This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/323830333a613634303a3a2f33322d3536203d3e203237383936.roa
File:                     323830333a613634303a3a2f33322d3536203d3e203237383936.roa (raw, json)
Hash identifier:          HaNe82qvIMDBO2P8lxRFQX/lOC6HsMtMONnSmtsJpRE=
Subject key identifier:   DB:17:27:21:2B:84:3B:AE:16:E9:26:23:CD:97:02:C0:CA:91:89:C7
Certificate issuer:       /CN=70B51DCC347573651055FC72DB19C170524018CC
Certificate serial:       30C46C86582EDB376B2A61C02C9A4F981028952E
Authority key identifier: 70:B5:1D:CC:34:75:73:65:10:55:FC:72:DB:19:C1:70:52:40:18:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B51DCC347573651055FC72DB19C170524018CC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/323830333a613634303a3a2f33322d3536203d3e203237383936.roa
Signing time:             Tue 06 Jan 2026 19:12:19 +0000
ROA not before:           Tue 06 Jan 2026 19:07:19 +0000
ROA not after:            Tue 05 Jan 2027 19:12:19 +0000
asID:                     27896
IP address blocks:        2803:a640::/32 maxlen: 56
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/70B51DCC347573651055FC72DB19C170524018CC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/70B51DCC347573651055FC72DB19C170524018CC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B51DCC347573651055FC72DB19C170524018CC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 23:58:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:c4:6c:86:58:2e:db:37:6b:2a:61:c0:2c:9a:4f:98:10:28:95:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70B51DCC347573651055FC72DB19C170524018CC
        Validity
            Not Before: Jan  6 19:07:19 2026 GMT
            Not After : Jan  5 19:12:19 2027 GMT
        Subject: CN=DB1727212B843BAE16E92623CD9702C0CA9189C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8b:8f:0e:3d:4c:c3:de:31:d5:ff:81:41:67:
                    b3:fd:09:d8:f0:aa:79:f4:3d:95:8e:03:c0:15:98:
                    0f:59:8c:c2:1f:96:98:81:b1:d9:a6:2a:81:0c:30:
                    33:af:05:e3:ba:4b:95:40:62:f5:c6:c1:41:e7:a0:
                    8a:7d:83:d5:91:b8:20:4c:7b:c6:de:04:76:c9:d1:
                    28:c0:32:e1:15:be:63:52:8b:3f:0c:3b:1a:a4:f7:
                    b4:fe:84:93:70:71:4b:2c:c1:79:fc:ff:00:cc:c4:
                    f1:2f:97:3d:b5:ee:55:f8:06:6e:36:b7:bb:14:a5:
                    37:09:7c:6a:db:f4:27:de:1f:ec:78:a5:9f:54:80:
                    f0:b8:a6:c8:2e:10:5c:38:fd:ad:54:6e:de:7c:c7:
                    2a:79:2c:37:eb:01:2f:f5:1e:c5:21:72:0b:72:10:
                    8b:b2:ae:85:07:7a:1b:a4:a2:5a:22:b1:6a:ab:1a:
                    c3:31:25:18:32:69:b2:2d:91:39:8b:c0:67:34:ac:
                    28:0e:80:73:db:b2:ac:a3:0f:22:e2:86:59:ba:36:
                    4d:8a:08:f0:b5:e3:12:59:47:54:8f:e5:58:72:04:
                    c3:e1:26:1e:ea:3a:a6:8b:8f:9a:ba:bf:5a:37:cb:
                    d8:c4:10:e3:72:18:04:b8:e0:65:74:46:76:e0:e7:
                    b6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:17:27:21:2B:84:3B:AE:16:E9:26:23:CD:97:02:C0:CA:91:89:C7
            X509v3 Authority Key Identifier:
                keyid:70:B5:1D:CC:34:75:73:65:10:55:FC:72:DB:19:C1:70:52:40:18:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/70B51DCC347573651055FC72DB19C170524018CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B51DCC347573651055FC72DB19C170524018CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/323830333a613634303a3a2f33322d3536203d3e203237383936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a640::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:fb:86:a0:8c:cd:c3:e1:21:6c:b0:a8:4e:06:7f:a2:b0:fa:
         72:3d:a6:2e:de:4d:a4:c1:69:44:cd:03:50:b7:c1:63:20:28:
         74:2e:c8:50:7f:7e:dd:e3:7e:99:b1:85:7e:63:22:30:f3:11:
         75:5c:be:26:a7:51:76:9c:33:64:f9:2a:fb:e0:58:ea:be:f9:
         06:49:38:26:79:02:3c:53:a4:05:8a:9d:10:11:c8:4c:9d:b2:
         97:5e:5b:66:37:b6:96:e4:31:2f:f5:f1:eb:a5:09:38:87:33:
         9c:62:a7:f1:87:31:03:35:ec:33:27:71:f7:53:7a:af:df:1b:
         fe:b4:11:9b:eb:5e:4e:ae:8d:1c:3d:1b:9f:c6:02:66:81:82:
         e7:4d:6e:19:28:0d:57:4d:e3:49:20:49:9a:6d:00:fa:74:f1:
         f5:e5:45:06:f3:03:78:ce:26:bd:fc:cd:71:c3:9f:2c:f0:12:
         4e:5b:80:97:b2:69:d8:97:7e:d2:24:55:f8:e5:9b:b2:d2:1d:
         f1:27:73:00:1b:66:17:3a:00:d4:d3:66:fe:9e:9b:b4:4f:07:
         4f:d4:65:03:da:a7:cc:e1:33:7a:0a:3b:b2:fb:f1:07:9e:ff:
         e6:da:ee:3b:ef:45:d4:53:b3:5a:8e:71:44:5a:61:2c:55:e1:
         ea:0c:88:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:21:24 2026 by rpki-client