This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/323830333a333936303a313a3a2f34382d3438203d3e20323639373436.roa
File:                     323830333a333936303a313a3a2f34382d3438203d3e20323639373436.roa (raw, json)
Hash identifier:          guIA8XTRtrH9UFOrXerXBgnONLuJOCAq/rxoDmbeA+c=
Subject key identifier:   42:BF:F6:47:6E:43:48:6D:4D:D1:43:C5:B3:9D:24:BB:08:E3:1C:FB
Certificate issuer:       /CN=7E656418FBD6F519E8CA146E061CF553AFE480F1
Certificate serial:       363A2B4B6A2B932F086CA4F5D2D8B4A4E2FD51F0
Authority key identifier: 7E:65:64:18:FB:D6:F5:19:E8:CA:14:6E:06:1C:F5:53:AF:E4:80:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/323830333a333936303a313a3a2f34382d3438203d3e20323639373436.roa
Signing time:             Tue 06 Jan 2026 19:22:45 +0000
ROA not before:           Tue 06 Jan 2026 19:17:45 +0000
ROA not after:            Tue 05 Jan 2027 19:22:45 +0000
asID:                     269746
IP address blocks:        2803:3960:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:3a:2b:4b:6a:2b:93:2f:08:6c:a4:f5:d2:d8:b4:a4:e2:fd:51:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E656418FBD6F519E8CA146E061CF553AFE480F1
        Validity
            Not Before: Jan  6 19:17:45 2026 GMT
            Not After : Jan  5 19:22:45 2027 GMT
        Subject: CN=42BFF6476E43486D4DD143C5B39D24BB08E31CFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e9:74:21:4e:35:8a:bf:13:82:00:ea:10:40:
                    2d:15:2e:2f:0d:05:26:c3:ec:59:a0:29:ed:b3:48:
                    37:72:9b:95:c2:b2:e3:df:4c:40:14:e5:b7:69:c8:
                    ec:a9:a5:47:70:4c:f5:8f:32:72:fa:d7:ac:a4:1d:
                    48:f4:da:79:94:a9:62:dd:5d:4d:64:dd:8d:0d:2f:
                    b4:91:02:76:ab:a0:2b:46:83:d9:04:07:06:72:93:
                    5f:74:e6:a6:1b:a4:3c:8d:98:b9:37:65:57:8d:39:
                    4d:7f:d6:64:2d:12:a9:85:06:96:d3:69:78:58:16:
                    35:09:05:d2:5a:16:b0:cd:77:af:2b:07:21:3d:d5:
                    45:3c:cc:c7:4f:df:f1:b9:6a:c9:01:ca:55:e5:41:
                    ab:eb:70:2e:8e:4e:10:eb:7d:e1:00:01:01:cf:6a:
                    e0:4e:5a:85:f6:6b:7c:b4:0d:4a:35:b8:9c:0e:7e:
                    1c:9c:81:d4:cb:58:94:84:ef:af:26:a0:e1:c1:6d:
                    dd:31:4d:45:9d:02:95:71:e1:cb:f6:93:aa:7c:51:
                    2e:be:c3:7c:25:a4:4c:5b:0d:3d:d4:89:98:b5:0f:
                    bd:bf:72:73:39:30:33:aa:d3:e5:13:db:27:1f:ac:
                    b7:3a:d9:64:14:f1:f1:12:31:c1:89:e1:4c:ec:08:
                    4c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:BF:F6:47:6E:43:48:6D:4D:D1:43:C5:B3:9D:24:BB:08:E3:1C:FB
            X509v3 Authority Key Identifier:
                keyid:7E:65:64:18:FB:D6:F5:19:E8:CA:14:6E:06:1C:F5:53:AF:E4:80:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/323830333a333936303a313a3a2f34382d3438203d3e20323639373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3960:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:22:3c:eb:28:29:e7:4b:05:44:e2:3e:89:3e:64:82:cf:d7:
         51:b3:1e:26:12:db:70:c1:74:48:84:78:40:59:43:31:a2:a1:
         5d:d7:5f:d1:20:59:3b:47:b2:f8:03:5c:88:7c:62:7b:c5:e0:
         1f:da:c8:2c:31:50:54:da:0b:ba:b5:e0:4a:7b:9a:72:7d:dd:
         60:61:c0:a6:33:ea:26:84:bb:c9:34:d6:ca:09:81:da:9f:a8:
         1a:2a:bc:26:4c:89:af:2b:ef:93:cf:99:7e:fc:67:51:39:1a:
         97:a9:d3:d9:45:61:bd:a9:7f:f6:c0:89:8c:17:67:f0:bb:b8:
         e0:ef:07:b7:6c:76:e1:51:f5:bb:44:3c:11:e7:9a:6c:8f:ab:
         be:cb:8f:c7:ee:2a:6e:45:34:0c:76:c1:b0:03:cf:30:7a:91:
         8d:c5:12:e9:25:90:39:ca:7a:48:35:c3:31:a5:c6:47:f5:9b:
         47:f0:8a:fc:37:e8:88:49:9b:c7:51:9d:20:a6:f9:4f:b3:ce:
         f4:ff:8d:4d:9c:16:55:3d:01:b9:2d:b0:e9:c9:c0:ee:78:6f:
         f4:15:15:1c:d9:f6:2f:7b:cc:11:7b:e9:35:80:cb:40:44:80:
         69:8b:ac:77:43:3d:e9:7c:64:f3:ac:88:96:67:c1:c4:7b:30:
         e2:a1:66:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 13:49:44 2026 by rpki-client