This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/26F39DEECE5B173BB21A1576AA750E85D0D8A21B3986D0699B1CBD543A7CFB38/0/323830333a396436303a3a2f33322d3332203d3e20323639373731.roa
File:                     323830333a396436303a3a2f33322d3332203d3e20323639373731.roa (raw, json)
Hash identifier:          ga7wGjxmIjacavc1Rm6V77EpP/v2fWl5e9e84HpkbQc=
Subject key identifier:   87:1A:B0:2C:40:59:04:26:81:C4:39:33:77:9F:91:AA:24:80:A2:B1
Certificate issuer:       /CN=C2A53A945CE745EADDB65C9EE62EB1162B68E6B9
Certificate serial:       70E5DD88E42F1F53D5098A17EF49E2EAA761804F
Authority key identifier: C2:A5:3A:94:5C:E7:45:EA:DD:B6:5C:9E:E6:2E:B1:16:2B:68:E6:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2A53A945CE745EADDB65C9EE62EB1162B68E6B9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/26F39DEECE5B173BB21A1576AA750E85D0D8A21B3986D0699B1CBD543A7CFB38/0/323830333a396436303a3a2f33322d3332203d3e20323639373731.roa
Signing time:             Tue 06 Jan 2026 20:56:07 +0000
ROA not before:           Tue 06 Jan 2026 20:51:07 +0000
ROA not after:            Tue 05 Jan 2027 20:56:07 +0000
asID:                     269771
IP address blocks:        2803:9d60::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/26F39DEECE5B173BB21A1576AA750E85D0D8A21B3986D0699B1CBD543A7CFB38/0/C2A53A945CE745EADDB65C9EE62EB1162B68E6B9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/26F39DEECE5B173BB21A1576AA750E85D0D8A21B3986D0699B1CBD543A7CFB38/0/C2A53A945CE745EADDB65C9EE62EB1162B68E6B9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2A53A945CE745EADDB65C9EE62EB1162B68E6B9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 02:52:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:e5:dd:88:e4:2f:1f:53:d5:09:8a:17:ef:49:e2:ea:a7:61:80:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2A53A945CE745EADDB65C9EE62EB1162B68E6B9
        Validity
            Not Before: Jan  6 20:51:07 2026 GMT
            Not After : Jan  5 20:56:07 2027 GMT
        Subject: CN=871AB02C4059042681C43933779F91AA2480A2B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:86:29:89:4e:86:0c:50:ac:86:72:94:e2:5e:
                    19:76:6a:50:6a:b6:ab:b1:1e:15:2c:02:1b:0d:93:
                    c3:88:75:26:5f:44:b3:4d:53:77:09:9e:5b:0e:6b:
                    e2:ff:09:c1:0a:ea:41:e9:c6:b5:bf:0a:cc:11:05:
                    0d:34:a6:1b:2b:50:b4:04:2c:83:9e:ac:14:78:00:
                    df:a2:c2:8a:d8:b2:30:99:52:2f:a4:31:a8:c5:9c:
                    33:60:3e:f8:5b:56:d4:1d:ca:04:30:4f:e3:77:75:
                    40:a0:69:fd:19:33:bd:8e:66:71:11:d0:31:3b:e7:
                    ab:8a:72:25:5b:2c:de:aa:bd:7d:5a:e4:6b:14:97:
                    70:1c:fe:47:d8:00:b5:26:20:db:3a:df:bc:20:92:
                    8a:c6:44:a6:c2:dc:bf:cb:43:19:f2:50:79:fc:13:
                    ab:b2:b8:2c:c3:6d:93:c7:ae:86:23:83:bd:21:c9:
                    e7:a3:f4:25:cc:bb:3e:3d:bc:17:ed:21:9b:10:8a:
                    62:09:3b:79:71:26:99:97:53:df:f9:bf:24:16:ce:
                    01:42:b5:3a:b0:79:85:65:d2:96:ad:32:b3:dc:01:
                    12:9c:cb:d9:a3:e6:34:4a:8e:b6:51:bc:4d:0d:79:
                    84:91:34:3c:0f:e2:20:13:43:fb:77:a4:10:bb:95:
                    c7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:1A:B0:2C:40:59:04:26:81:C4:39:33:77:9F:91:AA:24:80:A2:B1
            X509v3 Authority Key Identifier:
                keyid:C2:A5:3A:94:5C:E7:45:EA:DD:B6:5C:9E:E6:2E:B1:16:2B:68:E6:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/26F39DEECE5B173BB21A1576AA750E85D0D8A21B3986D0699B1CBD543A7CFB38/0/C2A53A945CE745EADDB65C9EE62EB1162B68E6B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2A53A945CE745EADDB65C9EE62EB1162B68E6B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/26F39DEECE5B173BB21A1576AA750E85D0D8A21B3986D0699B1CBD543A7CFB38/0/323830333a396436303a3a2f33322d3332203d3e20323639373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9d60::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:36:e5:aa:b7:4b:44:88:e9:b5:a0:bb:a0:8b:cc:ea:78:70:
         c1:98:89:79:c0:b9:6a:11:41:57:fc:d6:8c:47:91:15:a4:84:
         83:40:f9:9b:5d:76:a2:5f:40:58:2f:f0:a2:74:16:b8:6c:6a:
         a1:0a:8c:75:08:e0:e9:22:43:78:8d:ca:d7:f6:b5:0e:8e:1a:
         2d:63:26:e3:c1:77:0e:7a:cc:65:11:32:ce:2d:76:98:2d:06:
         1c:4a:18:9b:cc:56:d0:31:c1:76:30:71:29:3e:b8:b0:1d:b1:
         df:8a:39:4b:e2:1a:a5:af:40:12:90:be:f0:f5:ee:29:91:3e:
         80:85:4f:12:68:9a:7a:46:c6:f3:3c:b5:d3:63:0a:23:4c:88:
         f8:2d:0a:29:98:0d:a1:e0:aa:a3:db:d1:d1:60:3b:2a:17:b0:
         6e:e3:48:9a:5b:85:06:47:fc:4c:05:cb:b5:76:b3:9a:90:fe:
         86:90:d1:3a:a6:04:80:16:7f:7f:68:4a:6b:d2:00:3d:8b:98:
         59:07:5a:ab:ff:db:71:14:80:68:9a:9a:fd:db:22:24:13:59:
         ca:29:df:d7:2a:6d:0a:5a:27:09:6b:f3:b6:56:a1:79:f2:8e:
         2c:18:28:21:32:46:99:17:e2:16:d0:f2:ef:01:4e:45:3a:09:
         c1:6a:53:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:34:02 2026 by rpki-client