This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C6A66BBBCE4CB45B99B2B12AD3F1E351C3D0ED4F7515BDA09A290DE1DD848A2/0/323830333a333435303a3a2f33322d3438203d3e20323732393538.roa
File:                     323830333a333435303a3a2f33322d3438203d3e20323732393538.roa (raw, json)
Hash identifier:          M6ugvSjI6v1byCwdGrN/qSt9e430ZYDowTlDu0OS9Hw=
Subject key identifier:   92:36:F2:46:6C:C3:47:AF:3A:BE:EC:F1:95:6B:E3:B9:D1:D0:A6:33
Certificate issuer:       /CN=9832E74678E4CD60717C36E84BA71426178E7DF3
Certificate serial:       051AE89B792450637D35C6D08999EC9FEA71B600
Authority key identifier: 98:32:E7:46:78:E4:CD:60:71:7C:36:E8:4B:A7:14:26:17:8E:7D:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9832E74678E4CD60717C36E84BA71426178E7DF3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4C6A66BBBCE4CB45B99B2B12AD3F1E351C3D0ED4F7515BDA09A290DE1DD848A2/0/323830333a333435303a3a2f33322d3438203d3e20323732393538.roa
Signing time:             Tue 06 Jan 2026 19:20:06 +0000
ROA not before:           Tue 06 Jan 2026 19:15:06 +0000
ROA not after:            Tue 05 Jan 2027 19:20:06 +0000
asID:                     272958
IP address blocks:        2803:3450::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4C6A66BBBCE4CB45B99B2B12AD3F1E351C3D0ED4F7515BDA09A290DE1DD848A2/0/9832E74678E4CD60717C36E84BA71426178E7DF3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4C6A66BBBCE4CB45B99B2B12AD3F1E351C3D0ED4F7515BDA09A290DE1DD848A2/0/9832E74678E4CD60717C36E84BA71426178E7DF3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9832E74678E4CD60717C36E84BA71426178E7DF3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 09:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:1a:e8:9b:79:24:50:63:7d:35:c6:d0:89:99:ec:9f:ea:71:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9832E74678E4CD60717C36E84BA71426178E7DF3
        Validity
            Not Before: Jan  6 19:15:06 2026 GMT
            Not After : Jan  5 19:20:06 2027 GMT
        Subject: CN=9236F2466CC347AF3ABEECF1956BE3B9D1D0A633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fa:c6:59:8b:16:d8:63:d6:ca:f6:70:68:4e:
                    cd:da:ba:07:5e:75:7a:15:ac:b0:82:62:f8:a2:e3:
                    73:de:9a:b2:34:5d:81:82:75:19:cc:63:71:ea:44:
                    24:37:b4:a3:b2:fb:4c:6c:71:ac:1b:e5:a9:f8:01:
                    b3:28:58:06:04:87:16:53:a9:38:ce:b9:ca:55:58:
                    dc:ca:18:23:30:2f:e3:f4:26:0a:2c:e1:df:52:39:
                    e4:17:81:f3:00:8c:56:32:86:2d:57:60:6d:51:da:
                    47:df:49:9b:31:f3:bf:05:1b:49:8a:98:11:27:5f:
                    cf:22:00:e5:ae:02:7d:c7:5e:67:54:db:7a:37:f1:
                    92:68:88:23:f7:69:5a:a0:41:ad:75:b3:60:32:27:
                    ec:1c:ad:42:a9:68:eb:dc:2f:02:5e:2f:4d:22:10:
                    c0:b2:97:2e:ea:10:27:0f:4d:a4:76:1b:5d:26:86:
                    0e:da:b1:90:34:d0:dd:2d:51:a6:7f:d9:64:fa:f0:
                    5d:d3:80:1c:0e:e1:2e:8c:2d:f7:99:d5:19:5e:6a:
                    de:66:25:a0:b6:7c:af:e1:46:f3:c0:93:dc:29:74:
                    55:d8:3c:7b:c0:2c:27:9f:77:3c:d0:1a:ef:4c:39:
                    10:87:69:67:37:82:a6:85:5b:07:09:48:14:a3:23:
                    7c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:36:F2:46:6C:C3:47:AF:3A:BE:EC:F1:95:6B:E3:B9:D1:D0:A6:33
            X509v3 Authority Key Identifier:
                keyid:98:32:E7:46:78:E4:CD:60:71:7C:36:E8:4B:A7:14:26:17:8E:7D:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4C6A66BBBCE4CB45B99B2B12AD3F1E351C3D0ED4F7515BDA09A290DE1DD848A2/0/9832E74678E4CD60717C36E84BA71426178E7DF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9832E74678E4CD60717C36E84BA71426178E7DF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C6A66BBBCE4CB45B99B2B12AD3F1E351C3D0ED4F7515BDA09A290DE1DD848A2/0/323830333a333435303a3a2f33322d3438203d3e20323732393538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3450::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:23:40:9e:60:22:b8:7e:97:4f:27:62:07:29:f4:78:61:6e:
         94:cd:34:9e:d8:f5:94:0c:e5:40:3b:36:80:e9:d4:68:78:21:
         74:84:60:82:71:97:57:0d:fb:be:30:34:84:f2:d5:b9:42:e7:
         c1:0a:d3:9b:d5:00:5e:e1:c5:33:42:92:ab:66:e4:c9:3e:76:
         00:4a:ea:9f:4b:10:41:4b:2b:6d:51:06:cd:fa:13:0d:54:3e:
         7b:d6:cd:30:ef:1e:0f:34:06:71:76:46:06:a6:a5:90:74:88:
         e0:a9:60:7a:78:33:de:5e:3f:9b:ca:84:49:49:c3:48:cb:44:
         0b:a1:81:d5:d9:72:87:15:65:ed:e1:87:6e:73:d3:c8:10:08:
         90:15:e1:32:e7:9c:a0:d3:e2:a8:b4:c5:ff:bc:9e:96:10:00:
         58:50:27:30:86:89:c6:a4:e3:73:81:e2:b1:27:aa:fa:a5:6b:
         7f:2a:21:57:52:73:e2:c2:90:8e:50:3b:08:75:61:a1:f2:b7:
         25:fb:4f:80:ee:10:2c:f4:ef:74:51:f4:a2:59:56:0d:bf:7b:
         ab:6a:47:cf:d7:1f:23:59:79:69:bb:af:b6:65:f7:ef:f3:4f:
         10:49:14:47:e5:c2:90:e8:a0:cb:e1:04:17:2b:0f:97:07:64:
         61:f1:41:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 22:49:22 2026 by rpki-client