This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9DB26F24CCFA7BC4B435018FAFF10AC03879E5CC0AA6ED839059BB944CD746B5/0/323830333a616630303a3a2f33322d3438203d3e203532343533.roa
File:                     323830333a616630303a3a2f33322d3438203d3e203532343533.roa (raw, json)
Hash identifier:          jPgFlCftKufeGj9rG42Es252aWF1ipMnE28+1jQRsyU=
Subject key identifier:   92:CD:9E:05:EE:9A:C7:FD:90:8A:E2:1C:15:4A:FA:6A:E3:83:87:F1
Certificate issuer:       /CN=0000444BCA2C39D6517175AFCD805D77A40D1E6E
Certificate serial:       26478928122DD1887810080B6E533BF76835A2EA
Authority key identifier: 00:00:44:4B:CA:2C:39:D6:51:71:75:AF:CD:80:5D:77:A4:0D:1E:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0000444BCA2C39D6517175AFCD805D77A40D1E6E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9DB26F24CCFA7BC4B435018FAFF10AC03879E5CC0AA6ED839059BB944CD746B5/0/323830333a616630303a3a2f33322d3438203d3e203532343533.roa
Signing time:             Tue 06 Jan 2026 19:34:32 +0000
ROA not before:           Tue 06 Jan 2026 19:29:32 +0000
ROA not after:            Tue 05 Jan 2027 19:34:32 +0000
asID:                     52453
IP address blocks:        2803:af00::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9DB26F24CCFA7BC4B435018FAFF10AC03879E5CC0AA6ED839059BB944CD746B5/0/0000444BCA2C39D6517175AFCD805D77A40D1E6E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9DB26F24CCFA7BC4B435018FAFF10AC03879E5CC0AA6ED839059BB944CD746B5/0/0000444BCA2C39D6517175AFCD805D77A40D1E6E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0000444BCA2C39D6517175AFCD805D77A40D1E6E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 06:17:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:47:89:28:12:2d:d1:88:78:10:08:0b:6e:53:3b:f7:68:35:a2:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0000444BCA2C39D6517175AFCD805D77A40D1E6E
        Validity
            Not Before: Jan  6 19:29:32 2026 GMT
            Not After : Jan  5 19:34:32 2027 GMT
        Subject: CN=92CD9E05EE9AC7FD908AE21C154AFA6AE38387F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:10:2c:58:18:ab:eb:a2:9c:f8:13:8e:ce:35:
                    0c:98:77:92:f3:41:18:88:a9:22:81:40:48:76:3d:
                    bc:82:24:a5:b6:62:c1:14:ed:b1:1b:15:e6:40:14:
                    d6:7a:fb:0b:06:9e:72:57:c5:cc:9d:a8:56:b0:ae:
                    38:90:39:60:58:6a:47:1a:0d:3c:91:41:97:ef:e0:
                    48:b1:f8:85:57:cb:f5:9f:fc:40:8b:0e:72:a0:39:
                    42:b0:ff:f9:e2:a8:80:d9:21:f0:dc:15:e9:85:60:
                    57:d8:80:a9:bd:b8:94:2c:4a:f6:61:8e:93:e9:7d:
                    fa:1e:6a:89:85:3e:11:09:a4:cc:b2:f3:09:0f:2a:
                    5c:49:dd:ea:60:31:5a:d6:a6:cb:6e:9c:0d:c5:24:
                    5a:ab:81:98:37:c7:aa:05:85:1c:8b:60:dd:93:df:
                    c0:59:a4:61:89:c0:ae:92:5a:70:15:3b:5b:50:cd:
                    03:55:20:42:44:62:de:37:bb:27:bc:58:13:ff:c1:
                    ee:22:86:45:07:82:f8:01:32:c9:dc:a9:b9:f0:73:
                    ca:d2:ad:9f:ea:5b:a3:f2:a4:be:27:1e:eb:9a:30:
                    f3:db:89:d0:bc:58:85:4a:17:37:49:a5:b4:2d:78:
                    59:31:fa:36:3c:0c:10:71:f0:65:de:23:43:39:05:
                    fc:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:CD:9E:05:EE:9A:C7:FD:90:8A:E2:1C:15:4A:FA:6A:E3:83:87:F1
            X509v3 Authority Key Identifier:
                keyid:00:00:44:4B:CA:2C:39:D6:51:71:75:AF:CD:80:5D:77:A4:0D:1E:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9DB26F24CCFA7BC4B435018FAFF10AC03879E5CC0AA6ED839059BB944CD746B5/0/0000444BCA2C39D6517175AFCD805D77A40D1E6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0000444BCA2C39D6517175AFCD805D77A40D1E6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9DB26F24CCFA7BC4B435018FAFF10AC03879E5CC0AA6ED839059BB944CD746B5/0/323830333a616630303a3a2f33322d3438203d3e203532343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:af00::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:a4:22:70:ba:6d:54:70:97:0e:a2:7a:8b:51:ff:ac:69:a4:
         d1:45:57:7d:72:4c:bb:b5:08:d4:81:65:51:75:60:4b:05:ca:
         f2:9d:2a:bb:92:7d:c2:91:53:bd:f6:24:f8:7e:0f:0b:2d:f8:
         99:f6:e4:0e:da:b3:52:c7:0b:bf:28:57:ed:7b:01:26:fe:76:
         33:a4:28:d1:11:0d:41:6f:e1:ba:a1:9d:5b:cb:3c:35:cd:6a:
         43:98:0a:f7:81:ff:2a:b8:b2:57:c2:7c:78:03:03:82:d9:ba:
         75:a4:fa:b8:0e:4f:2e:d3:51:06:06:3f:42:bd:16:db:13:46:
         4f:63:54:ba:e8:5f:b7:ce:14:55:0f:66:86:48:8f:42:c1:2b:
         45:54:52:b4:b8:19:b6:1f:81:c8:1e:bc:b3:b5:d5:dc:3c:e8:
         d2:4e:31:ae:d9:40:0b:7d:e2:cc:35:72:9c:e6:26:11:ed:69:
         ce:48:a7:34:f5:2b:8f:c2:74:6c:cc:85:77:3a:6b:d6:c3:96:
         7d:ab:f2:97:39:d8:52:8d:64:8a:c3:cd:81:ea:f5:27:86:fb:
         7c:a6:82:fe:4a:73:7e:70:99:b6:98:02:80:56:6b:90:76:63:
         2f:ee:ce:76:2d:94:1f:1f:5c:d8:a8:17:ff:9f:55:fb:85:eb:
         43:83:50:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 20:44:21 2026 by rpki-client