This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1EE90629661992A654272218DB8596F9D62BE08C6FCDA49802727E2D5E1CDB26/0/323830333a663263303a3a2f33322d3332203d3e203532343638.roa
File:                     323830333a663263303a3a2f33322d3332203d3e203532343638.roa (raw, json)
Hash identifier:          2j686iEIrRqPZVptuwGGJJBKOij1Uz09yJLf2+JNjEQ=
Subject key identifier:   B7:62:11:6B:2F:83:97:E8:DE:0C:41:A2:E0:ED:DF:CD:2E:86:26:13
Certificate issuer:       /CN=D4A2D9881591DD14F59AE3D35AB8827CEDBE788A
Certificate serial:       7D88281003AF423AD5C81340556FCB2A964A469F
Authority key identifier: D4:A2:D9:88:15:91:DD:14:F5:9A:E3:D3:5A:B8:82:7C:ED:BE:78:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4A2D9881591DD14F59AE3D35AB8827CEDBE788A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1EE90629661992A654272218DB8596F9D62BE08C6FCDA49802727E2D5E1CDB26/0/323830333a663263303a3a2f33322d3332203d3e203532343638.roa
Signing time:             Tue 06 Jan 2026 20:49:34 +0000
ROA not before:           Tue 06 Jan 2026 20:44:34 +0000
ROA not after:            Tue 05 Jan 2027 20:49:34 +0000
asID:                     52468
IP address blocks:        2803:f2c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1EE90629661992A654272218DB8596F9D62BE08C6FCDA49802727E2D5E1CDB26/0/D4A2D9881591DD14F59AE3D35AB8827CEDBE788A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1EE90629661992A654272218DB8596F9D62BE08C6FCDA49802727E2D5E1CDB26/0/D4A2D9881591DD14F59AE3D35AB8827CEDBE788A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4A2D9881591DD14F59AE3D35AB8827CEDBE788A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 16:15:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:88:28:10:03:af:42:3a:d5:c8:13:40:55:6f:cb:2a:96:4a:46:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4A2D9881591DD14F59AE3D35AB8827CEDBE788A
        Validity
            Not Before: Jan  6 20:44:34 2026 GMT
            Not After : Jan  5 20:49:34 2027 GMT
        Subject: CN=B762116B2F8397E8DE0C41A2E0EDDFCD2E862613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f6:8c:b0:06:08:65:ed:cd:e3:0e:d7:11:e2:
                    f9:29:76:f0:1a:2e:8a:f0:66:37:8b:6b:7f:e1:a2:
                    ad:3f:c3:7e:fd:5b:a2:01:20:af:f5:65:4b:1b:9a:
                    af:e2:a0:e0:b7:ad:da:b1:b8:87:aa:f7:03:99:9e:
                    81:ce:e7:9b:3d:da:36:8a:d5:0d:ef:99:8f:3b:47:
                    61:93:f3:9b:00:f3:8b:99:20:88:f1:5b:b2:6b:64:
                    f9:9f:f5:06:41:b0:38:84:31:a6:03:83:84:0b:75:
                    b8:34:66:5c:0e:b8:2b:5c:26:65:8d:4b:77:49:dc:
                    bc:f6:54:28:de:59:ef:f7:ae:13:58:08:98:cb:b6:
                    73:b4:c8:c2:45:cc:77:aa:43:d7:fc:0f:f9:7d:2c:
                    46:e4:61:2c:5c:1f:05:7c:6b:87:88:bc:f6:e9:a9:
                    9d:40:77:e5:f9:17:5a:c7:5a:c2:13:fd:12:42:15:
                    8e:a8:fb:36:b8:8c:7c:18:71:4d:a5:d7:7a:2d:05:
                    9a:94:4e:f3:3c:c6:7c:ac:f0:98:3d:79:08:f0:76:
                    2e:11:ce:8c:b4:c5:90:97:a7:f0:ba:61:96:d4:6a:
                    07:8c:02:81:ef:c2:21:a9:56:89:4b:b1:b6:4e:45:
                    75:0d:05:f1:c0:37:8e:39:5c:1e:20:17:8e:37:19:
                    d4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:62:11:6B:2F:83:97:E8:DE:0C:41:A2:E0:ED:DF:CD:2E:86:26:13
            X509v3 Authority Key Identifier:
                keyid:D4:A2:D9:88:15:91:DD:14:F5:9A:E3:D3:5A:B8:82:7C:ED:BE:78:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1EE90629661992A654272218DB8596F9D62BE08C6FCDA49802727E2D5E1CDB26/0/D4A2D9881591DD14F59AE3D35AB8827CEDBE788A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4A2D9881591DD14F59AE3D35AB8827CEDBE788A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1EE90629661992A654272218DB8596F9D62BE08C6FCDA49802727E2D5E1CDB26/0/323830333a663263303a3a2f33322d3332203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f2c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:20:d7:f7:f8:53:6e:ac:1a:2c:9d:34:5f:e2:c1:ac:e6:25:
         37:03:c2:48:5a:36:ae:c5:26:df:e3:c1:ec:4c:d8:14:b9:09:
         b8:d6:23:89:6a:6b:34:8d:4a:c8:84:7f:65:f9:3b:ed:dc:17:
         4a:ac:ae:ad:e1:af:3d:a6:02:d2:a5:5d:45:e2:a3:f1:10:be:
         8c:48:c3:e5:cb:57:64:ad:f7:37:0e:12:f1:66:6b:36:79:ec:
         bc:e5:6e:52:2b:90:d3:d2:c0:ad:c2:fa:04:2a:d6:f5:fc:15:
         09:8a:a5:96:f9:18:9a:73:e9:4c:fb:f6:17:8a:97:1b:56:82:
         30:aa:15:01:12:08:1a:2d:e8:72:e3:34:94:ec:2d:8c:3d:0b:
         6b:87:75:e7:9f:9f:03:06:b7:55:ba:ba:d7:06:49:8b:81:57:
         97:fc:41:20:0d:7f:4c:31:a7:1c:a1:35:79:71:6c:8e:25:85:
         99:12:c9:4f:de:e0:d8:ae:43:8a:78:11:42:25:c5:43:72:9e:
         81:5b:19:77:89:e1:32:f1:31:fa:d9:03:59:af:d2:c7:0c:42:
         da:6e:b4:bf:73:47:5e:fe:6f:12:8a:b1:cb:39:22:28:af:c8:
         64:f0:4e:2e:e7:92:da:00:e4:b3:a6:b3:16:38:44:ac:e8:23:
         90:b1:8c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 10:04:00 2026 by rpki-client