This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8ABDFF8AC1F52EB03F4F2120204D33DF0617CBD11AF7D961AECA6C66C7BDEE10/0/323830333a376236303a3a2f33322d3332203d3e20323639383134.roa
File:                     323830333a376236303a3a2f33322d3332203d3e20323639383134.roa (raw, json)
Hash identifier:          ZPf0qk+UUyygcqihnoWtHIbTKb21g0j85k3ClOTzhU4=
Subject key identifier:   06:0C:A1:C6:C5:87:D4:28:12:DF:F1:7C:1E:63:C2:92:54:02:08:E3
Certificate issuer:       /CN=8DA82200D0E6AB11C84BB7FA99D7B0530B02D3F7
Certificate serial:       4CA56E8986CE8B878DA1E9F8A27A8698682EF2D7
Authority key identifier: 8D:A8:22:00:D0:E6:AB:11:C8:4B:B7:FA:99:D7:B0:53:0B:02:D3:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA82200D0E6AB11C84BB7FA99D7B0530B02D3F7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8ABDFF8AC1F52EB03F4F2120204D33DF0617CBD11AF7D961AECA6C66C7BDEE10/0/323830333a376236303a3a2f33322d3332203d3e20323639383134.roa
Signing time:             Tue 06 Jan 2026 19:06:26 +0000
ROA not before:           Tue 06 Jan 2026 19:01:26 +0000
ROA not after:            Tue 05 Jan 2027 19:06:26 +0000
asID:                     269814
IP address blocks:        2803:7b60::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8ABDFF8AC1F52EB03F4F2120204D33DF0617CBD11AF7D961AECA6C66C7BDEE10/0/8DA82200D0E6AB11C84BB7FA99D7B0530B02D3F7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8ABDFF8AC1F52EB03F4F2120204D33DF0617CBD11AF7D961AECA6C66C7BDEE10/0/8DA82200D0E6AB11C84BB7FA99D7B0530B02D3F7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA82200D0E6AB11C84BB7FA99D7B0530B02D3F7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 18:40:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:a5:6e:89:86:ce:8b:87:8d:a1:e9:f8:a2:7a:86:98:68:2e:f2:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DA82200D0E6AB11C84BB7FA99D7B0530B02D3F7
        Validity
            Not Before: Jan  6 19:01:26 2026 GMT
            Not After : Jan  5 19:06:26 2027 GMT
        Subject: CN=060CA1C6C587D42812DFF17C1E63C292540208E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:63:86:65:35:ef:96:ad:fb:19:11:db:f6:9a:
                    e4:be:67:31:87:15:43:4e:38:3d:3f:5c:84:94:f0:
                    61:36:8e:e0:c5:90:94:0c:a7:6a:8b:9f:dc:02:30:
                    06:f5:fe:3a:63:9a:cc:15:f3:d6:5d:a4:85:a0:cf:
                    62:31:ad:13:7c:ba:2b:92:f0:18:f4:b0:cf:f1:aa:
                    2b:ec:61:81:25:2d:c5:fc:1f:66:fd:dc:11:8c:7e:
                    68:e8:21:a4:95:e4:80:4b:6f:92:ba:0d:88:3d:23:
                    7f:60:59:db:8b:bd:9e:9a:e0:57:d2:c4:80:e7:1d:
                    b3:6f:03:3c:69:69:22:4e:d8:b0:0c:27:2c:56:91:
                    e7:a0:c2:6a:a3:76:cf:34:5f:61:11:b7:d3:14:26:
                    3f:af:9a:f5:03:1d:31:fe:0f:c7:68:4b:22:64:4e:
                    50:b9:e6:e9:3f:a3:fc:b9:07:07:72:cf:67:f1:e5:
                    7d:58:fa:52:48:6d:f1:b2:36:0a:93:ee:40:a6:dc:
                    a7:58:32:25:e7:4d:97:15:47:47:29:47:2c:75:ca:
                    83:d4:e4:5b:f4:b6:6c:48:13:ff:ca:81:96:ce:cd:
                    c7:fa:e1:a3:e0:c1:06:ff:a6:ce:0f:d5:81:23:22:
                    fd:ba:02:fc:b4:a1:60:99:22:a4:7a:a0:13:9d:0f:
                    77:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:0C:A1:C6:C5:87:D4:28:12:DF:F1:7C:1E:63:C2:92:54:02:08:E3
            X509v3 Authority Key Identifier:
                keyid:8D:A8:22:00:D0:E6:AB:11:C8:4B:B7:FA:99:D7:B0:53:0B:02:D3:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8ABDFF8AC1F52EB03F4F2120204D33DF0617CBD11AF7D961AECA6C66C7BDEE10/0/8DA82200D0E6AB11C84BB7FA99D7B0530B02D3F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA82200D0E6AB11C84BB7FA99D7B0530B02D3F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8ABDFF8AC1F52EB03F4F2120204D33DF0617CBD11AF7D961AECA6C66C7BDEE10/0/323830333a376236303a3a2f33322d3332203d3e20323639383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7b60::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:4c:fa:d7:07:8e:62:d7:6c:03:f8:fe:0c:80:10:dd:2f:66:
         f3:cf:88:ed:2f:88:4f:e6:bf:68:d0:2f:58:d0:7b:6f:be:98:
         f0:49:4d:0f:5a:d2:27:c0:a1:52:f1:b5:74:02:bc:0c:96:bf:
         cd:73:6d:ba:69:58:02:87:cc:fd:12:b8:85:ef:ab:de:0c:fc:
         aa:58:cc:36:b9:ad:5c:0b:ac:a6:dd:3f:75:4e:a6:ec:17:36:
         62:2b:92:0d:6f:a1:cf:f9:23:45:33:e3:e4:7c:b7:f3:c8:7a:
         8a:eb:05:21:c1:a9:4a:4d:31:d5:c2:58:07:52:49:d0:56:28:
         0c:c4:f7:c3:be:12:cd:7c:74:c9:93:e7:f0:e8:ce:09:e8:e6:
         e6:23:a6:00:76:10:2b:e8:94:8f:91:19:fc:7f:3e:33:43:0a:
         f3:c0:e6:84:20:7a:d3:56:78:da:ff:57:85:d1:fc:e6:ca:2c:
         53:45:da:3c:51:79:21:1d:a2:46:0c:51:05:a8:67:c8:cf:c4:
         f9:94:1c:27:bc:af:98:37:63:d3:ec:be:69:97:83:ab:ce:6d:
         33:57:81:d3:d3:75:94:1a:53:8e:90:1c:a9:bf:63:25:0c:58:
         50:ea:c6:96:a2:1d:ce:93:bf:fe:58:42:32:dc:1c:8f:a5:1a:
         63:05:42:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 02:58:04 2026 by rpki-client