This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28DB874E46B4AFF5BBDD717DF1CD0136CBD606E49825EF11B1FF0029E0D566E2/0/323830333a623463303a3a2f33322d3438203d3e20323634373434.roa
File:                     323830333a623463303a3a2f33322d3438203d3e20323634373434.roa (raw, json)
Hash identifier:          hDkwdbi988Dq8jj1x3PgPO+/tHzXjx4DddTGRYM4iWw=
Subject key identifier:   A9:8B:31:A8:EA:84:1C:C9:3C:77:20:BA:4D:1E:F3:07:05:6C:69:90
Certificate issuer:       /CN=E80F49541A747B237BF5EEB2DE2B569B1FA07BF5
Certificate serial:       5617440304A0E3E81A7E3A68EF895D5A5E88546B
Authority key identifier: E8:0F:49:54:1A:74:7B:23:7B:F5:EE:B2:DE:2B:56:9B:1F:A0:7B:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E80F49541A747B237BF5EEB2DE2B569B1FA07BF5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/28DB874E46B4AFF5BBDD717DF1CD0136CBD606E49825EF11B1FF0029E0D566E2/0/323830333a623463303a3a2f33322d3438203d3e20323634373434.roa
Signing time:             Tue 06 Jan 2026 19:21:31 +0000
ROA not before:           Tue 06 Jan 2026 19:16:31 +0000
ROA not after:            Tue 05 Jan 2027 19:21:31 +0000
asID:                     264744
IP address blocks:        2803:b4c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/28DB874E46B4AFF5BBDD717DF1CD0136CBD606E49825EF11B1FF0029E0D566E2/0/E80F49541A747B237BF5EEB2DE2B569B1FA07BF5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/28DB874E46B4AFF5BBDD717DF1CD0136CBD606E49825EF11B1FF0029E0D566E2/0/E80F49541A747B237BF5EEB2DE2B569B1FA07BF5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E80F49541A747B237BF5EEB2DE2B569B1FA07BF5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 22:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:17:44:03:04:a0:e3:e8:1a:7e:3a:68:ef:89:5d:5a:5e:88:54:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E80F49541A747B237BF5EEB2DE2B569B1FA07BF5
        Validity
            Not Before: Jan  6 19:16:31 2026 GMT
            Not After : Jan  5 19:21:31 2027 GMT
        Subject: CN=A98B31A8EA841CC93C7720BA4D1EF307056C6990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3a:86:00:09:04:ca:e9:82:49:75:9f:ab:f3:
                    b9:14:41:cd:ca:ac:fc:f6:b4:16:f5:2c:d1:6e:b4:
                    de:df:c4:8e:87:9b:7f:21:df:16:f7:43:88:01:6c:
                    37:b1:4b:68:56:07:e9:78:e4:5d:52:a0:89:81:6c:
                    70:4a:24:41:19:29:aa:af:01:45:1a:49:db:76:2a:
                    27:89:f0:d2:f6:34:1b:32:7a:80:1a:b5:41:0c:37:
                    25:ec:0c:c6:e6:19:2e:10:71:6c:81:d0:24:26:8e:
                    d2:c0:ce:e1:03:15:bb:51:2e:2b:e2:6e:ae:2c:99:
                    a7:32:66:23:23:81:11:fb:1c:cb:38:52:01:c4:ea:
                    58:da:a9:b7:38:71:97:8a:0a:91:6d:f8:40:e6:ce:
                    02:51:52:1f:3c:6e:8a:21:22:b9:b9:6d:2d:20:ec:
                    72:0e:54:e5:e7:23:99:38:26:c8:f3:9f:f7:f6:65:
                    01:ba:55:c3:56:a5:e0:6c:29:ca:b1:92:4f:7b:2b:
                    19:b0:e0:34:99:16:81:16:2a:94:59:ec:8e:e8:5a:
                    97:57:25:49:0d:e2:f3:c2:02:8c:65:99:63:00:65:
                    eb:de:e0:fe:22:c1:5b:53:84:25:09:80:79:2f:10:
                    7a:c3:a7:0c:d6:93:80:d7:07:de:9e:4d:25:2a:e1:
                    ac:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:8B:31:A8:EA:84:1C:C9:3C:77:20:BA:4D:1E:F3:07:05:6C:69:90
            X509v3 Authority Key Identifier:
                keyid:E8:0F:49:54:1A:74:7B:23:7B:F5:EE:B2:DE:2B:56:9B:1F:A0:7B:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/28DB874E46B4AFF5BBDD717DF1CD0136CBD606E49825EF11B1FF0029E0D566E2/0/E80F49541A747B237BF5EEB2DE2B569B1FA07BF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E80F49541A747B237BF5EEB2DE2B569B1FA07BF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28DB874E46B4AFF5BBDD717DF1CD0136CBD606E49825EF11B1FF0029E0D566E2/0/323830333a623463303a3a2f33322d3438203d3e20323634373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b4c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:91:90:61:56:bb:b2:71:05:04:e3:0e:06:2e:a1:ff:36:07:
         52:a5:79:20:4d:60:ad:1a:2d:83:02:38:a7:64:ab:35:4a:7e:
         18:71:87:4d:ec:3d:12:ac:7f:2f:a2:15:22:1f:33:61:c3:1b:
         40:4b:a7:9f:79:0e:0e:3f:d3:1c:f3:89:1c:c9:1f:09:3f:c7:
         70:d8:00:61:93:fb:a1:36:4d:b0:ff:17:7f:66:4a:37:be:f0:
         c0:a7:bf:89:df:8c:eb:44:47:82:18:34:40:72:96:c8:6c:28:
         54:cd:b5:64:af:43:a7:73:4f:fa:12:17:7b:cf:8a:86:ef:30:
         14:39:bd:58:cb:0b:cc:25:e6:5d:bb:cd:a5:b6:7c:3e:d8:bf:
         12:57:f6:0e:06:52:cf:6d:d4:1b:71:7c:6b:37:55:c4:f0:2b:
         d5:67:84:f3:18:21:4e:5e:d5:f7:52:18:f6:f2:01:4b:00:41:
         91:37:08:20:f0:2a:c6:be:64:9e:ce:b7:68:ad:ea:7c:fb:cf:
         cc:84:c6:ce:25:96:d6:72:cf:1d:97:74:71:22:d0:e5:55:d5:
         7f:33:13:f6:3a:bc:07:da:29:f9:2d:c3:42:73:39:9e:57:46:
         29:a4:d7:e6:df:93:d2:5a:b2:27:9b:b5:4a:48:1f:46:f0:8a:
         6c:f6:1b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:03:17 2026 by rpki-client