This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2FE61EDE0757F9F12935A5F3BE248079B7FE63272F85519D015CB07ED5234608/0/323830333a376538303a3a2f33322d3332203d3e203130363937.roa
File:                     323830333a376538303a3a2f33322d3332203d3e203130363937.roa (raw, json)
Hash identifier:          8DEEilEAfJ7N1eeqVwCQHwYtk63xjMjjibjeuvtO4qE=
Subject key identifier:   52:18:7B:81:A1:13:34:BD:28:6A:2D:58:79:62:5D:8B:EB:E5:6B:21
Certificate issuer:       /CN=CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3
Certificate serial:       587BD46DBACB93F2E8E9D800C93F389831EA3DD9
Authority key identifier: CD:B9:34:AA:7B:21:EE:82:62:A7:F7:45:BC:C9:4B:D4:C4:79:FA:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2FE61EDE0757F9F12935A5F3BE248079B7FE63272F85519D015CB07ED5234608/0/323830333a376538303a3a2f33322d3332203d3e203130363937.roa
Signing time:             Tue 06 Jan 2026 19:00:19 +0000
ROA not before:           Tue 06 Jan 2026 18:55:19 +0000
ROA not after:            Tue 05 Jan 2027 19:00:19 +0000
asID:                     10697
IP address blocks:        2803:7e80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2FE61EDE0757F9F12935A5F3BE248079B7FE63272F85519D015CB07ED5234608/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2FE61EDE0757F9F12935A5F3BE248079B7FE63272F85519D015CB07ED5234608/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Jan 2026 02:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:7b:d4:6d:ba:cb:93:f2:e8:e9:d8:00:c9:3f:38:98:31:ea:3d:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3
        Validity
            Not Before: Jan  6 18:55:19 2026 GMT
            Not After : Jan  5 19:00:19 2027 GMT
        Subject: CN=52187B81A11334BD286A2D5879625D8BEBE56B21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5e:f4:97:3d:df:a7:98:5d:1b:1b:a4:1d:34:
                    78:4e:72:26:29:18:45:d6:c8:91:ef:51:75:81:19:
                    80:85:97:6c:5a:4d:6c:cb:0c:33:70:68:f0:94:05:
                    4c:66:5b:01:dc:ce:68:3c:f5:13:42:ef:43:65:28:
                    2b:d1:25:65:9d:9d:06:63:f5:55:0d:3e:94:58:03:
                    f8:b6:4b:69:6e:48:fb:e3:9b:4c:82:6f:0a:c7:88:
                    00:a1:7f:de:9e:98:83:7c:08:f3:c5:fb:66:5b:61:
                    0f:f2:74:4d:76:cb:e0:00:b2:a5:d9:6c:16:72:d9:
                    a3:2a:7c:b6:f2:94:f3:cc:5f:4a:1f:55:2d:dd:20:
                    00:e7:00:5c:9f:e4:58:1e:d1:6f:f0:ec:08:64:4a:
                    02:d8:f6:81:2b:e3:97:77:f7:21:14:e2:5d:c9:ca:
                    e8:cf:b6:86:4b:98:a9:c8:5d:d1:f2:7c:38:cf:e3:
                    0c:ec:e5:a0:e1:4f:ef:d2:34:ba:52:5b:80:f6:77:
                    bf:19:bb:46:61:f3:0d:5d:cb:76:50:b0:ad:b8:32:
                    25:80:7f:e9:8b:5a:45:c7:d2:08:bf:d6:90:eb:1c:
                    15:da:d1:0b:2b:fe:21:de:e2:1c:88:f5:ba:d7:5a:
                    96:55:c9:f4:32:c2:36:43:fb:38:bc:24:ef:59:cb:
                    ac:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:18:7B:81:A1:13:34:BD:28:6A:2D:58:79:62:5D:8B:EB:E5:6B:21
            X509v3 Authority Key Identifier:
                keyid:CD:B9:34:AA:7B:21:EE:82:62:A7:F7:45:BC:C9:4B:D4:C4:79:FA:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2FE61EDE0757F9F12935A5F3BE248079B7FE63272F85519D015CB07ED5234608/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2FE61EDE0757F9F12935A5F3BE248079B7FE63272F85519D015CB07ED5234608/0/323830333a376538303a3a2f33322d3332203d3e203130363937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7e80::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:24:b9:73:a9:ad:40:e1:9a:4a:74:43:56:bc:1e:93:47:25:
         45:e2:14:74:1d:06:7a:dc:fd:be:94:dc:be:c4:7b:2a:8a:fd:
         32:b0:c5:8e:c6:6f:c4:57:e9:57:23:18:0b:1f:1f:c7:36:d4:
         87:67:95:00:63:96:cc:06:8c:d0:4f:84:ae:39:04:91:85:32:
         6e:96:aa:04:18:62:b4:ea:b6:5f:a6:e3:6b:02:b3:cc:b8:17:
         64:f1:be:2b:1a:e1:e2:b2:f8:46:dd:cd:16:f5:61:a5:3a:f1:
         4c:d9:19:2e:e0:e7:27:2e:09:e4:c4:83:7b:35:4b:4c:3f:b5:
         c8:cb:f3:b5:95:0b:f3:3c:7f:ab:19:41:94:d1:41:c0:60:da:
         b2:8e:a2:e0:d0:8d:7d:50:73:27:13:35:7e:df:3b:b8:5f:6c:
         27:fa:50:fc:f6:90:d8:ec:fb:d2:a7:7d:06:b7:c6:ae:cf:be:
         54:cd:34:81:34:78:fc:fe:e9:83:2c:18:76:74:80:92:69:2c:
         54:8f:ca:aa:59:12:91:fb:15:4d:de:3f:16:a0:8d:e6:6d:23:
         d2:e8:4a:fb:1e:4d:5e:ee:71:02:0a:61:a5:81:a6:5f:96:d1:
         cd:7b:fa:27:51:18:40:75:36:52:cc:a1:40:54:0d:cd:52:ce:
         9e:7a:80:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 22:13:30 2026 by rpki-client