This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/42E42C781DBB75A285DBB7B6FA83F07522E6DBEEB5F5A5C4B1928B21975F5BAC/0/323830333a363330303a3a2f33322d3332203d3e203532343534.roa
File:                     323830333a363330303a3a2f33322d3332203d3e203532343534.roa (raw, json)
Hash identifier:          hPFwpS3dxMfAOi/jw2bVo8CBcM1d7+wIPMaMR2AwVKY=
Subject key identifier:   C2:97:CA:9B:E3:24:EE:1D:5B:76:D9:33:47:72:D8:D4:6F:60:51:7D
Certificate issuer:       /CN=EB962D020BCD0C8EC8D36618D22902E2E350CD44
Certificate serial:       768FFBF1AAEDFFD7788A6629A0C29738FB4B6971
Authority key identifier: EB:96:2D:02:0B:CD:0C:8E:C8:D3:66:18:D2:29:02:E2:E3:50:CD:44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB962D020BCD0C8EC8D36618D22902E2E350CD44.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/42E42C781DBB75A285DBB7B6FA83F07522E6DBEEB5F5A5C4B1928B21975F5BAC/0/323830333a363330303a3a2f33322d3332203d3e203532343534.roa
Signing time:             Tue 06 Jan 2026 20:56:43 +0000
ROA not before:           Tue 06 Jan 2026 20:51:43 +0000
ROA not after:            Tue 05 Jan 2027 20:56:43 +0000
asID:                     52454
IP address blocks:        2803:6300::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/42E42C781DBB75A285DBB7B6FA83F07522E6DBEEB5F5A5C4B1928B21975F5BAC/0/EB962D020BCD0C8EC8D36618D22902E2E350CD44.crl
                          rsync://repository.lacnic.net/rpki/lacnic/42E42C781DBB75A285DBB7B6FA83F07522E6DBEEB5F5A5C4B1928B21975F5BAC/0/EB962D020BCD0C8EC8D36618D22902E2E350CD44.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB962D020BCD0C8EC8D36618D22902E2E350CD44.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 12:29:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:8f:fb:f1:aa:ed:ff:d7:78:8a:66:29:a0:c2:97:38:fb:4b:69:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB962D020BCD0C8EC8D36618D22902E2E350CD44
        Validity
            Not Before: Jan  6 20:51:43 2026 GMT
            Not After : Jan  5 20:56:43 2027 GMT
        Subject: CN=C297CA9BE324EE1D5B76D9334772D8D46F60517D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3e:18:7b:4e:9f:5b:e2:46:17:90:b4:9b:66:
                    93:f5:76:08:82:4a:06:13:8b:e5:7a:42:dc:6b:88:
                    e6:f8:d6:05:8f:bc:6c:8d:f6:21:2d:f7:56:39:87:
                    9c:2e:32:cd:2a:89:a2:59:68:3c:a8:6a:6c:4d:d9:
                    5e:b5:f4:07:81:30:09:aa:f9:31:2f:ad:85:e6:bb:
                    04:6e:3c:e9:ba:0b:a1:0f:b1:37:47:b8:70:80:ca:
                    73:da:e4:40:22:39:b2:f0:5e:fe:c6:8a:1c:6e:43:
                    2a:73:ad:fd:ba:78:3d:7a:19:46:ca:16:87:c9:5f:
                    88:ed:28:9c:c3:42:24:68:b3:56:40:90:61:aa:0c:
                    6c:4c:3b:3e:dc:e7:70:98:3a:ac:99:37:08:71:4e:
                    6b:28:3a:06:77:1f:d5:ad:db:36:9b:da:7e:2d:f4:
                    07:11:25:4e:f0:48:29:49:92:c8:21:b7:67:48:67:
                    3d:66:8b:74:82:48:9b:a2:e5:6a:60:c8:d3:ea:5d:
                    3f:5f:d7:8f:67:bf:cb:6b:ff:ff:ce:fc:f3:73:40:
                    7b:51:88:e5:00:2d:c7:5d:3e:83:3b:e4:b0:a9:0c:
                    b5:06:3c:f1:ad:df:61:6a:ba:fd:77:de:66:1d:85:
                    81:39:ad:b0:ac:cf:89:72:32:ab:44:97:7d:a0:7e:
                    20:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:97:CA:9B:E3:24:EE:1D:5B:76:D9:33:47:72:D8:D4:6F:60:51:7D
            X509v3 Authority Key Identifier:
                keyid:EB:96:2D:02:0B:CD:0C:8E:C8:D3:66:18:D2:29:02:E2:E3:50:CD:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/42E42C781DBB75A285DBB7B6FA83F07522E6DBEEB5F5A5C4B1928B21975F5BAC/0/EB962D020BCD0C8EC8D36618D22902E2E350CD44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB962D020BCD0C8EC8D36618D22902E2E350CD44.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/42E42C781DBB75A285DBB7B6FA83F07522E6DBEEB5F5A5C4B1928B21975F5BAC/0/323830333a363330303a3a2f33322d3332203d3e203532343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6300::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:db:3f:dd:69:6f:46:93:6b:0b:d4:e7:61:8e:14:a3:a6:9b:
         f3:62:71:ac:6c:c4:a7:f9:f9:de:23:f8:38:56:53:d0:3a:af:
         96:56:2b:6d:33:d7:9a:0a:11:7f:27:0e:38:01:8a:d5:c0:f5:
         ee:5c:a6:6d:56:3d:c0:33:71:19:de:05:02:c1:b3:6d:4a:eb:
         fe:b9:71:57:6e:62:f2:20:c2:e2:c7:39:37:eb:e5:7a:66:de:
         42:82:e6:9b:07:19:28:b8:ab:34:fa:8a:1e:30:6c:a4:29:82:
         ea:1a:a6:2b:9c:bc:d9:f4:a2:d1:e3:f6:be:1d:4a:02:55:40:
         cd:b4:34:0f:3f:9e:76:02:9b:71:75:dd:52:e6:a7:39:52:f2:
         8f:0b:c0:a3:cf:01:bc:57:f7:d9:bf:4b:8a:be:a1:9f:f4:26:
         99:af:e9:e4:82:ad:83:86:9d:7d:0f:41:2d:25:90:75:f9:1b:
         e1:28:ac:02:4b:21:b4:8f:fb:e9:67:10:51:12:88:5a:8c:17:
         6d:02:1f:2a:d6:bf:a8:10:3b:06:0b:95:f6:60:07:c3:7f:42:
         09:12:5e:ec:93:97:d2:d9:da:c3:11:76:a9:73:a6:7c:9e:9a:
         69:9c:01:8b:0e:0e:2c:ff:50:1d:dd:ca:86:ba:1a:a6:ee:67:
         21:e0:66:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:17:55 2026 by rpki-client