This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/323830333a313563303a3a2f33322d3336203d3e20323639383232.roa
File:                     323830333a313563303a3a2f33322d3336203d3e20323639383232.roa (raw, json)
Hash identifier:          WsCm5srF8fRAehX9apa6pGWbBxmvFMp0LbTFoEv3tH8=
Subject key identifier:   AB:D1:65:A0:1A:9A:22:F3:F6:8E:8F:62:A9:E8:3E:54:3A:12:F1:01
Certificate issuer:       /CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
Certificate serial:       2C515ACC6DA731F6AFDF0590F202CD850862EB03
Authority key identifier: 0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/323830333a313563303a3a2f33322d3336203d3e20323639383232.roa
Signing time:             Tue 06 Jan 2026 19:15:20 +0000
ROA not before:           Tue 06 Jan 2026 19:10:20 +0000
ROA not after:            Tue 05 Jan 2027 19:15:20 +0000
asID:                     269822
IP address blocks:        2803:15c0::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 02:05:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:51:5a:cc:6d:a7:31:f6:af:df:05:90:f2:02:cd:85:08:62:eb:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
        Validity
            Not Before: Jan  6 19:10:20 2026 GMT
            Not After : Jan  5 19:15:20 2027 GMT
        Subject: CN=ABD165A01A9A22F3F68E8F62A9E83E543A12F101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:25:3d:b3:82:21:37:74:9f:99:0a:a5:4a:d0:
                    26:76:00:ef:ff:ac:46:0c:99:23:48:10:aa:c7:fd:
                    2c:cc:26:7d:a7:a9:d7:8c:62:0d:4d:f4:ed:3d:e0:
                    7c:51:b9:b4:aa:21:ee:07:0b:1d:fd:d5:e3:62:69:
                    37:e5:29:34:2e:65:48:16:04:2c:98:99:c9:12:e5:
                    f3:52:b5:24:7e:ae:77:e9:a5:46:78:98:d0:0e:f6:
                    96:8e:2e:27:0f:78:3c:7c:e2:ba:ed:15:36:08:a8:
                    a7:bd:c6:9f:64:99:c1:a7:32:6b:45:36:fe:65:e0:
                    d2:17:e7:47:96:f0:44:76:d7:5c:09:44:bd:cf:83:
                    4c:cc:45:db:b4:9b:86:37:62:e9:80:20:8f:7b:28:
                    bc:be:a2:c2:dd:6b:24:61:8c:1b:f7:c7:54:e4:68:
                    94:d1:7e:35:db:18:9c:ed:20:8a:bd:e7:75:d5:08:
                    40:eb:ab:a5:ae:7d:aa:e9:24:02:17:db:c9:56:d5:
                    e6:42:45:ba:12:4d:38:24:55:98:9e:62:c9:b4:41:
                    30:34:88:0a:11:02:2a:50:33:4e:03:90:70:ee:62:
                    92:83:7c:b0:32:54:8b:ef:a1:31:d0:f9:4c:18:a0:
                    3d:e8:59:c4:19:ad:6c:db:39:d8:c5:6a:9f:3f:42:
                    97:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:D1:65:A0:1A:9A:22:F3:F6:8E:8F:62:A9:E8:3E:54:3A:12:F1:01
            X509v3 Authority Key Identifier:
                keyid:0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/323830333a313563303a3a2f33322d3336203d3e20323639383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:15c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:3b:10:8f:3a:1b:2d:c6:8c:35:d0:6c:2b:17:97:9c:c2:fa:
         f0:fb:47:d9:e4:14:c2:60:af:fb:15:0b:43:f6:e4:94:87:b2:
         41:a6:72:23:a7:01:c9:ef:9f:54:d9:e2:fa:2a:d5:9e:1c:2f:
         42:e2:00:87:ba:52:d3:42:70:99:e7:c1:49:8d:88:82:69:41:
         4f:58:a1:5f:7d:ea:bf:28:32:9c:62:ef:76:1c:ba:b7:d1:18:
         da:38:64:fd:69:00:86:1c:25:bd:d2:94:19:b8:ce:e0:61:f3:
         53:e9:2c:06:96:09:c5:25:c8:78:21:bd:75:f9:69:f6:a5:02:
         a0:16:83:ec:b7:65:fd:62:8e:65:83:49:2f:b4:96:23:33:e7:
         61:4b:78:44:50:2c:00:d8:a8:93:fd:3d:02:fb:41:11:22:ba:
         1b:66:6e:37:65:cb:82:75:90:dc:20:49:44:75:0c:ae:bb:a2:
         c0:85:5a:b1:b8:fe:3b:f2:8c:10:b4:b2:ae:4d:9d:51:cd:c6:
         89:4b:45:81:13:1f:0e:e2:c6:f3:40:11:1f:42:46:22:a5:cd:
         a1:24:8e:18:8e:7c:96:25:31:9f:a1:f7:2a:f4:bc:47:b5:27:
         c0:43:9e:5f:68:09:48:77:da:c0:fb:23:dc:08:6a:ca:a6:e2:
         49:ae:83:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 08:11:37 2026 by rpki-client