This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/323830333a363561303a3a2f33322d3438203d3e20323637373330.roa
File:                     323830333a363561303a3a2f33322d3438203d3e20323637373330.roa (raw, json)
Hash identifier:          WiyCmKdPZnDuW8+cxSFDpl1gN/zDFdR0GeTslB1ibJo=
Subject key identifier:   5E:B7:67:DC:42:19:9D:EB:44:B7:63:7E:19:8F:F0:A8:C8:F6:7D:A2
Certificate issuer:       /CN=2D7718438FB232639075F3BB0E7DE54CD20AA91D
Certificate serial:       70B8558AFEC4D1599DBC8CD2F3F22F6BD3C92FD4
Authority key identifier: 2D:77:18:43:8F:B2:32:63:90:75:F3:BB:0E:7D:E5:4C:D2:0A:A9:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/323830333a363561303a3a2f33322d3438203d3e20323637373330.roa
Signing time:             Tue 06 Jan 2026 19:07:26 +0000
ROA not before:           Tue 06 Jan 2026 19:02:26 +0000
ROA not after:            Tue 05 Jan 2027 19:07:26 +0000
asID:                     267730
IP address blocks:        2803:65a0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:b8:55:8a:fe:c4:d1:59:9d:bc:8c:d2:f3:f2:2f:6b:d3:c9:2f:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D7718438FB232639075F3BB0E7DE54CD20AA91D
        Validity
            Not Before: Jan  6 19:02:26 2026 GMT
            Not After : Jan  5 19:07:26 2027 GMT
        Subject: CN=5EB767DC42199DEB44B7637E198FF0A8C8F67DA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b6:15:d5:5a:16:f3:26:75:3c:a7:45:04:90:
                    f5:01:49:d5:a8:de:dd:07:db:b6:f5:55:44:31:94:
                    0e:3c:9f:73:c5:6d:32:25:ab:5c:d8:00:23:86:76:
                    f9:49:c1:ff:09:cf:bc:d4:79:13:36:15:bb:2d:a7:
                    b1:db:36:f9:75:7a:7d:fe:42:37:41:3a:c0:35:2e:
                    7d:f0:6b:d2:06:78:31:79:fe:be:f9:74:18:2f:c7:
                    8c:1b:58:9d:b1:17:b3:e3:ac:bb:e6:f8:6f:14:86:
                    54:60:d8:88:ad:bf:11:c6:de:29:46:13:a0:c1:bc:
                    6c:3b:92:79:43:d5:f3:fd:7f:13:87:6e:08:01:9c:
                    42:23:54:ec:5f:eb:a2:78:62:eb:2a:8b:05:12:c0:
                    3e:28:89:51:85:9c:19:e6:ed:4e:ae:3d:d5:83:30:
                    3b:25:68:31:60:1a:5c:f4:99:e3:7a:b4:51:bb:b1:
                    f8:6c:06:b4:9c:09:8a:4a:1a:84:0b:59:2c:6e:6e:
                    64:4b:79:66:68:69:57:ef:84:0a:ac:d6:46:e5:34:
                    32:fe:fa:f9:b6:4b:3c:89:de:ce:a2:34:7d:43:d4:
                    44:f1:3f:a3:aa:69:92:73:5b:c0:0e:ad:83:4b:36:
                    95:27:c9:4f:d0:1c:11:c5:27:7b:d9:cd:b6:24:8b:
                    3d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B7:67:DC:42:19:9D:EB:44:B7:63:7E:19:8F:F0:A8:C8:F6:7D:A2
            X509v3 Authority Key Identifier:
                keyid:2D:77:18:43:8F:B2:32:63:90:75:F3:BB:0E:7D:E5:4C:D2:0A:A9:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/323830333a363561303a3a2f33322d3438203d3e20323637373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:65a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:5f:ec:62:df:bd:88:41:6e:c5:95:8d:6c:01:0d:a6:d3:50:
         59:f5:01:26:21:a6:3c:50:0e:1e:9b:e3:75:9b:a2:e1:5a:e2:
         b0:0b:fa:42:bf:2b:c1:61:49:ca:cf:2e:25:ab:2c:82:3e:aa:
         4a:db:7a:9e:ac:c5:bf:a8:ee:00:77:6a:85:75:5e:60:cc:60:
         0f:be:b9:f8:ed:e8:a8:f6:87:a4:4d:d5:19:14:ab:13:3d:ed:
         5a:7f:4f:be:64:36:53:a7:e6:ae:70:5c:28:72:d9:dd:dc:9d:
         b6:47:b5:ff:60:bd:ed:f9:f2:cd:d3:90:69:e8:ce:43:c3:fd:
         96:91:f8:d3:6a:1a:96:a4:9c:6f:64:1f:8e:55:fd:f3:5e:50:
         73:61:de:6c:58:a0:4f:8e:cd:23:73:c3:8c:8e:14:cd:e6:0e:
         69:75:93:fe:1a:06:54:21:58:9a:17:e2:b2:76:a7:33:44:4c:
         58:32:74:a3:30:fd:9b:76:c7:0f:e0:c4:64:15:33:a9:7c:3a:
         5b:b9:69:bc:f5:bf:8d:e2:aa:9c:be:03:20:89:55:7c:17:24:
         8f:34:6e:14:2c:fe:56:f0:d6:3e:1d:dc:dd:78:9d:45:99:01:
         43:7a:bc:f1:75:b9:53:42:9e:c7:7b:a0:62:68:67:d1:0a:65:
         75:39:d5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:27:34 2026 by rpki-client