This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1005151A74331E2681F5A411ED779F0C8D71174D4FD8D3E3A456FF0D37DB0840/0/323830333a653134303a3a2f33322d3434203d3e20323634363331.roa
File:                     323830333a653134303a3a2f33322d3434203d3e20323634363331.roa (raw, json)
Hash identifier:          VbCrQeFLdB1INnz1DMBFiMgvG6CcB6B0jFrNSL6JYUI=
Subject key identifier:   87:FF:41:A9:AC:E4:7B:BB:12:FF:5E:6D:39:75:D2:D4:95:E3:F0:50
Certificate issuer:       /CN=D2A79FA2B820F7AACC9CE0BE099F24A553130FD7
Certificate serial:       650B5B7678FDEB27FD3BB0D4C8CA40F2E98A2B79
Authority key identifier: D2:A7:9F:A2:B8:20:F7:AA:CC:9C:E0:BE:09:9F:24:A5:53:13:0F:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2A79FA2B820F7AACC9CE0BE099F24A553130FD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1005151A74331E2681F5A411ED779F0C8D71174D4FD8D3E3A456FF0D37DB0840/0/323830333a653134303a3a2f33322d3434203d3e20323634363331.roa
Signing time:             Tue 06 Jan 2026 20:49:55 +0000
ROA not before:           Tue 06 Jan 2026 20:44:55 +0000
ROA not after:            Tue 05 Jan 2027 20:49:55 +0000
asID:                     264631
IP address blocks:        2803:e140::/32 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1005151A74331E2681F5A411ED779F0C8D71174D4FD8D3E3A456FF0D37DB0840/0/D2A79FA2B820F7AACC9CE0BE099F24A553130FD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1005151A74331E2681F5A411ED779F0C8D71174D4FD8D3E3A456FF0D37DB0840/0/D2A79FA2B820F7AACC9CE0BE099F24A553130FD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2A79FA2B820F7AACC9CE0BE099F24A553130FD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:0b:5b:76:78:fd:eb:27:fd:3b:b0:d4:c8:ca:40:f2:e9:8a:2b:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2A79FA2B820F7AACC9CE0BE099F24A553130FD7
        Validity
            Not Before: Jan  6 20:44:55 2026 GMT
            Not After : Jan  5 20:49:55 2027 GMT
        Subject: CN=87FF41A9ACE47BBB12FF5E6D3975D2D495E3F050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:16:3a:5c:6d:87:fd:41:41:24:1c:e8:52:09:
                    93:19:ef:f2:09:35:d8:5f:35:2c:28:c0:86:57:ad:
                    02:69:b4:56:44:a3:aa:fb:d2:25:11:8a:52:59:53:
                    5c:f2:7d:83:e6:d9:08:04:0d:54:45:c2:52:cd:78:
                    e7:d9:c7:71:79:be:1e:08:01:96:98:bb:b5:35:20:
                    4d:14:c6:3f:96:79:1b:22:95:89:ab:2d:00:76:43:
                    bf:b9:84:6a:87:d5:91:d5:a9:dd:84:27:20:31:c0:
                    8c:ba:bc:36:3e:1f:0d:22:d5:f6:41:af:3f:96:59:
                    1f:c2:3f:d2:33:1b:fe:2f:1b:b2:94:da:6e:30:9e:
                    72:89:c4:f3:ff:f5:e2:1b:9c:08:ff:68:ff:a3:1c:
                    71:55:a3:e7:87:50:c9:8a:64:8e:17:e3:2c:51:3a:
                    ff:66:30:a3:6d:63:53:06:5b:3e:c4:f8:18:7c:93:
                    d5:a9:b5:3c:f5:69:e8:f4:a7:7f:dd:ef:8b:c0:ee:
                    a1:4f:b4:bd:50:0a:07:36:6c:e9:d0:73:6e:ec:72:
                    c8:be:3b:c8:bc:86:8a:82:c2:a2:8d:f1:7a:50:69:
                    1e:81:86:95:57:79:d9:cd:92:18:b2:7a:16:ae:3f:
                    42:3f:64:af:f6:21:85:a0:a5:f7:9a:65:49:f7:f0:
                    40:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:FF:41:A9:AC:E4:7B:BB:12:FF:5E:6D:39:75:D2:D4:95:E3:F0:50
            X509v3 Authority Key Identifier:
                keyid:D2:A7:9F:A2:B8:20:F7:AA:CC:9C:E0:BE:09:9F:24:A5:53:13:0F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1005151A74331E2681F5A411ED779F0C8D71174D4FD8D3E3A456FF0D37DB0840/0/D2A79FA2B820F7AACC9CE0BE099F24A553130FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2A79FA2B820F7AACC9CE0BE099F24A553130FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1005151A74331E2681F5A411ED779F0C8D71174D4FD8D3E3A456FF0D37DB0840/0/323830333a653134303a3a2f33322d3434203d3e20323634363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e140::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:ee:62:a7:3c:26:8b:09:46:c0:97:a0:d6:cd:ca:2c:0e:3d:
         a3:16:df:f9:92:ea:fd:04:0d:61:6e:a7:0f:1f:5e:b0:ea:a4:
         72:aa:6f:16:a0:9c:ac:86:9d:c4:b6:19:dd:6c:cb:61:4b:cc:
         a3:71:b7:74:c9:d8:1b:63:eb:f5:81:da:a4:a1:78:25:d0:8f:
         36:df:bb:93:39:e8:8a:a0:37:59:a6:a3:b9:5f:f3:83:ed:df:
         48:b7:8c:77:92:7a:10:a4:52:41:cb:79:5a:69:a1:28:4c:48:
         c3:ae:27:b7:75:0a:71:c8:d7:ce:02:fc:66:6d:ee:15:5c:21:
         18:68:eb:fa:95:8c:04:7b:c5:4c:fd:09:33:ff:56:a9:69:99:
         7a:a9:fc:05:f4:5f:8b:69:96:5a:49:26:54:80:be:40:35:39:
         88:de:28:85:ca:df:53:32:e7:d2:50:e2:0b:bd:4d:a7:50:20:
         05:20:08:82:8e:66:e4:9e:a2:31:96:65:56:8e:10:e3:69:a5:
         4c:cb:8a:22:0a:e8:7c:f5:fd:cf:8a:d5:d2:f8:ce:ae:06:43:
         4e:f7:09:7a:d6:7b:66:c0:7d:a2:28:b9:73:ab:15:f6:7c:07:
         14:cd:55:8f:23:37:db:42:dd:0e:86:cb:01:7c:e3:cf:f7:49:
         8d:b1:f3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:27:03 2026 by rpki-client