This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9C90199A26FC4C3B4378784207C6FDEFD924245D60C6B84C87C517DCB0A637F1/0/323830333a313339303a3a2f33322d3438203d3e20323733303230.roa
File:                     323830333a313339303a3a2f33322d3438203d3e20323733303230.roa (raw, json)
Hash identifier:          PH1BEFwADZ291+qifiM/Q9mCvI+QeQig5TlGfnbj6Og=
Subject key identifier:   1E:EF:77:02:B0:8D:B3:C4:32:50:B4:5C:11:57:33:F2:C4:A1:F7:FA
Certificate issuer:       /CN=2A36D11026748140183D59FD0064F6742F81E00C
Certificate serial:       69425326E78F926131A634468B0385DA11FD99C2
Authority key identifier: 2A:36:D1:10:26:74:81:40:18:3D:59:FD:00:64:F6:74:2F:81:E0:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A36D11026748140183D59FD0064F6742F81E00C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9C90199A26FC4C3B4378784207C6FDEFD924245D60C6B84C87C517DCB0A637F1/0/323830333a313339303a3a2f33322d3438203d3e20323733303230.roa
Signing time:             Tue 06 Jan 2026 20:53:35 +0000
ROA not before:           Tue 06 Jan 2026 20:48:35 +0000
ROA not after:            Tue 05 Jan 2027 20:53:35 +0000
asID:                     273020
IP address blocks:        2803:1390::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9C90199A26FC4C3B4378784207C6FDEFD924245D60C6B84C87C517DCB0A637F1/0/2A36D11026748140183D59FD0064F6742F81E00C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9C90199A26FC4C3B4378784207C6FDEFD924245D60C6B84C87C517DCB0A637F1/0/2A36D11026748140183D59FD0064F6742F81E00C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A36D11026748140183D59FD0064F6742F81E00C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:42:53:26:e7:8f:92:61:31:a6:34:46:8b:03:85:da:11:fd:99:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A36D11026748140183D59FD0064F6742F81E00C
        Validity
            Not Before: Jan  6 20:48:35 2026 GMT
            Not After : Jan  5 20:53:35 2027 GMT
        Subject: CN=1EEF7702B08DB3C43250B45C115733F2C4A1F7FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:23:ec:fb:e4:a1:a4:dc:78:07:c9:b5:f1:ed:
                    bc:1c:ce:31:22:0d:09:45:22:9f:79:e8:ee:1d:94:
                    77:d0:91:e4:d2:4a:de:df:13:cf:49:63:55:08:1a:
                    38:db:7c:5c:e4:a7:3b:ba:ae:e2:2d:9a:38:6a:e4:
                    bb:f0:cd:82:fe:dd:86:a2:0d:e9:32:eb:98:fd:d2:
                    03:62:f2:8f:3d:ca:15:1e:1f:38:5f:80:9e:52:ad:
                    5f:6d:49:47:c6:ea:4e:ad:42:f3:e8:74:39:74:53:
                    4c:00:70:76:05:79:99:3a:51:c5:ba:2d:80:bc:28:
                    01:df:10:42:5a:83:99:09:91:85:15:5d:e4:21:39:
                    45:a9:5c:23:c3:b0:6f:47:b0:07:be:ef:ad:20:7a:
                    1e:4a:1e:60:ff:23:58:26:d7:15:e2:ac:5a:ce:3c:
                    25:af:b3:4e:e9:64:e7:5b:8e:55:ce:26:1c:29:83:
                    13:8b:34:aa:bb:02:6a:d0:66:61:61:6e:78:23:6b:
                    ed:cb:58:b3:1a:f7:72:46:0c:92:f9:ea:42:34:d3:
                    96:ba:3e:2e:30:42:a9:8b:3a:c1:21:f1:a8:3e:c0:
                    0f:e5:39:72:2f:ce:d3:05:8c:23:98:c8:a0:db:9b:
                    4b:5a:34:4c:14:8b:6e:27:13:f9:3b:88:b4:a3:d8:
                    b5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:EF:77:02:B0:8D:B3:C4:32:50:B4:5C:11:57:33:F2:C4:A1:F7:FA
            X509v3 Authority Key Identifier:
                keyid:2A:36:D1:10:26:74:81:40:18:3D:59:FD:00:64:F6:74:2F:81:E0:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9C90199A26FC4C3B4378784207C6FDEFD924245D60C6B84C87C517DCB0A637F1/0/2A36D11026748140183D59FD0064F6742F81E00C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A36D11026748140183D59FD0064F6742F81E00C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9C90199A26FC4C3B4378784207C6FDEFD924245D60C6B84C87C517DCB0A637F1/0/323830333a313339303a3a2f33322d3438203d3e20323733303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1390::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:8d:ba:6f:29:ca:12:9c:0e:6f:04:c1:b2:2a:5c:a7:55:65:
         09:de:dd:22:61:b2:2a:ba:28:e3:c6:c4:47:20:db:d0:40:d0:
         29:ed:eb:2e:be:48:8e:d2:6f:fa:ae:ef:7b:0c:d9:40:32:5f:
         8d:b5:55:b3:0a:4b:fa:59:08:c5:dd:84:ce:3b:37:05:8d:09:
         dd:b5:09:11:a8:52:ab:d9:5c:80:d4:9c:8d:95:7d:9c:d7:e5:
         9e:0c:f9:14:86:a4:b4:2f:cf:3a:c7:2a:ba:4d:31:d1:fc:9c:
         43:82:a1:4d:2b:cd:14:61:3e:5f:9c:05:36:8e:6c:8e:f0:da:
         8e:4e:70:62:01:c3:98:06:66:85:49:b9:2c:41:6c:8f:6d:70:
         12:2d:1a:57:94:88:bb:92:ca:cf:be:7f:af:b8:3c:3c:b2:14:
         c4:d0:a5:3a:5f:e5:2a:e9:1f:2f:04:1f:66:7d:a4:47:c7:a9:
         50:60:34:36:54:4b:85:d6:89:51:74:4a:fd:10:ab:36:1b:a3:
         2b:3f:d8:82:61:d5:fb:8d:7b:ba:bb:1e:67:e3:95:88:f9:55:
         d0:ee:9c:b6:af:2a:cf:98:0a:99:e2:36:b7:53:bc:d9:0f:f2:
         08:8d:f5:14:ce:e2:26:0f:58:a8:bd:dd:46:f6:79:01:b2:20:
         96:5d:7f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 13:12:49 2026 by rpki-client