This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/323830333a633030303a3a2f33362d3336203d3e20323634363238.roa
File:                     323830333a633030303a3a2f33362d3336203d3e20323634363238.roa (raw, json)
Hash identifier:          vVNJ5jEpJMRWK8yN4I5ok9IzJ2fXpCi1ddklSa0BGvQ=
Subject key identifier:   F7:23:00:BD:BE:CC:CE:DB:DE:38:FD:77:44:F3:6F:33:46:76:51:7D
Certificate issuer:       /CN=597B422C63F4E901AB522655E1EDFD64C35BD133
Certificate serial:       7C430C4442E033A7AF13F2DE4F6627FE0B1333C4
Authority key identifier: 59:7B:42:2C:63:F4:E9:01:AB:52:26:55:E1:ED:FD:64:C3:5B:D1:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/597B422C63F4E901AB522655E1EDFD64C35BD133.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/323830333a633030303a3a2f33362d3336203d3e20323634363238.roa
Signing time:             Wed 07 Jan 2026 20:45:01 +0000
ROA not before:           Wed 07 Jan 2026 20:40:01 +0000
ROA not after:            Wed 06 Jan 2027 20:45:01 +0000
asID:                     264628
IP address blocks:        2803:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/597B422C63F4E901AB522655E1EDFD64C35BD133.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/597B422C63F4E901AB522655E1EDFD64C35BD133.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/597B422C63F4E901AB522655E1EDFD64C35BD133.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:43:0c:44:42:e0:33:a7:af:13:f2:de:4f:66:27:fe:0b:13:33:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=597B422C63F4E901AB522655E1EDFD64C35BD133
        Validity
            Not Before: Jan  7 20:40:01 2026 GMT
            Not After : Jan  6 20:45:01 2027 GMT
        Subject: CN=F72300BDBECCCEDBDE38FD7744F36F334676517D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:51:1e:04:30:4f:71:e9:05:e5:f3:5c:27:fc:
                    b1:07:e0:ee:e4:74:fa:7d:f7:a3:c2:e2:e0:25:bf:
                    dc:1c:37:0f:65:b9:a3:39:b1:8b:07:84:f5:be:d2:
                    41:4d:0e:67:44:2c:d2:d7:cd:5b:ba:c2:cc:17:b8:
                    3c:79:2d:e9:b4:80:40:f5:a1:aa:be:f0:6a:f5:04:
                    c5:23:50:12:6e:69:da:7f:20:28:2e:19:31:85:2b:
                    ec:35:58:e0:9f:a8:7d:c3:c7:bd:34:8d:ff:b5:c2:
                    54:63:27:9f:20:70:0c:36:04:d8:86:56:d0:11:01:
                    5c:a0:fd:49:9b:b8:b3:76:00:4b:b5:69:46:6b:cc:
                    66:35:01:6b:b9:76:d2:30:0f:f4:0f:d3:4c:04:79:
                    73:10:8e:07:4c:d7:ba:a5:f7:6a:91:c4:68:b0:c8:
                    1b:ea:92:43:f5:12:70:bc:35:e6:89:3f:f8:19:bd:
                    bf:9f:28:2d:35:34:b8:19:79:9d:49:8a:1e:4c:cd:
                    79:74:9c:e8:67:a3:c2:61:d4:35:5c:8d:f1:3c:19:
                    f7:d4:15:19:dc:0e:c9:a9:d0:1f:5a:7f:41:41:c3:
                    5f:3e:ee:1c:93:5c:90:9b:87:aa:3f:a4:17:9c:0e:
                    8f:c9:47:45:1f:cf:a9:49:aa:dc:e7:d5:56:ab:0b:
                    be:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:23:00:BD:BE:CC:CE:DB:DE:38:FD:77:44:F3:6F:33:46:76:51:7D
            X509v3 Authority Key Identifier:
                keyid:59:7B:42:2C:63:F4:E9:01:AB:52:26:55:E1:ED:FD:64:C3:5B:D1:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/597B422C63F4E901AB522655E1EDFD64C35BD133.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/597B422C63F4E901AB522655E1EDFD64C35BD133.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/323830333a633030303a3a2f33362d3336203d3e20323634363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         24:5a:46:eb:aa:a3:8d:3c:33:4f:2c:a4:4f:74:88:6f:4b:03:
         5f:a0:e1:13:8d:72:27:a8:86:0f:27:05:3a:fb:e4:c9:d8:e9:
         6c:5e:85:3a:06:cc:f9:dd:e5:91:f4:67:91:d6:c3:6d:3e:45:
         f0:df:c6:d4:38:1f:3a:b5:c2:6a:3c:3f:b6:4f:5c:58:a3:b6:
         1c:72:00:d9:0c:8d:d0:78:ec:ce:a7:2c:b9:fe:1b:fd:cb:6c:
         b7:54:58:ee:09:15:e3:8d:19:a6:0e:78:bc:7a:83:e1:f4:74:
         e3:8d:7b:ea:84:68:9d:67:1b:1d:d6:d9:33:55:11:2a:30:e1:
         d8:54:7e:33:20:b1:68:f7:d9:72:98:36:10:66:2f:50:ab:6c:
         16:1b:81:54:8d:72:36:21:51:cc:2a:08:71:4b:d1:ad:f2:1c:
         a9:da:26:d2:83:96:c2:ff:4c:75:69:a5:ac:c2:3e:7f:97:5a:
         9a:09:8c:fe:00:90:5e:bf:56:c3:6e:b7:ee:cb:ce:26:27:0a:
         6f:7f:7f:82:79:c9:ce:cf:14:86:5a:6d:9c:72:2b:05:7e:76:
         89:49:65:03:2e:88:9b:83:0a:b1:4c:49:da:09:5f:ee:e5:69:
         1d:a1:09:1d:e6:28:f8:5d:38:eb:04:d4:87:94:9c:69:f7:b5:
         41:df:6d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:39:31 2026 by rpki-client