This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77470AA854B987BF722C95DC094096176F2D8E19A031EA199D3F2FDB3D5D72F5/0/323830333a383165303a3a2f33322d3332203d3e20323730303535.roa
File:                     323830333a383165303a3a2f33322d3332203d3e20323730303535.roa (raw, json)
Hash identifier:          Ga5o6ed83Pe+G7+jACiNxBqEKAOQqmtCfGyq86PXeXs=
Subject key identifier:   1F:D0:F4:DA:0C:02:DD:89:B7:87:E0:14:53:B6:F5:CA:49:A3:BD:EB
Certificate issuer:       /CN=8EC1CB2683B25FA680C1E3BB66561D382F62547C
Certificate serial:       68D80DBA4399197D44F6BC3A3382A052463B0E17
Authority key identifier: 8E:C1:CB:26:83:B2:5F:A6:80:C1:E3:BB:66:56:1D:38:2F:62:54:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77470AA854B987BF722C95DC094096176F2D8E19A031EA199D3F2FDB3D5D72F5/0/323830333a383165303a3a2f33322d3332203d3e20323730303535.roa
Signing time:             Tue 06 Jan 2026 19:26:51 +0000
ROA not before:           Tue 06 Jan 2026 19:21:51 +0000
ROA not after:            Tue 05 Jan 2027 19:26:51 +0000
asID:                     270055
IP address blocks:        2803:81e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/77470AA854B987BF722C95DC094096176F2D8E19A031EA199D3F2FDB3D5D72F5/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/77470AA854B987BF722C95DC094096176F2D8E19A031EA199D3F2FDB3D5D72F5/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 17:13:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d8:0d:ba:43:99:19:7d:44:f6:bc:3a:33:82:a0:52:46:3b:0e:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EC1CB2683B25FA680C1E3BB66561D382F62547C
        Validity
            Not Before: Jan  6 19:21:51 2026 GMT
            Not After : Jan  5 19:26:51 2027 GMT
        Subject: CN=1FD0F4DA0C02DD89B787E01453B6F5CA49A3BDEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a1:4f:99:ad:48:55:99:49:17:d8:ff:3b:80:
                    b1:33:59:f3:54:3f:14:38:20:60:7c:e9:90:c6:d3:
                    53:d5:cb:48:50:22:05:59:c3:37:56:49:69:a5:86:
                    eb:53:f4:87:7c:e3:54:7b:e6:3e:fd:a0:d3:38:d3:
                    1f:14:76:e3:53:ab:1c:eb:e7:63:be:3f:c5:92:a9:
                    2b:e8:b3:9a:dd:e3:f1:99:55:cc:57:dc:af:7b:bc:
                    7c:c7:d9:13:5d:df:f4:10:53:9f:42:2d:22:a4:d9:
                    90:ba:56:98:99:a6:98:c0:3a:f4:4c:a9:5b:5e:3d:
                    8c:90:e0:17:da:a4:81:88:62:8e:0e:19:18:28:60:
                    5d:4d:6f:c2:c7:67:ad:76:91:35:70:e8:90:9c:4b:
                    f1:a4:97:76:4a:21:98:d7:3e:e9:65:eb:85:a4:7b:
                    c9:08:69:f7:43:8a:7e:91:47:f1:be:df:91:a9:dd:
                    d1:bb:f1:0b:1e:f5:23:28:d0:b4:72:01:bb:bb:bd:
                    50:67:e5:6b:33:8b:87:44:14:f1:22:15:c6:e9:18:
                    a8:30:63:ff:d1:52:09:77:4c:3f:88:c3:9f:8b:a0:
                    39:0e:ab:ad:79:d4:02:8f:d5:bc:06:4f:ba:d3:42:
                    0f:e7:4c:76:7c:bd:83:5a:36:e2:64:83:a3:ae:65:
                    cd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D0:F4:DA:0C:02:DD:89:B7:87:E0:14:53:B6:F5:CA:49:A3:BD:EB
            X509v3 Authority Key Identifier:
