This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB965A4F0806DD6CDD0EC40F0491AF1F59C6EF396977426EBFD142E50BF372EE/0/323830333a616436303a3a2f33322d3332203d3e20323731393230.roa
File:                     323830333a616436303a3a2f33322d3332203d3e20323731393230.roa (raw, json)
Hash identifier:          Yky7JurB10b9336TDdInpsNy+V4Uo4fDldy+cA9LQyo=
Subject key identifier:   DD:9C:50:80:11:37:56:69:F4:15:6B:7A:79:AA:60:AF:A2:7A:F0:90
Certificate issuer:       /CN=8210175404341E39B37F824D85585065838DF0B5
Certificate serial:       517B5DC405D5C78E27FC40FD9E9F96E39B82881E
Authority key identifier: 82:10:17:54:04:34:1E:39:B3:7F:82:4D:85:58:50:65:83:8D:F0:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8210175404341E39B37F824D85585065838DF0B5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DB965A4F0806DD6CDD0EC40F0491AF1F59C6EF396977426EBFD142E50BF372EE/0/323830333a616436303a3a2f33322d3332203d3e20323731393230.roa
Signing time:             Tue 06 Jan 2026 20:51:15 +0000
ROA not before:           Tue 06 Jan 2026 20:46:15 +0000
ROA not after:            Tue 05 Jan 2027 20:51:15 +0000
asID:                     271920
IP address blocks:        2803:ad60::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DB965A4F0806DD6CDD0EC40F0491AF1F59C6EF396977426EBFD142E50BF372EE/0/8210175404341E39B37F824D85585065838DF0B5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DB965A4F0806DD6CDD0EC40F0491AF1F59C6EF396977426EBFD142E50BF372EE/0/8210175404341E39B37F824D85585065838DF0B5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8210175404341E39B37F824D85585065838DF0B5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Jan 2026 09:06:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:7b:5d:c4:05:d5:c7:8e:27:fc:40:fd:9e:9f:96:e3:9b:82:88:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8210175404341E39B37F824D85585065838DF0B5
        Validity
            Not Before: Jan  6 20:46:15 2026 GMT
            Not After : Jan  5 20:51:15 2027 GMT
        Subject: CN=DD9C508011375669F4156B7A79AA60AFA27AF090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ea:6e:a0:29:cd:4b:28:be:8d:9f:ae:7b:e2:
                    3c:bd:0b:d8:78:97:3f:de:c8:2e:33:f0:95:09:b1:
                    52:74:84:0c:80:f4:26:31:c6:6d:fa:f0:79:f9:01:
                    6b:0b:34:32:a9:d5:6d:fc:0c:f9:30:88:a4:1b:71:
                    c5:cf:b3:6b:fc:90:ba:bf:3d:01:97:8f:53:d7:e0:
                    28:8b:ff:ab:73:dd:d6:d3:28:44:0e:1d:8c:6b:85:
                    4d:17:c3:e7:a8:62:c8:57:7e:f7:39:36:c4:c5:7b:
                    e4:c1:57:5c:20:37:01:3a:e7:6d:3c:f8:70:7e:6d:
                    ec:59:68:8d:a7:b4:e7:5f:8f:e2:4c:60:71:43:38:
                    4e:b9:4a:85:3b:06:76:6e:08:0b:98:4b:13:5a:c5:
                    ba:6b:57:29:cb:28:b4:9b:67:ec:07:fe:78:ce:65:
                    35:45:01:9d:c6:16:3e:3d:94:3e:27:c9:6f:d3:60:
                    89:9a:f5:a2:08:1a:04:b7:37:ff:7e:6a:0d:38:8b:
                    a2:b3:16:1c:ea:83:41:68:86:74:0c:8a:6a:9e:25:
                    65:07:3a:0d:ca:0e:8f:e6:81:c0:d3:43:2d:a2:79:
                    cc:85:83:7b:a0:3b:f6:52:16:f6:e1:ce:13:8e:d2:
                    33:42:01:de:8d:a5:d0:64:4f:54:14:05:a7:a9:29:
                    2c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:9C:50:80:11:37:56:69:F4:15:6B:7A:79:AA:60:AF:A2:7A:F0:90
            X509v3 Authority Key Identifier:
                keyid:82:10:17:54:04:34:1E:39:B3:7F:82:4D:85:58:50:65:83:8D:F0:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DB965A4F0806DD6CDD0EC40F0491AF1F59C6EF396977426EBFD142E50BF372EE/0/8210175404341E39B37F824D85585065838DF0B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8210175404341E39B37F824D85585065838DF0B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB965A4F0806DD6CDD0EC40F0491AF1F59C6EF396977426EBFD142E50BF372EE/0/323830333a616436303a3a2f33322d3332203d3e20323731393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ad60::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:a4:f9:08:88:fc:97:be:ec:65:69:e7:cc:b5:eb:09:d5:8e:
         a3:98:24:8e:f8:c8:6d:34:1f:e6:d1:7d:db:a3:8b:7a:db:32:
         6a:77:a2:97:2f:65:72:82:98:b8:c2:2f:ec:c7:b0:85:79:36:
         a2:1e:df:f5:b6:a4:57:bd:d2:4b:77:f8:97:ea:c4:64:1f:3f:
         17:e3:0a:19:38:ef:c8:53:c4:3a:b2:24:c6:2f:f3:8b:10:ea:
         e4:31:d4:15:ff:e1:63:45:1b:d5:ed:4f:56:25:90:c4:33:80:
         98:9a:65:91:1c:6c:c3:53:9a:56:c7:53:93:83:ff:fc:45:63:
         ea:f5:40:08:1c:0f:90:86:32:3f:99:89:b5:69:95:93:6b:da:
         a0:3d:1e:a3:3a:b0:36:d1:23:e0:b1:a0:84:41:94:11:a8:76:
         21:a1:cd:c1:4b:78:90:7f:4c:45:e2:ee:b0:01:c2:e8:dd:c5:
         2a:9e:e8:5f:75:d6:b2:49:0d:1f:cd:4e:f5:01:02:ed:72:d0:
         93:a3:12:ec:b6:ea:e9:27:90:1b:16:08:14:fb:56:ab:a3:d0:
         fd:9d:b5:06:59:a8:03:d5:d4:23:c9:2a:1f:c4:e6:e0:f0:d1:
         77:55:68:e3:93:32:24:4e:5a:81:45:0f:8f:19:67:13:a1:19:
         f8:3b:3f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 22:16:47 2026 by rpki-client