This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0BE3B0B1095AA5912FB21C7735CEBB8B83DAF6BC44426278388EB8772D426CB/0/323830333a663531303a3a2f33322d3438203d3e20323732303334.roa
File:                     323830333a663531303a3a2f33322d3438203d3e20323732303334.roa (raw, json)
Hash identifier:          3KeQKalZq64fUMnWXcb8lQxkrvgVcRA9YfF20YnRqqo=
Subject key identifier:   8E:C7:C6:D2:92:52:B4:AA:1B:9C:D3:3B:DB:23:9C:5E:3B:E1:36:6E
Certificate issuer:       /CN=891E55A23EE024520C4B107ECF8CDB24B95A8283
Certificate serial:       41CCDBB924180B825B32E44E47BE937020AC366A
Authority key identifier: 89:1E:55:A2:3E:E0:24:52:0C:4B:10:7E:CF:8C:DB:24:B9:5A:82:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/891E55A23EE024520C4B107ECF8CDB24B95A8283.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0BE3B0B1095AA5912FB21C7735CEBB8B83DAF6BC44426278388EB8772D426CB/0/323830333a663531303a3a2f33322d3438203d3e20323732303334.roa
Signing time:             Tue 06 Jan 2026 20:51:24 +0000
ROA not before:           Tue 06 Jan 2026 20:46:24 +0000
ROA not after:            Tue 05 Jan 2027 20:51:24 +0000
asID:                     272034
IP address blocks:        2803:f510::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F0BE3B0B1095AA5912FB21C7735CEBB8B83DAF6BC44426278388EB8772D426CB/0/891E55A23EE024520C4B107ECF8CDB24B95A8283.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F0BE3B0B1095AA5912FB21C7735CEBB8B83DAF6BC44426278388EB8772D426CB/0/891E55A23EE024520C4B107ECF8CDB24B95A8283.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/891E55A23EE024520C4B107ECF8CDB24B95A8283.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 10:25:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:cc:db:b9:24:18:0b:82:5b:32:e4:4e:47:be:93:70:20:ac:36:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891E55A23EE024520C4B107ECF8CDB24B95A8283
        Validity
            Not Before: Jan  6 20:46:24 2026 GMT
            Not After : Jan  5 20:51:24 2027 GMT
        Subject: CN=8EC7C6D29252B4AA1B9CD33BDB239C5E3BE1366E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ea:a1:bd:d9:0e:22:2a:1a:c7:c6:09:e1:49:
                    1a:1d:00:34:d5:d5:c1:9a:43:fb:5d:1c:75:fd:d5:
                    8c:1d:b7:57:54:ac:95:29:b7:a1:3a:72:1c:9d:4e:
                    d9:c7:7f:20:20:99:79:cb:3a:26:17:05:d6:be:84:
                    1e:7d:de:d7:05:c9:cb:a9:08:fd:74:65:e7:c4:7b:
                    e6:fb:92:f4:aa:da:bf:cd:69:99:21:0e:f7:3f:c9:
                    aa:92:b4:91:d0:9d:9d:42:d1:5f:28:6d:9e:27:da:
                    55:a1:17:04:6b:fa:0e:22:de:2d:5a:17:9b:ee:15:
                    f8:f8:1d:b0:bc:5e:25:b2:6b:9a:f7:2e:a3:fc:6c:
                    ec:63:aa:db:36:85:d2:13:eb:3d:7c:54:b7:01:b0:
                    2a:21:d9:77:09:91:07:b4:35:35:59:19:eb:7a:cd:
                    e8:74:22:9a:80:cd:7d:fb:30:92:27:dd:05:b8:cb:
                    26:1c:9e:55:c0:60:e6:a3:d8:e3:04:c0:40:c4:ff:
                    1e:85:2e:16:a3:20:1f:2c:b0:fd:0b:65:e1:a0:5a:
                    fb:ec:d6:dc:da:78:39:e0:36:63:8f:b0:2b:96:9a:
                    5b:9f:58:a3:b0:37:7d:eb:49:eb:01:cc:3a:09:da:
                    e1:f4:b3:4d:9a:5a:ae:36:97:79:e4:be:db:46:33:
                    c3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C7:C6:D2:92:52:B4:AA:1B:9C:D3:3B:DB:23:9C:5E:3B:E1:36:6E
            X509v3 Authority Key Identifier:
                keyid:89:1E:55:A2:3E:E0:24:52:0C:4B:10:7E:CF:8C:DB:24:B9:5A:82:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0BE3B0B1095AA5912FB21C7735CEBB8B83DAF6BC44426278388EB8772D426CB/0/891E55A23EE024520C4B107ECF8CDB24B95A8283.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/891E55A23EE024520C4B107ECF8CDB24B95A8283.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0BE3B0B1095AA5912FB21C7735CEBB8B83DAF6BC44426278388EB8772D426CB/0/323830333a663531303a3a2f33322d3438203d3e20323732303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f510::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:6e:15:b6:08:39:0c:b2:e8:9f:e5:66:be:73:3c:c2:6c:2d:
         5b:fd:30:70:c9:4d:a8:a5:9a:e8:4f:08:7d:1f:7b:35:7a:49:
         86:ab:76:c8:80:43:06:cd:3c:99:15:7a:23:08:ec:85:3b:79:
         36:bb:e1:bc:58:4d:7c:b4:55:e6:2d:b4:df:9e:88:ff:79:fc:
         a3:7b:00:a8:f2:b8:df:e8:65:01:94:d6:96:e4:b8:05:3b:16:
         7a:98:10:89:17:24:8f:8e:2d:f6:4e:46:a3:d1:fe:cb:10:d2:
         db:24:ac:58:c3:9b:47:d2:70:5b:ef:72:80:f2:32:7a:ef:00:
         b3:6d:ff:73:c7:2c:73:6e:69:fb:8e:43:93:3f:31:97:de:7f:
         e6:a5:6d:57:0b:67:e7:4b:92:71:f9:b2:4e:8a:ae:66:a2:5b:
         16:22:3a:54:4d:1f:7f:1c:ec:b1:47:c2:47:e7:09:be:17:5b:
         1e:ac:9a:8f:3b:a2:53:82:f0:8a:8b:24:d1:5c:24:59:6a:2b:
         0c:c3:73:5e:b8:0e:2b:50:44:26:17:51:8b:4d:dd:d2:8b:fe:
         84:d9:78:4d:f6:50:2d:0c:aa:e2:05:13:73:b9:98:33:7e:4b:
         a5:bc:3e:df:56:ff:97:5d:b9:8c:e7:9d:70:65:1d:11:94:d8:
         8b:45:31:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 14 11:57:44 2026 by rpki-client