This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A3CA72BDD4EE0A8063F5E760AC11D5F39CF8BC92BCA9661668EF51697F21EC6/0/323830333a333531303a3a2f33322d3332203d3e20323732303331.roa
File:                     323830333a333531303a3a2f33322d3332203d3e20323732303331.roa (raw, json)
Hash identifier:          KqU34MtlINqg0HTWkQ21RssOYZ60+89Ez9lS+fK1Wzk=
Subject key identifier:   65:D7:37:BB:9B:5B:DB:D6:39:BA:B5:A1:98:F1:DD:34:70:9F:6D:7C
Certificate issuer:       /CN=1E0307467F6E7691E7E576722E5D0EE6A42EDB86
Certificate serial:       63A012A6EEF017E721AB2F57CB587623C7F278EB
Authority key identifier: 1E:03:07:46:7F:6E:76:91:E7:E5:76:72:2E:5D:0E:E6:A4:2E:DB:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E0307467F6E7691E7E576722E5D0EE6A42EDB86.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A3CA72BDD4EE0A8063F5E760AC11D5F39CF8BC92BCA9661668EF51697F21EC6/0/323830333a333531303a3a2f33322d3332203d3e20323732303331.roa
Signing time:             Tue 06 Jan 2026 18:59:40 +0000
ROA not before:           Tue 06 Jan 2026 18:54:40 +0000
ROA not after:            Tue 05 Jan 2027 18:59:40 +0000
asID:                     272031
IP address blocks:        2803:3510::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A3CA72BDD4EE0A8063F5E760AC11D5F39CF8BC92BCA9661668EF51697F21EC6/0/1E0307467F6E7691E7E576722E5D0EE6A42EDB86.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A3CA72BDD4EE0A8063F5E760AC11D5F39CF8BC92BCA9661668EF51697F21EC6/0/1E0307467F6E7691E7E576722E5D0EE6A42EDB86.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E0307467F6E7691E7E576722E5D0EE6A42EDB86.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 06:08:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:a0:12:a6:ee:f0:17:e7:21:ab:2f:57:cb:58:76:23:c7:f2:78:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E0307467F6E7691E7E576722E5D0EE6A42EDB86
        Validity
            Not Before: Jan  6 18:54:40 2026 GMT
            Not After : Jan  5 18:59:40 2027 GMT
        Subject: CN=65D737BB9B5BDBD639BAB5A198F1DD34709F6D7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:69:c0:f1:f0:8e:46:af:9f:e0:d2:a2:99:0a:
                    a5:ac:50:70:61:f7:e0:13:8f:bb:31:07:01:81:cc:
                    6b:de:40:b4:f4:a9:62:4b:0d:7b:ac:c1:72:35:ea:
                    7f:ef:75:a1:56:03:c7:56:1c:65:66:d9:90:39:91:
                    2c:d7:38:14:a2:d5:59:ce:3a:54:dc:b4:52:8b:b9:
                    1d:85:5c:cd:d5:90:8d:43:ec:26:f8:5e:10:7f:f9:
                    2b:d7:ff:41:e6:4e:f8:43:16:d3:b9:f5:e8:d3:7f:
                    a8:17:42:b1:d7:bb:c2:71:90:71:a8:8d:52:d6:5c:
                    18:53:4c:14:45:a7:13:79:a1:76:72:16:97:70:48:
                    d1:3c:74:ca:a0:ed:40:a1:8c:16:69:89:cc:c4:ec:
                    0f:85:19:4a:7b:43:95:5f:f5:f6:87:cf:9a:c3:96:
                    dc:87:8e:29:df:d4:10:f2:47:0d:51:76:1a:e4:2b:
                    ea:7f:55:14:cd:ef:f4:89:dd:44:b5:f5:d0:90:7c:
                    7e:7f:7f:bf:09:be:f7:05:5d:56:cc:8d:4b:c7:2d:
                    05:0a:da:02:7c:64:c6:af:3b:39:0b:78:23:b3:44:
                    0c:ab:d5:6c:57:8e:70:42:86:e9:41:73:d1:1b:a9:
                    33:93:9a:93:33:8b:9b:d3:a7:ba:78:74:f5:22:3f:
                    fc:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D7:37:BB:9B:5B:DB:D6:39:BA:B5:A1:98:F1:DD:34:70:9F:6D:7C
            X509v3 Authority Key Identifier:
                keyid:1E:03:07:46:7F:6E:76:91:E7:E5:76:72:2E:5D:0E:E6:A4:2E:DB:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A3CA72BDD4EE0A8063F5E760AC11D5F39CF8BC92BCA9661668EF51697F21EC6/0/1E0307467F6E7691E7E576722E5D0EE6A42EDB86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E0307467F6E7691E7E576722E5D0EE6A42EDB86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A3CA72BDD4EE0A8063F5E760AC11D5F39CF8BC92BCA9661668EF51697F21EC6/0/323830333a333531303a3a2f33322d3332203d3e20323732303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3510::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:ae:f0:1e:7a:19:11:00:b4:09:d8:5d:7c:e9:b1:a7:0d:74:
         81:85:be:3c:c4:b3:d8:03:bb:7b:90:5d:96:68:74:3a:e1:b2:
         9e:25:d5:03:f7:6b:a8:17:6f:df:14:41:a3:7e:95:93:83:91:
         81:02:aa:d8:c7:3a:d1:d4:f6:0a:e8:2c:0e:db:34:a1:08:fa:
         ed:82:98:21:a9:18:08:0d:44:ed:4d:36:cc:29:25:0c:0b:b9:
         8e:fa:f4:8f:f8:6d:1f:2c:e5:98:db:d9:97:d3:ad:3b:8f:3e:
         0c:c5:57:dd:e1:e4:f0:18:b5:52:ac:7e:64:0e:b8:44:b5:f1:
         0f:4b:8e:3e:7f:5b:67:ae:98:73:e6:a8:5a:3f:85:62:0f:65:
         cc:ab:c3:23:01:62:16:e6:c3:04:08:92:d9:4b:00:02:0d:e2:
         42:71:29:88:8e:d8:f4:43:f7:12:98:d3:5d:c7:42:a9:81:88:
         72:44:f7:e1:d5:7e:ee:b5:ce:dd:e5:0b:05:02:a0:47:1c:9a:
         40:2a:68:a0:c9:92:1f:86:9c:06:78:2f:42:bd:0b:c1:1e:5d:
         45:d2:52:03:3f:b4:1a:37:2d:1b:73:6b:d7:6c:c8:7b:8a:ac:
         18:66:a8:6a:3f:56:c0:bf:72:ed:07:c7:3b:ad:15:11:1e:f8:
         ca:dd:c7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:04:28 2026 by rpki-client