This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ACD83F65B3C2985BFC1981F2F5786B16670160A035E7992C8B5BFE15FA23832/0/323830333a613230303a3a2f33322d3438203d3e203237373735.roa
File:                     323830333a613230303a3a2f33322d3438203d3e203237373735.roa (raw, json)
Hash identifier:          YNtuHtRoy37jp+PsG3vpMBXx+FNTUThAQypTSlVWpcQ=
Subject key identifier:   7C:18:B2:C0:07:CC:BF:57:00:70:9A:94:74:39:7F:16:68:A6:60:47
Certificate issuer:       /CN=E448655A46C905154A46DF19D5CADDB20B5D1153
Certificate serial:       4A218240D6CD20EA6979513F3AD34B3F3D9FC58E
Authority key identifier: E4:48:65:5A:46:C9:05:15:4A:46:DF:19:D5:CA:DD:B2:0B:5D:11:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E448655A46C905154A46DF19D5CADDB20B5D1153.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ACD83F65B3C2985BFC1981F2F5786B16670160A035E7992C8B5BFE15FA23832/0/323830333a613230303a3a2f33322d3438203d3e203237373735.roa
Signing time:             Tue 06 Jan 2026 19:20:38 +0000
ROA not before:           Tue 06 Jan 2026 19:15:38 +0000
ROA not after:            Tue 05 Jan 2027 19:20:38 +0000
asID:                     27775
IP address blocks:        2803:a200::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0ACD83F65B3C2985BFC1981F2F5786B16670160A035E7992C8B5BFE15FA23832/0/E448655A46C905154A46DF19D5CADDB20B5D1153.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0ACD83F65B3C2985BFC1981F2F5786B16670160A035E7992C8B5BFE15FA23832/0/E448655A46C905154A46DF19D5CADDB20B5D1153.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E448655A46C905154A46DF19D5CADDB20B5D1153.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 23:21:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:21:82:40:d6:cd:20:ea:69:79:51:3f:3a:d3:4b:3f:3d:9f:c5:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E448655A46C905154A46DF19D5CADDB20B5D1153
        Validity
            Not Before: Jan  6 19:15:38 2026 GMT
            Not After : Jan  5 19:20:38 2027 GMT
        Subject: CN=7C18B2C007CCBF5700709A9474397F1668A66047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:53:68:2e:2a:be:b5:c9:7f:59:8e:2b:f6:dc:
                    70:c9:e2:2f:58:fe:08:24:a7:2f:24:b4:fb:3e:b9:
                    e6:2e:f4:36:bf:c1:49:f7:13:a7:fb:6e:9f:e5:c7:
                    7f:46:3c:04:07:7d:0b:24:cc:93:dd:d2:0d:11:0c:
                    3f:78:fa:a1:4e:7e:4a:a2:9b:c8:56:a5:b5:31:56:
                    07:1a:c3:0f:c2:54:ac:40:bb:52:f2:4d:8b:30:7b:
                    7a:33:00:e6:d0:86:2a:6e:8d:99:13:dc:db:f1:3c:
                    88:ff:9d:24:d3:7e:30:40:a3:16:45:7e:14:e9:69:
                    9f:93:11:94:c4:92:20:f6:f1:bb:4b:6b:b6:80:15:
                    7d:55:f7:80:f1:de:f3:c2:5f:57:67:26:58:4a:7d:
                    df:17:95:a5:6c:89:c4:f4:c7:90:d7:4e:89:17:19:
                    d1:23:20:44:55:4b:59:e2:07:c1:ca:e9:ed:f0:09:
                    d0:60:64:f8:1f:07:32:c8:5c:04:11:73:67:6e:7a:
                    8b:7b:f6:4b:6a:62:85:c7:71:35:a1:8a:91:26:07:
                    71:ba:e9:34:92:6e:52:c6:b7:cd:7e:60:ec:b9:83:
                    45:fb:e8:c3:b9:98:87:8f:86:56:83:df:5f:90:f2:
                    ae:19:f4:1a:8e:0c:f6:05:58:a5:4a:af:e7:5e:38:
                    bd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:18:B2:C0:07:CC:BF:57:00:70:9A:94:74:39:7F:16:68:A6:60:47
            X509v3 Authority Key Identifier:
                keyid:E4:48:65:5A:46:C9:05:15:4A:46:DF:19:D5:CA:DD:B2:0B:5D:11:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ACD83F65B3C2985BFC1981F2F5786B16670160A035E7992C8B5BFE15FA23832/0/E448655A46C905154A46DF19D5CADDB20B5D1153.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E448655A46C905154A46DF19D5CADDB20B5D1153.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ACD83F65B3C2985BFC1981F2F5786B16670160A035E7992C8B5BFE15FA23832/0/323830333a613230303a3a2f33322d3438203d3e203237373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a200::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:69:e7:ed:c8:66:4e:0a:72:b6:0a:9e:3e:14:a8:b4:ba:4e:
         bc:92:49:ac:8b:bd:f5:7f:6e:b8:5a:b2:bd:1a:b7:27:bb:8a:
         97:86:0f:41:01:14:a7:13:df:f1:9c:7f:b9:6d:12:22:75:4e:
         72:7a:ae:2d:51:13:65:43:4c:32:c8:a3:05:9b:74:74:e5:8d:
         1a:c6:62:eb:b8:f6:35:93:15:b8:8a:f4:f5:a3:9c:a2:98:2b:
         1a:28:de:38:6a:78:67:ef:35:2d:3c:0f:9f:c1:1c:98:79:3f:
         8b:89:0d:d3:d0:6a:55:a3:22:bd:48:3a:f7:1c:11:5a:b6:47:
         c4:8e:ae:8c:9b:ab:e4:77:66:e4:a0:3e:f2:f3:6c:fa:17:74:
         f4:6c:a2:49:21:96:17:dc:62:d8:9d:aa:b5:69:08:f6:3d:c9:
         ee:ec:fa:2b:22:d1:7c:56:9d:ff:bf:1e:b1:0b:52:19:95:82:
         1c:4b:fb:a8:7f:05:59:8b:5f:d3:22:34:21:ee:73:46:d3:78:
         21:3e:fb:a3:41:81:f8:f0:66:d3:80:6b:98:61:54:4e:67:de:
         ae:7a:b2:ce:39:c3:51:07:53:27:67:dd:6d:a8:6c:d1:08:65:
         07:dd:a6:b2:9b:91:73:89:aa:a0:30:d7:ce:87:90:1b:11:0d:
         f5:c0:ec:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:23:44 2026 by rpki-client