This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a3a2f33362d3336203d3e203631353038.roa
File:                     323830333a663234303a3a2f33362d3336203d3e203631353038.roa (raw, json)
Hash identifier:          zBv+JUj2tm+2SZDf904WPHVS+zcJQA3CATJeWn/MwDY=
Subject key identifier:   ED:9C:C7:BB:03:54:2B:A8:77:31:42:8D:48:A1:74:4C:4D:0F:7F:25
Certificate issuer:       /CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
Certificate serial:       745BD3A603AF43D9B29004965A0202DBD7705EA6
Authority key identifier: 81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a3a2f33362d3336203d3e203631353038.roa
Signing time:             Tue 06 Jan 2026 19:23:50 +0000
ROA not before:           Tue 06 Jan 2026 19:18:50 +0000
ROA not after:            Tue 05 Jan 2027 19:23:50 +0000
asID:                     61508
IP address blocks:        2803:f240::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 08:19:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:5b:d3:a6:03:af:43:d9:b2:90:04:96:5a:02:02:db:d7:70:5e:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
        Validity
            Not Before: Jan  6 19:18:50 2026 GMT
            Not After : Jan  5 19:23:50 2027 GMT
        Subject: CN=ED9CC7BB03542BA87731428D48A1744C4D0F7F25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:84:78:cc:44:b5:a2:56:b9:c1:d3:5c:a7:57:
                    ff:17:0e:64:95:18:96:b7:04:26:01:df:54:4c:be:
                    40:ad:eb:b6:46:50:09:b9:de:86:f2:d2:57:1f:1e:
                    84:e1:da:4d:92:4e:da:26:6a:34:cb:5c:15:ca:82:
                    a3:49:85:92:df:aa:f1:6d:38:f3:84:7e:be:c9:ea:
                    94:d2:ce:de:69:80:2a:51:a2:05:bb:81:66:85:8a:
                    2f:64:73:5e:71:c1:0f:14:e8:88:64:7c:69:04:36:
                    f4:4d:3a:f1:0c:80:db:0a:a1:5e:80:b7:cd:4f:46:
                    bb:5a:6f:59:eb:40:7a:13:e4:ca:23:c2:64:a0:51:
                    cc:0c:28:62:59:96:36:7c:9e:2e:09:82:9a:d1:f8:
                    55:19:96:c0:a3:ef:39:15:d5:59:f3:fb:03:03:00:
                    aa:e3:fd:82:be:c4:b2:8c:ae:0b:48:b4:e2:f2:95:
                    01:3d:f8:73:04:49:3c:09:59:02:a7:b4:91:25:da:
                    29:ab:c7:da:44:34:e4:05:9b:47:5e:77:dd:fd:bd:
                    1d:e1:41:44:bb:c5:4e:d6:18:c9:8a:c1:59:58:19:
                    f3:f3:af:3a:42:98:10:67:e7:14:02:25:07:40:c0:
                    a5:89:d4:76:bd:dd:16:b1:e2:a8:56:9a:5f:4c:08:
                    6f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:9C:C7:BB:03:54:2B:A8:77:31:42:8D:48:A1:74:4C:4D:0F:7F:25
            X509v3 Authority Key Identifier:
                keyid:81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a3a2f33362d3336203d3e203631353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f240::/36

    Signature Algorithm: sha256WithRSAEncryption
         87:32:c7:56:5d:c2:e4:50:54:0d:97:07:cc:eb:cb:ef:2d:8b:
         39:bf:cb:ff:b5:01:7b:38:16:e4:16:91:64:38:af:70:6b:37:
         54:64:7d:db:57:2b:b8:7f:02:60:36:41:83:f7:30:9f:7f:11:
         c6:48:70:70:01:55:f4:a9:df:fa:ef:aa:e4:98:b3:1b:52:1e:
         6c:23:0d:c7:e9:66:33:e6:c0:16:af:5a:b7:90:8f:45:eb:6d:
         f4:62:91:4f:88:27:30:93:b8:b9:c8:b0:31:bd:df:1b:f2:43:
         49:8a:59:88:22:dc:12:b3:8c:b4:3e:d8:89:ff:6a:44:4f:53:
         24:60:96:a2:77:49:5b:5a:5b:a8:82:26:6b:68:75:a6:1c:9b:
         13:c7:56:07:8e:de:8a:9e:b4:a0:c3:d1:30:0f:25:c2:4b:cb:
         66:3e:f0:6f:ad:47:86:4b:79:6a:3e:98:04:42:96:5b:9b:a8:
         83:cb:36:c9:f4:ca:b7:07:3f:46:8e:62:28:24:b2:de:74:44:
         58:68:4c:4e:f6:5f:44:4e:16:24:72:47:c1:ca:33:d8:fd:7f:
         a6:28:b3:2b:07:4e:77:a5:d1:33:15:f2:77:8c:d4:9e:36:28:
         e0:e5:d0:d0:8d:86:8f:20:b5:62:6c:20:f7:e6:f3:cc:87:7d:
         62:1e:5b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:22:48 2026 by rpki-client