                keyid:8E:C1:CB:26:83:B2:5F:A6:80:C1:E3:BB:66:56:1D:38:2F:62:54:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77470AA854B987BF722C95DC094096176F2D8E19A031EA199D3F2FDB3D5D72F5/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77470AA854B987BF722C95DC094096176F2D8E19A031EA199D3F2FDB3D5D72F5/0/323830333a383165303a3a2f33322d3332203d3e20323730303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:81e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:c9:e2:1b:d5:49:9c:05:82:54:f2:50:5d:75:34:d6:56:96:
         85:04:47:65:64:6f:d0:eb:65:66:24:64:54:d4:cc:0d:8f:da:
         32:aa:23:21:42:9d:f3:f9:ef:dd:30:b7:3d:be:c6:6e:69:66:
         3d:52:3f:d0:23:d8:ee:66:41:84:2b:c5:0c:66:a7:53:cb:6f:
         36:ce:66:13:ee:22:8e:04:d8:7c:cd:c0:28:10:17:64:a3:ca:
         54:9b:38:ed:7e:33:d6:7f:0f:a4:ac:df:93:8c:3c:4a:b7:db:
         09:90:3d:4a:af:a8:7a:3f:82:a3:b3:c6:9e:f6:49:fe:94:56:
         79:74:4f:cb:d8:fa:f8:65:15:c8:10:b9:1e:a6:62:60:f9:e6:
         0b:6d:d4:bb:f3:c6:1e:39:a1:b1:8a:e5:78:b7:65:ab:f7:54:
         58:36:aa:bd:86:50:56:9e:8f:8c:b0:64:a9:2e:99:51:86:4c:
         7a:c0:aa:8f:25:2f:97:88:b8:2b:b4:04:d2:fe:d8:65:38:1f:
         c9:60:1a:d0:32:0f:4c:4b:7c:47:b7:3b:79:b5:cd:29:5f:87:
         a4:c5:8d:6a:96:23:d9:6c:e3:0c:f5:2e:3b:b7:f1:71:ce:1b:
         27:bf:29:69:d5:f3:91:a6:b8:55:96:08:98:36:64:46:00:f8:
         f1:a2:41:68
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUaNgNukOZGX1E9rw6M4KgUkY7DhcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEVDMUNCMjY4M0IyNUZBNjgwQzFFM0JCNjY1NjFEMzgy
RjYyNTQ3QzAeFw0yNjAxMDYxOTIxNTFaFw0yNzAxMDUxOTI2NTFaMDMxMTAvBgNV
BAMTKDFGRDBGNERBMEMwMkREODlCNzg3RTAxNDUzQjZGNUNBNDlBM0JERUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHoU+ZrUhVmUkX2P87gLEzWfNU
PxQ4IGB86ZDG01PVy0hQIgVZwzdWSWmlhutT9Id841R75j79oNM40x8UduNTqxzr
52O+P8WSqSvos5rd4/GZVcxX3K97vHzH2RNd3/QQU59CLSKk2ZC6VpiZppjAOvRM
qVtePYyQ4BfapIGIYo4OGRgoYF1Nb8LHZ612kTVw6JCcS/Gkl3ZKIZjXPull64Wk
e8kIafdDin6RR/G+35Gp3dG78Qse9SMo0LRyAbu7vVBn5Wszi4dEFPEiFcbpGKgw
Y//RUgl3TD+Iw5+LoDkOq6151AKP1bwGT7rTQg/nTHZ8vYNaNuJkg6OuZc1lAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUH9D02gwC3Ym3h+AUU7b1ykmjveswHwYDVR0j
BBgwFoAUjsHLJoOyX6aAweO7ZlYdOC9iVHwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NzQ3MEFBODU0Qjk4N0JGNzIyQzk1REMwOTQwOTYxNzZG
MkQ4RTE5QTAzMUVBMTk5RDNGMkZEQjNENUQ3MkY1LzAvOEVDMUNCMjY4M0IyNUZB
NjgwQzFFM0JCNjY1NjFEMzgyRjYyNTQ3Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RUMxQ0IyNjgzQjI1RkE2ODBD
MUUzQkI2NjU2MUQzODJGNjI1NDdDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzc0NzBBQTg1NEI5ODdCRjcyMkM5NURDMDk0MDk2MTc2RjJEOEUxOUEw
MzFFQTE5OUQzRjJGREIzRDVENzJGNS8wLzMyMzgzMDMzM2EzODMxNjUzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMDMwMzUzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDgeAw
DQYJKoZIhvcNAQELBQADggEBADHJ4hvVSZwFglTyUF11NNZWloUER2Vkb9DrZWYk
ZFTUzA2P2jKqIyFCnfP5790wtz2+xm5pZj1SP9Aj2O5mQYQrxQxmp1PLbzbOZhPu
Io4E2HzNwCgQF2SjylSbOO1+M9Z/D6Ss35OMPEq32wmQPUqvqHo/gqOzxp72Sf6U
Vnl0T8vY+vhlFcgQuR6mYmD55gtt1Lvzxh45obGK5Xi3Zav3VFg2qr2GUFaej4yw
ZKkumVGGTHrAqo8lL5eIuCu0BNL+2GU4H8lgGtAyD0xLfEe3O3m1zSlfh6TFjWqW
I9ls4wz1Lju38XHOGye/KWnV85GmuFWWCJg2ZEYA+PGiQWg=
-----END CERTIFICATE-----
Generated at Tue Jan 13 13:32:20 2026 by rpki-client