This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D75A75B66B5C044C8E537C3F2BF84E0400EBEB5EECB72ADCD5687563CE4B218C/0/323830333a313761303a3a2f33322d3332203d3e20323637373737.roa
File:                     323830333a313761303a3a2f33322d3332203d3e20323637373737.roa (raw, json)
Hash identifier:          UOan2lxLa/B/VPGbvrmkJgfAHpvjL6i8clwSOIBgyi0=
Subject key identifier:   8B:F1:05:EB:DC:03:33:EC:83:40:42:2E:21:FB:56:C8:2D:ED:56:1B
Certificate issuer:       /CN=4CE9DD4ACA90E624B6F7B72C71A47D4541C7BB4E
Certificate serial:       7D3884C26EC5E6490C6555F0DB8FC5FCBCC8D970
Authority key identifier: 4C:E9:DD:4A:CA:90:E6:24:B6:F7:B7:2C:71:A4:7D:45:41:C7:BB:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CE9DD4ACA90E624B6F7B72C71A47D4541C7BB4E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D75A75B66B5C044C8E537C3F2BF84E0400EBEB5EECB72ADCD5687563CE4B218C/0/323830333a313761303a3a2f33322d3332203d3e20323637373737.roa
Signing time:             Tue 06 Jan 2026 19:20:19 +0000
ROA not before:           Tue 06 Jan 2026 19:15:19 +0000
ROA not after:            Tue 05 Jan 2027 19:20:19 +0000
asID:                     267777
IP address blocks:        2803:17a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D75A75B66B5C044C8E537C3F2BF84E0400EBEB5EECB72ADCD5687563CE4B218C/0/4CE9DD4ACA90E624B6F7B72C71A47D4541C7BB4E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D75A75B66B5C044C8E537C3F2BF84E0400EBEB5EECB72ADCD5687563CE4B218C/0/4CE9DD4ACA90E624B6F7B72C71A47D4541C7BB4E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CE9DD4ACA90E624B6F7B72C71A47D4541C7BB4E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 20:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:38:84:c2:6e:c5:e6:49:0c:65:55:f0:db:8f:c5:fc:bc:c8:d9:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CE9DD4ACA90E624B6F7B72C71A47D4541C7BB4E
        Validity
            Not Before: Jan  6 19:15:19 2026 GMT
            Not After : Jan  5 19:20:19 2027 GMT
        Subject: CN=8BF105EBDC0333EC8340422E21FB56C82DED561B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5e:61:42:f5:35:2a:23:40:79:57:4d:70:59:
                    c7:a0:9d:fa:1e:f7:22:9a:eb:8d:46:85:68:13:70:
                    97:88:5c:f3:90:58:2f:34:82:33:b9:59:1f:c7:f6:
                    73:31:12:ce:de:82:bd:f9:81:00:e6:23:12:01:d4:
                    a3:c4:e5:b7:aa:60:b2:76:7a:79:e2:44:9c:a6:1d:
                    0a:be:b1:bd:21:3a:4b:e2:3b:59:23:e4:03:f7:88:
                    aa:5d:fe:d0:4d:b3:0d:82:ee:4f:e7:82:ef:29:e9:
                    ba:ab:7d:93:2f:30:61:ed:36:e0:af:75:51:ff:ef:
                    5d:0e:e5:f8:0f:d9:79:d6:6f:05:75:a9:7f:cc:f3:
                    5c:cc:f8:69:06:ee:33:65:97:d7:03:9d:8b:3f:9c:
                    e4:7b:ee:9c:2d:26:9d:7c:cd:db:b3:4f:53:9e:cc:
                    45:91:24:dc:3e:07:09:ce:bf:1d:0a:0b:71:d1:13:
                    9b:85:d6:da:79:fc:3f:88:aa:a0:6c:d1:3b:ea:23:
                    56:2f:8a:94:9b:06:00:19:63:17:4f:ab:8e:c9:4a:
                    8c:c1:6e:47:fc:da:53:fc:21:74:d3:f8:07:1e:75:
                    c9:fd:fc:5a:e5:5a:a5:de:9d:e2:fd:d0:0c:ae:fe:
                    5d:c3:1d:f0:12:0e:61:c5:13:62:b9:9a:9c:93:bf:
                    af:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F1:05:EB:DC:03:33:EC:83:40:42:2E:21:FB:56:C8:2D:ED:56:1B
            X509v3 Authority Key Identifier:
                keyid:4C:E9:DD:4A:CA:90:E6:24:B6:F7:B7:2C:71:A4:7D:45:41:C7:BB:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D75A75B66B5C044C8E537C3F2BF84E0400EBEB5EECB72ADCD5687563CE4B218C/0/4CE9DD4ACA90E624B6F7B72C71A47D4541C7BB4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CE9DD4ACA90E624B6F7B72C71A47D4541C7BB4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D75A75B66B5C044C8E537C3F2BF84E0400EBEB5EECB72ADCD5687563CE4B218C/0/323830333a313761303a3a2f33322d3332203d3e20323637373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:17a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:2f:a6:88:91:55:49:a1:cf:89:ac:fc:5a:81:ea:25:7c:d1:
         8d:3a:b2:d5:36:b0:d9:34:03:ad:09:a9:a1:a6:66:94:8b:94:
         c1:02:8e:ef:18:3d:14:42:c7:f0:e3:69:76:76:15:e6:89:a0:
         95:db:41:49:b6:ad:ad:7e:62:2e:c6:4d:ec:b1:57:79:5e:2e:
         e2:51:fa:13:59:b6:ac:f2:14:b6:cb:bf:17:f6:b5:0a:cd:46:
         96:13:ff:6f:37:4a:f8:77:a8:fe:3a:6b:d9:af:35:0f:30:6e:
         f2:d9:58:17:4d:cb:39:71:c4:d4:c8:8b:b3:e4:a2:1b:08:8b:
         e3:b4:93:de:51:36:08:c7:69:57:55:09:fb:09:6b:e1:c1:d4:
         46:62:27:aa:a5:df:02:62:a3:93:80:94:6a:90:a4:21:bd:5b:
         33:c0:0e:e9:34:34:aa:4b:a0:a5:e5:20:e7:0d:ef:28:1d:43:
         2d:43:31:37:98:d3:79:55:e1:e5:09:c7:a8:11:b0:bc:b1:7e:
         a4:b8:67:02:f6:a9:44:b3:0c:d2:84:4a:f1:0d:f4:e7:b4:c8:
         04:8f:32:e3:a9:22:01:c6:4f:4c:3a:43:47:7f:ae:86:e4:1e:
         f5:59:0b:02:77:a7:69:02:d1:d5:11:aa:3f:b5:73:88:ba:08:
         95:7c:05:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 20:59:58 2026 by rpki-client