This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC8D47D3ADB1C5D468A4F0832BE5E0AF010F8E31E39048E9979E9407CBEA865D/0/323830333a623338303a3a2f33322d3438203d3e203532343434.roa
File:                     323830333a623338303a3a2f33322d3438203d3e203532343434.roa (raw, json)
Hash identifier:          qgUtnJK0eoNrKaeVMXK5Gjjd0UApi62CbXNuT4OGkks=
Subject key identifier:   0B:AC:DC:77:4E:A4:C6:9D:8C:D2:04:C8:78:3E:18:3A:9A:58:A5:9A
Certificate issuer:       /CN=C6954B6A710E06C327505B5B0F1F380B7FE7B0B4
Certificate serial:       1AF973BE6788AC1B36A9EEBEDC439C2E0DADA86D
Authority key identifier: C6:95:4B:6A:71:0E:06:C3:27:50:5B:5B:0F:1F:38:0B:7F:E7:B0:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6954B6A710E06C327505B5B0F1F380B7FE7B0B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC8D47D3ADB1C5D468A4F0832BE5E0AF010F8E31E39048E9979E9407CBEA865D/0/323830333a623338303a3a2f33322d3438203d3e203532343434.roa
Signing time:             Tue 06 Jan 2026 19:01:29 +0000
ROA not before:           Tue 06 Jan 2026 18:56:29 +0000
ROA not after:            Tue 05 Jan 2027 19:01:29 +0000
asID:                     52444
IP address blocks:        2803:b380::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC8D47D3ADB1C5D468A4F0832BE5E0AF010F8E31E39048E9979E9407CBEA865D/0/C6954B6A710E06C327505B5B0F1F380B7FE7B0B4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC8D47D3ADB1C5D468A4F0832BE5E0AF010F8E31E39048E9979E9407CBEA865D/0/C6954B6A710E06C327505B5B0F1F380B7FE7B0B4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6954B6A710E06C327505B5B0F1F380B7FE7B0B4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 16:07:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:f9:73:be:67:88:ac:1b:36:a9:ee:be:dc:43:9c:2e:0d:ad:a8:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6954B6A710E06C327505B5B0F1F380B7FE7B0B4
        Validity
            Not Before: Jan  6 18:56:29 2026 GMT
            Not After : Jan  5 19:01:29 2027 GMT
        Subject: CN=0BACDC774EA4C69D8CD204C8783E183A9A58A59A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:89:d3:d4:62:63:2f:05:77:3a:3b:56:66:b6:
                    c8:ae:c8:d1:c3:5a:0c:d5:9a:58:8b:08:10:0e:db:
                    f2:4c:0d:25:2a:3b:7f:7c:42:db:e3:52:fe:74:10:
                    d5:ae:6a:ce:d8:fd:5a:dc:05:5b:0a:cb:bd:d4:9d:
                    7c:4a:27:62:9c:9c:6a:f4:1e:19:8c:3a:9a:14:fc:
                    79:db:0c:8f:12:85:7b:c3:1c:b2:da:44:f8:02:e4:
                    46:c4:08:78:e8:02:9a:58:49:63:dc:51:ae:96:49:
                    bf:55:06:c5:5a:dd:aa:c2:7c:dd:c1:fc:d2:6e:9a:
                    40:43:de:1f:0d:cb:8f:49:0a:53:a8:6b:82:25:b4:
                    d2:9c:fa:e1:13:8d:f8:78:cb:66:be:24:b0:d8:e7:
                    c0:c8:d6:c9:6c:1c:b2:2f:99:46:38:cb:31:b6:10:
                    dd:58:e7:37:76:49:ee:72:1b:6d:99:18:1e:68:c4:
                    8b:a2:88:2d:e9:4e:73:43:78:76:80:f4:c2:b5:20:
                    d9:05:ad:50:4d:77:4e:31:b0:bc:58:55:c0:2c:fb:
                    cd:a2:b3:03:8c:77:af:f1:d0:a8:1f:0f:39:de:9e:
                    f6:bd:bc:d9:9c:c3:61:88:9b:80:4b:19:3d:b8:a3:
                    fc:cc:c1:88:ca:65:03:3b:92:8e:2f:a0:ca:02:d9:
                    05:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:AC:DC:77:4E:A4:C6:9D:8C:D2:04:C8:78:3E:18:3A:9A:58:A5:9A
            X509v3 Authority Key Identifier:
                keyid:C6:95:4B:6A:71:0E:06:C3:27:50:5B:5B:0F:1F:38:0B:7F:E7:B0:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC8D47D3ADB1C5D468A4F0832BE5E0AF010F8E31E39048E9979E9407CBEA865D/0/C6954B6A710E06C327505B5B0F1F380B7FE7B0B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6954B6A710E06C327505B5B0F1F380B7FE7B0B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC8D47D3ADB1C5D468A4F0832BE5E0AF010F8E31E39048E9979E9407CBEA865D/0/323830333a623338303a3a2f33322d3438203d3e203532343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b380::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:7d:f0:5f:43:33:52:61:e5:e6:09:8a:35:fd:07:cd:d3:d5:
         d7:45:7c:85:bc:9c:7a:22:aa:3c:56:6d:48:74:20:07:e3:18:
         83:ac:5c:0f:13:02:20:55:cc:f1:1e:cd:e3:55:47:40:f6:9f:
         68:31:ca:14:6d:11:22:cf:3c:ac:a4:52:7b:db:58:79:37:8c:
         87:55:04:69:e7:e2:ef:f4:0f:04:af:bf:ce:3e:7f:da:f7:f3:
         0a:66:ec:60:ed:f0:b8:86:4d:32:78:cc:4b:75:73:d2:db:47:
         1a:a6:fd:56:44:f0:9e:d3:96:1a:65:3c:d3:b2:8f:58:16:91:
         62:c7:23:ab:98:0c:b7:ae:18:bb:3c:d0:99:08:56:a5:4f:a9:
         47:2d:5c:d0:36:87:c5:58:0d:50:8e:3b:bf:05:3b:1d:51:1a:
         6e:34:68:af:64:3c:33:dc:49:f5:de:8d:ce:7a:c6:9f:12:39:
         13:1f:2f:d4:b1:2e:98:42:84:6a:3c:4d:61:55:24:9e:e2:56:
         f5:fc:19:39:6c:15:71:73:a2:31:98:c8:ab:c5:e0:b8:e4:78:
         5d:6f:86:4c:47:b8:3f:b6:b1:61:f3:b8:fb:72:65:93:8e:e5:
         02:18:27:a0:78:99:e3:d0:69:1a:85:4a:de:af:03:d2:e7:a0:
         06:29:9f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 09:29:31 2026 by rpki-client