This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6418A6DC546DDE05D160CE8944520A5EC7CB2E3F2C4F35E23DB8F1D0FBAE54DA/0/323830333a356136303a3a2f33322d3332203d3e20323637383835.roa
File:                     323830333a356136303a3a2f33322d3332203d3e20323637383835.roa (raw, json)
Hash identifier:          IRNQR6Imq1TK7AOBd+39fssqPOOkS0e6rxLeIEGkJrA=
Subject key identifier:   02:15:8D:F1:E2:1A:FF:30:26:5E:51:3C:BC:E0:A1:6C:7E:E4:9F:1D
Certificate issuer:       /CN=87E86111F292762220D44761EC4E8B3C4F012F38
Certificate serial:       2C5A6B0CA59766DAF8F73BC568DF31B383EE89DE
Authority key identifier: 87:E8:61:11:F2:92:76:22:20:D4:47:61:EC:4E:8B:3C:4F:01:2F:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87E86111F292762220D44761EC4E8B3C4F012F38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6418A6DC546DDE05D160CE8944520A5EC7CB2E3F2C4F35E23DB8F1D0FBAE54DA/0/323830333a356136303a3a2f33322d3332203d3e20323637383835.roa
Signing time:             Tue 06 Jan 2026 20:51:18 +0000
ROA not before:           Tue 06 Jan 2026 20:46:18 +0000
ROA not after:            Tue 05 Jan 2027 20:51:18 +0000
asID:                     267885
IP address blocks:        2803:5a60::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6418A6DC546DDE05D160CE8944520A5EC7CB2E3F2C4F35E23DB8F1D0FBAE54DA/0/87E86111F292762220D44761EC4E8B3C4F012F38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6418A6DC546DDE05D160CE8944520A5EC7CB2E3F2C4F35E23DB8F1D0FBAE54DA/0/87E86111F292762220D44761EC4E8B3C4F012F38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87E86111F292762220D44761EC4E8B3C4F012F38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Jan 2026 20:20:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:5a:6b:0c:a5:97:66:da:f8:f7:3b:c5:68:df:31:b3:83:ee:89:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87E86111F292762220D44761EC4E8B3C4F012F38
        Validity
            Not Before: Jan  6 20:46:18 2026 GMT
            Not After : Jan  5 20:51:18 2027 GMT
        Subject: CN=02158DF1E21AFF30265E513CBCE0A16C7EE49F1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2e:d3:8c:9e:a8:95:76:fd:5d:bf:37:23:fa:
                    2b:30:28:05:26:77:ce:38:fe:24:d6:17:19:1e:bc:
                    cb:01:73:fb:14:52:bc:2a:86:ff:77:7b:38:9d:eb:
                    3c:7e:51:25:23:b8:5e:7c:5d:80:de:06:42:33:17:
                    8d:10:d4:3d:0e:79:5c:8d:67:d4:2a:da:03:ab:3f:
                    f9:d8:7d:81:36:b7:b6:36:bd:f1:75:8e:e6:66:70:
                    af:bd:ec:32:37:f8:7f:56:8f:27:a5:8b:b8:da:b1:
                    61:45:87:9c:eb:06:fe:79:e2:a0:d4:ef:c8:de:17:
                    08:7f:c7:9b:b2:44:a7:25:38:ea:dc:93:14:32:9c:
                    84:e5:6c:4c:2e:76:fc:a7:f2:6f:22:0e:a9:de:4f:
                    90:b2:b4:17:4f:3d:61:43:80:67:1c:63:e0:fc:3a:
                    28:03:42:39:76:af:2b:d5:27:b7:c0:98:c4:d0:8d:
                    45:bd:64:79:0b:41:59:9f:3d:5d:57:bc:72:90:92:
                    66:a7:af:42:0f:95:b4:c4:58:ef:fa:f2:06:72:9d:
                    b2:c9:50:b5:e5:ee:8e:5b:74:20:fb:0d:da:d6:35:
                    49:7d:06:d6:c6:b9:a0:e9:88:fb:dc:cd:e8:16:ac:
                    3d:e5:29:0d:ad:bf:38:c4:e9:a6:ab:dc:81:75:ff:
                    d2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:15:8D:F1:E2:1A:FF:30:26:5E:51:3C:BC:E0:A1:6C:7E:E4:9F:1D
            X509v3 Authority Key Identifier:
                keyid:87:E8:61:11:F2:92:76:22:20:D4:47:61:EC:4E:8B:3C:4F:01:2F:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6418A6DC546DDE05D160CE8944520A5EC7CB2E3F2C4F35E23DB8F1D0FBAE54DA/0/87E86111F292762220D44761EC4E8B3C4F012F38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87E86111F292762220D44761EC4E8B3C4F012F38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6418A6DC546DDE05D160CE8944520A5EC7CB2E3F2C4F35E23DB8F1D0FBAE54DA/0/323830333a356136303a3a2f33322d3332203d3e20323637383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5a60::/32

    Signature Algorithm: sha256WithRSAEncryption
         bb:00:87:45:27:3a:e5:24:ce:c4:7d:82:6c:0d:37:3d:e7:2b:
         96:67:97:fc:ff:a3:96:f1:aa:ac:61:5c:ed:39:7d:ef:df:05:
         5f:e3:28:48:5b:cd:c3:9a:fe:41:23:6a:73:8b:c7:96:fe:7b:
         93:ba:2d:5d:f0:54:83:ce:0e:41:ae:13:62:dd:9e:c3:87:5e:
         06:3b:4c:e1:8a:a9:82:1c:a1:96:be:8e:d9:94:15:72:06:3f:
         5b:14:46:4b:83:cf:df:2d:73:f4:d0:c7:a3:77:bb:78:62:3f:
         68:ca:db:6b:bd:8e:39:3a:9c:f1:e5:c3:98:7e:65:80:8f:0e:
         56:82:68:bc:a9:92:c0:d6:4d:85:75:68:9b:c2:59:ee:d8:44:
         70:19:0d:62:d3:55:3f:00:fb:f2:0f:42:bb:25:29:a5:a2:91:
         e6:db:69:8d:3c:e1:0f:b6:3c:3e:a3:36:f0:b9:cb:04:40:7c:
         06:75:48:b5:a5:c6:54:39:1f:63:85:4c:4c:d2:c7:d4:e5:24:
         ed:42:63:2a:26:4b:a3:28:12:29:3f:29:93:ab:31:5c:08:2e:
         92:b5:c0:16:e2:41:b8:53:7b:1c:93:94:df:f8:42:b3:84:e7:
         ff:d2:89:b9:57:eb:3e:ce:dc:83:1a:76:1f:96:29:5a:fc:58:
         e6:4c:8f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 17:43:26 2026 by rpki-client