This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F75DCA34F0A409D21239F59F82A8722452836B63C2476E02044398C818EA231/0/323830333a3939303a3a2f34382d3438203d3e20323732393432.roa
File:                     323830333a3939303a3a2f34382d3438203d3e20323732393432.roa (raw, json)
Hash identifier:          Fp/+Vbox0iwysU6DjpKtL/bJCcu+7JkHle3/gK7eSUU=
Subject key identifier:   DB:59:83:F6:89:3C:95:3E:D4:F6:10:F3:64:FA:82:09:8E:D5:F6:D5
Certificate issuer:       /CN=1BE079B7DC5AD140CF569F9271CAFC1F7B63958A
Certificate serial:       17A40F0185B7227A7F733DA794AD7C98F013ABB8
Authority key identifier: 1B:E0:79:B7:DC:5A:D1:40:CF:56:9F:92:71:CA:FC:1F:7B:63:95:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BE079B7DC5AD140CF569F9271CAFC1F7B63958A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F75DCA34F0A409D21239F59F82A8722452836B63C2476E02044398C818EA231/0/323830333a3939303a3a2f34382d3438203d3e20323732393432.roa
Signing time:             Tue 06 Jan 2026 19:19:32 +0000
ROA not before:           Tue 06 Jan 2026 19:14:32 +0000
ROA not after:            Tue 05 Jan 2027 19:19:32 +0000
asID:                     272942
IP address blocks:        2803:990::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F75DCA34F0A409D21239F59F82A8722452836B63C2476E02044398C818EA231/0/1BE079B7DC5AD140CF569F9271CAFC1F7B63958A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F75DCA34F0A409D21239F59F82A8722452836B63C2476E02044398C818EA231/0/1BE079B7DC5AD140CF569F9271CAFC1F7B63958A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BE079B7DC5AD140CF569F9271CAFC1F7B63958A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:a4:0f:01:85:b7:22:7a:7f:73:3d:a7:94:ad:7c:98:f0:13:ab:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE079B7DC5AD140CF569F9271CAFC1F7B63958A
        Validity
            Not Before: Jan  6 19:14:32 2026 GMT
            Not After : Jan  5 19:19:32 2027 GMT
        Subject: CN=DB5983F6893C953ED4F610F364FA82098ED5F6D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5b:a5:a4:9c:d0:04:3a:96:5e:2c:35:6a:d3:
                    eb:7d:91:0d:19:11:59:25:36:23:09:b6:5a:e7:35:
                    66:7b:66:76:9e:fc:fc:fa:ff:02:39:9d:d5:e6:d8:
                    03:7b:46:88:02:62:70:24:2a:f8:6a:ae:60:75:68:
                    98:f4:d1:29:72:3d:b4:75:59:8e:a4:28:ce:e1:7b:
                    87:43:07:65:65:cd:13:2b:aa:bc:34:bf:5a:e5:25:
                    ec:4d:02:af:59:fa:21:b3:e8:59:18:ed:cd:67:a2:
                    49:89:c8:72:78:bf:9e:5b:d1:e1:ba:4e:d1:c7:ea:
                    1c:81:13:e2:b1:2a:97:0b:3b:95:e8:ed:2b:f9:2b:
                    79:c7:1a:9c:ac:89:72:55:8c:05:c9:ef:b2:9b:7b:
                    b6:46:e5:53:96:5a:af:22:23:fd:96:16:7c:6f:b6:
                    1b:4c:18:67:8a:be:0b:ae:fb:9a:fe:59:0f:49:4e:
                    b9:22:61:9c:5d:a1:6f:0b:11:25:34:7a:cb:7f:71:
                    6c:3a:4b:1d:b9:b4:57:72:d8:af:c2:b4:bf:04:03:
                    7b:28:7f:9f:f5:8c:4e:5e:ff:45:e0:05:5c:d9:ca:
                    64:43:3d:c3:e0:35:d5:26:10:ac:d1:e5:71:1a:e4:
                    51:f4:d2:92:1e:10:13:e1:e4:bb:af:0e:8d:bb:02:
                    41:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:59:83:F6:89:3C:95:3E:D4:F6:10:F3:64:FA:82:09:8E:D5:F6:D5
            X509v3 Authority Key Identifier:
                keyid:1B:E0:79:B7:DC:5A:D1:40:CF:56:9F:92:71:CA:FC:1F:7B:63:95:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F75DCA34F0A409D21239F59F82A8722452836B63C2476E02044398C818EA231/0/1BE079B7DC5AD140CF569F9271CAFC1F7B63958A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BE079B7DC5AD140CF569F9271CAFC1F7B63958A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F75DCA34F0A409D21239F59F82A8722452836B63C2476E02044398C818EA231/0/323830333a3939303a3a2f34382d3438203d3e20323732393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:990::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:b3:76:88:fd:d3:60:91:51:9d:bf:8b:0a:6f:1d:f7:10:51:
         c2:c7:b9:b4:cb:01:28:e8:0b:d9:2c:f4:58:06:69:ea:f0:ea:
         f5:3c:bd:b7:99:b0:5d:db:3d:87:81:8b:7d:54:15:02:91:a0:
         a0:71:9e:d5:c8:e1:09:38:5b:07:8a:76:18:67:27:c3:94:ea:
         63:ff:d8:15:6b:2a:eb:8b:09:12:e2:22:df:98:aa:b2:67:56:
         38:0a:7d:de:9e:1d:1e:3c:6a:b6:6e:1e:d1:d3:10:50:48:bf:
         24:60:89:c2:21:41:aa:b6:29:f9:72:9b:bb:bd:4d:7d:bc:e6:
         91:66:14:fd:d3:38:c9:0a:f9:62:38:b6:73:10:db:31:17:82:
         db:9e:fe:75:71:06:6e:6c:42:e1:95:70:96:7c:e2:2a:73:66:
         a7:5a:23:d9:34:c0:27:e4:4a:39:c9:e8:95:40:89:5b:ff:fa:
         20:0e:d8:a1:c3:6d:b7:57:23:42:af:ea:9c:ed:76:99:56:62:
         f1:75:46:ff:7f:1f:11:ea:92:b7:68:ed:dc:18:10:cd:3e:10:
         40:c7:b8:7e:a3:12:40:64:7d:24:97:b0:fb:d2:d4:6b:9c:56:
         17:9e:5e:1b:36:aa:01:95:db:1e:16:8d:a2:6a:f6:40:2c:e6:
         85:22:27:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 15:53:34 2026 by rpki-client