This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/20A023019EFEC48095FC8C75CD025262617CC94968FD10E122A04D202BE278DD/0/323830333a633831303a3a2f33322d3438203d3e20323731383139.roa
File:                     323830333a633831303a3a2f33322d3438203d3e20323731383139.roa (raw, json)
Hash identifier:          WQHicXQGLZmq1zBbcUQ8o1lR66UmX64Z6Zh9yR3A+3c=
Subject key identifier:   DA:4B:0D:A0:AD:06:93:4E:A7:4B:10:EC:2C:4F:C6:72:FE:3A:DA:67
Certificate issuer:       /CN=FAC9712C43940D2929B9EEDA6877F9A57F9A271A
Certificate serial:       74FECC8613AADB6BD58EB2E1B9848928B437F9A5
Authority key identifier: FA:C9:71:2C:43:94:0D:29:29:B9:EE:DA:68:77:F9:A5:7F:9A:27:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAC9712C43940D2929B9EEDA6877F9A57F9A271A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/20A023019EFEC48095FC8C75CD025262617CC94968FD10E122A04D202BE278DD/0/323830333a633831303a3a2f33322d3438203d3e20323731383139.roa
Signing time:             Tue 06 Jan 2026 19:07:50 +0000
ROA not before:           Tue 06 Jan 2026 19:02:50 +0000
ROA not after:            Tue 05 Jan 2027 19:07:50 +0000
asID:                     271819
IP address blocks:        2803:c810::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/20A023019EFEC48095FC8C75CD025262617CC94968FD10E122A04D202BE278DD/0/FAC9712C43940D2929B9EEDA6877F9A57F9A271A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/20A023019EFEC48095FC8C75CD025262617CC94968FD10E122A04D202BE278DD/0/FAC9712C43940D2929B9EEDA6877F9A57F9A271A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAC9712C43940D2929B9EEDA6877F9A57F9A271A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:fe:cc:86:13:aa:db:6b:d5:8e:b2:e1:b9:84:89:28:b4:37:f9:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAC9712C43940D2929B9EEDA6877F9A57F9A271A
        Validity
            Not Before: Jan  6 19:02:50 2026 GMT
            Not After : Jan  5 19:07:50 2027 GMT
        Subject: CN=DA4B0DA0AD06934EA74B10EC2C4FC672FE3ADA67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4c:46:27:15:e5:9b:53:8e:47:1e:e1:aa:6f:
                    86:21:53:66:32:bb:2a:15:72:1c:b1:70:1d:99:13:
                    6b:ae:7b:e8:c6:5a:f2:70:f2:8d:ba:69:c6:a6:6a:
                    78:f6:79:9f:b5:f0:27:8d:24:6a:e4:55:cd:7b:ca:
                    9f:d9:43:3e:a0:81:27:4b:44:8a:79:c5:cc:05:41:
                    c3:35:b1:33:e8:e0:45:30:a8:91:be:d6:46:2e:25:
                    c1:8c:42:57:b7:52:5c:f9:b3:7b:08:0d:12:10:81:
                    53:01:25:4b:af:88:4d:df:7f:34:87:87:cd:55:d7:
                    5f:d1:ee:b7:c0:09:d3:9c:d2:d7:96:c5:6f:48:56:
                    4f:34:fb:38:02:21:25:c0:74:88:92:06:77:2f:59:
                    81:08:42:65:a6:7b:cf:ba:fd:fe:64:74:98:7b:df:
                    9a:ad:61:0d:c0:33:a7:1f:2d:aa:9b:f5:69:41:04:
                    70:f1:46:91:6d:cf:d7:80:72:ec:dd:b5:13:8b:6c:
                    67:8b:4b:97:0e:96:03:af:dc:d1:c7:51:2b:6d:0b:
                    90:7e:ad:d0:61:9d:77:f6:c6:02:e6:2e:fe:70:6a:
                    d7:f8:e4:c3:89:21:17:9b:e9:cc:d9:e7:52:bb:1f:
                    18:63:cc:f9:dc:f3:a1:9d:2b:4b:18:56:14:94:54:
                    a6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:4B:0D:A0:AD:06:93:4E:A7:4B:10:EC:2C:4F:C6:72:FE:3A:DA:67
            X509v3 Authority Key Identifier:
                keyid:FA:C9:71:2C:43:94:0D:29:29:B9:EE:DA:68:77:F9:A5:7F:9A:27:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/20A023019EFEC48095FC8C75CD025262617CC94968FD10E122A04D202BE278DD/0/FAC9712C43940D2929B9EEDA6877F9A57F9A271A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAC9712C43940D2929B9EEDA6877F9A57F9A271A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/20A023019EFEC48095FC8C75CD025262617CC94968FD10E122A04D202BE278DD/0/323830333a633831303a3a2f33322d3438203d3e20323731383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c810::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:a7:bb:73:da:11:db:6e:c8:9a:40:4b:04:fa:a4:17:c3:88:
         6f:ea:d3:eb:f1:af:df:19:87:3d:c5:fd:08:b5:4b:24:16:1f:
         1e:7b:f3:fc:7b:0b:de:e3:6e:6c:c5:d5:d0:4a:41:8b:f4:0a:
         a6:52:1d:06:88:3a:ad:0b:5b:fc:6c:ec:f3:07:eb:87:f7:d0:
         dd:1d:f3:fa:62:7e:fa:de:3a:36:92:bc:d1:d7:91:8c:7c:c2:
         37:5e:d2:09:f9:cd:29:23:40:d2:94:7b:7e:89:e0:29:30:4f:
         a2:f6:df:e2:3a:1e:30:e7:51:b0:10:8c:56:0c:9b:fb:2a:36:
         c7:db:30:68:99:2e:c3:5d:25:98:4d:e7:12:c5:53:5a:65:0f:
         c6:a7:8d:1c:c6:d5:1c:96:7e:42:c5:25:9d:d8:4e:b2:62:ab:
         37:bf:ad:75:80:0e:ee:da:22:c6:33:39:12:c0:f3:bc:a7:cf:
         e8:cc:b4:ea:e6:64:a1:d1:a9:fe:8e:1c:c1:8e:48:e2:06:26:
         6a:4d:65:6c:ee:fb:4e:cb:a6:a5:aa:f5:59:80:9f:b7:6d:04:
         df:38:cb:6f:80:8f:08:9d:0b:06:3d:09:a2:fa:d9:aa:f3:7b:
         e2:ef:ab:77:53:03:54:c6:0c:7a:f8:12:a9:da:ce:42:04:89:
         c9:20:3d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:15 2026 by rpki-client