This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/323830333a6638303a3a2f33322d3634203d3e20323633373236.roa
File:                     323830333a6638303a3a2f33322d3634203d3e20323633373236.roa (raw, json)
Hash identifier:          6S6rDtS73vAjfB0Bo6oRVqws5MjPMZUCyLlt2wuvqyA=
Subject key identifier:   C3:D8:5C:7F:32:0E:24:D0:F8:62:DE:95:3C:3A:24:20:83:00:22:17
Certificate issuer:       /CN=A1C86299C5FA84F9AB35C2974EACE4484F0A087A
Certificate serial:       31E9B105FDFDB63E6978D5700FEE34D972A6409B
Authority key identifier: A1:C8:62:99:C5:FA:84:F9:AB:35:C2:97:4E:AC:E4:48:4F:0A:08:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/323830333a6638303a3a2f33322d3634203d3e20323633373236.roa
Signing time:             Tue 06 Jan 2026 19:43:04 +0000
ROA not before:           Tue 06 Jan 2026 19:38:04 +0000
ROA not after:            Tue 05 Jan 2027 19:43:04 +0000
asID:                     263726
IP address blocks:        2803:f80::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:e9:b1:05:fd:fd:b6:3e:69:78:d5:70:0f:ee:34:d9:72:a6:40:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1C86299C5FA84F9AB35C2974EACE4484F0A087A
        Validity
            Not Before: Jan  6 19:38:04 2026 GMT
            Not After : Jan  5 19:43:04 2027 GMT
        Subject: CN=C3D85C7F320E24D0F862DE953C3A242083002217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8d:df:61:a8:d8:c8:2d:9e:8f:37:df:3b:35:
                    51:14:18:11:97:09:5c:56:4b:27:49:4e:71:9b:9f:
                    4e:2b:8e:fd:e9:a5:61:c7:5e:97:03:cf:46:bc:18:
                    d5:ef:32:24:81:41:2b:98:bb:6e:51:55:3e:9b:e5:
                    8b:b3:96:53:e2:b9:dc:52:d5:80:23:a0:b1:a1:35:
                    48:04:46:53:1e:5e:13:5c:28:38:04:90:94:94:ee:
                    d3:8c:70:a0:42:34:33:52:15:96:10:c9:dd:23:b4:
                    40:63:e9:5b:f9:5b:d0:55:f0:70:8f:94:d5:25:d1:
                    09:ac:19:0e:a4:99:4f:f0:7b:73:c5:fa:3b:29:56:
                    81:9e:7a:a5:af:84:4f:bb:f0:fe:53:8b:f8:b1:93:
                    51:02:dd:83:d6:79:a0:ba:1e:14:ca:be:77:28:52:
                    82:00:b5:60:53:e5:66:92:4e:3a:36:18:48:a8:28:
                    0c:91:88:5f:3e:08:94:ec:3b:7e:c3:12:53:5e:00:
                    f5:0e:aa:5d:45:45:f4:65:be:a3:13:de:d8:ec:a0:
                    d4:39:10:bf:30:4e:65:41:31:26:0a:3e:84:56:86:
                    a7:44:94:90:fb:c7:31:85:6f:7b:55:f4:33:83:f3:
                    f5:bd:ab:8a:dd:40:5d:ad:0c:4c:b4:8d:6f:45:bd:
                    00:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D8:5C:7F:32:0E:24:D0:F8:62:DE:95:3C:3A:24:20:83:00:22:17
            X509v3 Authority Key Identifier:
                keyid:A1:C8:62:99:C5:FA:84:F9:AB:35:C2:97:4E:AC:E4:48:4F:0A:08:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/323830333a6638303a3a2f33322d3634203d3e20323633373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:89:68:8b:bf:d5:c5:36:70:0e:fc:21:db:19:54:4f:27:25:
         e5:e7:0b:18:bd:3b:d7:a4:2a:cc:a6:d1:be:7f:15:75:23:11:
         91:83:69:e5:e0:90:31:51:ff:27:5d:0b:72:db:0b:0f:23:62:
         a0:92:88:5e:35:22:27:f4:23:a3:6a:02:38:90:dc:80:a2:07:
         bf:c3:d4:54:ff:fb:d2:69:49:27:05:c5:59:52:1f:ec:1a:88:
         d0:73:bc:5a:d0:f6:6e:06:da:30:5b:3a:73:f9:e8:66:cd:e2:
         01:5c:26:19:3d:9e:2f:9d:ea:79:8a:ac:44:ac:c8:5f:71:01:
         3a:88:2f:66:26:3e:00:ce:a6:82:47:c9:d5:51:38:c2:21:ad:
         f2:27:36:16:d4:5e:ac:53:94:88:77:c7:1c:d5:be:83:f8:4e:
         d9:05:39:fa:c2:25:6d:56:6f:9c:46:a6:9d:44:24:d9:ae:a3:
         5e:40:28:50:0f:fb:18:bb:e8:7e:b1:b5:08:eb:27:5e:d6:bb:
         23:64:91:9b:3d:94:17:e1:8b:99:18:9b:54:48:c0:9f:43:a0:
         ae:de:60:ef:c1:96:c2:2d:68:3d:8e:21:83:dd:94:31:29:51:
         46:be:dc:c3:d3:ae:1f:d0:8a:05:62:c9:af:05:e4:03:5b:1a:
         c8:f1:a5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:15 2026 by rpki-client