This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8144F5D010FF039B15D07B5E60DF16D7EE79D39BBBBE4AF9FAD68623663D2F89/0/323830333a393734303a3a2f33322d3332203d3e20323635383536.roa
File:                     323830333a393734303a3a2f33322d3332203d3e20323635383536.roa (raw, json)
Hash identifier:          7vPl5+QfBZDANbdoxYlpeXxWrQ8fH8NzURXZTh8NtVM=
Subject key identifier:   B8:2A:FF:08:3E:BE:81:4B:7F:9A:3D:DB:FA:12:04:9B:C2:7A:93:A1
Certificate issuer:       /CN=81E2188947DD0D1730B8D31567606086CAC50E83
Certificate serial:       6533EFA23068211A9858AB706089CB16393094A8
Authority key identifier: 81:E2:18:89:47:DD:0D:17:30:B8:D3:15:67:60:60:86:CA:C5:0E:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81E2188947DD0D1730B8D31567606086CAC50E83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8144F5D010FF039B15D07B5E60DF16D7EE79D39BBBBE4AF9FAD68623663D2F89/0/323830333a393734303a3a2f33322d3332203d3e20323635383536.roa
Signing time:             Tue 06 Jan 2026 19:45:20 +0000
ROA not before:           Tue 06 Jan 2026 19:40:20 +0000
ROA not after:            Tue 05 Jan 2027 19:45:20 +0000
asID:                     265856
IP address blocks:        2803:9740::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8144F5D010FF039B15D07B5E60DF16D7EE79D39BBBBE4AF9FAD68623663D2F89/0/81E2188947DD0D1730B8D31567606086CAC50E83.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8144F5D010FF039B15D07B5E60DF16D7EE79D39BBBBE4AF9FAD68623663D2F89/0/81E2188947DD0D1730B8D31567606086CAC50E83.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81E2188947DD0D1730B8D31567606086CAC50E83.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 00:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:33:ef:a2:30:68:21:1a:98:58:ab:70:60:89:cb:16:39:30:94:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81E2188947DD0D1730B8D31567606086CAC50E83
        Validity
            Not Before: Jan  6 19:40:20 2026 GMT
            Not After : Jan  5 19:45:20 2027 GMT
        Subject: CN=B82AFF083EBE814B7F9A3DDBFA12049BC27A93A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3c:16:96:e6:61:3b:66:a4:66:36:3c:24:94:
                    a9:c5:56:c7:9c:5f:d4:79:7c:7f:95:57:62:b9:e1:
                    e5:4c:e2:2e:9a:c7:32:d2:e6:90:da:0d:25:f2:cd:
                    c8:ed:f8:95:d6:45:37:28:37:94:df:f0:55:f2:6b:
                    4f:be:ac:4c:2c:b4:83:d0:32:57:e5:b3:8a:41:6b:
                    89:49:17:40:cf:88:06:04:3f:c6:fe:ca:e3:10:55:
                    1a:f6:74:65:67:7b:16:49:96:f4:35:02:11:a2:b8:
                    2e:4a:bd:3a:80:db:f3:d3:1c:fb:db:d7:13:64:c4:
                    28:a5:a3:3f:55:e3:a1:83:27:2f:ed:99:47:7d:90:
                    e1:a7:d1:1b:87:eb:13:c5:2b:55:0b:f3:6e:21:95:
                    f2:48:56:fc:0c:4e:66:65:e8:84:c0:5f:d1:6c:1b:
                    48:94:a3:9c:fe:be:4b:b5:9a:41:65:47:0a:c0:70:
                    6e:50:d9:66:9b:4d:d7:e2:d6:c6:f8:4f:37:7a:21:
                    f7:54:6d:4c:51:01:67:17:77:73:93:57:f6:b4:d1:
                    b9:63:0c:5a:f7:3d:36:47:9c:08:29:cd:c5:a2:4d:
                    4e:e7:6f:16:c2:ef:7d:16:67:2e:c2:8b:5d:43:31:
                    be:dc:a0:dd:57:93:6f:07:a5:35:27:2d:91:00:3c:
                    c0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:2A:FF:08:3E:BE:81:4B:7F:9A:3D:DB:FA:12:04:9B:C2:7A:93:A1
            X509v3 Authority Key Identifier:
                keyid:81:E2:18:89:47:DD:0D:17:30:B8:D3:15:67:60:60:86:CA:C5:0E:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8144F5D010FF039B15D07B5E60DF16D7EE79D39BBBBE4AF9FAD68623663D2F89/0/81E2188947DD0D1730B8D31567606086CAC50E83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81E2188947DD0D1730B8D31567606086CAC50E83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8144F5D010FF039B15D07B5E60DF16D7EE79D39BBBBE4AF9FAD68623663D2F89/0/323830333a393734303a3a2f33322d3332203d3e20323635383536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9740::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:dc:7f:03:23:b4:3f:9d:44:c2:a5:a5:9d:2a:5b:f1:1a:8e:
         bf:20:a0:ab:4d:97:95:d0:6c:a4:4e:76:e5:19:e0:81:1f:90:
         3b:f9:9e:9e:6c:29:38:4d:22:a8:ac:44:62:51:5c:9d:fa:31:
         60:e4:6a:af:e6:90:29:6c:c2:48:a4:c3:52:35:cc:1b:fa:1e:
         cc:63:6b:a6:2f:23:f3:2f:04:23:49:24:aa:39:c4:bc:a1:4d:
         69:b0:93:ff:2f:ea:a2:f7:4c:44:a6:8f:87:f0:a8:89:2a:9d:
         11:35:e0:11:70:ba:56:21:00:3a:0c:3e:88:36:d2:29:68:18:
         25:58:43:79:a1:e4:51:da:5d:8c:96:29:5d:48:fc:a0:4d:44:
         3a:4f:18:d7:c9:4b:b6:f1:eb:35:a7:62:34:37:17:50:b9:7e:
         bc:47:e4:7c:a1:ff:7a:37:07:87:97:a6:1c:f6:36:59:ba:42:
         a3:e1:ae:07:12:8e:86:77:ff:76:ed:53:97:cd:a5:08:ea:66:
         97:9e:e3:60:3a:62:b8:5e:3f:8c:14:74:4e:7a:60:73:56:f9:
         fb:69:2e:48:40:ba:d6:db:58:45:5f:c2:1c:0e:ee:ae:64:f9:
         52:82:07:7c:76:08:e5:b8:74:ae:cb:1d:da:a7:c8:48:3e:14:
         2f:a1:0d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 20:01:17 2026 by rpki-client