This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8DB359FBDD12B1D4AF7A57066DD229D0586F8D259779E9AADCA7994B631E393C/0/323830333a363832303a3a2f33322d3335203d3e20323635383137.roa
File:                     323830333a363832303a3a2f33322d3335203d3e20323635383137.roa (raw, json)
Hash identifier:          6g+eNbVW3evTXbsnA21uFI28rAg73Pw7p2UjsupghxY=
Subject key identifier:   5B:67:35:10:B2:A4:E8:FC:31:7A:64:A7:22:08:32:BD:69:61:97:47
Certificate issuer:       /CN=B0CE0EB3B25D7DB2D3F823AA4E8D73CAD5ADCD7A
Certificate serial:       04FEEE467275130FB4B5B108AEE5EDA4F69DD41E
Authority key identifier: B0:CE:0E:B3:B2:5D:7D:B2:D3:F8:23:AA:4E:8D:73:CA:D5:AD:CD:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0CE0EB3B25D7DB2D3F823AA4E8D73CAD5ADCD7A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8DB359FBDD12B1D4AF7A57066DD229D0586F8D259779E9AADCA7994B631E393C/0/323830333a363832303a3a2f33322d3335203d3e20323635383137.roa
Signing time:             Tue 06 Jan 2026 19:01:39 +0000
ROA not before:           Tue 06 Jan 2026 18:56:39 +0000
ROA not after:            Tue 05 Jan 2027 19:01:39 +0000
asID:                     265817
IP address blocks:        2803:6820::/32 maxlen: 35
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8DB359FBDD12B1D4AF7A57066DD229D0586F8D259779E9AADCA7994B631E393C/0/B0CE0EB3B25D7DB2D3F823AA4E8D73CAD5ADCD7A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8DB359FBDD12B1D4AF7A57066DD229D0586F8D259779E9AADCA7994B631E393C/0/B0CE0EB3B25D7DB2D3F823AA4E8D73CAD5ADCD7A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0CE0EB3B25D7DB2D3F823AA4E8D73CAD5ADCD7A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 09:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:fe:ee:46:72:75:13:0f:b4:b5:b1:08:ae:e5:ed:a4:f6:9d:d4:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CE0EB3B25D7DB2D3F823AA4E8D73CAD5ADCD7A
        Validity
            Not Before: Jan  6 18:56:39 2026 GMT
            Not After : Jan  5 19:01:39 2027 GMT
        Subject: CN=5B673510B2A4E8FC317A64A7220832BD69619747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b4:5b:94:35:53:8f:8e:05:a1:03:a3:03:b3:
                    70:43:28:2f:98:63:69:b4:81:c7:6d:4e:57:8f:0f:
                    9a:93:91:ec:45:c5:68:ca:38:4e:c3:c9:21:7c:1a:
                    9b:9d:d6:2a:22:24:15:b6:12:f1:49:1e:d5:7f:a1:
                    15:75:37:24:92:b6:d6:af:f8:f5:3c:0a:80:b0:36:
                    90:bc:ff:20:c7:fb:69:52:26:e5:2b:a2:04:eb:97:
                    d0:f8:63:fe:ab:63:d1:15:00:85:e8:08:29:35:de:
                    90:5f:b8:69:e2:6c:6d:5b:a6:7d:f7:ff:ed:94:9f:
                    0c:7a:80:3b:ae:85:07:da:56:4b:6a:9e:5a:3e:4e:
                    3a:a9:2c:60:56:97:77:5d:91:e3:7e:13:7f:40:ea:
                    04:77:0d:b3:65:a5:a3:72:cb:ea:4f:e7:08:b2:ce:
                    1c:80:50:d4:8c:ae:76:2d:7e:83:5d:ea:8c:55:5a:
                    5e:3b:a5:2f:1a:9a:f8:5c:f5:c9:e1:68:ea:97:e1:
                    4d:72:3a:bf:2e:ac:e0:44:33:d0:60:2b:b9:aa:21:
                    2b:08:ae:8e:f7:88:19:1e:59:77:30:12:36:42:54:
                    ce:47:b3:2d:2c:f7:47:28:d3:c8:0d:fa:06:85:22:
                    90:b6:91:8e:c6:d9:6c:ed:01:9c:43:b9:37:5d:0e:
                    50:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:67:35:10:B2:A4:E8:FC:31:7A:64:A7:22:08:32:BD:69:61:97:47
            X509v3 Authority Key Identifier:
                keyid:B0:CE:0E:B3:B2:5D:7D:B2:D3:F8:23:AA:4E:8D:73:CA:D5:AD:CD:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8DB359FBDD12B1D4AF7A57066DD229D0586F8D259779E9AADCA7994B631E393C/0/B0CE0EB3B25D7DB2D3F823AA4E8D73CAD5ADCD7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0CE0EB3B25D7DB2D3F823AA4E8D73CAD5ADCD7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8DB359FBDD12B1D4AF7A57066DD229D0586F8D259779E9AADCA7994B631E393C/0/323830333a363832303a3a2f33322d3335203d3e20323635383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6820::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:3f:14:b7:a8:52:ad:28:70:9a:fa:76:c4:59:ba:4b:8f:90:
         5b:6c:2e:66:50:86:02:b5:e7:14:d1:ff:b1:cc:a5:3c:93:fa:
         99:32:de:2c:e4:46:ad:50:ef:29:e0:7c:01:b7:a6:b7:f9:76:
         8c:30:62:a7:3e:28:34:07:cb:41:52:da:94:b7:20:90:f9:37:
         0c:e0:23:cb:10:06:86:55:43:2c:94:e7:77:b4:8a:a4:d5:68:
         79:c9:e6:cc:5e:6e:98:41:03:16:15:5b:15:27:9c:92:ac:99:
         de:27:16:a0:85:06:f6:c6:14:39:a8:2b:15:9c:9a:1d:37:3f:
         66:3d:57:18:80:c6:c1:e4:0f:23:cb:2b:41:4a:ec:d1:6d:8d:
         24:a5:32:8d:f9:70:6c:c0:6e:b4:a3:a4:10:40:66:25:98:0d:
         3b:bc:20:1e:e8:9e:28:16:8a:39:50:7a:3c:cf:f5:85:4e:97:
         0f:ea:17:39:1a:48:8c:4d:18:8c:c9:a0:91:d0:8e:c9:c9:02:
         49:14:82:bd:37:ab:bf:4d:7f:0f:4c:fd:62:dd:82:b8:32:4f:
         ae:3f:cb:19:c8:34:f3:6e:a3:ea:76:ab:29:f7:fe:c3:ec:5b:
         31:30:25:57:ac:00:85:6f:5c:f7:06:96:45:7c:b1:13:4f:da:
         80:bc:20:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 01:41:16 2026 by rpki-client