This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A53488770D6BD9ACBB07019A7B73802FDD148059D5E4CE5D460F5AE7E42DBE4B/0/323830333a343636303a3a2f33322d3332203d3e203237363930.roa
File:                     323830333a343636303a3a2f33322d3332203d3e203237363930.roa (raw, json)
Hash identifier:          g9HvfZea+X7RhmZyEU7mG2cFhoCQ3FZ0DwY6peP9ttw=
Subject key identifier:   DB:EC:54:DF:0B:9B:5E:22:75:CA:1A:DE:9B:DD:51:9B:CC:7C:41:BF
Certificate issuer:       /CN=1EE37C2DAC755F08D0FAEBB82ABC33D230F2C7B4
Certificate serial:       3BDC7B81B218EE9F7785E53E73180EDAFFFDA324
Authority key identifier: 1E:E3:7C:2D:AC:75:5F:08:D0:FA:EB:B8:2A:BC:33:D2:30:F2:C7:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EE37C2DAC755F08D0FAEBB82ABC33D230F2C7B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A53488770D6BD9ACBB07019A7B73802FDD148059D5E4CE5D460F5AE7E42DBE4B/0/323830333a343636303a3a2f33322d3332203d3e203237363930.roa
Signing time:             Tue 06 Jan 2026 19:17:18 +0000
ROA not before:           Tue 06 Jan 2026 19:12:18 +0000
ROA not after:            Tue 05 Jan 2027 19:17:18 +0000
asID:                     27690
IP address blocks:        2803:4660::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A53488770D6BD9ACBB07019A7B73802FDD148059D5E4CE5D460F5AE7E42DBE4B/0/1EE37C2DAC755F08D0FAEBB82ABC33D230F2C7B4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A53488770D6BD9ACBB07019A7B73802FDD148059D5E4CE5D460F5AE7E42DBE4B/0/1EE37C2DAC755F08D0FAEBB82ABC33D230F2C7B4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EE37C2DAC755F08D0FAEBB82ABC33D230F2C7B4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 20:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:dc:7b:81:b2:18:ee:9f:77:85:e5:3e:73:18:0e:da:ff:fd:a3:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EE37C2DAC755F08D0FAEBB82ABC33D230F2C7B4
        Validity
            Not Before: Jan  6 19:12:18 2026 GMT
            Not After : Jan  5 19:17:18 2027 GMT
        Subject: CN=DBEC54DF0B9B5E2275CA1ADE9BDD519BCC7C41BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0b:fc:78:76:09:83:ab:e9:a9:66:be:e4:d2:
                    9d:a1:9b:58:30:f6:5d:39:f1:22:b6:fe:39:6d:2f:
                    17:41:ef:b4:84:e2:f1:ac:e4:c9:29:c2:1c:c9:5c:
                    84:86:2c:5b:ed:0e:a6:59:a5:56:dc:08:6d:9d:58:
                    ec:e6:cb:91:a5:59:7f:fe:89:83:8c:0e:48:48:90:
                    f8:14:1c:29:dd:77:de:c3:e5:a3:3a:ce:78:ed:6f:
                    1b:7e:2e:a9:31:dd:1e:22:aa:05:d5:0e:34:6d:b8:
                    e1:ab:86:70:03:70:b4:bc:38:13:61:e8:e6:ff:76:
                    78:2d:be:60:ca:75:a4:d2:2a:10:b6:61:6a:d7:0a:
                    ce:41:20:10:ee:ba:a5:ef:d2:d6:c3:ed:6c:d0:15:
                    81:c5:97:d7:60:87:06:d7:c9:ae:73:83:04:c1:d9:
                    e1:df:dc:8f:1d:00:5a:4a:59:59:90:ea:b1:2d:54:
                    6b:51:62:dc:46:1b:1f:8b:6f:a4:e0:af:cd:d9:86:
                    1e:23:5f:e1:06:2a:d8:b0:39:93:8a:bf:2c:e9:1b:
                    f9:f6:f8:de:70:4d:df:61:33:96:93:cd:98:a3:41:
                    e0:dd:95:da:a0:b1:6e:f3:eb:05:03:c6:aa:dc:e0:
                    65:26:83:ba:26:72:be:30:07:0f:97:1b:39:ca:f2:
                    86:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:EC:54:DF:0B:9B:5E:22:75:CA:1A:DE:9B:DD:51:9B:CC:7C:41:BF
            X509v3 Authority Key Identifier:
                keyid:1E:E3:7C:2D:AC:75:5F:08:D0:FA:EB:B8:2A:BC:33:D2:30:F2:C7:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A53488770D6BD9ACBB07019A7B73802FDD148059D5E4CE5D460F5AE7E42DBE4B/0/1EE37C2DAC755F08D0FAEBB82ABC33D230F2C7B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EE37C2DAC755F08D0FAEBB82ABC33D230F2C7B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A53488770D6BD9ACBB07019A7B73802FDD148059D5E4CE5D460F5AE7E42DBE4B/0/323830333a343636303a3a2f33322d3332203d3e203237363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4660::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:1e:33:58:d4:8b:6f:b8:6a:43:7a:28:eb:5b:44:39:e8:e1:
         dd:d6:5b:29:7e:6d:40:76:b4:71:9c:a3:c5:a5:92:3b:d0:55:
         c8:63:99:95:9c:95:a0:52:6e:e1:f3:ef:a0:79:0e:d0:62:34:
         87:8e:b0:db:3b:39:1d:c7:26:f0:7c:27:e8:64:09:2c:31:62:
         55:12:48:93:a4:52:42:a8:e4:56:f8:9e:08:97:d4:1f:63:a5:
         5e:59:0d:78:ec:ce:da:4a:16:50:45:f3:60:a9:ba:a0:b3:32:
         9d:62:45:5e:0d:2d:c8:2f:57:e7:c1:65:48:7d:23:eb:96:59:
         f2:2c:f3:ca:6f:f0:ff:70:ce:a6:dd:f9:2f:7b:46:65:06:09:
         be:25:3f:53:e9:c0:12:1a:67:aa:6b:b3:e9:47:3f:74:6e:2d:
         7f:d5:f7:6b:c3:ee:fb:b7:40:10:21:54:d3:b1:ef:d7:19:2a:
         80:4a:cd:20:9e:b2:ef:cc:b1:b8:93:e0:09:9d:01:79:89:6e:
         26:f7:66:e1:70:80:43:80:b9:09:24:a3:62:79:04:cf:2f:ff:
         34:1c:25:b5:f6:19:f9:db:84:08:19:bb:43:4f:28:a9:cb:72:
         d1:d7:30:85:f4:39:0b:67:3b:cb:e2:d7:ac:02:58:79:2f:fa:
         c0:e1:9c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 23:01:57 2026 by rpki-client