This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/20B458667C96654F31165297EE6CD80ABD8757464D5127B0AE34AFAB8A4B5F8C/0/323830333a323832303a3a2f33322d3332203d3e20323635383035.roa
File:                     323830333a323832303a3a2f33322d3332203d3e20323635383035.roa (raw, json)
Hash identifier:          VN22s32YyA/liEp5ciidw8A+/Mh8gm3fF1OywdqPzFE=
Subject key identifier:   E6:E7:5F:9C:1F:4A:90:11:DF:E3:61:72:9B:78:6D:2B:3C:EE:D4:E7
Certificate issuer:       /CN=39DA2872E102D36A2456FA542BEBDF503603A4A9
Certificate serial:       0509471287CF5CEAC3128208DC639362CAA80B30
Authority key identifier: 39:DA:28:72:E1:02:D3:6A:24:56:FA:54:2B:EB:DF:50:36:03:A4:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39DA2872E102D36A2456FA542BEBDF503603A4A9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/20B458667C96654F31165297EE6CD80ABD8757464D5127B0AE34AFAB8A4B5F8C/0/323830333a323832303a3a2f33322d3332203d3e20323635383035.roa
Signing time:             Tue 06 Jan 2026 19:03:37 +0000
ROA not before:           Tue 06 Jan 2026 18:58:37 +0000
ROA not after:            Tue 05 Jan 2027 19:03:37 +0000
asID:                     265805
IP address blocks:        2803:2820::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/20B458667C96654F31165297EE6CD80ABD8757464D5127B0AE34AFAB8A4B5F8C/0/39DA2872E102D36A2456FA542BEBDF503603A4A9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/20B458667C96654F31165297EE6CD80ABD8757464D5127B0AE34AFAB8A4B5F8C/0/39DA2872E102D36A2456FA542BEBDF503603A4A9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39DA2872E102D36A2456FA542BEBDF503603A4A9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 13:11:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:09:47:12:87:cf:5c:ea:c3:12:82:08:dc:63:93:62:ca:a8:0b:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39DA2872E102D36A2456FA542BEBDF503603A4A9
        Validity
            Not Before: Jan  6 18:58:37 2026 GMT
            Not After : Jan  5 19:03:37 2027 GMT
        Subject: CN=E6E75F9C1F4A9011DFE361729B786D2B3CEED4E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:58:23:d8:ce:ad:66:85:10:0f:d7:3e:bc:46:
                    c1:02:03:19:bd:06:ed:98:55:73:fd:07:bb:53:63:
                    46:48:cd:48:97:f2:5d:2e:a9:4d:a5:3f:1d:08:50:
                    c8:62:98:9d:c0:df:44:0a:8c:06:94:1b:76:b0:16:
                    a7:5b:78:c8:93:ae:ae:20:8c:86:f6:0c:87:33:b6:
                    10:a5:a3:53:03:80:b7:be:a8:75:85:92:83:2f:a8:
                    70:f6:01:78:70:54:50:9b:59:d6:45:6a:c3:8a:9a:
                    f5:43:1f:08:a8:1f:61:1d:67:d4:5c:cb:cb:a7:87:
                    dd:dc:0e:63:ac:94:da:65:9c:43:2d:5a:19:a8:37:
                    cc:c1:37:8b:1b:f4:ea:1e:1a:94:ba:4d:3b:0c:25:
                    96:4c:ca:2f:8d:b3:c6:90:2f:bb:c9:a3:eb:15:3e:
                    cf:8e:8d:27:6e:88:4b:f4:e6:1e:00:35:9c:b2:f1:
                    54:d6:ce:85:03:4e:9e:ba:7b:ce:a6:84:f3:7b:00:
                    65:16:62:b8:6f:9d:8b:c1:1e:c7:18:bb:9e:2d:69:
                    1d:e2:68:b9:4f:f5:21:f0:4e:f3:b3:ec:c1:fd:e9:
                    8f:b0:e3:c7:8b:78:be:40:10:1a:0b:53:bf:2b:61:
                    a6:92:f5:24:d1:92:cd:ca:b2:1a:5a:51:c4:e9:62:
                    7d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E7:5F:9C:1F:4A:90:11:DF:E3:61:72:9B:78:6D:2B:3C:EE:D4:E7
            X509v3 Authority Key Identifier:
                keyid:39:DA:28:72:E1:02:D3:6A:24:56:FA:54:2B:EB:DF:50:36:03:A4:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/20B458667C96654F31165297EE6CD80ABD8757464D5127B0AE34AFAB8A4B5F8C/0/39DA2872E102D36A2456FA542BEBDF503603A4A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39DA2872E102D36A2456FA542BEBDF503603A4A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/20B458667C96654F31165297EE6CD80ABD8757464D5127B0AE34AFAB8A4B5F8C/0/323830333a323832303a3a2f33322d3332203d3e20323635383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2820::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:20:fe:b0:3c:fd:d5:91:36:15:06:e5:b6:54:33:0e:d6:13:
         b7:86:06:e5:c7:7d:71:a8:6d:25:b3:0b:70:94:f6:71:d3:bc:
         57:d3:8f:41:59:49:23:4f:6c:ea:ad:66:7b:a4:ef:6b:98:c8:
         36:3f:e6:f3:95:70:ed:54:15:a2:90:b0:c4:57:e7:13:4c:e0:
         4d:c4:7c:67:2e:15:6a:1c:9b:0f:5d:34:cd:fa:0b:d5:17:2e:
         10:3d:05:bf:18:ff:56:a9:47:d8:dd:b9:12:57:25:df:20:65:
         3c:06:e7:12:69:f3:cc:51:0b:d9:53:d6:47:3a:eb:e5:84:c1:
         82:fc:ea:47:86:15:d8:02:57:6e:26:88:ed:4f:e0:99:c7:b2:
         3d:b9:b4:9f:7e:4c:df:2a:3f:c5:5a:92:e1:54:bc:e8:f9:bc:
         b9:97:76:8b:7a:d5:ca:f7:f4:46:11:38:7b:8b:6b:4b:b4:b1:
         c6:c9:be:c6:78:f7:66:37:0e:b8:56:c7:02:fa:e0:54:ff:91:
         c0:15:3d:c0:6b:97:9d:e0:37:e7:0d:44:dd:be:90:14:c4:21:
         66:55:59:1c:11:a4:f9:72:04:78:59:91:1b:5b:16:39:24:af:
         3a:66:5b:28:12:6c:e8:89:96:6e:4b:51:27:fe:dc:5b:1f:2f:
         3e:63:30:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:19:01 2026 by rpki-client