This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a3a2f33322d3334203d3e203631353038.roa
File:                     323830333a663234303a3a2f33322d3334203d3e203631353038.roa (raw, json)
Hash identifier:          cw2VQz2ZPugEsIu7j4+RhLjoQgb8HMktgKV2J/qWL/k=
Subject key identifier:   A2:13:DA:72:37:37:36:F1:1B:F1:3B:21:CA:B8:3F:83:C3:F5:2C:14
Certificate issuer:       /CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
Certificate serial:       24BC1D52DC8254E82B5C4C980AAE55700FE315A7
Authority key identifier: 81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a3a2f33322d3334203d3e203631353038.roa
Signing time:             Tue 06 Jan 2026 19:23:51 +0000
ROA not before:           Tue 06 Jan 2026 19:18:51 +0000
ROA not after:            Tue 05 Jan 2027 19:23:51 +0000
asID:                     61508
IP address blocks:        2803:f240::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 08:19:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:bc:1d:52:dc:82:54:e8:2b:5c:4c:98:0a:ae:55:70:0f:e3:15:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
        Validity
            Not Before: Jan  6 19:18:51 2026 GMT
            Not After : Jan  5 19:23:51 2027 GMT
        Subject: CN=A213DA72373736F11BF13B21CAB83F83C3F52C14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:47:ea:99:e8:2f:8c:ab:ef:f7:28:ac:38:37:
                    1f:5a:4d:54:6a:80:bc:a5:6b:95:47:3c:37:c2:c3:
                    6a:aa:c8:ef:80:8c:54:d5:e7:09:2c:ce:ac:78:d9:
                    e3:8b:ff:43:f1:b2:0d:a9:7a:76:d1:51:71:69:b1:
                    36:9b:b9:52:41:70:dc:35:69:36:b2:ff:57:82:7b:
                    34:9f:9b:8f:68:21:9d:41:fc:53:6a:b1:79:36:e2:
                    2e:e0:18:7d:57:36:99:5c:44:7c:f1:b5:0a:b0:7a:
                    d5:90:10:17:47:8e:e3:79:6c:58:b3:d9:6d:69:1c:
                    f9:30:25:72:7e:1d:35:8b:f6:1f:a5:f1:74:e8:76:
                    78:95:08:8d:28:84:9d:04:79:0f:a7:ab:0a:82:e3:
                    63:1f:50:f2:45:7a:ae:39:73:b4:49:e8:a4:24:b7:
                    ba:fa:36:40:af:83:5d:5e:b0:74:44:ec:ee:f6:33:
                    ab:63:cb:4e:a1:45:34:84:1b:e6:7c:54:52:5d:27:
                    03:af:4d:2d:69:29:50:51:d6:fe:b5:92:aa:59:1a:
                    da:8f:60:d3:38:ba:02:44:2d:09:fa:3a:c3:a5:f9:
                    54:17:15:53:78:4f:9e:ea:d4:b2:1c:60:f9:5b:b2:
                    36:7a:6d:be:1c:83:ee:76:34:28:6a:36:42:30:39:
                    e2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:13:DA:72:37:37:36:F1:1B:F1:3B:21:CA:B8:3F:83:C3:F5:2C:14
            X509v3 Authority Key Identifier:
                keyid:81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a3a2f33322d3334203d3e203631353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f240::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:a4:cd:eb:5e:a2:8d:57:41:16:b6:f8:3d:bb:81:cb:36:da:
         6d:95:e9:5f:8f:dc:ca:e9:66:8e:93:50:da:39:45:c0:46:c5:
         d6:3f:93:6c:11:1a:0e:2f:b1:de:ea:92:63:c0:cb:15:03:21:
         a4:dd:bd:a6:c9:d1:72:d9:c7:ff:ce:5a:b1:6c:d5:45:55:cd:
         d1:a5:02:50:f0:6a:ad:27:9c:9a:91:a4:3d:9c:bb:6f:05:74:
         29:4a:a1:4f:0c:9c:84:71:b7:ad:e5:67:c3:88:03:bd:aa:ea:
         54:c2:0b:cf:9a:02:61:14:a5:94:1d:0b:d8:a6:0a:1b:d6:1d:
         57:0b:76:81:b6:f9:aa:ef:22:43:c0:2e:b0:bb:af:84:d5:64:
         e0:97:a8:ff:93:74:79:81:64:a9:fe:2c:d7:41:56:c1:e3:7d:
         4e:cb:d1:2c:89:32:ee:0b:bc:ae:93:a5:f9:2d:ad:36:72:43:
         59:38:61:ab:5a:d5:1e:5f:e9:ea:a0:83:a1:7f:c2:2a:7b:de:
         a0:03:90:44:96:cf:4e:cc:03:1d:00:d0:c7:2f:a1:52:d9:2f:
         21:31:32:9b:17:9d:26:26:66:d3:4b:f6:ac:f1:6b:03:14:95:
         72:5e:19:ec:c0:04:63:14:5b:52:84:41:a9:a0:25:60:63:42:
         48:d0:c7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:23:36 2026 by rpki-client