This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/323830333a323530303a3a2f33322d3332203d3e20323632323533.roa
File:                     323830333a323530303a3a2f33322d3332203d3e20323632323533.roa (raw, json)
Hash identifier:          FaLYznpvfGwKsOnz1DlCBnbj+FvurHXa6FdvNpTWMR8=
Subject key identifier:   89:52:21:DB:27:D0:C8:1A:52:26:F6:EC:F9:62:1B:0A:13:EA:C3:DC
Certificate issuer:       /CN=072F0118796B0975DCD1B820B34352373FC08F65
Certificate serial:       77DF7F68D06F6A97148F7DA81EC619F31E28F2F0
Authority key identifier: 07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/323830333a323530303a3a2f33322d3332203d3e20323632323533.roa
Signing time:             Tue 06 Jan 2026 19:42:12 +0000
ROA not before:           Tue 06 Jan 2026 19:37:12 +0000
ROA not after:            Tue 05 Jan 2027 19:42:12 +0000
asID:                     262253
IP address blocks:        2803:2500::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.crl
                          rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 13:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:df:7f:68:d0:6f:6a:97:14:8f:7d:a8:1e:c6:19:f3:1e:28:f2:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=072F0118796B0975DCD1B820B34352373FC08F65
        Validity
            Not Before: Jan  6 19:37:12 2026 GMT
            Not After : Jan  5 19:42:12 2027 GMT
        Subject: CN=895221DB27D0C81A5226F6ECF9621B0A13EAC3DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:72:0a:93:f9:f2:46:69:80:72:ad:45:5a:d2:
                    af:86:6d:78:81:bb:87:c7:50:fc:27:04:23:a1:34:
                    35:df:b1:fe:13:c7:6b:69:76:f5:0d:70:ad:22:86:
                    69:7b:97:7c:7b:1a:7f:8b:d2:c0:6b:c1:ad:be:9c:
                    8a:96:d0:8b:22:6d:c9:d5:aa:f2:ae:15:b3:4f:a7:
                    68:01:84:93:36:cb:8d:14:07:4b:87:73:fe:6d:22:
                    7e:48:f2:f5:4f:90:ab:38:16:06:2f:c6:1d:4f:7b:
                    22:cc:29:42:de:64:e5:39:2f:0b:38:9e:f9:8d:02:
                    43:03:f4:bb:e3:35:2f:01:e6:8b:52:d5:45:bb:cf:
                    db:25:f8:40:08:c7:f0:ec:9d:d6:59:a2:23:39:af:
                    10:bd:d8:e0:ef:f9:ff:b0:c4:7b:02:c0:bd:8f:2a:
                    f7:35:a5:0a:89:83:d8:f4:23:29:01:90:c6:d1:96:
                    7b:56:28:63:e8:d5:25:52:5f:47:88:7b:97:91:f2:
                    ba:a0:a5:3e:37:e3:df:b8:6c:d5:c2:fe:34:d8:ce:
                    55:ab:f6:cc:ee:eb:a6:4c:76:22:a1:f8:aa:f7:cf:
                    9d:c0:60:cc:60:1e:86:cd:6e:a3:fa:e4:16:02:5f:
                    e8:74:24:48:2c:32:ee:d4:09:91:bc:7f:78:16:b9:
                    8f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:52:21:DB:27:D0:C8:1A:52:26:F6:EC:F9:62:1B:0A:13:EA:C3:DC
            X509v3 Authority Key Identifier:
                keyid:07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/323830333a323530303a3a2f33322d3332203d3e20323632323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2500::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:63:58:07:01:11:de:ee:9e:18:60:f9:2d:d6:1d:6f:79:d0:
         98:7b:be:0d:c8:b4:0f:7f:62:3b:04:b4:f2:37:0e:ef:70:e2:
         70:99:c8:2c:65:9e:ea:e6:e5:ef:fd:07:9a:38:dd:04:b2:3c:
         d6:64:e6:51:fa:c4:7f:7d:75:cb:f2:f0:1c:55:42:8d:0b:7b:
         cb:93:ea:93:2b:ef:ad:09:f6:65:9c:ad:b4:43:47:56:bc:5e:
         0c:75:b8:9e:18:c8:3b:49:b7:9a:04:b3:5a:3c:92:e1:cb:94:
         e8:f9:ea:01:91:28:58:36:56:3e:c7:1f:c6:ef:04:bf:37:fd:
         22:68:33:db:5d:51:7f:3c:fd:c5:42:05:6f:05:e5:c2:30:72:
         9c:a5:a8:99:33:ea:72:7d:08:2d:9a:6c:14:8d:1d:4c:4e:27:
         77:cd:87:85:ad:db:03:fd:9e:9f:d7:25:e9:29:aa:f9:69:22:
         77:30:11:57:87:f9:f6:8c:5c:a0:7b:62:9b:9b:5d:f1:a2:17:
         6b:35:f5:10:1e:15:90:1c:96:9a:0b:a3:42:ce:1e:34:dd:c7:
         31:9e:2e:14:d6:2d:01:ff:54:07:cd:a1:13:89:75:bd:b4:0b:
         90:06:f2:bd:9c:37:84:06:3b:d1:f1:a6:78:4e:7b:39:40:9b:
         e6:d3:48:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:38:58 2026 by rpki-client