This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/300892915B4F76495207C54B9B23B1629F6FBAD8A5659EE4F5B09E982BA54E63/0/323830333a333363303a3a2f33322d3438203d3e20323635373231.roa
File:                     323830333a333363303a3a2f33322d3438203d3e20323635373231.roa (raw, json)
Hash identifier:          ZfVZbi8sUC7b29N3T7XrcGRNuglXe60yWN/GwBSFLqw=
Subject key identifier:   F8:53:4A:81:18:59:BC:26:47:56:66:71:74:30:FA:30:ED:5E:10:EB
Certificate issuer:       /CN=CFA8D5AEE2FFD5169B863E840F863AC026919A61
Certificate serial:       15D2D93F90CAD7225D72187E8BF0794987670732
Authority key identifier: CF:A8:D5:AE:E2:FF:D5:16:9B:86:3E:84:0F:86:3A:C0:26:91:9A:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFA8D5AEE2FFD5169B863E840F863AC026919A61.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/300892915B4F76495207C54B9B23B1629F6FBAD8A5659EE4F5B09E982BA54E63/0/323830333a333363303a3a2f33322d3438203d3e20323635373231.roa
Signing time:             Tue 06 Jan 2026 19:31:31 +0000
ROA not before:           Tue 06 Jan 2026 19:26:31 +0000
ROA not after:            Tue 05 Jan 2027 19:31:31 +0000
asID:                     265721
IP address blocks:        2803:33c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/300892915B4F76495207C54B9B23B1629F6FBAD8A5659EE4F5B09E982BA54E63/0/CFA8D5AEE2FFD5169B863E840F863AC026919A61.crl
                          rsync://repository.lacnic.net/rpki/lacnic/300892915B4F76495207C54B9B23B1629F6FBAD8A5659EE4F5B09E982BA54E63/0/CFA8D5AEE2FFD5169B863E840F863AC026919A61.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFA8D5AEE2FFD5169B863E840F863AC026919A61.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 06:05:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:d2:d9:3f:90:ca:d7:22:5d:72:18:7e:8b:f0:79:49:87:67:07:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFA8D5AEE2FFD5169B863E840F863AC026919A61
        Validity
            Not Before: Jan  6 19:26:31 2026 GMT
            Not After : Jan  5 19:31:31 2027 GMT
        Subject: CN=F8534A811859BC26475666717430FA30ED5E10EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8c:ea:40:c0:f2:b1:bf:98:89:3a:16:47:4e:
                    81:bb:43:be:26:69:67:15:c1:63:79:5e:c6:47:06:
                    38:c0:af:4f:7a:2a:fb:64:7c:9a:c3:c5:41:6e:17:
                    c7:b2:ee:f2:72:44:87:da:87:d0:34:3f:2f:01:5e:
                    d6:93:e0:47:ba:d6:ed:e3:77:90:ab:b7:d7:8f:4d:
                    2e:da:d6:80:cd:76:c8:75:45:f0:f0:26:1c:bd:66:
                    b3:2a:ec:7d:15:2a:4d:78:52:78:75:49:4b:55:53:
                    3a:8c:c7:b6:0e:e8:52:32:80:45:be:6c:8d:62:3d:
                    c0:1f:81:e6:0d:6e:5c:bd:14:f4:b4:d3:90:91:fb:
                    b5:76:58:40:67:42:68:da:60:85:f5:00:10:24:43:
                    c9:84:7a:4d:5d:b9:88:28:5e:7d:8a:9b:19:d9:97:
                    ad:01:6e:a2:f9:dd:1d:92:be:08:bd:43:43:34:7e:
                    10:78:62:24:61:89:54:f5:d8:cd:0a:ef:51:a3:c3:
                    5d:03:dc:ed:65:7c:c1:cc:6b:46:b1:ca:b1:8d:cd:
                    42:36:ca:22:9d:2f:e3:0f:c1:12:fe:0c:1c:27:65:
                    14:51:2a:fc:f1:93:d2:bd:60:58:bf:da:2a:62:5d:
                    71:78:dc:45:7a:62:b9:ae:cd:e8:3d:4b:3c:cd:6a:
                    c9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:53:4A:81:18:59:BC:26:47:56:66:71:74:30:FA:30:ED:5E:10:EB
            X509v3 Authority Key Identifier:
                keyid:CF:A8:D5:AE:E2:FF:D5:16:9B:86:3E:84:0F:86:3A:C0:26:91:9A:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/300892915B4F76495207C54B9B23B1629F6FBAD8A5659EE4F5B09E982BA54E63/0/CFA8D5AEE2FFD5169B863E840F863AC026919A61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFA8D5AEE2FFD5169B863E840F863AC026919A61.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/300892915B4F76495207C54B9B23B1629F6FBAD8A5659EE4F5B09E982BA54E63/0/323830333a333363303a3a2f33322d3438203d3e20323635373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:33c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:17:c5:1e:f5:3a:86:86:8d:bc:6b:7f:87:49:24:6e:e6:65:
         ff:60:cd:c3:0c:ba:d1:e4:16:cb:14:30:3f:b1:e2:1d:bf:b7:
         6f:1a:b3:93:21:f1:61:18:e7:2f:89:e6:67:11:2f:0a:8e:9c:
         15:5a:d5:6a:27:ca:12:fa:b3:10:bd:4e:1c:46:c9:e1:b6:5d:
         d6:2e:0e:34:21:c9:f0:a1:02:d8:f9:c8:34:67:5b:0d:3f:9d:
         d3:cc:af:1a:7a:fc:ff:46:cf:94:a7:72:13:80:1a:32:7d:17:
         bd:92:e4:67:07:26:8c:95:bc:af:e3:3a:30:8e:d7:fb:62:40:
         34:c4:6c:71:86:b2:00:1d:4e:5e:66:e5:42:e1:bc:06:a7:1e:
         1c:f9:23:b3:08:94:3c:8c:c2:d5:a3:90:dd:a6:ab:f5:81:bb:
         94:3f:4e:15:50:6c:07:d3:4d:0c:c0:3f:bf:94:cc:52:78:9f:
         02:2c:b1:d6:dc:d3:fe:a2:a1:ce:c9:30:28:61:59:43:21:e1:
         98:08:40:4e:cb:05:92:13:6a:96:35:6d:b0:90:03:17:ca:fa:
         0a:af:a5:e5:1c:b6:c3:f2:70:35:a6:26:23:5a:93:f2:cb:46:
         ee:3e:1b:ff:0c:df:9d:6d:9d:8f:f3:0b:f2:49:98:71:8f:23:
         9f:e8:d8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:57:33 2026 by rpki-client