This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/323830333a316565303a3a2f33322d3438203d3e203634313233.roa
File:                     323830333a316565303a3a2f33322d3438203d3e203634313233.roa (raw, json)
Hash identifier:          Amm+V6RN+D3MUdA1ufgvIdwBaXoDNfwaPB9SY1as9iY=
Subject key identifier:   FC:48:67:B5:76:99:0F:0A:BE:01:A3:CA:94:01:BE:63:7D:22:70:4D
Certificate issuer:       /CN=73309007D51C9AEAAE8E51400EFDD8F38A93501F
Certificate serial:       4C18E7E6E69362E4AE7775D4689C7D0E9E414712
Authority key identifier: 73:30:90:07:D5:1C:9A:EA:AE:8E:51:40:0E:FD:D8:F3:8A:93:50:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/323830333a316565303a3a2f33322d3438203d3e203634313233.roa
Signing time:             Mon 12 Jan 2026 19:35:00 +0000
ROA not before:           Mon 12 Jan 2026 19:30:00 +0000
ROA not after:            Mon 11 Jan 2027 19:35:00 +0000
asID:                     64123
IP address blocks:        2803:1ee0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 23:35:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:18:e7:e6:e6:93:62:e4:ae:77:75:d4:68:9c:7d:0e:9e:41:47:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73309007D51C9AEAAE8E51400EFDD8F38A93501F
        Validity
            Not Before: Jan 12 19:30:00 2026 GMT
            Not After : Jan 11 19:35:00 2027 GMT
        Subject: CN=FC4867B576990F0ABE01A3CA9401BE637D22704D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d5:26:33:95:2a:f4:6b:ac:6c:97:bc:e2:32:
                    95:af:1a:f2:6b:11:42:e0:c1:92:95:56:88:f6:8b:
                    00:08:58:4d:77:41:f8:74:b4:e3:d3:61:5c:27:a8:
                    1e:a3:af:3c:81:d7:38:cb:86:0d:1a:e0:98:a5:6b:
                    da:2f:cf:cf:0b:41:94:60:c6:1b:a8:15:ba:4c:2b:
                    f3:2b:dc:94:30:cd:27:79:a8:8e:65:b5:6c:fc:d3:
                    e2:bf:d6:b2:f5:df:61:25:77:fa:5c:fa:d0:c3:2a:
                    5d:e1:15:fb:9c:48:97:34:41:c6:9a:6e:42:72:61:
                    15:5a:ce:99:7c:00:32:2b:f0:79:bf:0a:18:d4:89:
                    2f:32:9a:92:dd:aa:c2:dd:81:5b:c1:fb:5a:ba:c0:
                    65:84:6f:96:f0:67:a7:84:c1:d2:bc:bd:b0:7d:a1:
                    ce:2d:ce:e0:0c:f1:08:90:76:e3:44:bf:0b:a5:94:
                    ac:41:e5:f7:c3:ba:b3:9e:4c:da:47:70:d0:82:3b:
                    e7:fb:f6:69:98:af:84:44:af:4a:c7:40:5a:8c:73:
                    1b:2b:29:71:38:7d:f9:5f:16:6c:1a:e8:29:38:9d:
                    53:ce:54:a8:cb:85:56:48:44:e7:03:9d:67:97:47:
                    9e:f3:40:bb:38:c6:10:5d:71:39:06:1d:5c:84:67:
                    73:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:48:67:B5:76:99:0F:0A:BE:01:A3:CA:94:01:BE:63:7D:22:70:4D
            X509v3 Authority Key Identifier:
                keyid:73:30:90:07:D5:1C:9A:EA:AE:8E:51:40:0E:FD:D8:F3:8A:93:50:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/323830333a316565303a3a2f33322d3438203d3e203634313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1ee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:2b:9e:a1:31:ac:ac:6e:c9:0d:7f:91:52:e8:3c:54:49:2f:
         26:b9:d6:de:e1:46:3f:3e:20:a1:c2:df:15:e5:50:c1:c2:bb:
         08:a4:e2:10:d3:cf:9f:97:54:a3:d1:7e:a0:5d:7e:0a:46:9a:
         b6:a5:30:c0:de:f7:20:db:95:60:38:ba:12:aa:be:dd:5a:b6:
         ab:6c:a0:c4:36:dd:b3:95:c5:b8:31:4b:36:8c:d1:41:10:c6:
         89:6a:7c:85:cf:3f:30:73:25:09:24:87:1d:ad:d2:ef:43:28:
         27:34:ab:d0:dc:9d:22:7b:43:a1:4a:e4:aa:3c:99:e7:3f:6b:
         06:38:7f:d2:ad:9a:60:f9:9f:3e:22:4c:85:17:34:04:bd:22:
         99:f7:d3:1c:a6:f3:18:82:c0:ee:25:e8:f4:4c:b6:c6:0a:0b:
         b0:b4:9b:e0:4f:ae:0e:ac:05:2d:c7:b9:61:ef:59:fe:e0:b2:
         7c:dd:00:1e:83:08:25:d3:53:0f:63:d0:30:5a:2a:f3:ee:2d:
         2c:86:6d:7e:66:b3:81:15:7c:86:23:3a:69:fc:7a:36:2c:0b:
         24:ae:3a:52:fc:30:a4:b6:15:55:18:70:94:a6:2e:88:9b:3c:
         99:c5:37:f5:f6:64:9d:d0:79:14:c8:92:1f:87:70:42:24:62:
         09:fb:d1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 05:30:16 2026 by rpki-client