This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/133EF50A79B0938E55BA32D12DE23B91A1D2C72F227F4248346FD02785C24A87/0/323830333a613065303a3a2f33322d3332203d3e20323639393131.roa
File:                     323830333a613065303a3a2f33322d3332203d3e20323639393131.roa (raw, json)
Hash identifier:          qUDW8Kiz2f2nSd7SPMQL8zCwDwGlLvBgSP8RYPL5cw0=
Subject key identifier:   CA:65:1E:EC:B2:37:F4:3C:05:BF:27:73:00:50:44:6E:3B:8F:55:46
Certificate issuer:       /CN=9C3198E65C783AF99D6A743D993E0C3770B76EE2
Certificate serial:       0E2EFC86080C1150F91BA2D475D60B490E1E4979
Authority key identifier: 9C:31:98:E6:5C:78:3A:F9:9D:6A:74:3D:99:3E:0C:37:70:B7:6E:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/133EF50A79B0938E55BA32D12DE23B91A1D2C72F227F4248346FD02785C24A87/0/323830333a613065303a3a2f33322d3332203d3e20323639393131.roa
Signing time:             Tue 06 Jan 2026 20:48:50 +0000
ROA not before:           Tue 06 Jan 2026 20:43:50 +0000
ROA not after:            Tue 05 Jan 2027 20:48:50 +0000
asID:                     269911
IP address blocks:        2803:a0e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/133EF50A79B0938E55BA32D12DE23B91A1D2C72F227F4248346FD02785C24A87/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/133EF50A79B0938E55BA32D12DE23B91A1D2C72F227F4248346FD02785C24A87/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 23:35:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:2e:fc:86:08:0c:11:50:f9:1b:a2:d4:75:d6:0b:49:0e:1e:49:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C3198E65C783AF99D6A743D993E0C3770B76EE2
        Validity
            Not Before: Jan  6 20:43:50 2026 GMT
            Not After : Jan  5 20:48:50 2027 GMT
        Subject: CN=CA651EECB237F43C05BF27730050446E3B8F5546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:18:7e:f8:1f:c3:f2:9c:25:8f:c5:3e:3e:94:
                    3a:91:c9:25:2e:7a:f3:ad:74:60:5a:1e:97:be:9d:
                    d1:52:d3:7e:c7:f6:67:89:ac:48:95:ab:4d:05:3d:
                    1e:aa:f8:80:59:03:92:f6:f4:fd:5d:2e:07:21:9b:
                    b3:59:53:8c:64:d3:d1:6e:be:01:04:82:a4:3e:ff:
                    26:18:e9:21:ba:34:c0:2c:26:e6:6e:69:85:85:58:
                    a7:41:38:22:2b:0c:80:1a:fd:d6:1c:0c:0d:5e:de:
                    94:b4:1d:b8:52:82:c0:1e:d7:01:fd:d9:74:7a:a7:
                    23:10:8e:ab:63:31:2f:97:78:7f:22:0b:d9:cb:d2:
                    6c:b2:66:78:ae:c6:81:1c:46:d1:80:12:62:22:df:
                    67:8a:a2:1c:67:e1:16:6c:eb:00:b7:77:84:2d:9a:
                    7e:f8:44:85:38:0a:38:3e:55:71:a6:9f:96:85:b6:
                    f4:72:35:c3:a6:42:e5:32:5b:93:ed:23:1a:22:f5:
                    43:8c:4f:21:f0:3e:fb:41:97:fc:e4:4a:c5:e0:fd:
                    f3:56:f1:f3:b1:38:92:07:2e:cf:c2:69:0a:08:67:
                    11:b6:06:ac:23:1b:a8:4e:3c:ec:52:31:05:70:a6:
                    74:12:39:b7:49:a4:80:ed:bf:50:3c:54:c7:82:78:
                    3e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:65:1E:EC:B2:37:F4:3C:05:BF:27:73:00:50:44:6E:3B:8F:55:46
            X509v3 Authority Key Identifier:
                keyid:9C:31:98:E6:5C:78:3A:F9:9D:6A:74:3D:99:3E:0C:37:70:B7:6E:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/133EF50A79B0938E55BA32D12DE23B91A1D2C72F227F4248346FD02785C24A87/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/133EF50A79B0938E55BA32D12DE23B91A1D2C72F227F4248346FD02785C24A87/0/323830333a613065303a3a2f33322d3332203d3e20323639393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a0e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:82:81:55:05:23:cb:14:f8:a9:27:0a:cb:65:37:46:c3:23:
         bc:c3:45:6a:d0:f9:51:80:81:1f:49:60:fe:9d:85:73:a5:80:
         6c:71:e5:fa:a8:b2:84:39:0b:1d:cb:36:71:c6:c5:72:4b:a2:
         09:f0:77:61:d2:f6:b1:6e:7e:7f:d2:eb:d3:da:94:77:27:8d:
         b0:69:2b:af:84:bb:8c:6f:17:7b:ae:8d:85:74:9a:b5:74:20:
         80:d8:8e:70:db:e8:e1:11:ef:c4:d9:63:89:87:14:c9:4e:c5:
         5f:fe:db:65:49:7d:4f:9a:9f:ee:7b:de:0f:7e:80:2f:f1:fc:
         46:35:9d:3b:18:fb:94:09:07:87:30:36:d4:a8:63:1f:ea:f4:
         c0:36:84:1c:03:7c:f8:fb:45:24:44:82:6d:7b:00:dd:9a:d2:
         49:79:46:3e:43:be:b8:e0:87:bd:1d:95:ef:8d:b2:03:42:1b:
         4f:29:92:69:90:99:c1:65:da:c8:4c:2c:4b:70:49:59:62:7b:
         3c:8b:ef:ae:d9:5d:be:9c:52:e2:42:49:e8:9d:3c:c1:24:ce:
         19:dc:ac:83:5c:2d:19:21:7b:80:90:99:a1:33:4a:86:b9:5a:
         0e:93:6b:f0:93:51:7d:a9:ed:b7:02:40:ce:84:e2:5d:1b:da:
         07:43:17:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:30 2026 by rpki-client