This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/408BADD239FA7B927C406208FE8E94AD8C137EACCA447E6D7896BF74FF0323DC/0/323830333a656234303a3a2f33322d3332203d3e20323634373132.roa
File:                     323830333a656234303a3a2f33322d3332203d3e20323634373132.roa (raw, json)
Hash identifier:          uXsSAk5HXSeElsA0MzaOV3TOI3MLOnCqM6KIAWRojLQ=
Subject key identifier:   94:D6:86:68:E6:8F:83:3C:D7:4D:6A:32:BD:50:CB:E0:25:91:85:BA
Certificate issuer:       /CN=A5869529D5045BE846944304A74862560C583B82
Certificate serial:       10AC82F3180C576FD6EB489C6BC7A5A4FC35FFAB
Authority key identifier: A5:86:95:29:D5:04:5B:E8:46:94:43:04:A7:48:62:56:0C:58:3B:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5869529D5045BE846944304A74862560C583B82.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/408BADD239FA7B927C406208FE8E94AD8C137EACCA447E6D7896BF74FF0323DC/0/323830333a656234303a3a2f33322d3332203d3e20323634373132.roa
Signing time:             Tue 06 Jan 2026 19:20:28 +0000
ROA not before:           Tue 06 Jan 2026 19:15:28 +0000
ROA not after:            Tue 05 Jan 2027 19:20:28 +0000
asID:                     264712
IP address blocks:        2803:eb40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/408BADD239FA7B927C406208FE8E94AD8C137EACCA447E6D7896BF74FF0323DC/0/A5869529D5045BE846944304A74862560C583B82.crl
                          rsync://repository.lacnic.net/rpki/lacnic/408BADD239FA7B927C406208FE8E94AD8C137EACCA447E6D7896BF74FF0323DC/0/A5869529D5045BE846944304A74862560C583B82.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5869529D5045BE846944304A74862560C583B82.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 07:53:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:ac:82:f3:18:0c:57:6f:d6:eb:48:9c:6b:c7:a5:a4:fc:35:ff:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5869529D5045BE846944304A74862560C583B82
        Validity
            Not Before: Jan  6 19:15:28 2026 GMT
            Not After : Jan  5 19:20:28 2027 GMT
        Subject: CN=94D68668E68F833CD74D6A32BD50CBE0259185BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f4:91:d6:02:42:57:ed:7b:57:ab:9f:4f:d1:
                    bc:f6:ce:2b:8e:fd:75:83:82:09:e8:73:40:af:bc:
                    80:6c:2e:b8:87:57:ea:99:d1:e9:74:c0:18:fb:e2:
                    d7:10:99:49:e5:b0:46:cb:35:66:92:a8:24:7d:1d:
                    47:3a:c0:1d:ff:c0:4f:20:85:29:21:10:c1:51:9b:
                    f4:ab:ad:ef:85:36:09:62:75:48:19:64:0f:81:52:
                    07:fb:7b:fe:af:1a:cb:c2:06:78:5b:ce:49:f2:88:
                    70:f9:f9:21:43:3b:9c:07:aa:95:a6:9d:11:62:4b:
                    10:eb:31:ea:2d:de:63:96:42:79:67:dd:14:bb:21:
                    94:0b:b6:8e:e9:5c:47:cf:43:d3:35:8d:a2:a0:95:
                    a0:c6:ae:25:43:0d:27:cb:e7:d7:7c:ae:8c:53:0f:
                    34:ff:25:b3:1c:5f:eb:ae:6d:02:ae:83:25:2d:1b:
                    98:75:f0:bf:9c:89:f1:21:98:95:e5:8a:a4:6f:32:
                    8d:6c:2a:9e:5f:43:0d:19:e2:0a:05:1b:b9:c3:c0:
                    1c:b7:72:c7:dd:6d:29:c3:c4:48:2b:ea:0a:c5:15:
                    5d:04:67:83:01:41:db:81:fa:9a:a1:35:0f:c1:e5:
                    ad:e8:56:71:47:dc:2e:27:ff:7c:8f:30:c8:09:b9:
                    6d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D6:86:68:E6:8F:83:3C:D7:4D:6A:32:BD:50:CB:E0:25:91:85:BA
            X509v3 Authority Key Identifier:
                keyid:A5:86:95:29:D5:04:5B:E8:46:94:43:04:A7:48:62:56:0C:58:3B:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/408BADD239FA7B927C406208FE8E94AD8C137EACCA447E6D7896BF74FF0323DC/0/A5869529D5045BE846944304A74862560C583B82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5869529D5045BE846944304A74862560C583B82.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/408BADD239FA7B927C406208FE8E94AD8C137EACCA447E6D7896BF74FF0323DC/0/323830333a656234303a3a2f33322d3332203d3e20323634373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:eb40::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:9a:0d:d0:30:dc:b4:58:97:08:61:b8:b5:91:30:f0:d7:c6:
         7e:ad:88:70:64:17:7c:bc:5f:82:d6:ae:1e:a2:ad:4c:f5:86:
         d9:92:b5:f4:cf:85:a4:60:01:1a:2b:4d:89:9d:4b:1a:f0:5c:
         0a:ef:29:69:d3:8c:a7:03:a5:78:40:cc:05:e2:df:83:2a:c0:
         5e:f5:d3:be:bb:5f:82:bd:67:c9:a4:62:1d:d2:97:56:9e:de:
         17:f9:ca:e1:08:e7:59:18:02:46:23:a5:d9:6e:62:a3:fb:75:
         ab:ce:3a:04:cf:e1:05:88:79:d4:f0:14:b4:d2:ce:b7:35:7f:
         08:0f:0c:ed:c2:c4:c8:01:9d:b5:ff:e9:7c:62:42:22:d3:05:
         df:36:15:83:83:1d:c7:08:0d:74:54:6c:2f:4a:f7:2d:b7:a0:
         4c:35:56:0a:f6:db:cf:7d:17:4f:76:c1:17:b4:5a:dc:d5:2a:
         9a:2b:1e:66:6d:f5:de:21:9d:7b:99:56:3c:c7:fe:15:08:da:
         ec:56:72:c7:77:73:8a:d4:96:a6:e1:99:58:17:41:f0:03:0b:
         09:d3:07:ee:a1:8f:bc:a9:3a:cd:17:53:1d:47:a1:7e:ca:45:
         96:af:dd:b3:49:67:1b:64:01:47:30:98:f1:a0:ad:36:ed:4d:
         0e:d0:89:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:06:00 2026 by rpki-client