This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73ED473AF9BBD87C3ED55C9048ACD65916EFF8011AD0B5840D9160DE313F83F8/0/323830333a353163303a3a2f33322d3332203d3e20323632313831.roa
File:                     323830333a353163303a3a2f33322d3332203d3e20323632313831.roa (raw, json)
Hash identifier:          rlHaBYe/DiIeYxcNTG+PcVVFl3/tRpMJNH8XUuY9Dks=
Subject key identifier:   0C:FA:54:EC:AF:28:6C:A0:1F:74:D5:B9:51:7A:43:C0:8B:40:D2:39
Certificate issuer:       /CN=BF284D70A6F9C88DA8EA145D79F308EF8A10AFEA
Certificate serial:       5052A28515DB5B207525B7E1143D14C5B844E712
Authority key identifier: BF:28:4D:70:A6:F9:C8:8D:A8:EA:14:5D:79:F3:08:EF:8A:10:AF:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF284D70A6F9C88DA8EA145D79F308EF8A10AFEA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/73ED473AF9BBD87C3ED55C9048ACD65916EFF8011AD0B5840D9160DE313F83F8/0/323830333a353163303a3a2f33322d3332203d3e20323632313831.roa
Signing time:             Tue 06 Jan 2026 19:16:16 +0000
ROA not before:           Tue 06 Jan 2026 19:11:16 +0000
ROA not after:            Tue 05 Jan 2027 19:16:16 +0000
asID:                     262181
IP address blocks:        2803:51c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/73ED473AF9BBD87C3ED55C9048ACD65916EFF8011AD0B5840D9160DE313F83F8/0/BF284D70A6F9C88DA8EA145D79F308EF8A10AFEA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/73ED473AF9BBD87C3ED55C9048ACD65916EFF8011AD0B5840D9160DE313F83F8/0/BF284D70A6F9C88DA8EA145D79F308EF8A10AFEA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF284D70A6F9C88DA8EA145D79F308EF8A10AFEA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Jan 2026 02:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:52:a2:85:15:db:5b:20:75:25:b7:e1:14:3d:14:c5:b8:44:e7:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF284D70A6F9C88DA8EA145D79F308EF8A10AFEA
        Validity
            Not Before: Jan  6 19:11:16 2026 GMT
            Not After : Jan  5 19:16:16 2027 GMT
        Subject: CN=0CFA54ECAF286CA01F74D5B9517A43C08B40D239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f0:ca:ab:c9:1b:78:12:fb:16:9f:97:f3:f7:
                    21:2e:3c:e3:35:b3:51:b9:f5:57:93:02:5c:51:8d:
                    81:86:9a:e1:23:10:5e:80:f1:ba:c2:5a:34:02:59:
                    a9:3a:c6:90:48:df:85:e0:30:fc:29:23:6e:2a:1a:
                    39:99:72:48:54:dc:60:b8:26:37:ac:24:39:f3:14:
                    44:2a:7b:31:59:43:2f:81:45:34:78:39:7c:45:38:
                    d4:1f:a9:e3:16:75:5b:ee:e6:38:c8:78:12:d2:1e:
                    6e:92:d3:fd:f3:f7:81:93:71:9b:c8:04:71:ae:2e:
                    74:05:eb:ad:db:43:67:03:6e:11:b2:5a:b3:7e:62:
                    71:1e:53:ad:97:c4:8d:e2:c3:56:f8:2b:eb:a8:39:
                    3a:18:a6:d9:35:ac:d8:b0:1f:72:25:d6:ca:12:af:
                    8a:30:b8:c3:36:69:80:f5:1d:a4:0c:b4:54:d2:e7:
                    ef:ca:e6:19:be:15:9a:0b:2a:e7:8b:69:c8:20:7e:
                    d4:88:50:4a:e6:0e:57:06:96:80:a8:cb:50:16:f0:
                    0e:b0:36:c0:44:e5:02:52:9d:b8:d4:10:2b:35:cf:
                    48:7c:8c:08:71:77:71:f6:d7:e7:df:5f:ca:32:5c:
                    fa:74:ed:bf:5b:0e:c5:b3:2d:24:9d:ea:d7:1f:3b:
                    16:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:FA:54:EC:AF:28:6C:A0:1F:74:D5:B9:51:7A:43:C0:8B:40:D2:39
            X509v3 Authority Key Identifier:
                keyid:BF:28:4D:70:A6:F9:C8:8D:A8:EA:14:5D:79:F3:08:EF:8A:10:AF:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/73ED473AF9BBD87C3ED55C9048ACD65916EFF8011AD0B5840D9160DE313F83F8/0/BF284D70A6F9C88DA8EA145D79F308EF8A10AFEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF284D70A6F9C88DA8EA145D79F308EF8A10AFEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73ED473AF9BBD87C3ED55C9048ACD65916EFF8011AD0B5840D9160DE313F83F8/0/323830333a353163303a3a2f33322d3332203d3e20323632313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:51c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:66:4d:c9:7c:09:f4:d6:ec:69:9a:a3:e5:97:34:f9:4f:ee:
         a2:ff:7d:fa:b1:f1:4b:ab:8b:35:90:05:f5:d9:7b:cf:84:27:
         52:27:1e:02:eb:88:50:c4:34:7c:a5:25:e1:ab:df:c0:dc:6b:
         0d:f2:7d:6f:18:6d:2d:73:23:b9:d7:07:24:ff:f4:ef:d2:51:
         d2:8d:e0:d6:63:40:ab:6c:b4:0e:55:05:1c:c6:80:1c:d8:97:
         67:f5:4b:c3:46:f6:f7:d3:79:fc:04:f4:d0:26:95:de:a6:cd:
         10:51:7b:39:8b:09:2b:4c:4a:79:5d:90:59:4a:93:98:78:95:
         4c:f2:e4:76:38:a7:67:fd:cf:25:32:6c:c0:c2:c3:3e:d0:aa:
         31:37:b3:f8:42:73:db:b1:06:0b:08:81:1c:52:1e:cc:a0:a4:
         32:bc:01:f0:08:72:24:df:6c:4f:96:00:ad:68:d2:de:b7:7c:
         6a:90:f5:38:d8:7c:2d:8c:f3:51:27:3c:c1:ef:b6:e2:9f:ab:
         a6:c6:a9:d7:c8:f9:df:3a:23:55:ea:c5:a6:8e:db:07:76:99:
         e0:b7:14:09:82:d0:13:80:98:55:06:28:a3:dc:5c:42:78:1c:
         46:73:4a:3a:3b:31:df:7b:de:f8:e5:99:66:41:77:82:ef:1b:
         b9:7c:5f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 22:14:12 2026 by rpki-client