This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF1801CA218139C3436CD4F43EA192412B2CF82E88DF7DA3934069D0D04B2CBD/0/323830333a386534303a3a2f33322d3438203d3e20323637373736.roa
File:                     323830333a386534303a3a2f33322d3438203d3e20323637373736.roa (raw, json)
Hash identifier:          sqE7YY4jkm7rDwzbJN1Zw6czFyiV/zAK00AQ1AqLUkc=
Subject key identifier:   51:5E:59:3E:51:C4:2B:B4:45:56:A1:D1:87:81:56:D8:DC:69:99:B8
Certificate issuer:       /CN=9D3515E483AB07CDCE67D20C458F1663A26D31AD
Certificate serial:       566D6F74790F2476B7CACC81F0297A702003CCD4
Authority key identifier: 9D:35:15:E4:83:AB:07:CD:CE:67:D2:0C:45:8F:16:63:A2:6D:31:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D3515E483AB07CDCE67D20C458F1663A26D31AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AF1801CA218139C3436CD4F43EA192412B2CF82E88DF7DA3934069D0D04B2CBD/0/323830333a386534303a3a2f33322d3438203d3e20323637373736.roa
Signing time:             Tue 06 Jan 2026 19:14:23 +0000
ROA not before:           Tue 06 Jan 2026 19:09:23 +0000
ROA not after:            Tue 05 Jan 2027 19:14:23 +0000
asID:                     267776
IP address blocks:        2803:8e40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AF1801CA218139C3436CD4F43EA192412B2CF82E88DF7DA3934069D0D04B2CBD/0/9D3515E483AB07CDCE67D20C458F1663A26D31AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AF1801CA218139C3436CD4F43EA192412B2CF82E88DF7DA3934069D0D04B2CBD/0/9D3515E483AB07CDCE67D20C458F1663A26D31AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D3515E483AB07CDCE67D20C458F1663A26D31AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 07:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:6d:6f:74:79:0f:24:76:b7:ca:cc:81:f0:29:7a:70:20:03:cc:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D3515E483AB07CDCE67D20C458F1663A26D31AD
        Validity
            Not Before: Jan  6 19:09:23 2026 GMT
            Not After : Jan  5 19:14:23 2027 GMT
        Subject: CN=515E593E51C42BB44556A1D1878156D8DC6999B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:60:a1:18:a3:5c:90:39:08:e0:af:c7:4e:79:
                    df:5a:b4:f0:54:c0:7e:af:78:fb:c5:01:b0:d3:a3:
                    f9:d9:94:d8:ff:f9:53:a5:3d:93:27:a0:4f:35:05:
                    73:40:8c:3f:5b:ca:f6:b6:60:ac:ba:b0:ea:d9:c2:
                    d2:88:3d:d0:97:c2:6e:46:85:5e:f0:1c:ca:d6:3e:
                    93:fc:43:0d:7a:72:12:da:18:bd:31:65:3b:78:ff:
                    5a:4e:c6:89:17:e8:11:2d:ac:48:53:cc:9a:f8:96:
                    e5:55:c7:78:38:16:99:c9:25:23:58:e0:cb:df:9c:
                    d5:84:b3:f3:71:34:08:92:8e:af:49:4b:8f:c9:c6:
                    dd:50:18:e2:dc:2b:26:3d:83:c5:8b:76:93:c4:60:
                    45:67:fc:4e:6b:91:8c:85:21:53:f0:8f:ba:4a:d1:
                    24:9e:fe:86:7d:6a:c0:d3:43:40:17:2e:cc:49:16:
                    64:37:e1:dc:e7:5b:11:f6:a0:4b:f5:9d:01:21:a9:
                    c9:61:2b:d6:6e:f2:86:b1:c6:63:f8:47:79:81:1a:
                    7d:54:3a:42:02:e4:0c:a2:48:63:0a:62:68:9b:d0:
                    52:27:16:47:b5:42:b0:d2:3d:cc:4a:e4:74:fb:aa:
                    39:65:51:23:5a:f8:76:03:d7:93:9a:d1:6e:71:1f:
                    7b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:5E:59:3E:51:C4:2B:B4:45:56:A1:D1:87:81:56:D8:DC:69:99:B8
            X509v3 Authority Key Identifier:
                keyid:9D:35:15:E4:83:AB:07:CD:CE:67:D2:0C:45:8F:16:63:A2:6D:31:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AF1801CA218139C3436CD4F43EA192412B2CF82E88DF7DA3934069D0D04B2CBD/0/9D3515E483AB07CDCE67D20C458F1663A26D31AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D3515E483AB07CDCE67D20C458F1663A26D31AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF1801CA218139C3436CD4F43EA192412B2CF82E88DF7DA3934069D0D04B2CBD/0/323830333a386534303a3a2f33322d3438203d3e20323637373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8e40::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:7f:0d:e6:84:cd:bf:2a:a9:4a:77:b0:2e:1a:9b:4f:46:05:
         9a:21:cd:75:68:4d:70:05:7e:98:7d:71:a3:33:0d:3b:a0:64:
         4b:e3:e7:3d:d6:2a:88:f7:1a:e2:c3:dd:f4:3f:0a:8d:09:ea:
         51:6c:94:1a:d8:16:13:5b:39:ad:4b:22:31:78:98:ea:17:a4:
         0e:d8:fa:06:f8:a7:2a:40:16:fb:cd:60:72:ed:a5:78:f9:75:
         65:04:20:bd:01:36:aa:25:90:7a:9b:ea:11:32:fc:78:6c:59:
         4f:04:ea:ab:19:65:43:37:a4:a6:95:6f:9c:99:a7:e9:65:74:
         51:50:ba:4c:48:9a:19:10:3f:2b:fe:92:fe:ef:fe:70:ab:e1:
         53:fd:6d:ee:da:49:dd:82:6d:56:ee:0e:49:3e:7d:be:bb:f2:
         d7:45:90:49:c7:62:bd:f7:e4:97:ad:da:85:88:ea:00:db:c9:
         ec:ee:1e:a1:50:8a:ff:5b:43:71:2f:ec:8b:d3:e6:4c:6d:ef:
         c4:7f:7d:3e:38:48:22:d1:68:b0:9b:01:3a:94:41:76:09:29:
         45:de:6d:cb:95:3c:a9:bd:cd:9a:2c:58:5a:6e:2c:6b:cf:d0:
         64:bb:07:9f:32:b1:58:a1:f6:df:ba:01:aa:bb:9b:86:0e:4d:
         42:12:9d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 10:05:16 2026 by rpki-client