This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/802672FE15624BDF705C3588B1C7767DD409D7594E5A7CC8FD3A384F7AA4E7EF/0/323830333a623539303a313a3a2f34382d3438203d3e20323733303038.roa
File:                     323830333a623539303a313a3a2f34382d3438203d3e20323733303038.roa (raw, json)
Hash identifier:          btKBknZsoehl+cp0a/jV74DrEJGAKhGGhvGqFDl3m38=
Subject key identifier:   BA:01:E2:5C:16:C1:11:25:85:07:18:23:A8:03:3D:FD:3D:03:0E:5B
Certificate issuer:       /CN=D68C275AE349DFCD32C558419A7893BADFF5F3F8
Certificate serial:       0B3F1B26E332FA55BBD558567C29F376F611EC7E
Authority key identifier: D6:8C:27:5A:E3:49:DF:CD:32:C5:58:41:9A:78:93:BA:DF:F5:F3:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D68C275AE349DFCD32C558419A7893BADFF5F3F8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/802672FE15624BDF705C3588B1C7767DD409D7594E5A7CC8FD3A384F7AA4E7EF/0/323830333a623539303a313a3a2f34382d3438203d3e20323733303038.roa
Signing time:             Tue 06 Jan 2026 19:06:24 +0000
ROA not before:           Tue 06 Jan 2026 19:01:24 +0000
ROA not after:            Tue 05 Jan 2027 19:06:24 +0000
asID:                     273008
IP address blocks:        2803:b590:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/802672FE15624BDF705C3588B1C7767DD409D7594E5A7CC8FD3A384F7AA4E7EF/0/D68C275AE349DFCD32C558419A7893BADFF5F3F8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/802672FE15624BDF705C3588B1C7767DD409D7594E5A7CC8FD3A384F7AA4E7EF/0/D68C275AE349DFCD32C558419A7893BADFF5F3F8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D68C275AE349DFCD32C558419A7893BADFF5F3F8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 08:47:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:3f:1b:26:e3:32:fa:55:bb:d5:58:56:7c:29:f3:76:f6:11:ec:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D68C275AE349DFCD32C558419A7893BADFF5F3F8
        Validity
            Not Before: Jan  6 19:01:24 2026 GMT
            Not After : Jan  5 19:06:24 2027 GMT
        Subject: CN=BA01E25C16C1112585071823A8033DFD3D030E5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bf:9a:d4:27:df:4d:59:f0:3f:2f:f8:9d:19:
                    44:cd:ce:b7:8d:51:9b:24:65:05:d9:71:8a:16:53:
                    d3:e4:c6:1d:04:be:af:4f:08:89:cd:14:5b:c9:49:
                    21:51:dc:69:c9:59:3b:4c:c2:e9:27:18:f4:fd:82:
                    19:bf:22:13:9f:f9:14:d1:6e:26:6c:33:f1:22:ec:
                    ca:51:f8:6c:a2:72:df:20:8a:2b:02:8a:0d:f9:fb:
                    34:90:bc:54:d8:1d:f9:47:1d:f6:79:81:5a:db:76:
                    2d:77:93:a5:2f:92:9c:94:21:51:00:86:73:fe:84:
                    c3:73:12:5b:b4:ef:37:21:31:d2:2b:85:42:56:64:
                    f3:86:8b:f3:2f:18:ff:d7:c0:35:08:e0:c5:71:03:
                    1b:b0:92:5a:3b:b3:03:7d:a5:68:ce:9e:11:62:00:
                    81:15:27:04:48:d1:07:67:7f:74:87:f9:3b:24:04:
                    72:82:fa:dd:e8:6a:cb:31:2b:bf:6c:cb:50:1e:93:
                    69:15:87:34:75:ec:78:53:76:23:2a:a5:46:58:b1:
                    cd:04:91:bc:23:e2:27:5e:3b:70:80:71:1a:52:a1:
                    08:8f:55:ce:1d:4a:ac:18:61:0d:33:37:c9:9f:ce:
                    6b:bd:d0:5e:71:b1:23:e4:4e:83:79:5b:f4:f1:72:
                    21:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:01:E2:5C:16:C1:11:25:85:07:18:23:A8:03:3D:FD:3D:03:0E:5B
            X509v3 Authority Key Identifier:
                keyid:D6:8C:27:5A:E3:49:DF:CD:32:C5:58:41:9A:78:93:BA:DF:F5:F3:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/802672FE15624BDF705C3588B1C7767DD409D7594E5A7CC8FD3A384F7AA4E7EF/0/D68C275AE349DFCD32C558419A7893BADFF5F3F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D68C275AE349DFCD32C558419A7893BADFF5F3F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/802672FE15624BDF705C3588B1C7767DD409D7594E5A7CC8FD3A384F7AA4E7EF/0/323830333a623539303a313a3a2f34382d3438203d3e20323733303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b590:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:3d:4e:86:1f:aa:24:f5:d1:60:4d:cb:03:71:27:4f:25:96:
         df:83:89:c2:83:fa:b4:d9:13:47:94:58:f5:0d:86:84:03:4a:
         e0:94:1d:67:c6:bf:17:44:f9:7b:63:e6:34:92:60:e1:3b:3c:
         a9:c4:60:93:6d:52:5d:97:d2:85:b3:b9:40:82:61:4f:47:a5:
         1f:e2:32:5f:a2:13:95:b4:3b:b3:50:b1:ee:35:b7:ac:83:f1:
         93:e6:c5:ea:8a:e2:88:1c:b2:6a:e1:df:70:39:66:d7:88:b6:
         e3:4b:4e:7e:15:d7:dc:d0:08:9d:0a:63:a2:38:01:24:3c:1f:
         7f:fc:58:fb:f1:fb:8c:f9:39:f7:d8:55:7d:92:4f:07:f0:9b:
         d8:fe:d4:97:c3:e0:93:71:17:a9:77:67:5d:bc:4f:93:36:a8:
         6a:c5:70:e5:46:3b:23:6f:b3:5c:b7:bf:01:09:31:52:67:ac:
         59:55:24:e1:d3:33:91:fe:9d:63:42:02:a8:04:84:1e:ac:fd:
         67:f8:ee:8a:54:02:cf:8e:56:57:78:53:5c:e9:40:5a:d7:64:
         5b:e4:48:ab:47:3c:6e:56:88:9f:2f:89:7c:40:f9:21:fc:b5:
         a1:ac:22:dc:a0:13:96:61:78:5d:0b:9f:57:d3:f2:a8:dc:a2:
         20:a0:da:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 04:02:52 2026 by rpki-client