This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/323830333a3263303a3a2f33322d3332203d3e20323634383330.roa
File:                     323830333a3263303a3a2f33322d3332203d3e20323634383330.roa (raw, json)
Hash identifier:          WBonhfFU4sonFcJZPbWcwX5laIafHw4ALWaJYlLPeXM=
Subject key identifier:   AF:91:35:A0:33:14:EA:E2:21:FB:B5:24:61:46:04:91:FE:FC:4D:E2
Certificate issuer:       /CN=EEFCF62476998633F8D62C020C074FEF5CD0077E
Certificate serial:       74062D0C50B2CFA5CA7AAD18E8B9C31617DBC32C
Authority key identifier: EE:FC:F6:24:76:99:86:33:F8:D6:2C:02:0C:07:4F:EF:5C:D0:07:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/323830333a3263303a3a2f33322d3332203d3e20323634383330.roa
Signing time:             Tue 06 Jan 2026 20:50:05 +0000
ROA not before:           Tue 06 Jan 2026 20:45:05 +0000
ROA not after:            Tue 05 Jan 2027 20:50:05 +0000
asID:                     264830
IP address blocks:        2803:2c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:06:2d:0c:50:b2:cf:a5:ca:7a:ad:18:e8:b9:c3:16:17:db:c3:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEFCF62476998633F8D62C020C074FEF5CD0077E
        Validity
            Not Before: Jan  6 20:45:05 2026 GMT
            Not After : Jan  5 20:50:05 2027 GMT
        Subject: CN=AF9135A03314EAE221FBB52461460491FEFC4DE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:79:ea:c3:e9:b4:cc:08:e7:ec:26:5c:a8:4c:
                    eb:da:84:db:84:c2:7b:04:03:77:98:ac:8d:0f:c1:
                    ff:10:5e:5e:29:cd:40:18:6f:d2:83:ad:a5:62:54:
                    2d:9d:14:b9:6d:2e:ed:19:75:31:8a:b1:93:3c:75:
                    d0:5f:20:2b:f6:71:5b:76:46:f0:26:43:d8:94:62:
                    36:d6:9a:04:ae:33:e2:5c:22:04:93:b4:ba:9a:26:
                    68:94:6d:df:42:1b:4a:ca:f2:28:45:28:f2:56:ee:
                    36:c2:84:ee:bf:a5:a4:f0:dd:09:56:ca:e4:f3:75:
                    85:a9:8b:b9:0d:65:f4:a6:cd:17:77:11:d3:ff:1e:
                    87:c8:fe:78:9a:72:83:91:ef:c5:81:04:dc:44:d7:
                    81:33:c7:d7:41:2a:64:82:0a:9c:3b:a2:eb:d3:11:
                    44:7e:7a:1c:15:53:be:5f:73:f9:55:48:d3:b5:c0:
                    7d:30:bd:9e:c2:e5:d6:79:3f:cf:24:47:bb:27:18:
                    e0:46:97:c3:ee:9f:0f:ba:da:0b:c1:31:b0:07:6d:
                    92:16:80:49:b5:64:d4:0a:89:43:f0:e1:07:dc:f8:
                    c9:65:29:c8:f5:34:41:54:5e:ae:30:79:dd:18:c9:
                    90:df:2f:7c:af:c1:a6:f3:4f:21:56:e4:30:cf:af:
                    98:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:91:35:A0:33:14:EA:E2:21:FB:B5:24:61:46:04:91:FE:FC:4D:E2
            X509v3 Authority Key Identifier:
                keyid:EE:FC:F6:24:76:99:86:33:F8:D6:2C:02:0C:07:4F:EF:5C:D0:07:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/323830333a3263303a3a2f33322d3332203d3e20323634383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:4f:41:ec:00:b5:65:0b:1c:53:c6:e6:03:d7:2f:3b:89:8b:
         25:48:f2:cb:a2:2e:2c:50:57:b6:8b:1b:09:8e:24:a2:2c:99:
         95:2f:ee:be:d5:f9:ea:5f:b0:b8:b9:49:23:c5:19:be:c5:26:
         4d:74:73:72:7e:ad:59:ca:3c:85:49:5f:00:45:bf:e7:d6:86:
         99:8b:17:44:15:c7:9b:25:04:45:0c:40:7f:6a:c7:b8:1e:0f:
         74:bb:00:36:94:94:ea:1e:16:cc:14:91:00:3c:72:5f:d8:4e:
         36:91:b4:f6:1c:ea:9b:8f:5e:4c:99:f4:f2:d6:54:79:f0:74:
         cc:cd:76:08:70:66:b1:95:1c:b9:3a:36:a5:f1:73:d5:04:98:
         13:b1:3c:b8:e3:10:8c:52:5e:a2:75:9a:32:7f:28:be:eb:87:
         16:c6:3f:d5:bf:97:09:b3:0e:17:4f:bf:f0:b4:60:40:89:f7:
         c4:9c:fb:74:91:d3:59:59:2c:15:70:f9:96:3d:56:4b:b4:1b:
         bf:32:03:1f:c5:46:71:be:b8:18:3d:3b:e6:7e:64:80:79:2c:
         40:16:59:f3:fd:38:9f:4e:aa:20:6e:71:b3:6e:08:33:44:0d:
         a1:b7:a2:91:43:f7:4e:67:7e:91:03:52:d2:b0:e3:dc:d8:cb:
         7d:3f:a6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:22:58 2026 by rpki-client