This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2282C367EFEFA81C8C55562DE5C980FC0ECDDD4316C837D63AA5BA7498A5B9F5/0/323830333a6464303a3a2f33322d3438203d3e20323636383830.roa
File:                     323830333a6464303a3a2f33322d3438203d3e20323636383830.roa (raw, json)
Hash identifier:          8ydoqfD69nJtrbr2vc11ptcf56DdFxHD7ZaKwR3pCKQ=
Subject key identifier:   C0:40:61:3F:49:6E:10:C7:6C:FD:08:B6:99:C8:3D:7C:B8:80:9C:9B
Certificate issuer:       /CN=1C16C74806E76A43254B7956DCD705E7D260C85E
Certificate serial:       02B23AFDC91220D901A2DE7DCD89CB65EF5FCD73
Authority key identifier: 1C:16:C7:48:06:E7:6A:43:25:4B:79:56:DC:D7:05:E7:D2:60:C8:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C16C74806E76A43254B7956DCD705E7D260C85E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2282C367EFEFA81C8C55562DE5C980FC0ECDDD4316C837D63AA5BA7498A5B9F5/0/323830333a6464303a3a2f33322d3438203d3e20323636383830.roa
Signing time:             Fri 23 Jan 2026 21:15:00 +0000
ROA not before:           Fri 23 Jan 2026 21:10:00 +0000
ROA not after:            Fri 22 Jan 2027 21:15:00 +0000
asID:                     266880
IP address blocks:        2803:dd0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2282C367EFEFA81C8C55562DE5C980FC0ECDDD4316C837D63AA5BA7498A5B9F5/0/1C16C74806E76A43254B7956DCD705E7D260C85E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2282C367EFEFA81C8C55562DE5C980FC0ECDDD4316C837D63AA5BA7498A5B9F5/0/1C16C74806E76A43254B7956DCD705E7D260C85E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C16C74806E76A43254B7956DCD705E7D260C85E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:b2:3a:fd:c9:12:20:d9:01:a2:de:7d:cd:89:cb:65:ef:5f:cd:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C16C74806E76A43254B7956DCD705E7D260C85E
        Validity
            Not Before: Jan 23 21:10:00 2026 GMT
            Not After : Jan 22 21:15:00 2027 GMT
        Subject: CN=C040613F496E10C76CFD08B699C83D7CB8809C9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9b:3c:29:15:64:22:c2:a7:64:58:dc:65:c3:
                    8d:bc:b1:ee:4a:aa:51:5a:71:1a:28:10:b8:d7:65:
                    bc:04:d0:90:aa:95:67:bc:90:47:99:42:0c:73:bc:
                    bd:38:42:ac:5a:9e:cc:66:b4:2b:1f:72:bb:43:e4:
                    09:9a:ce:7b:14:86:0c:70:7d:f3:fb:7b:10:5a:78:
                    6e:57:e2:4d:98:c0:1b:b4:94:f2:fd:14:b5:34:2b:
                    e3:3a:06:d6:54:b3:9d:aa:c2:0a:1c:35:c8:bb:0a:
                    38:07:56:9b:a0:34:9f:75:30:9a:2e:e3:d7:76:d1:
                    34:8d:85:bd:59:9e:99:5f:a3:3d:2c:91:78:2b:a9:
                    b9:fa:52:6d:dc:d7:20:0b:0f:12:79:49:51:89:9e:
                    11:76:c2:a7:fb:4a:95:db:05:61:48:51:e5:17:19:
                    4d:9b:b4:29:c1:d3:cc:6c:b8:a0:35:52:e0:93:46:
                    a4:cb:93:a8:c8:e0:8c:13:bd:75:93:19:88:0d:e3:
                    53:6a:68:7e:71:fd:7e:e2:9d:39:4a:d5:4c:21:19:
                    bb:f2:f5:d3:3c:25:77:6b:f6:25:9d:fc:b3:36:7a:
                    b0:d8:06:bf:4d:84:94:39:22:9e:c2:86:45:95:e7:
                    d9:ec:57:1e:16:c8:29:ed:a7:2b:d8:d4:15:c4:0c:
                    b2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:40:61:3F:49:6E:10:C7:6C:FD:08:B6:99:C8:3D:7C:B8:80:9C:9B
            X509v3 Authority Key Identifier:
                keyid:1C:16:C7:48:06:E7:6A:43:25:4B:79:56:DC:D7:05:E7:D2:60:C8:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2282C367EFEFA81C8C55562DE5C980FC0ECDDD4316C837D63AA5BA7498A5B9F5/0/1C16C74806E76A43254B7956DCD705E7D260C85E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C16C74806E76A43254B7956DCD705E7D260C85E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2282C367EFEFA81C8C55562DE5C980FC0ECDDD4316C837D63AA5BA7498A5B9F5/0/323830333a6464303a3a2f33322d3438203d3e20323636383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:0f:43:80:d1:88:e4:a5:4e:44:fe:04:95:90:ed:da:75:a9:
         a6:b1:25:75:55:ae:95:64:cb:4e:58:d8:80:c4:8b:57:2f:22:
         75:a4:3a:f2:8a:93:95:9c:89:d2:bb:09:1d:81:2a:68:7d:95:
         b2:de:b1:79:7b:b8:21:fb:18:5e:28:0c:4f:d6:89:68:01:2c:
         04:7f:f7:76:3e:ca:77:c9:91:1c:fe:7c:bb:ff:91:5f:28:cd:
         a4:65:ea:16:9f:15:db:30:06:c9:64:fa:0a:af:07:37:ff:29:
         5f:80:33:a9:45:4c:92:8a:64:03:00:a4:5b:7e:2b:e0:f7:82:
         e7:e2:22:ec:5b:26:24:9b:eb:89:95:3d:bb:2e:02:09:5f:dc:
         3b:45:ea:eb:c5:9f:eb:b9:e9:c6:4f:fc:52:35:93:dc:0f:7b:
         2a:ef:80:ad:b8:00:85:f8:19:3f:58:c8:78:d5:bf:d4:53:f4:
         53:40:87:86:f4:96:be:7a:40:bd:50:76:d2:19:2f:e4:15:05:
         1b:9f:fd:2a:66:8d:37:67:b2:b4:00:d5:1f:f5:6b:55:f5:d1:
         fe:bc:df:16:9d:43:ac:de:c1:ff:35:55:62:9a:e8:6a:0d:d8:
         3c:5b:e7:0e:9e:01:2d:07:17:f0:eb:90:93:31:83:98:d2:86:
         33:8c:b5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:25:14 2026 by rpki-client