This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/227886CFF65D2304A297AF8D4F48825F8663A0B0FD7054E01CF26D8D73147AFB/0/323830333a326539303a3a2f33322d3438203d3e20323732393134.roa
File:                     323830333a326539303a3a2f33322d3438203d3e20323732393134.roa (raw, json)
Hash identifier:          l0b6lZEWFmQe4SaJEGs3f/+qGmj+OshGrS1DGR2hSmQ=
Subject key identifier:   7D:6F:11:A0:DB:86:DF:07:73:C1:2B:2B:83:CD:D9:99:34:E2:2D:0D
Certificate issuer:       /CN=1D07C2B7CBC7C575F578D3D3BA24F03EA5DC051D
Certificate serial:       4DCB16EE58E234282B093A0BF7B0F5B712977AD2
Authority key identifier: 1D:07:C2:B7:CB:C7:C5:75:F5:78:D3:D3:BA:24:F0:3E:A5:DC:05:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D07C2B7CBC7C575F578D3D3BA24F03EA5DC051D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/227886CFF65D2304A297AF8D4F48825F8663A0B0FD7054E01CF26D8D73147AFB/0/323830333a326539303a3a2f33322d3438203d3e20323732393134.roa
Signing time:             Tue 06 Jan 2026 19:03:34 +0000
ROA not before:           Tue 06 Jan 2026 18:58:34 +0000
ROA not after:            Tue 05 Jan 2027 19:03:34 +0000
asID:                     272914
IP address blocks:        2803:2e90::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/227886CFF65D2304A297AF8D4F48825F8663A0B0FD7054E01CF26D8D73147AFB/0/1D07C2B7CBC7C575F578D3D3BA24F03EA5DC051D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/227886CFF65D2304A297AF8D4F48825F8663A0B0FD7054E01CF26D8D73147AFB/0/1D07C2B7CBC7C575F578D3D3BA24F03EA5DC051D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D07C2B7CBC7C575F578D3D3BA24F03EA5DC051D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:cb:16:ee:58:e2:34:28:2b:09:3a:0b:f7:b0:f5:b7:12:97:7a:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D07C2B7CBC7C575F578D3D3BA24F03EA5DC051D
        Validity
            Not Before: Jan  6 18:58:34 2026 GMT
            Not After : Jan  5 19:03:34 2027 GMT
        Subject: CN=7D6F11A0DB86DF0773C12B2B83CDD99934E22D0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8d:bb:91:da:53:3c:c5:fa:2d:43:e4:0b:7b:
                    82:6b:eb:f1:8b:44:ec:50:58:28:3c:cc:2a:53:98:
                    30:d6:3a:9d:78:53:b9:cc:6f:b9:50:c4:48:0f:1a:
                    e2:78:37:50:e8:74:65:d1:32:a9:60:f2:18:d0:89:
                    50:4b:b5:1c:a8:14:cf:69:f6:e2:ce:31:31:00:27:
                    8d:2b:cc:cd:ef:da:08:4e:28:ac:8a:ed:43:ad:c7:
                    f8:9a:86:f8:cc:9e:51:d5:c3:57:28:84:40:99:a8:
                    eb:be:a7:08:2c:85:39:26:82:48:07:f9:fe:f2:0e:
                    33:0c:fe:4f:93:91:9d:d8:0b:32:29:2a:8f:de:79:
                    19:31:37:2f:ef:8d:7a:5e:8f:61:34:30:97:5b:9a:
                    72:45:f9:d2:3e:09:87:df:c9:11:c8:22:8c:62:f4:
                    b5:2e:a3:ef:93:a4:eb:74:cd:14:45:92:26:31:e5:
                    97:05:a1:01:b1:cc:d3:05:a0:76:78:ac:69:be:8d:
                    78:14:0d:dd:a7:18:56:be:ae:ec:b9:af:18:dc:ba:
                    5f:c8:28:cc:c6:bd:a5:65:bd:69:db:48:9d:17:40:
                    80:53:fa:02:91:37:b0:7e:c8:d0:ab:94:ed:d2:f7:
                    4e:45:34:51:d8:ff:d3:7e:07:ed:1c:3f:0b:2d:5e:
                    38:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:6F:11:A0:DB:86:DF:07:73:C1:2B:2B:83:CD:D9:99:34:E2:2D:0D
            X509v3 Authority Key Identifier:
                keyid:1D:07:C2:B7:CB:C7:C5:75:F5:78:D3:D3:BA:24:F0:3E:A5:DC:05:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/227886CFF65D2304A297AF8D4F48825F8663A0B0FD7054E01CF26D8D73147AFB/0/1D07C2B7CBC7C575F578D3D3BA24F03EA5DC051D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D07C2B7CBC7C575F578D3D3BA24F03EA5DC051D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/227886CFF65D2304A297AF8D4F48825F8663A0B0FD7054E01CF26D8D73147AFB/0/323830333a326539303a3a2f33322d3438203d3e20323732393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2e90::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:b1:ad:5a:be:d9:02:38:e0:01:a1:f1:ce:41:30:9c:8a:75:
         13:c3:c8:78:46:d6:02:2c:01:66:ca:1b:06:14:1b:d6:fc:d5:
         38:2e:e7:80:5b:a8:cd:4b:1f:bd:10:da:f2:38:8b:12:91:a2:
         d7:7a:ea:75:0d:bc:c2:60:c1:1f:24:0b:99:09:04:a8:37:e5:
         82:0d:54:29:70:55:92:e1:96:40:f2:11:4e:fb:c5:9a:70:2d:
         10:62:e1:44:f3:2a:d9:4b:3d:f2:40:33:eb:72:25:73:8e:07:
         03:d4:fc:a2:f6:5e:c8:62:a6:65:a2:74:07:2c:d3:d4:a8:35:
         3d:61:dd:a7:9c:30:0e:6e:0f:4c:93:15:1a:8a:8d:3d:31:95:
         bb:b1:c8:3b:19:12:30:1d:0d:9b:0b:63:9e:ef:9c:99:82:69:
         e1:a6:c8:b3:7f:e0:d0:60:2d:b9:dd:50:b9:04:4b:80:ce:f0:
         fd:be:20:44:c5:91:f1:69:f1:c5:35:54:ba:a6:6f:28:08:c1:
         95:d4:14:35:af:8d:80:f7:91:e3:ec:be:81:86:fa:b1:11:cb:
         1b:f5:59:d4:2f:3a:7e:73:01:71:ad:79:bb:61:8a:a8:a8:f3:
         88:9f:85:7a:42:69:83:48:b6:13:b7:ca:8c:e9:28:45:0e:79:
         2b:16:f4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:27:11 2026 by rpki-client