This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F35F152E50FF737ECFC9BFD27199D3B0527A5DF4274CA648D2269B1BCF4EC8C/0/323830333a633238303a3a2f33322d3438203d3e20323635373735.roa
File:                     323830333a633238303a3a2f33322d3438203d3e20323635373735.roa (raw, json)
Hash identifier:          CDeXTCXWhfnhmGbCAHGhEhA38RMgYZdai1GNJJGUgW8=
Subject key identifier:   E1:C3:AD:46:65:C5:A4:84:16:7A:80:31:48:58:E5:93:B0:DA:33:3B
Certificate issuer:       /CN=9B6584697C39ACE5E3524940EEAF5ED7030C015F
Certificate serial:       2841BEBBB85101FF1BED9710674D7CA648C66A9C
Authority key identifier: 9B:65:84:69:7C:39:AC:E5:E3:52:49:40:EE:AF:5E:D7:03:0C:01:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B6584697C39ACE5E3524940EEAF5ED7030C015F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F35F152E50FF737ECFC9BFD27199D3B0527A5DF4274CA648D2269B1BCF4EC8C/0/323830333a633238303a3a2f33322d3438203d3e20323635373735.roa
Signing time:             Tue 06 Jan 2026 19:25:29 +0000
ROA not before:           Tue 06 Jan 2026 19:20:29 +0000
ROA not after:            Tue 05 Jan 2027 19:25:29 +0000
asID:                     265775
IP address blocks:        2803:c280::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2F35F152E50FF737ECFC9BFD27199D3B0527A5DF4274CA648D2269B1BCF4EC8C/0/9B6584697C39ACE5E3524940EEAF5ED7030C015F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2F35F152E50FF737ECFC9BFD27199D3B0527A5DF4274CA648D2269B1BCF4EC8C/0/9B6584697C39ACE5E3524940EEAF5ED7030C015F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B6584697C39ACE5E3524940EEAF5ED7030C015F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 14:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:41:be:bb:b8:51:01:ff:1b:ed:97:10:67:4d:7c:a6:48:c6:6a:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B6584697C39ACE5E3524940EEAF5ED7030C015F
        Validity
            Not Before: Jan  6 19:20:29 2026 GMT
            Not After : Jan  5 19:25:29 2027 GMT
        Subject: CN=E1C3AD4665C5A484167A80314858E593B0DA333B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a0:a1:50:dc:c6:38:17:3e:38:80:15:44:9c:
                    ea:a0:5e:7b:64:ce:08:c9:b3:b9:a3:36:08:68:b5:
                    25:1a:29:89:73:48:6e:c6:53:1b:c3:eb:ae:89:a7:
                    20:d1:d9:a7:9a:c3:0b:eb:b0:e3:d8:df:f3:eb:df:
                    49:9c:f3:47:5f:1a:59:5f:8c:4d:9f:0f:9e:82:03:
                    a7:3c:be:60:5a:55:76:16:f2:68:f4:3f:95:e2:fa:
                    71:d5:cf:8f:30:b2:9f:44:e7:7b:d0:ae:8c:4c:a0:
                    9b:dd:84:6f:22:07:69:bb:aa:4c:31:21:7f:fc:c0:
                    51:a0:bf:ad:0c:d8:22:99:c3:43:d8:ca:4f:f0:a9:
                    48:4a:18:b7:f4:cd:1f:ac:1b:64:26:93:78:91:23:
                    c9:94:dd:6a:f9:e8:19:32:8a:43:d5:8a:f7:0d:23:
                    23:84:b0:e2:da:f7:4d:bb:2c:2b:5f:4a:f4:f0:37:
                    c0:91:a2:b5:65:e8:ee:41:a3:72:f2:de:14:54:49:
                    22:b9:b4:72:2b:5b:cb:c4:43:f1:d6:cf:e1:25:cf:
                    ae:4c:52:92:47:90:af:25:a0:23:cf:07:2e:be:b6:
                    29:0f:dc:29:a9:49:5e:c7:d3:fd:3c:b0:e6:4e:aa:
                    19:63:e3:a0:05:78:fa:22:64:54:f2:a0:2b:da:e0:
                    16:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C3:AD:46:65:C5:A4:84:16:7A:80:31:48:58:E5:93:B0:DA:33:3B
            X509v3 Authority Key Identifier:
                keyid:9B:65:84:69:7C:39:AC:E5:E3:52:49:40:EE:AF:5E:D7:03:0C:01:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F35F152E50FF737ECFC9BFD27199D3B0527A5DF4274CA648D2269B1BCF4EC8C/0/9B6584697C39ACE5E3524940EEAF5ED7030C015F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B6584697C39ACE5E3524940EEAF5ED7030C015F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F35F152E50FF737ECFC9BFD27199D3B0527A5DF4274CA648D2269B1BCF4EC8C/0/323830333a633238303a3a2f33322d3438203d3e20323635373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c280::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:d1:19:7f:c2:ff:f6:00:76:a9:f0:14:41:37:7b:e4:b7:49:
         7e:f8:7e:f6:b8:d3:ea:ce:de:bb:54:2f:5d:ca:63:16:b8:0f:
         07:76:61:c1:2f:e8:30:42:51:2d:ea:79:eb:47:8b:1b:bc:40:
         b5:b3:a8:1e:22:a9:27:5a:98:07:f6:94:7f:1b:04:f3:8c:d0:
         33:28:20:57:26:b7:f6:f2:54:63:21:bc:3e:3f:ee:46:71:a6:
         2b:52:ef:70:8e:25:2d:12:c1:57:8d:b4:e0:6b:aa:12:23:50:
         3d:99:dd:0c:e3:89:b0:3f:66:0e:d6:76:dd:db:ba:2b:94:ab:
         07:01:c5:a3:75:a5:fb:08:78:d9:b4:c3:bb:aa:70:e7:c5:6c:
         02:9c:2c:ee:17:f4:79:de:17:ce:f5:45:0a:0d:b7:d4:4c:f5:
         12:bc:e9:2c:3d:d8:ce:1f:8d:e1:f1:28:dd:80:29:2d:3d:ed:
         9e:9b:8e:cd:6d:f7:34:c5:37:f2:75:22:49:d2:fb:7a:d9:6b:
         1a:26:85:8d:af:27:92:8f:c5:ed:d9:9f:8a:18:13:e9:4a:2d:
         11:d0:e9:b5:7b:02:28:c7:35:43:a6:37:20:5e:aa:61:54:0f:
         e8:b8:b4:7a:27:2e:88:a7:fb:b4:55:7b:da:00:f2:38:b6:df:
         b3:14:71:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:38:13 2026 by rpki-client