This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/406BFEAC47888E79323A6C0453295FBD53E061F93D6CE47410D5A2381489A351/0/323830333a323631303a3a2f33322d3438203d3e20323731393432.roa
File:                     323830333a323631303a3a2f33322d3438203d3e20323731393432.roa (raw, json)
Hash identifier:          vzynYqHMfUYKji26Em7riTspIfpYQqgz68dOQehfc3g=
Subject key identifier:   03:72:84:4C:10:F8:FE:6C:A5:E1:63:74:4A:18:66:4F:9A:A4:2C:C2
Certificate issuer:       /CN=B6403C53F9B05EDE5B902522724143F306D488E7
Certificate serial:       0ECC1285539A1D3A36D5BD533F3AC192323C306E
Authority key identifier: B6:40:3C:53:F9:B0:5E:DE:5B:90:25:22:72:41:43:F3:06:D4:88:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6403C53F9B05EDE5B902522724143F306D488E7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/406BFEAC47888E79323A6C0453295FBD53E061F93D6CE47410D5A2381489A351/0/323830333a323631303a3a2f33322d3438203d3e20323731393432.roa
Signing time:             Tue 06 Jan 2026 19:23:20 +0000
ROA not before:           Tue 06 Jan 2026 19:18:20 +0000
ROA not after:            Tue 05 Jan 2027 19:23:20 +0000
asID:                     271942
IP address blocks:        2803:2610::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/406BFEAC47888E79323A6C0453295FBD53E061F93D6CE47410D5A2381489A351/0/B6403C53F9B05EDE5B902522724143F306D488E7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/406BFEAC47888E79323A6C0453295FBD53E061F93D6CE47410D5A2381489A351/0/B6403C53F9B05EDE5B902522724143F306D488E7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6403C53F9B05EDE5B902522724143F306D488E7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 11:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cc:12:85:53:9a:1d:3a:36:d5:bd:53:3f:3a:c1:92:32:3c:30:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6403C53F9B05EDE5B902522724143F306D488E7
        Validity
            Not Before: Jan  6 19:18:20 2026 GMT
            Not After : Jan  5 19:23:20 2027 GMT
        Subject: CN=0372844C10F8FE6CA5E163744A18664F9AA42CC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0f:db:74:5b:14:28:f0:21:f3:ae:d3:90:c9:
                    dc:9c:65:33:52:90:96:d0:1a:aa:fd:e5:3d:bd:82:
                    f0:77:c6:4e:2f:86:ec:54:41:7a:b7:7d:93:d6:ca:
                    df:38:cd:b9:6c:e9:cf:92:cd:63:93:0f:78:b9:71:
                    48:b6:6b:9e:38:c3:09:b8:e4:e7:60:55:fc:10:51:
                    2b:dd:01:15:bb:f3:78:83:5d:b4:36:d7:ad:8d:97:
                    4e:61:c3:e6:13:69:71:77:28:7b:0b:84:2b:e4:18:
                    86:ee:5d:e4:92:61:2e:95:c1:26:8d:08:b0:1b:4a:
                    05:43:08:3e:a9:bc:5c:59:10:a6:1b:9c:9c:15:88:
                    b3:38:d0:3b:d1:d6:b9:bd:1a:a0:4b:2d:92:f0:fb:
                    71:8e:41:d3:6c:2a:51:d8:ec:4c:44:61:3b:b1:a0:
                    b2:3b:d5:8b:5a:a2:e7:b5:fa:82:2e:c2:50:90:e1:
                    b9:5d:9e:c1:77:50:86:38:fc:0d:a4:22:3e:e6:48:
                    50:15:ea:00:62:c0:12:25:13:b1:25:e8:8c:57:9a:
                    cc:c4:17:2b:70:19:f2:f1:3a:c1:c0:cb:f5:b4:03:
                    f8:46:7b:76:81:a7:42:e4:62:6d:a1:e3:5b:ef:23:
                    36:bd:d6:fb:c1:c2:04:53:45:b5:9e:66:a3:a3:c7:
                    f8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:72:84:4C:10:F8:FE:6C:A5:E1:63:74:4A:18:66:4F:9A:A4:2C:C2
            X509v3 Authority Key Identifier:
                keyid:B6:40:3C:53:F9:B0:5E:DE:5B:90:25:22:72:41:43:F3:06:D4:88:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/406BFEAC47888E79323A6C0453295FBD53E061F93D6CE47410D5A2381489A351/0/B6403C53F9B05EDE5B902522724143F306D488E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6403C53F9B05EDE5B902522724143F306D488E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/406BFEAC47888E79323A6C0453295FBD53E061F93D6CE47410D5A2381489A351/0/323830333a323631303a3a2f33322d3438203d3e20323731393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2610::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:02:60:d4:d9:fd:80:3f:62:74:2f:68:d2:12:db:f2:20:79:
         0c:5d:b4:dd:24:6b:bd:92:16:34:3d:bb:86:88:1f:7b:91:69:
         19:72:26:29:13:29:99:18:40:16:b2:04:71:63:03:9a:bd:e7:
         ec:30:b4:bb:75:08:21:51:54:5d:eb:10:67:88:55:c8:44:01:
         88:03:41:d5:32:20:8b:29:86:43:f8:0b:ca:18:6c:35:36:44:
         5f:d0:76:75:58:f7:d1:69:69:4f:b5:7f:46:cc:80:f2:fb:9a:
         58:9e:7e:ff:62:f9:47:27:67:6a:35:f2:68:7e:c4:34:de:b1:
         01:e3:04:64:e0:c2:4b:e8:e3:d1:4c:2f:ed:18:f0:03:82:4c:
         78:0a:97:ff:47:d0:ed:e9:89:98:77:5e:5a:35:72:f2:14:ec:
         78:7d:f2:bb:05:63:1a:0d:ed:73:64:fb:b8:a6:9f:6d:e3:8a:
         0a:82:5a:70:ae:ec:bb:1f:53:9d:a2:b2:22:2e:5c:60:39:67:
         51:40:f6:a4:90:d9:ab:ab:16:86:a0:da:88:80:e8:88:a1:ed:
         b2:33:cc:8a:61:14:5a:f8:0e:20:12:24:5c:05:35:11:f9:0c:
         b2:6a:e9:e8:97:14:f7:ce:79:ae:0f:29:84:67:67:c8:53:81:
         e5:a5:3d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 12:32:02 2026 by rpki-client