This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/323830333a333936303a3a2f33322d3332203d3e20323632313836.roa
File:                     323830333a333936303a3a2f33322d3332203d3e20323632313836.roa (raw, json)
Hash identifier:          Qqw90aD8x1TT13Dna5RFNz5pAOgx19h82r43fL5+WVI=
Subject key identifier:   AF:0E:C8:7C:F8:75:0C:38:C3:0E:C7:28:B1:47:E3:5B:82:5C:35:D0
Certificate issuer:       /CN=7E656418FBD6F519E8CA146E061CF553AFE480F1
Certificate serial:       422C040286FC552FB9F591E874B065A9BF9F2316
Authority key identifier: 7E:65:64:18:FB:D6:F5:19:E8:CA:14:6E:06:1C:F5:53:AF:E4:80:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/323830333a333936303a3a2f33322d3332203d3e20323632313836.roa
Signing time:             Tue 06 Jan 2026 19:22:44 +0000
ROA not before:           Tue 06 Jan 2026 19:17:44 +0000
ROA not after:            Tue 05 Jan 2027 19:22:44 +0000
asID:                     262186
IP address blocks:        2803:3960::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 02:10:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:2c:04:02:86:fc:55:2f:b9:f5:91:e8:74:b0:65:a9:bf:9f:23:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E656418FBD6F519E8CA146E061CF553AFE480F1
        Validity
            Not Before: Jan  6 19:17:44 2026 GMT
            Not After : Jan  5 19:22:44 2027 GMT
        Subject: CN=AF0EC87CF8750C38C30EC728B147E35B825C35D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fc:c1:c8:a6:fb:a7:c8:b7:d2:e9:8f:59:2b:
                    e7:e8:87:03:b1:45:58:f0:5d:63:d2:ad:d8:2a:0e:
                    ef:4c:44:32:80:0d:12:80:e0:f1:67:0a:64:c1:31:
                    1f:8b:71:a9:4f:5a:a4:a8:09:8c:26:fb:e9:c1:3a:
                    48:68:44:21:89:31:2f:c7:72:cb:08:a1:8a:8d:e9:
                    a1:d1:c7:c8:ea:df:1c:07:c2:d4:00:79:f8:70:2a:
                    94:c1:fe:c6:48:d3:5b:cc:25:c2:11:fb:09:73:94:
                    fc:81:14:80:e8:68:45:a7:27:28:55:e6:65:14:fe:
                    50:98:17:e1:c2:dc:2f:be:3d:a8:2a:12:20:2e:d3:
                    4b:77:69:26:60:b5:ee:22:43:d0:6c:d3:38:93:4a:
                    ec:20:ef:06:e5:c7:ca:81:f8:a7:86:58:51:a8:b9:
                    55:1d:22:ff:e3:08:cd:8a:6c:86:5a:ba:91:b3:cf:
                    da:fa:67:df:b4:3b:97:c1:ce:b1:54:87:2a:23:63:
                    69:3f:fa:ea:50:21:b9:54:89:57:42:1a:ac:a3:63:
                    4b:ac:23:0f:e1:d5:17:f3:6b:0d:2f:6c:b9:2c:d2:
                    d1:a5:79:52:46:b2:f7:49:de:c2:38:90:58:d9:6c:
                    8b:be:01:2d:1a:b6:4c:d6:27:d9:1c:b6:3e:38:ec:
                    0b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:0E:C8:7C:F8:75:0C:38:C3:0E:C7:28:B1:47:E3:5B:82:5C:35:D0
            X509v3 Authority Key Identifier:
                keyid:7E:65:64:18:FB:D6:F5:19:E8:CA:14:6E:06:1C:F5:53:AF:E4:80:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/323830333a333936303a3a2f33322d3332203d3e20323632313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3960::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:7a:ec:c2:2d:d6:05:56:8f:ad:fa:a4:69:a9:71:64:f9:0b:
         b6:3b:13:f7:4f:7f:21:e5:ec:82:4f:75:fb:74:7a:26:a9:06:
         42:46:ae:3b:55:4c:bd:2f:70:2a:90:98:2b:af:7d:18:66:05:
         d3:5a:9a:32:6c:4a:cf:cb:8f:37:ce:bb:88:ea:6e:f5:4a:69:
         d9:8c:2a:4b:cc:9f:5e:79:f3:be:1c:6c:49:94:c5:55:09:3c:
         31:cd:fa:0f:c9:5b:02:2e:b8:b8:78:ac:d3:e8:68:0b:a0:da:
         c4:15:9c:cf:b7:2a:41:a0:84:5a:27:00:d7:ad:de:92:0c:62:
         ee:91:9b:6a:19:77:78:77:b5:dd:d4:c6:b4:12:0c:2a:3a:7d:
         4a:0d:f1:fb:67:71:de:7a:dd:fc:c4:30:be:ee:74:a3:bd:3f:
         3c:03:04:9d:4d:94:a2:ba:e6:53:64:af:38:d7:89:aa:1b:26:
         07:fb:ea:d4:14:5d:d2:e2:e4:08:23:80:f5:f7:6b:c1:4d:14:
         ed:38:c6:f4:07:0c:08:a8:48:7f:d0:12:4f:3d:f9:2b:d2:cd:
         d7:77:0a:e5:b1:ed:bb:d1:74:2f:10:80:ea:57:97:a9:87:dc:
         eb:63:78:09:81:0c:f5:ee:40:d5:07:be:1e:dc:00:d4:3a:19:
         f6:64:05:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 14:36:53 2026 by rpki-client