This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E29CE22CE2761CAC90ED35BFEFA0020FCC5F74C93598DDB896FED7BF48D9F12/0/323830333a346338303a3a2f33322d3536203d3e20323633313831.roa
File:                     323830333a346338303a3a2f33322d3536203d3e20323633313831.roa (raw, json)
Hash identifier:          60kAlvHWVfgvcNmu8ihqxnF69lYlL29aK99qnriXj58=
Subject key identifier:   94:DB:AD:89:86:90:9F:70:12:AF:DC:58:A0:0E:76:7B:F2:D6:E0:74
Certificate issuer:       /CN=9E5D9A897E41EAD6C59F0E8898F2692C3C6965BE
Certificate serial:       179A47E3B0E319B382A2C8A547DE2BB8C0D8D81F
Authority key identifier: 9E:5D:9A:89:7E:41:EA:D6:C5:9F:0E:88:98:F2:69:2C:3C:69:65:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E5D9A897E41EAD6C59F0E8898F2692C3C6965BE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E29CE22CE2761CAC90ED35BFEFA0020FCC5F74C93598DDB896FED7BF48D9F12/0/323830333a346338303a3a2f33322d3536203d3e20323633313831.roa
Signing time:             Tue 06 Jan 2026 19:33:03 +0000
ROA not before:           Tue 06 Jan 2026 19:28:03 +0000
ROA not after:            Tue 05 Jan 2027 19:33:03 +0000
asID:                     263181
IP address blocks:        2803:4c80::/32 maxlen: 56
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2E29CE22CE2761CAC90ED35BFEFA0020FCC5F74C93598DDB896FED7BF48D9F12/0/9E5D9A897E41EAD6C59F0E8898F2692C3C6965BE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2E29CE22CE2761CAC90ED35BFEFA0020FCC5F74C93598DDB896FED7BF48D9F12/0/9E5D9A897E41EAD6C59F0E8898F2692C3C6965BE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E5D9A897E41EAD6C59F0E8898F2692C3C6965BE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 17:51:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:9a:47:e3:b0:e3:19:b3:82:a2:c8:a5:47:de:2b:b8:c0:d8:d8:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E5D9A897E41EAD6C59F0E8898F2692C3C6965BE
        Validity
            Not Before: Jan  6 19:28:03 2026 GMT
            Not After : Jan  5 19:33:03 2027 GMT
        Subject: CN=94DBAD8986909F7012AFDC58A00E767BF2D6E074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:10:e4:57:b4:76:11:a2:5b:33:55:0b:a0:6f:
                    6e:0a:5b:da:c6:02:5e:90:99:b5:40:da:14:0f:3e:
                    b6:66:88:5e:cd:05:38:cb:74:ba:6a:af:0d:b5:0a:
                    be:f7:fb:73:cc:f6:05:45:4a:1a:06:b4:2c:13:d5:
                    da:08:ea:6c:34:68:74:d4:6f:c7:fa:f6:bf:b9:c5:
                    29:a9:5e:d0:6c:0b:d3:26:57:ba:9d:c9:bb:98:47:
                    06:09:3d:7a:78:8c:83:20:1e:68:bb:67:1f:14:ef:
                    0f:5e:97:eb:53:2d:3a:6d:6e:cf:f1:f3:c9:b5:44:
                    b4:3f:fe:19:02:b5:03:ce:30:54:b8:31:2c:8d:a0:
                    2f:ad:3f:a3:cf:a0:9f:9a:81:82:8a:b3:14:45:aa:
                    83:70:6a:88:7e:33:1d:f5:95:09:39:00:ac:2d:e9:
                    b6:66:aa:02:a2:d9:7a:d1:6b:98:79:8a:e3:95:0a:
                    9c:d6:4b:8a:45:d3:bf:c6:73:b8:90:99:e6:4b:a8:
                    b7:d0:6d:b4:f3:68:66:62:49:6a:75:21:91:18:26:
                    02:49:ef:ac:df:20:14:50:1a:c5:cb:5c:85:98:d7:
                    8c:e0:24:b2:fe:c1:e1:54:36:07:4f:73:f1:61:fe:
                    62:fa:5e:b5:f4:b2:be:1f:fa:17:28:c3:8b:76:25:
                    1d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:DB:AD:89:86:90:9F:70:12:AF:DC:58:A0:0E:76:7B:F2:D6:E0:74
            X509v3 Authority Key Identifier:
                keyid:9E:5D:9A:89:7E:41:EA:D6:C5:9F:0E:88:98:F2:69:2C:3C:69:65:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E29CE22CE2761CAC90ED35BFEFA0020FCC5F74C93598DDB896FED7BF48D9F12/0/9E5D9A897E41EAD6C59F0E8898F2692C3C6965BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E5D9A897E41EAD6C59F0E8898F2692C3C6965BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E29CE22CE2761CAC90ED35BFEFA0020FCC5F74C93598DDB896FED7BF48D9F12/0/323830333a346338303a3a2f33322d3536203d3e20323633313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4c80::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:8e:91:0d:be:12:0b:c6:27:2c:af:82:bf:23:a2:f1:a1:d0:
         46:f0:39:d7:0c:bb:8c:b6:8b:3b:09:26:ec:3e:fe:3d:a7:38:
         bc:43:c4:98:85:42:b5:e3:d3:e0:cb:30:37:49:4c:cb:ff:9b:
         03:61:61:7a:7a:63:dd:26:e5:eb:ce:12:40:69:21:d3:01:30:
         81:03:04:a9:84:dd:c2:92:8b:bd:51:df:76:c4:54:db:6e:4b:
         cc:c7:5d:11:73:69:55:dd:94:bb:2a:6a:cd:76:1b:71:05:d7:
         cc:d7:06:0b:55:75:25:19:c7:b5:78:29:f6:ce:a3:84:93:25:
         9a:79:a9:cd:a2:7d:85:20:0b:0b:7b:00:ed:65:b3:d8:1c:a0:
         e5:e1:2d:d8:84:07:72:b9:fe:07:85:04:15:f2:52:cf:54:8d:
         4d:f7:42:90:4f:2c:11:87:5b:b5:d9:12:f6:02:4a:12:5f:0b:
         b1:65:b1:f9:b1:7b:b9:58:69:4c:77:b5:be:2a:11:f4:08:76:
         b6:3f:e1:58:83:83:b9:d3:9d:3d:15:cc:81:66:9e:fd:cb:42:
         ae:22:4b:3a:43:57:93:a9:2a:e3:60:07:5b:93:70:3f:0a:1b:
         a1:1b:4a:bd:77:74:11:e5:bf:5b:04:ab:b3:d1:20:d6:33:c4:
         92:81:b5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:16:06 2026 by rpki-client