This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/848B7C827600EB0903D3D36F5E0B43264D8D30A33D7C3FBE6B9E843FAE2E0F55/0/323830333a613439303a3a2f33322d3332203d3e20323732383138.roa
File:                     323830333a613439303a3a2f33322d3332203d3e20323732383138.roa (raw, json)
Hash identifier:          TsgxgKN+X4IiXVvGUusu0RUkD/81RDjZm9/ILvwgsbY=
Subject key identifier:   42:6D:84:50:42:33:54:C1:72:B4:72:E1:E4:14:03:12:1A:07:A2:EE
Certificate issuer:       /CN=6CDB97C410028B5C8AFF4E3DF7960EDB7330E7D0
Certificate serial:       05674B55B48E068E3B1A8476228AF748B2B2AA04
Authority key identifier: 6C:DB:97:C4:10:02:8B:5C:8A:FF:4E:3D:F7:96:0E:DB:73:30:E7:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CDB97C410028B5C8AFF4E3DF7960EDB7330E7D0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/848B7C827600EB0903D3D36F5E0B43264D8D30A33D7C3FBE6B9E843FAE2E0F55/0/323830333a613439303a3a2f33322d3332203d3e20323732383138.roa
Signing time:             Tue 06 Jan 2026 19:41:50 +0000
ROA not before:           Tue 06 Jan 2026 19:36:50 +0000
ROA not after:            Tue 05 Jan 2027 19:41:50 +0000
asID:                     272818
IP address blocks:        2803:a490::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/848B7C827600EB0903D3D36F5E0B43264D8D30A33D7C3FBE6B9E843FAE2E0F55/0/6CDB97C410028B5C8AFF4E3DF7960EDB7330E7D0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/848B7C827600EB0903D3D36F5E0B43264D8D30A33D7C3FBE6B9E843FAE2E0F55/0/6CDB97C410028B5C8AFF4E3DF7960EDB7330E7D0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CDB97C410028B5C8AFF4E3DF7960EDB7330E7D0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 20:06:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:67:4b:55:b4:8e:06:8e:3b:1a:84:76:22:8a:f7:48:b2:b2:aa:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CDB97C410028B5C8AFF4E3DF7960EDB7330E7D0
        Validity
            Not Before: Jan  6 19:36:50 2026 GMT
            Not After : Jan  5 19:41:50 2027 GMT
        Subject: CN=426D8450423354C172B472E1E41403121A07A2EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:b3:8c:4c:b8:93:9e:ed:88:4e:a6:14:83:52:
                    88:36:dc:66:95:2e:e0:86:63:7f:2c:9f:82:05:ea:
                    de:0b:cd:af:78:73:05:41:d8:68:0e:ea:25:43:44:
                    c0:79:11:f3:5b:3e:e0:2e:9c:84:47:bf:24:1e:32:
                    fd:46:32:c0:04:de:76:7d:83:1f:a2:38:3b:dc:62:
                    61:87:5c:61:a1:9c:3a:fe:5c:9c:49:48:40:56:3b:
                    ab:55:9f:f1:b6:15:d1:5c:51:fa:05:1a:06:b9:dd:
                    71:6c:fa:5e:1f:4a:68:b3:4d:68:d5:08:4d:06:bb:
                    5f:4e:ff:6e:02:ca:e4:f0:2d:6c:1a:20:dc:29:52:
                    7c:0b:bc:36:ac:ef:f9:c3:41:2d:47:23:8f:2a:7c:
                    d2:ad:ca:50:09:6e:57:93:ea:d2:83:de:05:a4:75:
                    e4:90:08:f2:ea:d1:93:e5:bf:c2:5a:65:24:e8:47:
                    0b:93:b8:fc:8c:6a:c5:34:7d:99:4a:6e:db:b9:57:
                    75:6c:47:3e:c6:1f:a7:cf:57:09:63:af:7b:e6:78:
                    c6:de:ee:4d:65:90:25:a2:a6:aa:47:97:41:7e:3a:
                    9f:6d:fc:bf:46:56:2b:55:fc:be:e2:54:48:37:b0:
                    4b:8f:ad:d4:16:3e:da:7c:05:7f:f1:94:7c:83:8a:
                    1b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:6D:84:50:42:33:54:C1:72:B4:72:E1:E4:14:03:12:1A:07:A2:EE
            X509v3 Authority Key Identifier:
                keyid:6C:DB:97:C4:10:02:8B:5C:8A:FF:4E:3D:F7:96:0E:DB:73:30:E7:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/848B7C827600EB0903D3D36F5E0B43264D8D30A33D7C3FBE6B9E843FAE2E0F55/0/6CDB97C410028B5C8AFF4E3DF7960EDB7330E7D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CDB97C410028B5C8AFF4E3DF7960EDB7330E7D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/848B7C827600EB0903D3D36F5E0B43264D8D30A33D7C3FBE6B9E843FAE2E0F55/0/323830333a613439303a3a2f33322d3332203d3e20323732383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a490::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:88:49:a2:b9:12:03:c5:7f:05:57:48:c7:53:fb:36:9a:64:
         7e:d9:e0:d2:ba:60:7d:44:ea:30:b5:df:39:bb:1c:3f:e9:c7:
         93:37:91:e6:7d:88:84:f0:83:d0:93:e1:b9:6f:4e:06:a1:e8:
         dc:a3:a3:d5:be:cf:87:65:8a:10:2a:46:8a:2c:93:38:c6:e5:
         3b:ef:c9:60:ed:d7:cf:fc:6e:7d:1c:1b:f0:5d:72:29:ee:35:
         75:7e:63:31:3e:be:92:e1:6a:7c:22:33:46:bb:68:9c:0b:6c:
         1b:a2:26:62:bf:e0:73:de:af:17:b6:98:1b:66:8a:3a:2a:cf:
         a3:3f:8a:c0:ec:7f:5a:a2:c6:38:5c:37:4b:91:d2:fb:bb:2d:
         0a:92:82:38:54:2b:53:53:55:e2:66:ce:07:58:1c:87:0f:b1:
         a5:37:2c:48:33:81:42:ce:32:c4:5e:84:fe:55:8a:55:28:b8:
         03:d5:b9:bf:08:63:bf:ba:b0:12:1f:55:84:d2:89:cd:df:11:
         e6:c2:f7:d1:ec:55:ee:58:f6:32:3c:bc:50:ca:65:c5:19:10:
         94:ba:74:9e:3b:97:db:72:db:eb:91:21:32:d4:0c:57:98:c1:
         8a:08:11:70:7b:0d:38:bb:0e:fe:08:39:77:00:cc:ae:0d:b0:
         14:eb:cf:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 22:15:03 2026 by rpki-client