This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/932BF618BE2DF16F7C820FC42441AE90D713E344AEC8FEFE013933B533504615/0/323830333a376465303a3a2f33322d3332203d3e20323730303631.roa
File:                     323830333a376465303a3a2f33322d3332203d3e20323730303631.roa (raw, json)
Hash identifier:          FVIT3GJKd8Tkqn+HqXWijnepy/KRzhvD+YVe4+DNG3I=
Subject key identifier:   C0:5F:34:65:8D:D5:62:8A:40:3A:E3:D9:DE:3E:93:35:CA:3E:0C:C3
Certificate issuer:       /CN=8216836CFEBB6D738CAAE53C6968AA4C1180539B
Certificate serial:       476A0D4F3B0149D4F7919AC0E6A5B3F2D455D3A7
Authority key identifier: 82:16:83:6C:FE:BB:6D:73:8C:AA:E5:3C:69:68:AA:4C:11:80:53:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8216836CFEBB6D738CAAE53C6968AA4C1180539B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/932BF618BE2DF16F7C820FC42441AE90D713E344AEC8FEFE013933B533504615/0/323830333a376465303a3a2f33322d3332203d3e20323730303631.roa
Signing time:             Tue 06 Jan 2026 19:46:57 +0000
ROA not before:           Tue 06 Jan 2026 19:41:57 +0000
ROA not after:            Tue 05 Jan 2027 19:46:57 +0000
asID:                     270061
IP address blocks:        2803:7de0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/932BF618BE2DF16F7C820FC42441AE90D713E344AEC8FEFE013933B533504615/0/8216836CFEBB6D738CAAE53C6968AA4C1180539B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/932BF618BE2DF16F7C820FC42441AE90D713E344AEC8FEFE013933B533504615/0/8216836CFEBB6D738CAAE53C6968AA4C1180539B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8216836CFEBB6D738CAAE53C6968AA4C1180539B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 19:06:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:6a:0d:4f:3b:01:49:d4:f7:91:9a:c0:e6:a5:b3:f2:d4:55:d3:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8216836CFEBB6D738CAAE53C6968AA4C1180539B
        Validity
            Not Before: Jan  6 19:41:57 2026 GMT
            Not After : Jan  5 19:46:57 2027 GMT
        Subject: CN=C05F34658DD5628A403AE3D9DE3E9335CA3E0CC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:47:44:50:86:ff:49:4e:79:50:d3:39:86:7e:
                    10:e2:3a:e4:bf:81:8e:32:ab:6c:05:51:46:33:90:
                    9c:55:1b:55:cf:7e:1d:fd:e1:12:41:6f:73:44:dc:
                    9a:60:e7:81:03:d2:a8:26:2a:de:e6:1d:59:5c:35:
                    b6:18:9c:25:89:f8:04:82:04:36:06:27:f0:ab:e3:
                    fc:f9:f0:43:11:3e:8e:5f:9d:5b:e0:f6:85:ba:67:
                    b3:ba:75:e0:9e:4b:6f:54:01:cb:d4:b0:2a:23:47:
                    f3:1b:b2:66:cd:8d:5d:aa:ea:e5:2b:b3:21:52:fd:
                    a9:d1:0f:63:6b:b8:56:82:56:74:d6:45:df:3a:80:
                    f8:18:6e:13:90:db:40:c5:bd:de:20:c4:51:56:41:
                    ce:72:57:00:c8:ec:e0:c0:e7:5e:91:ee:ec:ca:90:
                    03:8f:7a:19:ed:fb:79:f3:e9:af:fb:b1:8a:f0:c1:
                    5f:5f:e6:73:86:77:9a:55:ef:10:a1:e0:36:40:b6:
                    a9:fb:a6:c4:d8:a1:e2:ad:30:a0:f3:10:eb:0b:f5:
                    7f:31:5b:89:78:21:f1:e1:0f:a0:71:93:e2:12:0b:
                    c0:ef:e2:6f:03:6f:d2:29:1e:fb:ae:be:e2:85:57:
                    47:34:1d:99:a6:e0:4f:e2:c0:75:1f:27:13:ef:dc:
                    33:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:5F:34:65:8D:D5:62:8A:40:3A:E3:D9:DE:3E:93:35:CA:3E:0C:C3
            X509v3 Authority Key Identifier:
                keyid:82:16:83:6C:FE:BB:6D:73:8C:AA:E5:3C:69:68:AA:4C:11:80:53:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/932BF618BE2DF16F7C820FC42441AE90D713E344AEC8FEFE013933B533504615/0/8216836CFEBB6D738CAAE53C6968AA4C1180539B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8216836CFEBB6D738CAAE53C6968AA4C1180539B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/932BF618BE2DF16F7C820FC42441AE90D713E344AEC8FEFE013933B533504615/0/323830333a376465303a3a2f33322d3332203d3e20323730303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7de0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:f4:08:82:49:34:7a:59:3e:7a:dc:39:6d:c1:91:cf:2a:96:
         95:da:9e:3b:a3:7a:e4:b4:6f:a5:70:ff:4b:d4:92:76:ca:7d:
         47:5b:43:f1:e6:45:f8:01:20:ed:fd:53:99:ce:b6:9a:2e:17:
         92:cb:03:69:d7:d1:22:e8:c6:a0:ac:6d:54:4f:39:2d:6e:a2:
         90:c1:5c:ab:bd:f6:08:df:a2:77:90:e7:a8:1b:53:a6:e5:60:
         9c:53:68:78:1e:e6:1b:9e:0a:f9:09:ab:c0:c0:26:78:7b:e9:
         70:4d:98:0e:ba:90:42:cb:d6:9c:dd:58:32:78:0b:77:a3:80:
         b5:5a:de:13:ac:94:8f:e3:7a:0e:0d:1e:d3:5b:c3:7b:a2:70:
         bd:a9:40:17:7d:3d:0e:1d:55:4e:32:0f:b9:a7:1c:1f:5f:b4:
         4d:bc:1d:a1:2e:f9:d6:4a:2e:8c:f5:12:8d:db:6f:85:b7:ce:
         a4:6f:09:f7:cb:d0:e7:0f:16:b3:48:b6:2f:0a:e7:03:c2:e0:
         e7:22:4a:eb:9f:86:15:33:7b:57:3f:9e:fd:43:47:6c:6b:c7:
         df:28:3e:3d:14:f2:91:4f:dd:82:1a:08:fd:f9:56:95:cc:5a:
         85:74:a2:a1:fc:1f:73:1c:8b:75:06:fc:ad:e8:ec:da:fa:33:
         68:76:5a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 22:33:41 2026 by rpki-client