This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ADFB38DEF03CDACFBC115FB5C45BB90BF78D25377B390C0B706A201C23F4D893/0/323830333a653763303a3a2f33322d3332203d3e20323635373639.roa
File:                     323830333a653763303a3a2f33322d3332203d3e20323635373639.roa (raw, json)
Hash identifier:          wyVTQQUUYW4tK7CDwCdJaNvqS2mmBBk2NApurKlQZaQ=
Subject key identifier:   5B:6A:88:6A:18:4B:A5:F5:CF:85:11:32:32:BA:1D:F9:14:3A:F5:DA
Certificate issuer:       /CN=1F653A3DC4E68D4F848AD95F8C61B21806A6962F
Certificate serial:       4D3A1DE221E3C931825AD047225D5C76983FC13A
Authority key identifier: 1F:65:3A:3D:C4:E6:8D:4F:84:8A:D9:5F:8C:61:B2:18:06:A6:96:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F653A3DC4E68D4F848AD95F8C61B21806A6962F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ADFB38DEF03CDACFBC115FB5C45BB90BF78D25377B390C0B706A201C23F4D893/0/323830333a653763303a3a2f33322d3332203d3e20323635373639.roa
Signing time:             Tue 06 Jan 2026 19:45:25 +0000
ROA not before:           Tue 06 Jan 2026 19:40:25 +0000
ROA not after:            Tue 05 Jan 2027 19:45:25 +0000
asID:                     265769
IP address blocks:        2803:e7c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ADFB38DEF03CDACFBC115FB5C45BB90BF78D25377B390C0B706A201C23F4D893/0/1F653A3DC4E68D4F848AD95F8C61B21806A6962F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ADFB38DEF03CDACFBC115FB5C45BB90BF78D25377B390C0B706A201C23F4D893/0/1F653A3DC4E68D4F848AD95F8C61B21806A6962F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F653A3DC4E68D4F848AD95F8C61B21806A6962F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 12:27:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:3a:1d:e2:21:e3:c9:31:82:5a:d0:47:22:5d:5c:76:98:3f:c1:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F653A3DC4E68D4F848AD95F8C61B21806A6962F
        Validity
            Not Before: Jan  6 19:40:25 2026 GMT
            Not After : Jan  5 19:45:25 2027 GMT
        Subject: CN=5B6A886A184BA5F5CF85113232BA1DF9143AF5DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:7b:ff:9f:76:47:13:cf:8a:35:39:e2:6f:c0:
                    5d:30:2d:aa:e3:9a:76:c6:1e:52:2a:16:74:30:b5:
                    b4:78:56:88:f0:f7:3f:00:75:67:75:87:bf:d4:80:
                    5b:d9:2e:2a:ad:8e:03:63:77:1a:3e:36:8e:c9:d9:
                    3a:5e:e2:c4:0f:48:c2:37:f3:e2:78:45:0e:1a:b4:
                    74:04:1d:5c:64:48:7e:fc:c2:80:e7:7a:cb:95:7b:
                    9e:4e:0f:ca:13:7f:9b:9b:10:6b:d9:66:54:78:03:
                    cc:d3:41:16:11:df:55:be:d0:00:7f:4f:ea:cb:be:
                    c8:c8:d8:0d:3d:d0:a2:ec:82:3d:8e:ca:79:f9:5c:
                    26:5f:10:b8:29:cf:bd:d6:ee:83:86:d3:c4:61:76:
                    a2:76:11:73:e1:5e:3f:90:61:d9:c2:9b:d1:0b:a6:
                    ef:62:c1:da:72:21:0b:8e:86:41:ff:2b:4a:5f:12:
                    b2:4a:4f:71:a5:50:10:32:81:e1:47:45:c3:c7:dc:
                    88:bc:18:ae:19:5d:c3:20:bd:65:c4:82:c1:a8:57:
                    a6:36:b7:a1:19:d8:d8:d1:21:ca:11:09:e7:84:ed:
                    1b:8c:a7:6c:e2:52:7a:c8:30:01:e0:2a:5a:7d:c6:
                    e4:1d:65:6e:df:17:d0:4a:95:71:aa:88:90:9e:32:
                    b7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:6A:88:6A:18:4B:A5:F5:CF:85:11:32:32:BA:1D:F9:14:3A:F5:DA
            X509v3 Authority Key Identifier:
                keyid:1F:65:3A:3D:C4:E6:8D:4F:84:8A:D9:5F:8C:61:B2:18:06:A6:96:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ADFB38DEF03CDACFBC115FB5C45BB90BF78D25377B390C0B706A201C23F4D893/0/1F653A3DC4E68D4F848AD95F8C61B21806A6962F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F653A3DC4E68D4F848AD95F8C61B21806A6962F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ADFB38DEF03CDACFBC115FB5C45BB90BF78D25377B390C0B706A201C23F4D893/0/323830333a653763303a3a2f33322d3332203d3e20323635373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e7c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:06:52:dc:d6:35:bd:b2:c8:df:3f:51:c9:ab:84:31:bc:03:
         2f:aa:09:fd:64:96:10:01:49:39:8c:ac:d9:8f:93:a9:37:0b:
         f2:86:c3:e6:a2:4c:c5:69:d5:f2:d2:ae:a6:60:e8:8d:ed:ff:
         ea:70:b9:1e:fb:51:39:08:c8:1f:b6:89:c8:41:04:e0:b0:86:
         10:26:4e:60:ea:cb:fe:fd:f9:43:26:66:63:0f:70:5f:88:07:
         60:5b:72:26:de:dc:3b:e8:6b:38:b6:f6:b5:47:18:47:b7:e1:
         04:1f:1c:19:57:6d:2b:2d:73:0e:34:c2:06:ea:6d:a3:43:97:
         2f:b7:92:5d:cd:b7:e7:55:da:43:17:89:f0:fa:df:3f:69:7e:
         21:ef:61:fb:30:6e:90:72:7e:b3:8f:3f:0b:bd:26:06:a6:b4:
         7c:44:bb:92:96:55:24:99:7c:45:4d:c6:bc:d9:a7:2a:67:72:
         1d:95:37:61:4e:b9:1c:86:ea:af:ee:24:0a:17:c9:20:35:80:
         30:1f:c6:c7:d2:23:34:a8:ef:67:8a:33:c5:8c:a0:ef:18:05:
         4f:9a:5f:74:d3:e8:4c:9f:d3:b7:50:2d:dc:9b:df:7a:b5:e4:
         cb:ee:d8:78:55:a7:b8:11:de:5e:a3:95:eb:b2:e5:0b:68:2c:
         d2:3e:07:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 04:12:48 2026 by rpki-client