This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/987E73A8444DB4ACF25C443F170FF9888F957E387929E729C52F5ED0EDEC2F75/0/323830333a326231303a3a2f33322d3438203d3e20323732303735.roa
File:                     323830333a326231303a3a2f33322d3438203d3e20323732303735.roa (raw, json)
Hash identifier:          Ybq8KxIyhGWzgxiSIuOiAv0ouwi7N7Q2olw/qACnwrA=
Subject key identifier:   DA:55:DE:4F:7B:85:87:57:02:91:BD:70:AF:F7:36:B6:ED:3C:BD:4D
Certificate issuer:       /CN=C12642C9F50A65A148B514531ACB5CB6AB77762C
Certificate serial:       1804AA03BFD2EFBAE8852E5BEBC1EFED3F2AD82A
Authority key identifier: C1:26:42:C9:F5:0A:65:A1:48:B5:14:53:1A:CB:5C:B6:AB:77:76:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12642C9F50A65A148B514531ACB5CB6AB77762C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/987E73A8444DB4ACF25C443F170FF9888F957E387929E729C52F5ED0EDEC2F75/0/323830333a326231303a3a2f33322d3438203d3e20323732303735.roa
Signing time:             Tue 06 Jan 2026 19:10:19 +0000
ROA not before:           Tue 06 Jan 2026 19:05:19 +0000
ROA not after:            Tue 05 Jan 2027 19:10:19 +0000
asID:                     272075
IP address blocks:        2803:2b10::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/987E73A8444DB4ACF25C443F170FF9888F957E387929E729C52F5ED0EDEC2F75/0/C12642C9F50A65A148B514531ACB5CB6AB77762C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/987E73A8444DB4ACF25C443F170FF9888F957E387929E729C52F5ED0EDEC2F75/0/C12642C9F50A65A148B514531ACB5CB6AB77762C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12642C9F50A65A148B514531ACB5CB6AB77762C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 16:49:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:04:aa:03:bf:d2:ef:ba:e8:85:2e:5b:eb:c1:ef:ed:3f:2a:d8:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C12642C9F50A65A148B514531ACB5CB6AB77762C
        Validity
            Not Before: Jan  6 19:05:19 2026 GMT
            Not After : Jan  5 19:10:19 2027 GMT
        Subject: CN=DA55DE4F7B8587570291BD70AFF736B6ED3CBD4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d2:2d:b5:ab:50:90:f4:2d:72:c5:38:93:5e:
                    6a:d0:ce:32:99:59:9c:9c:d3:28:64:52:76:da:2b:
                    af:40:87:6f:af:3d:49:5e:de:f4:bf:6e:17:98:37:
                    af:b6:63:cd:69:d5:90:5e:52:7c:70:5d:45:78:fb:
                    e5:d8:0c:10:b1:95:46:95:28:06:1f:9f:8b:42:15:
                    1e:6b:c2:2d:72:ee:c4:d7:3c:08:f2:65:00:56:4f:
                    e8:59:c3:00:a6:28:39:82:db:f5:00:ca:13:c6:ca:
                    e5:40:22:9a:26:4a:0b:87:b5:5f:50:dd:00:ef:e9:
                    f8:95:00:00:d3:18:97:ed:67:7f:4e:02:24:e7:95:
                    59:ad:fa:1e:77:4d:18:0b:85:6c:71:aa:fe:cf:cb:
                    5f:0f:78:76:f9:7a:58:75:bf:84:f0:35:a5:33:a6:
                    8b:51:d8:9a:c1:a7:0f:79:e1:a9:e7:15:21:28:d0:
                    be:48:15:38:e4:a4:c3:a5:e6:cf:9c:32:88:eb:c7:
                    06:d1:b3:ca:2a:ab:f2:4e:45:f7:cc:f0:44:16:1a:
                    27:f2:63:18:54:7c:0f:d0:cb:6c:34:e5:c8:0b:ae:
                    4e:ba:47:4d:e9:ba:99:3f:62:40:28:5b:af:a3:10:
                    88:25:33:6b:84:ab:5e:72:7b:29:9d:d4:f5:b8:74:
                    57:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:55:DE:4F:7B:85:87:57:02:91:BD:70:AF:F7:36:B6:ED:3C:BD:4D
            X509v3 Authority Key Identifier:
                keyid:C1:26:42:C9:F5:0A:65:A1:48:B5:14:53:1A:CB:5C:B6:AB:77:76:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/987E73A8444DB4ACF25C443F170FF9888F957E387929E729C52F5ED0EDEC2F75/0/C12642C9F50A65A148B514531ACB5CB6AB77762C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12642C9F50A65A148B514531ACB5CB6AB77762C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/987E73A8444DB4ACF25C443F170FF9888F957E387929E729C52F5ED0EDEC2F75/0/323830333a326231303a3a2f33322d3438203d3e20323732303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2b10::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:e2:0b:c9:b0:6a:2c:9c:ae:45:ec:e6:c2:08:5a:71:84:83:
         a1:f0:ca:d8:cb:fb:c0:6c:26:49:c2:c5:b6:04:06:f6:a1:46:
         e8:22:d9:ba:8b:33:89:37:05:63:de:8c:73:65:2c:dc:23:11:
         cc:1a:20:5e:64:7e:bc:6b:58:43:7e:2d:ae:04:a0:6d:90:f9:
         43:47:59:c6:a5:1c:77:f6:8c:bb:9e:dd:5d:33:74:6c:06:73:
         30:9a:00:d7:0c:f7:ee:77:3d:6e:21:81:09:83:43:21:80:da:
         94:b3:09:af:26:38:0c:74:67:08:86:39:d1:5c:69:fa:2d:bb:
         8b:52:ef:31:85:29:12:aa:37:f5:57:d2:ea:94:1b:bf:16:e5:
         c6:2f:c2:84:30:f4:6b:84:a4:5a:e5:64:6b:2c:50:de:dd:db:
         61:f0:0f:57:a5:f6:b1:cd:c3:3e:ca:f6:f1:c9:26:3d:c5:32:
         c8:5c:b3:47:ce:e7:0d:bc:b8:f9:b9:0a:86:b1:d6:12:b2:ea:
         b3:7b:4b:80:d4:bb:c6:4f:00:db:fc:8a:59:92:c4:12:ed:72:
         38:c4:7b:ef:43:56:98:d8:32:58:d3:ef:fe:c9:2b:59:f2:e6:
         e1:0c:6c:9d:6b:8d:ce:b9:50:dd:7b:e1:fd:c5:49:c4:93:21:
         22:82:23:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 08:10:42 2026 by rpki-client