This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD69A7E31343095562D77E9BAB618F4F10B2E01C61CDA018DDFB488D65B14E60/0/323830333a353030303a3a2f33322d3332203d3e203237383737.roa
File:                     323830333a353030303a3a2f33322d3332203d3e203237383737.roa (raw, json)
Hash identifier:          RRP5Ezn86E/1gUNGm8j1nHcNHVZ1f+c8inu/ihrB0UA=
Subject key identifier:   9A:A7:68:54:43:31:60:97:63:4C:FC:C8:84:A0:EC:BE:DB:15:71:35
Certificate issuer:       /CN=1EF3435C38C02A32C5521ED72EAEE2325D41541F
Certificate serial:       4777C113BB6454DB4D708C7D140F575ABDAF04D1
Authority key identifier: 1E:F3:43:5C:38:C0:2A:32:C5:52:1E:D7:2E:AE:E2:32:5D:41:54:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EF3435C38C02A32C5521ED72EAEE2325D41541F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD69A7E31343095562D77E9BAB618F4F10B2E01C61CDA018DDFB488D65B14E60/0/323830333a353030303a3a2f33322d3332203d3e203237383737.roa
Signing time:             Tue 06 Jan 2026 19:30:56 +0000
ROA not before:           Tue 06 Jan 2026 19:25:56 +0000
ROA not after:            Tue 05 Jan 2027 19:30:56 +0000
asID:                     27877
IP address blocks:        2803:5000::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD69A7E31343095562D77E9BAB618F4F10B2E01C61CDA018DDFB488D65B14E60/0/1EF3435C38C02A32C5521ED72EAEE2325D41541F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD69A7E31343095562D77E9BAB618F4F10B2E01C61CDA018DDFB488D65B14E60/0/1EF3435C38C02A32C5521ED72EAEE2325D41541F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EF3435C38C02A32C5521ED72EAEE2325D41541F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 00:53:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:77:c1:13:bb:64:54:db:4d:70:8c:7d:14:0f:57:5a:bd:af:04:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EF3435C38C02A32C5521ED72EAEE2325D41541F
        Validity
            Not Before: Jan  6 19:25:56 2026 GMT
            Not After : Jan  5 19:30:56 2027 GMT
        Subject: CN=9AA7685443316097634CFCC884A0ECBEDB157135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8e:a8:7f:14:af:8d:b0:59:8a:63:b1:da:0f:
                    c4:3d:a5:69:67:cb:ed:f5:53:cf:b9:52:4b:29:88:
                    6f:15:12:8b:eb:6a:0c:cc:53:4f:33:d5:06:6d:05:
                    a7:82:5f:f1:9e:8a:5f:af:1a:ce:91:dc:df:26:cc:
                    ae:22:76:e6:a2:f0:14:94:6c:da:5f:66:56:2f:c5:
                    48:a2:48:93:fc:8a:78:01:34:e8:2f:d7:cd:3e:9a:
                    ff:85:7d:dc:fe:87:d8:c7:09:87:2e:4a:0b:75:6d:
                    6f:fd:e7:f6:f0:a0:b4:70:1f:9f:c1:ac:f8:ac:18:
                    8b:c7:81:97:77:bf:4d:1b:dd:5c:8c:31:c9:41:92:
                    3d:f7:94:e8:97:4d:4b:af:e8:f3:2f:91:da:53:e5:
                    0a:2f:c3:e3:29:e4:ef:a6:fd:86:9e:c3:97:57:26:
                    61:64:24:84:e7:32:ad:5f:b5:64:7c:67:1b:fb:fe:
                    f5:02:3f:9d:51:fb:79:ce:0f:ba:fb:fe:d5:39:b9:
                    26:33:ae:31:39:03:f3:8c:48:21:47:fa:b3:f0:de:
                    5d:f9:bc:a8:06:81:80:48:0b:8b:2e:48:3b:56:19:
                    61:b1:1d:e7:58:4c:3d:50:03:e4:c3:07:cf:59:f6:
                    c3:50:8c:a8:b5:fa:08:40:85:32:e1:d6:9f:58:e5:
                    3b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A7:68:54:43:31:60:97:63:4C:FC:C8:84:A0:EC:BE:DB:15:71:35
            X509v3 Authority Key Identifier:
                keyid:1E:F3:43:5C:38:C0:2A:32:C5:52:1E:D7:2E:AE:E2:32:5D:41:54:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD69A7E31343095562D77E9BAB618F4F10B2E01C61CDA018DDFB488D65B14E60/0/1EF3435C38C02A32C5521ED72EAEE2325D41541F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EF3435C38C02A32C5521ED72EAEE2325D41541F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD69A7E31343095562D77E9BAB618F4F10B2E01C61CDA018DDFB488D65B14E60/0/323830333a353030303a3a2f33322d3332203d3e203237383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5000::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:f2:c1:a3:5b:cf:fe:3c:7a:c7:33:e8:3b:c1:bb:81:2f:33:
         60:16:a8:c7:39:40:21:52:7a:9a:35:de:66:f8:1f:59:79:ec:
         bc:97:24:9d:4b:e2:49:fa:77:42:7f:6f:e1:72:ed:3c:23:2c:
         33:00:4d:77:a6:88:de:ac:48:42:b7:42:9e:8e:98:90:1f:ee:
         75:db:d3:e6:d9:03:4f:e4:67:4e:f1:10:fe:a5:55:fb:0a:47:
         d1:56:98:31:00:bc:ca:7d:54:ef:3f:3c:28:62:d1:2c:72:23:
         3b:6e:53:8f:ac:70:05:fc:00:a0:d5:22:d3:01:39:c8:9c:79:
         db:c2:43:ef:ae:60:57:17:d9:26:34:01:cd:7c:eb:49:ae:32:
         22:f1:64:7e:ea:1e:92:c0:97:21:fc:e0:d5:8d:a5:97:7f:db:
         c3:aa:87:1d:5d:a8:2b:66:47:ea:ab:e8:25:90:50:a4:dc:cc:
         82:4e:1f:f0:00:76:c5:51:a1:ff:0d:cc:7f:e2:e7:94:95:32:
         be:43:3d:11:0e:ab:a1:d9:d6:9b:e6:3a:b8:23:d3:29:79:79:
         20:9f:3e:66:09:29:a4:93:ec:d7:37:e9:97:5d:4e:be:47:df:
         6f:13:96:8c:21:a4:8e:8b:fd:df:c6:d4:e5:71:82:c0:3f:10:
         42:64:26:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 06:47:39 2026 by rpki-client