This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/45F452914C03FE67B267035F4F43DA68A9B91C23B85FB0A95A509436B4634EC7/0/323830333a643865303a3a2f33322d3438203d3e20323639383739.roa
File:                     323830333a643865303a3a2f33322d3438203d3e20323639383739.roa (raw, json)
Hash identifier:          9HtqZRz3Whwruje7LfnwcckDkHxstPdAQFGoGr+r23I=
Subject key identifier:   FC:FE:85:33:8D:3B:48:03:36:60:21:83:AD:18:E4:F9:B5:41:A8:70
Certificate issuer:       /CN=0876357D23A3C9EA0B1482697310BD71CC75DCA7
Certificate serial:       51FEA11C9CE5827881F80CCDA86F13E12EC59747
Authority key identifier: 08:76:35:7D:23:A3:C9:EA:0B:14:82:69:73:10:BD:71:CC:75:DC:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0876357D23A3C9EA0B1482697310BD71CC75DCA7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/45F452914C03FE67B267035F4F43DA68A9B91C23B85FB0A95A509436B4634EC7/0/323830333a643865303a3a2f33322d3438203d3e20323639383739.roa
Signing time:             Tue 06 Jan 2026 19:07:39 +0000
ROA not before:           Tue 06 Jan 2026 19:02:39 +0000
ROA not after:            Tue 05 Jan 2027 19:07:39 +0000
asID:                     269879
IP address blocks:        2803:d8e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/45F452914C03FE67B267035F4F43DA68A9B91C23B85FB0A95A509436B4634EC7/0/0876357D23A3C9EA0B1482697310BD71CC75DCA7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/45F452914C03FE67B267035F4F43DA68A9B91C23B85FB0A95A509436B4634EC7/0/0876357D23A3C9EA0B1482697310BD71CC75DCA7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0876357D23A3C9EA0B1482697310BD71CC75DCA7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 21:41:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:fe:a1:1c:9c:e5:82:78:81:f8:0c:cd:a8:6f:13:e1:2e:c5:97:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0876357D23A3C9EA0B1482697310BD71CC75DCA7
        Validity
            Not Before: Jan  6 19:02:39 2026 GMT
            Not After : Jan  5 19:07:39 2027 GMT
        Subject: CN=FCFE85338D3B480336602183AD18E4F9B541A870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a1:99:71:bc:3b:fd:4f:a0:7f:0f:ef:50:c4:
                    59:d0:29:5a:08:69:0c:26:ef:8d:5e:4b:04:24:2d:
                    d0:56:f2:81:04:1b:7d:31:05:cc:51:7e:7f:a2:8d:
                    cb:36:7f:78:1d:ac:cc:04:bf:25:ae:8d:1b:0c:58:
                    93:e7:7d:b0:db:b6:77:ff:e1:37:4e:c8:a7:cb:87:
                    b8:42:ce:38:4d:3b:e8:cd:6a:75:b6:38:0d:1f:1c:
                    0a:e8:79:9e:2f:3e:6b:e2:33:09:06:77:6a:b4:bf:
                    ba:f5:35:d0:0c:a7:bc:ef:14:70:24:78:70:5a:0e:
                    ae:f9:58:e8:ae:aa:11:7a:0e:5b:11:f1:66:e9:9e:
                    bf:b8:5a:d2:a6:84:42:81:51:21:cd:07:fc:35:9e:
                    82:7a:75:13:0b:27:db:83:77:e7:ec:17:92:70:39:
                    33:90:87:31:61:30:8f:c8:2d:54:bd:88:9a:09:8a:
                    57:2d:37:f5:c0:04:33:56:12:62:36:a4:db:e1:b6:
                    18:3b:7c:8a:14:1c:ee:b0:ca:af:8a:65:0b:e0:32:
                    86:b2:f6:ab:3a:26:48:4e:48:51:7f:7a:d6:6e:99:
                    4b:c9:92:44:14:a2:6c:a7:e0:38:9d:1d:a7:22:1f:
                    29:67:e6:c3:50:de:b0:53:fd:38:44:df:4a:8c:c2:
                    a5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:FE:85:33:8D:3B:48:03:36:60:21:83:AD:18:E4:F9:B5:41:A8:70
            X509v3 Authority Key Identifier:
                keyid:08:76:35:7D:23:A3:C9:EA:0B:14:82:69:73:10:BD:71:CC:75:DC:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/45F452914C03FE67B267035F4F43DA68A9B91C23B85FB0A95A509436B4634EC7/0/0876357D23A3C9EA0B1482697310BD71CC75DCA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0876357D23A3C9EA0B1482697310BD71CC75DCA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/45F452914C03FE67B267035F4F43DA68A9B91C23B85FB0A95A509436B4634EC7/0/323830333a643865303a3a2f33322d3438203d3e20323639383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d8e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:12:fb:bf:ba:5c:18:3c:92:2b:6b:0a:f2:8d:1f:96:45:c3:
         b8:98:e9:ab:69:da:5b:05:ac:dd:64:cb:87:3d:09:83:c9:76:
         49:23:d8:e8:0b:a5:0f:ab:56:5d:4c:5e:d3:08:4c:d6:ce:eb:
         2b:66:de:b7:c1:67:da:80:42:4b:79:63:7c:7c:c4:4e:67:2e:
         35:b3:b0:fc:be:a5:8e:40:88:70:48:28:89:4f:f9:48:0b:22:
         f3:66:b8:17:d5:c9:ea:be:fd:c9:57:84:0e:89:fd:01:20:0c:
         12:f3:53:73:3f:f5:95:06:e6:42:97:58:9a:48:67:84:ec:a9:
         76:9e:53:ba:13:60:e7:97:1f:ea:6e:65:9f:36:24:c7:1e:59:
         15:c9:f3:dc:33:d5:3a:a6:5c:92:a5:28:6c:09:d7:f3:7d:46:
         c5:24:7f:ac:a9:70:8f:ed:3b:d0:6e:a3:8d:e2:bc:df:35:78:
         45:47:01:3d:41:9c:0c:8c:df:d4:2a:23:27:b8:cf:13:a4:0e:
         c1:59:40:74:75:11:77:f6:92:ef:40:ab:09:79:1f:4e:40:d4:
         8a:cc:d8:37:6e:67:3b:f8:be:ad:40:58:89:69:b4:fc:9e:d9:
         08:58:10:8b:cc:42:c2:27:0c:3a:2d:76:9a:0d:66:2b:7a:b6:
         8d:a0:e2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:17:21 2026 by rpki-client