This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/624A8B9BFE663C452B74DB18265BB268AB482F1EAD9E0283496A00925F59583E/0/323830333a653832303a3a2f33322d3332203d3e20323634373530.roa
File:                     323830333a653832303a3a2f33322d3332203d3e20323634373530.roa (raw, json)
Hash identifier:          xwkceqOTtiluNP6D65KGcphQ1tMnlopQFLe1TS7iY+s=
Subject key identifier:   67:5A:FD:16:B3:80:78:E6:7C:CC:93:E0:8A:CB:9D:21:53:72:6A:AF
Certificate issuer:       /CN=374193CBA9F2789EEAD8F4332D8C61B9E274DB1C
Certificate serial:       7E114B68E8F6883AA1968E3E6A85A57D7838573B
Authority key identifier: 37:41:93:CB:A9:F2:78:9E:EA:D8:F4:33:2D:8C:61:B9:E2:74:DB:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/374193CBA9F2789EEAD8F4332D8C61B9E274DB1C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/624A8B9BFE663C452B74DB18265BB268AB482F1EAD9E0283496A00925F59583E/0/323830333a653832303a3a2f33322d3332203d3e20323634373530.roa
Signing time:             Tue 06 Jan 2026 19:39:25 +0000
ROA not before:           Tue 06 Jan 2026 19:34:25 +0000
ROA not after:            Tue 05 Jan 2027 19:39:25 +0000
asID:                     264750
IP address blocks:        2803:e820::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/624A8B9BFE663C452B74DB18265BB268AB482F1EAD9E0283496A00925F59583E/0/374193CBA9F2789EEAD8F4332D8C61B9E274DB1C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/624A8B9BFE663C452B74DB18265BB268AB482F1EAD9E0283496A00925F59583E/0/374193CBA9F2789EEAD8F4332D8C61B9E274DB1C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/374193CBA9F2789EEAD8F4332D8C61B9E274DB1C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 09:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:11:4b:68:e8:f6:88:3a:a1:96:8e:3e:6a:85:a5:7d:78:38:57:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374193CBA9F2789EEAD8F4332D8C61B9E274DB1C
        Validity
            Not Before: Jan  6 19:34:25 2026 GMT
            Not After : Jan  5 19:39:25 2027 GMT
        Subject: CN=675AFD16B38078E67CCC93E08ACB9D2153726AAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:52:78:77:cd:40:35:30:a4:b7:78:ac:bd:13:
                    d8:07:af:17:2d:c2:08:33:19:ef:5f:70:69:0e:cd:
                    2f:e9:9c:ec:46:2b:a2:26:e4:c5:63:30:09:06:d5:
                    89:fb:ea:79:35:a5:ea:27:e0:5e:32:8e:a7:fe:95:
                    67:62:69:54:2c:2b:c9:d3:43:dc:54:bb:5e:08:b6:
                    b7:fd:c8:97:e6:17:13:f2:c4:6f:94:6b:b2:ba:1e:
                    51:4f:cd:89:71:dc:46:86:0d:d9:ee:23:ea:58:46:
                    14:4a:d0:53:c1:99:ce:6c:94:90:9c:d0:8f:a6:30:
                    f0:92:e3:28:8b:39:8c:d2:74:80:4a:34:ff:2b:b7:
                    20:81:17:f0:8d:aa:e7:4c:c0:27:dd:1a:da:58:3d:
                    27:4c:f5:81:79:66:52:6f:bc:0a:31:80:86:58:5a:
                    3c:5d:db:0f:b2:b7:45:61:b9:15:41:7f:ab:fc:ad:
                    ee:03:43:fa:54:10:10:e3:c4:35:bb:bb:c1:f0:52:
                    5b:21:a7:6b:98:15:cb:d4:da:94:1b:10:b3:2a:ec:
                    8e:68:4c:8a:e2:bd:73:57:61:36:dc:7d:8f:64:24:
                    74:63:e0:1e:aa:3e:10:a1:48:ee:27:48:1b:ae:95:
                    bc:8b:ea:e1:5c:f7:4e:c0:45:7e:32:2c:80:00:df:
                    78:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:5A:FD:16:B3:80:78:E6:7C:CC:93:E0:8A:CB:9D:21:53:72:6A:AF
            X509v3 Authority Key Identifier:
                keyid:37:41:93:CB:A9:F2:78:9E:EA:D8:F4:33:2D:8C:61:B9:E2:74:DB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/624A8B9BFE663C452B74DB18265BB268AB482F1EAD9E0283496A00925F59583E/0/374193CBA9F2789EEAD8F4332D8C61B9E274DB1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/374193CBA9F2789EEAD8F4332D8C61B9E274DB1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/624A8B9BFE663C452B74DB18265BB268AB482F1EAD9E0283496A00925F59583E/0/323830333a653832303a3a2f33322d3332203d3e20323634373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e820::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:fe:16:82:9a:a7:e4:ac:57:7f:42:36:eb:49:1c:92:ba:bb:
         7a:49:b1:07:7c:86:e7:3c:eb:66:57:00:0f:fe:d5:aa:6a:e8:
         c4:5b:f7:63:45:d5:40:9c:76:80:44:4d:ca:05:ea:3d:ba:3a:
         77:17:77:90:6b:84:93:8d:b2:10:23:fd:e7:d1:9d:c7:68:63:
         ce:89:c5:3e:e0:2a:d8:c0:36:87:19:18:fa:cb:4e:24:03:ae:
         f8:8a:68:f5:b2:0c:f7:a5:cf:52:61:27:c7:b4:7a:ee:1d:ea:
         51:cc:db:94:d8:20:94:b0:6f:5b:f8:be:83:63:4c:1b:fe:af:
         66:e4:8a:51:37:f5:cd:7f:53:82:91:64:cc:5f:a5:d6:92:8b:
         7d:01:e3:ce:a4:80:f0:4e:77:8c:bb:68:7c:02:77:63:9f:30:
         15:3c:a3:33:50:d5:7e:71:39:85:ac:c1:cd:c3:26:6b:28:a6:
         06:97:4c:d4:b3:bb:6c:65:fa:7f:99:6f:1e:c8:18:4d:88:01:
         11:a6:d0:ff:22:d6:96:ef:5d:2d:94:cd:45:09:5c:d5:6f:91:
         4d:ff:83:15:be:57:26:4f:fa:4e:aa:52:58:33:3d:43:20:d0:
         04:0f:62:85:57:9e:90:ce:1f:ff:7d:a1:57:61:c6:ad:a0:01:
         d1:d0:ce:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 03:42:42 2026 by rpki-client