Certificate serial:       1DD2C3C80F5B0A2DBE5688B96CC631D126CF0279
Authority key identifier: D2:15:3B:62:E4:9F:8A:BC:50:BE:58:2B:B8:29:77:28:59:9A:91:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2153B62E49F8ABC50BE582BB8297728599A91FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1EDA414F342F11CF67E9733027D6DE98ACC0B35E8DD72DBF4868DA584B9E4375/0/323830333a313730303a3a2f33322d3332203d3e203532343836.roa
Signing time:             Tue 06 Jan 2026 19:21:27 +0000
ROA not before:           Tue 06 Jan 2026 19:16:27 +0000
ROA not after:            Tue 05 Jan 2027 19:21:27 +0000
asID:                     52486
IP address blocks:        2803:1700::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1EDA414F342F11CF67E9733027D6DE98ACC0B35E8DD72DBF4868DA584B9E4375/0/D2153B62E49F8ABC50BE582BB8297728599A91FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1EDA414F342F11CF67E9733027D6DE98ACC0B35E8DD72DBF4868DA584B9E4375/0/D2153B62E49F8ABC50BE582BB8297728599A91FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2153B62E49F8ABC50BE582BB8297728599A91FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 16:39:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:d2:c3:c8:0f:5b:0a:2d:be:56:88:b9:6c:c6:31:d1:26:cf:02:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2153B62E49F8ABC50BE582BB8297728599A91FD
        Validity
            Not Before: Jan  6 19:16:27 2026 GMT
            Not After : Jan  5 19:21:27 2027 GMT
        Subject: CN=C1115019459E8D0E617F22D70AB79A3C598982AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:eb:07:c3:fb:e0:ec:a4:11:6b:d3:74:08:49:
                    bc:dd:9e:ac:46:b9:80:bd:0f:7e:1d:ac:f2:bf:9d:
                    6d:13:1e:5b:00:83:e2:0e:31:d8:58:24:56:42:b7:
                    7a:e2:5d:9b:7e:9b:5a:35:1a:e8:d3:fd:9e:57:ad:
                    ff:97:a0:78:d9:95:8a:d5:83:09:2a:41:e6:cf:8e:
                    d7:f1:43:6f:4e:4a:8d:a6:2e:e2:09:75:b6:47:ad:
                    12:92:57:78:1c:f4:62:96:7e:36:63:c0:35:a5:eb:
                    7b:70:3f:9f:3e:ba:06:d5:20:52:2d:aa:6e:7f:cd:
                    54:1c:2e:e9:f5:54:cf:d2:2b:4a:ab:ea:47:cf:4f:
                    62:d6:4f:f4:3c:65:5d:03:29:25:cf:08:8e:90:4c:
                    01:6d:52:62:03:02:66:ce:f6:87:cd:f2:fc:a5:a6:
                    37:f1:b3:5b:88:cb:d3:92:b6:3c:96:91:94:06:fb:
                    92:c8:69:31:21:2e:58:7c:68:72:c6:90:31:b2:21:
                    6c:0a:30:f6:be:de:2c:cd:d1:21:ab:b9:4f:66:80:
                    20:45:ab:c8:d7:b0:07:de:3d:b2:c6:d7:a2:e5:8d:
                    01:70:cc:5e:50:84:99:87:32:f5:bb:23:fe:cf:72:
                    3f:ae:51:80:52:48:0d:84:6f:fc:09:b4:de:04:c7:
                    3d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:11:50:19:45:9E:8D:0E:61:7F:22:D7:0A:B7:9A:3C:59:89:82:AC
            X509v3 Authority Key Identifier:
                keyid:D2:15:3B:62:E4:9F:8A:BC:50:BE:58:2B:B8:29:77:28:59:9A:91:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1EDA414F342F11CF67E9733027D6DE98ACC0B35E8DD72DBF4868DA584B9E4375/0/D2153B62E49F8ABC50BE582BB8297728599A91FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2153B62E49F8ABC50BE582BB8297728599A91FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1EDA414F342F11CF67E9733027D6DE98ACC0B35E8DD72DBF4868DA584B9E4375/0/323830333a313730303a3a2f33322d3332203d3e203532343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1700::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:c8:9b:3a:6a:ab:71:d8:8d:ec:01:cb:d5:71:24:52:e3:cd:
         95:03:8d:51:d2:50:7d:29:1c:95:db:c9:8e:66:e5:13:e8:45:
         da:54:52:f7:ba:6c:b1:d6:67:de:00:e3:4a:88:82:6b:09:a9:
         9b:86:c6:87:68:e9:b3:b3:3a:d5:73:43:18:3b:31:5e:58:af:
         b6:56:3d:77:a2:97:13:fa:12:52:27:3d:a7:23:63:85:dc:8c:
         ca:5f:ce:4d:33:81:2f:1a:4a:ee:e8:7e:50:66:fb:15:c7:1b:
         79:81:88:88:a1:25:60:5e:54:02:19:2f:d1:a3:40:a2:3b:28:
         34:99:36:13:84:ed:38:82:d6:c4:c4:5f:84:e8:1c:3d:db:32:
         aa:cd:a5:57:64:08:72:95:80:1f:58:46:38:2a:c2:fb:12:46:
         5c:c0:97:5d:d6:49:4c:f7:1c:13:6e:6b:a1:93:9b:cf:0b:a9:
         40:89:cd:58:bc:79:65:72:c8:1b:b3:0a:82:b8:ca:eb:98:b0:
         46:09:95:3f:a0:21:be:d6:53:77:38:0f:9b:af:b1:ac:63:a7:
         6c:48:da:10:39:f9:d0:c1:7f:57:01:53:40:31:63:ee:1a:03:
         b7:3b:9c:01:bc:4f:23:d0:79:6e:5d:a9:3c:71:4a:cd:55:d3:
         be:48:79:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 05:21:43 2026 by rpki-client