This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CC3CC60F06C7CB4308859E8355EC0A740C38F1BFB096D51AC2BDFD8727F90152/0/323830333a646163303a3a2f33322d3438203d3e20323635363334.roa
File:                     323830333a646163303a3a2f33322d3438203d3e20323635363334.roa (raw, json)
Hash identifier:          YuT2eH94r+5DY9SOYEFQxkfjVLUk8uw9Ke6efGmppjU=
Subject key identifier:   D8:6F:40:1E:70:1E:7C:42:BD:DB:67:47:1E:0C:5A:F4:9C:FA:F6:19
Certificate issuer:       /CN=704D35555DB11E7E7E56BDCB34E635E30C8C6978
Certificate serial:       3428C1179D3FD39C60368FBD363F67738E1FD6C0
Authority key identifier: 70:4D:35:55:5D:B1:1E:7E:7E:56:BD:CB:34:E6:35:E3:0C:8C:69:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/704D35555DB11E7E7E56BDCB34E635E30C8C6978.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CC3CC60F06C7CB4308859E8355EC0A740C38F1BFB096D51AC2BDFD8727F90152/0/323830333a646163303a3a2f33322d3438203d3e20323635363334.roa
Signing time:             Tue 06 Jan 2026 19:29:40 +0000
ROA not before:           Tue 06 Jan 2026 19:24:40 +0000
ROA not after:            Tue 05 Jan 2027 19:29:40 +0000
asID:                     265634
IP address blocks:        2803:dac0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CC3CC60F06C7CB4308859E8355EC0A740C38F1BFB096D51AC2BDFD8727F90152/0/704D35555DB11E7E7E56BDCB34E635E30C8C6978.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CC3CC60F06C7CB4308859E8355EC0A740C38F1BFB096D51AC2BDFD8727F90152/0/704D35555DB11E7E7E56BDCB34E635E30C8C6978.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/704D35555DB11E7E7E56BDCB34E635E30C8C6978.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:28:c1:17:9d:3f:d3:9c:60:36:8f:bd:36:3f:67:73:8e:1f:d6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=704D35555DB11E7E7E56BDCB34E635E30C8C6978
        Validity
            Not Before: Jan  6 19:24:40 2026 GMT
            Not After : Jan  5 19:29:40 2027 GMT
        Subject: CN=D86F401E701E7C42BDDB67471E0C5AF49CFAF619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c4:8a:37:c2:3d:07:62:58:4b:11:34:e0:12:
                    80:58:7c:95:75:dd:19:64:77:58:5c:95:0c:56:f3:
                    f8:7a:0b:20:a2:c8:14:93:6b:c0:c8:e7:c2:5e:e1:
                    28:b0:b5:22:5f:00:4b:98:d8:02:97:e2:68:2a:db:
                    c8:5b:bf:e7:37:0a:47:ad:f7:cc:24:df:a8:e1:ea:
                    ed:f6:36:12:be:b5:c3:76:d1:6a:7b:f4:2d:d5:b4:
                    08:4c:20:cf:f1:a2:53:44:ac:d1:5a:98:97:d4:10:
                    86:74:c0:c4:da:84:11:84:81:05:49:02:7d:1b:d1:
                    ac:70:c6:96:df:51:70:5f:24:26:12:15:be:e0:dc:
                    46:2e:27:32:e3:79:a3:95:3c:44:25:3e:12:f5:51:
                    e3:7c:bd:7c:a6:ea:74:61:64:77:58:3e:3f:eb:04:
                    f2:dd:a7:4c:7d:af:89:3b:c2:03:79:06:ae:50:fa:
                    1f:15:05:24:71:aa:21:6b:3d:d4:f3:76:e6:1a:3a:
                    67:80:26:0c:ab:48:01:15:9f:a0:73:71:83:0a:40:
                    9a:84:5e:5d:f2:80:22:bd:ea:4f:ac:ed:e6:12:24:
                    39:34:d4:1a:ec:ee:8f:9d:62:2c:bc:a5:fc:cb:dc:
                    21:c2:5a:86:0c:38:15:b7:03:b0:3d:07:cf:b4:74:
                    cc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:6F:40:1E:70:1E:7C:42:BD:DB:67:47:1E:0C:5A:F4:9C:FA:F6:19
            X509v3 Authority Key Identifier:
                keyid:70:4D:35:55:5D:B1:1E:7E:7E:56:BD:CB:34:E6:35:E3:0C:8C:69:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CC3CC60F06C7CB4308859E8355EC0A740C38F1BFB096D51AC2BDFD8727F90152/0/704D35555DB11E7E7E56BDCB34E635E30C8C6978.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/704D35555DB11E7E7E56BDCB34E635E30C8C6978.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CC3CC60F06C7CB4308859E8355EC0A740C38F1BFB096D51AC2BDFD8727F90152/0/323830333a646163303a3a2f33322d3438203d3e20323635363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:be:d1:d6:77:e1:40:9b:60:82:e1:86:a2:b2:77:7b:68:8e:
         56:23:6f:12:ce:3d:b4:1b:5e:58:9f:01:06:c5:f6:f6:13:67:
         d3:27:4e:3c:50:89:bf:d6:7c:c2:68:60:a5:cb:67:2f:b2:63:
         26:18:d8:16:a0:36:5e:7a:ec:ab:f2:42:2c:83:76:68:0d:7e:
         35:ba:39:2d:f7:e7:f3:bf:e1:bc:89:f3:5a:47:c7:28:87:1b:
         35:9d:c0:66:a9:9c:81:c6:99:c5:bc:e8:69:dc:5b:62:ba:22:
         25:ac:db:00:bb:ff:34:72:12:aa:75:94:cb:5d:17:74:71:7c:
         23:6a:77:37:ea:f4:31:d6:5a:9b:f6:9e:9d:43:22:67:a5:10:
         d4:0b:2f:cf:d9:9f:b5:6f:18:f0:87:7b:f6:b2:ff:94:da:4a:
         33:c8:7d:29:fd:fa:4e:47:47:5c:68:2e:43:48:f9:fb:fd:95:
         61:ce:47:56:06:20:2a:ab:dc:dd:81:6d:8c:72:76:ef:01:e9:
         40:f2:30:be:a6:0d:53:31:b3:ba:0e:86:34:cc:19:f1:f9:a0:
         80:bb:89:38:1e:08:92:d4:46:b1:9f:bc:db:fe:90:8c:5f:69:
         12:5a:16:c4:ab:b5:76:ac:10:79:3f:8a:b5:11:38:2e:40:1e:
         3a:eb:8c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 15:21:02 2026 by rpki-client