This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/406BFEAC47888E79323A6C0453295FBD53E061F93D6CE47410D5A2381489A351/0/323830333a323631303a383a3a2f34372d3438203d3e20323731393432.roa
File:                     323830333a323631303a383a3a2f34372d3438203d3e20323731393432.roa (raw, json)
Hash identifier:          9KMR2eLZryzwlr3afxD7lf3QHZJy44XSJEITzsEp8no=
Subject key identifier:   A3:6D:FC:17:A2:CD:1D:9B:A9:62:13:ED:35:23:40:63:28:A8:6C:C1
Certificate issuer:       /CN=B6403C53F9B05EDE5B902522724143F306D488E7
Certificate serial:       54FFE005FF1BDBEB4D422319400568CBD96F7503
Authority key identifier: B6:40:3C:53:F9:B0:5E:DE:5B:90:25:22:72:41:43:F3:06:D4:88:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6403C53F9B05EDE5B902522724143F306D488E7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/406BFEAC47888E79323A6C0453295FBD53E061F93D6CE47410D5A2381489A351/0/323830333a323631303a383a3a2f34372d3438203d3e20323731393432.roa
Signing time:             Tue 06 Jan 2026 19:23:19 +0000
ROA not before:           Tue 06 Jan 2026 19:18:19 +0000
ROA not after:            Tue 05 Jan 2027 19:23:19 +0000
asID:                     271942
IP address blocks:        2803:2610:8::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/406BFEAC47888E79323A6C0453295FBD53E061F93D6CE47410D5A2381489A351/0/B6403C53F9B05EDE5B902522724143F306D488E7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/406BFEAC47888E79323A6C0453295FBD53E061F93D6CE47410D5A2381489A351/0/B6403C53F9B05EDE5B902522724143F306D488E7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6403C53F9B05EDE5B902522724143F306D488E7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 11:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ff:e0:05:ff:1b:db:eb:4d:42:23:19:40:05:68:cb:d9:6f:75:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6403C53F9B05EDE5B902522724143F306D488E7
        Validity
            Not Before: Jan  6 19:18:19 2026 GMT
            Not After : Jan  5 19:23:19 2027 GMT
        Subject: CN=A36DFC17A2CD1D9BA96213ED3523406328A86CC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1e:3e:56:06:b5:f0:66:98:21:67:51:11:0b:
                    b6:94:ca:4b:bd:9b:01:6f:89:e5:3d:51:78:ed:23:
                    30:cc:4a:91:81:0d:da:00:a7:c8:ed:b1:a8:47:77:
                    2a:87:56:b0:c2:c4:4a:82:bf:92:a3:7b:2b:23:c3:
                    6a:c4:ce:85:71:f9:d7:d7:e6:bd:c9:f6:65:45:ce:
                    42:02:ae:34:8a:48:5b:99:28:90:12:a4:ca:03:65:
                    92:73:b1:8e:ec:48:11:fb:3a:83:9e:cd:26:43:7a:
                    fc:5e:45:c8:93:fa:a4:f7:85:5d:f2:18:61:2f:65:
                    d6:74:4b:d7:73:fb:05:0e:88:d6:20:64:26:78:69:
                    15:e4:f6:7d:3d:c7:fa:c4:d5:53:42:94:1b:b9:7e:
                    58:02:ec:27:5c:5b:2f:6c:13:5e:a3:6d:d4:05:af:
                    af:2c:4b:3a:6a:77:15:86:87:d5:7b:f8:e9:3d:d8:
                    57:e0:36:1a:1a:e6:08:9f:9e:91:21:44:50:a5:6a:
                    66:9e:ec:01:1c:6c:03:f1:53:51:d2:e0:1b:44:fb:
                    5a:b8:fc:ff:17:fd:fc:f3:e7:25:6d:8d:4f:01:06:
                    2b:6a:2c:5d:e8:8a:d7:d7:93:27:60:1e:a4:b2:ef:
                    89:d0:29:13:cc:c3:a7:b1:ec:c3:e6:20:ee:12:e6:
                    c1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:6D:FC:17:A2:CD:1D:9B:A9:62:13:ED:35:23:40:63:28:A8:6C:C1
            X509v3 Authority Key Identifier:
                keyid:B6:40:3C:53:F9:B0:5E:DE:5B:90:25:22:72:41:43:F3:06:D4:88:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/406BFEAC47888E79323A6C0453295FBD53E061F93D6CE47410D5A2381489A351/0/B6403C53F9B05EDE5B902522724143F306D488E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6403C53F9B05EDE5B902522724143F306D488E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/406BFEAC47888E79323A6C0453295FBD53E061F93D6CE47410D5A2381489A351/0/323830333a323631303a383a3a2f34372d3438203d3e20323731393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2610:8::/47

    Signature Algorithm: sha256WithRSAEncryption
         91:f8:f4:53:bc:a2:9d:5c:24:59:9b:2c:9e:f4:39:70:94:4e:
         63:d6:34:11:7b:53:57:0b:32:b5:60:34:75:3e:c0:b0:43:ec:
         ec:22:43:9b:e5:62:fa:32:9f:8d:02:19:c8:6b:4c:22:b4:dc:
         ea:ca:b5:b6:6d:13:92:0d:8d:2b:6a:40:67:70:c4:a2:0b:b3:
         cb:ec:9a:3f:4f:e9:86:a8:af:60:56:64:23:44:1f:2e:7a:61:
         38:17:22:0c:9a:fb:b0:17:65:73:2b:89:1e:9a:97:78:d3:03:
         39:77:fc:ae:14:76:9b:46:24:6a:72:7a:05:eb:84:c2:bb:cc:
         73:c8:d4:ff:49:6f:dc:2a:48:19:49:7a:c2:18:29:0e:43:d2:
         38:2d:8e:2a:d6:55:65:03:55:86:9f:39:90:8d:38:47:e0:ab:
         97:1d:13:b0:86:8c:e7:1f:ca:33:44:95:d9:ef:15:a8:19:69:
         a0:f3:d6:51:f5:e0:99:67:5f:12:43:82:f0:df:be:13:36:a5:
         50:ff:43:9f:81:0d:dd:d9:84:27:df:f7:12:af:c0:73:1d:e6:
         33:14:4a:b6:c8:22:5f:c1:64:88:d7:02:2d:ab:ea:a7:60:da:
         76:3f:e5:77:45:59:2b:c5:8c:12:4a:74:1a:55:43:0f:63:34:
         05:33:3e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 12:32:02 2026 by rpki-client