This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/323830333a653538303a3a2f33322d3332203d3e203631343637.roa
File:                     323830333a653538303a3a2f33322d3332203d3e203631343637.roa (raw, json)
Hash identifier:          pyRi37f/R2phnwiN1pIBrly71Xw+IUWnhpmTlw5mr5E=
Subject key identifier:   32:C5:67:88:F6:8C:97:50:5C:71:28:AC:FE:B6:18:DF:99:7F:7F:36
Certificate issuer:       /CN=D308735DCFBD4439F1F61A6179DBE920D86B1E28
Certificate serial:       5CBA871725C658213C89F804ABBA2DBB7C02EA78
Authority key identifier: D3:08:73:5D:CF:BD:44:39:F1:F6:1A:61:79:DB:E9:20:D8:6B:1E:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/323830333a653538303a3a2f33322d3332203d3e203631343637.roa
Signing time:             Tue 06 Jan 2026 19:38:40 +0000
ROA not before:           Tue 06 Jan 2026 19:33:40 +0000
ROA not after:            Tue 05 Jan 2027 19:38:40 +0000
asID:                     61467
IP address blocks:        2803:e580::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 20:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:ba:87:17:25:c6:58:21:3c:89:f8:04:ab:ba:2d:bb:7c:02:ea:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D308735DCFBD4439F1F61A6179DBE920D86B1E28
        Validity
            Not Before: Jan  6 19:33:40 2026 GMT
            Not After : Jan  5 19:38:40 2027 GMT
        Subject: CN=32C56788F68C97505C7128ACFEB618DF997F7F36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fe:78:bf:cf:0f:73:3e:77:a8:10:33:8e:e4:
                    32:23:8a:42:76:64:8c:f0:1a:93:84:fc:bd:21:5e:
                    fb:2c:2d:50:d6:72:d1:a2:a6:90:a2:1d:84:7a:ea:
                    f4:07:75:39:eb:33:07:02:5e:d4:53:79:52:fd:94:
                    a5:a3:b1:27:88:44:16:bb:51:94:42:7a:eb:ed:5a:
                    1a:15:a3:57:ee:78:ee:36:1d:f1:eb:43:26:6e:23:
                    44:43:fc:36:9c:16:ca:00:56:f3:b4:8a:7a:c1:18:
                    48:c5:9a:a9:1d:21:6d:87:6c:8e:54:ad:0a:f0:d3:
                    cd:9d:b8:2e:e6:b8:9c:84:ca:c4:5a:3d:e8:d3:25:
                    a6:3b:c4:47:ed:ef:84:12:a6:dd:bc:f9:08:61:6e:
                    60:73:ee:e1:73:34:fd:ce:96:c5:65:6b:1a:d6:c4:
                    90:8c:9d:66:4b:1b:8d:73:6c:4b:e3:f2:68:d4:fd:
                    25:37:a2:44:a1:9a:66:3a:c1:5a:21:e2:c7:94:34:
                    b7:1c:4c:0b:76:a0:69:fa:59:f0:ac:35:42:f7:9e:
                    27:ff:c7:c9:8b:d6:fd:15:bb:76:32:c6:a6:d8:aa:
                    c7:46:db:08:d9:cf:89:13:d1:6a:d7:2e:41:40:ba:
                    e1:5c:48:fb:3a:41:0a:f4:2e:7e:c0:11:dd:37:6a:
                    9f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C5:67:88:F6:8C:97:50:5C:71:28:AC:FE:B6:18:DF:99:7F:7F:36
            X509v3 Authority Key Identifier:
                keyid:D3:08:73:5D:CF:BD:44:39:F1:F6:1A:61:79:DB:E9:20:D8:6B:1E:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/323830333a653538303a3a2f33322d3332203d3e203631343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e580::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:1d:7d:6b:65:9d:3b:78:ea:a9:3f:b8:01:8a:3d:b6:3b:23:
         92:79:18:e6:6b:f9:aa:6e:fd:0b:a9:56:fb:11:cf:53:21:db:
         a9:d1:9b:33:b8:80:f9:14:4a:44:c9:ee:80:9d:6c:d3:43:49:
         69:2f:b8:31:c1:a2:ef:15:ce:4e:95:cd:aa:c4:52:6b:8d:0c:
         58:00:5d:a6:a8:e2:ba:67:de:69:73:03:0a:e9:e8:14:05:e3:
         13:2b:1b:f3:06:63:51:f5:6c:5f:ba:fe:bb:db:3e:04:a6:dd:
         e0:b2:ef:e2:8d:6d:45:64:97:21:77:78:af:b2:dd:b3:fb:8f:
         de:8e:68:4a:5f:b5:47:98:b8:b6:95:e3:32:9c:91:52:ad:f6:
         d6:4b:38:3b:0a:79:4a:b3:c7:6d:24:a7:62:77:9c:53:56:3b:
         75:b1:48:a1:d8:e3:6a:dd:27:28:a8:4f:24:b3:20:a3:d3:48:
         af:fc:99:83:3a:65:93:7b:9e:47:89:2a:ee:fe:91:d4:95:99:
         9d:4a:f0:3a:97:54:fd:de:bb:19:ca:46:b8:d4:2f:81:d5:ec:
         6a:24:4a:1d:80:8d:24:c7:33:dd:28:c9:a7:73:36:39:c9:4a:
         0f:70:0d:74:34:ad:33:7d:4e:97:89:94:0e:a4:09:3e:bc:00:
         e3:91:be:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 05:21:02 2026 by rpki-client