This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/481AC8B769F99864CC4BD6B532F2C057ED5ECDBAA0EE15AD8C459B223EA57447/0/323830333a373065303a3a2f33322d3438203d3e20323633323335.roa
File:                     323830333a373065303a3a2f33322d3438203d3e20323633323335.roa (raw, json)
Hash identifier:          vIp/4KishWz+3QDyL50cLlNFk95nlP7Wms25DW/JvyQ=
Subject key identifier:   A5:4F:D3:8F:08:91:F5:E2:0C:7A:FB:8A:48:EA:B1:66:DA:A7:A4:2E
Certificate issuer:       /CN=C9A23B0E44881F29E54766EBC8C9B7E671B419C9
Certificate serial:       1494C1A9074E1514B874D9D9E4A3BD802A6A3892
Authority key identifier: C9:A2:3B:0E:44:88:1F:29:E5:47:66:EB:C8:C9:B7:E6:71:B4:19:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9A23B0E44881F29E54766EBC8C9B7E671B419C9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/481AC8B769F99864CC4BD6B532F2C057ED5ECDBAA0EE15AD8C459B223EA57447/0/323830333a373065303a3a2f33322d3438203d3e20323633323335.roa
Signing time:             Tue 06 Jan 2026 20:54:26 +0000
ROA not before:           Tue 06 Jan 2026 20:49:26 +0000
ROA not after:            Tue 05 Jan 2027 20:54:26 +0000
asID:                     263235
IP address blocks:        2803:70e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/481AC8B769F99864CC4BD6B532F2C057ED5ECDBAA0EE15AD8C459B223EA57447/0/C9A23B0E44881F29E54766EBC8C9B7E671B419C9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/481AC8B769F99864CC4BD6B532F2C057ED5ECDBAA0EE15AD8C459B223EA57447/0/C9A23B0E44881F29E54766EBC8C9B7E671B419C9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9A23B0E44881F29E54766EBC8C9B7E671B419C9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:94:c1:a9:07:4e:15:14:b8:74:d9:d9:e4:a3:bd:80:2a:6a:38:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9A23B0E44881F29E54766EBC8C9B7E671B419C9
        Validity
            Not Before: Jan  6 20:49:26 2026 GMT
            Not After : Jan  5 20:54:26 2027 GMT
        Subject: CN=A54FD38F0891F5E20C7AFB8A48EAB166DAA7A42E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b4:97:be:97:de:6c:75:b8:4a:3c:64:c9:b7:
                    e0:22:38:ab:b2:e0:fe:e5:73:09:f8:c7:4b:a2:dc:
                    1f:d5:d3:b7:9a:83:9a:59:c4:c6:ce:6e:0d:fa:cf:
                    bc:62:83:72:ed:b1:e7:60:5c:ee:62:d3:c1:1d:05:
                    08:e7:25:fc:b1:5b:64:8b:7f:5a:1e:3c:f9:81:e4:
                    b5:67:6b:98:eb:bf:12:1d:34:d5:d3:e0:a7:bc:f3:
                    7c:07:43:9d:7e:e8:f8:1d:cb:06:cd:d5:11:da:05:
                    40:c3:be:b3:f3:15:90:d1:b2:c7:08:11:33:4b:20:
                    4a:91:7d:b3:5a:4f:7f:08:ea:e8:b2:88:f5:9d:99:
                    44:bc:a4:3d:6a:17:da:2a:9e:c0:49:07:fd:2c:2a:
                    aa:5a:1c:da:52:8f:79:fe:35:2f:c5:c6:00:47:1a:
                    79:ac:00:18:b2:e4:50:21:ed:1e:f9:7e:d0:fb:91:
                    9f:c0:df:97:b0:15:de:90:8e:af:08:97:46:11:a8:
                    7d:fa:9c:9d:a6:83:5a:6d:67:17:67:53:d2:4f:d5:
                    60:eb:ca:aa:b6:7d:93:9a:15:9b:1e:80:9f:2c:31:
                    b1:79:d9:b2:5a:15:eb:43:38:1a:5a:44:7a:85:5c:
                    d1:2d:ff:f2:05:15:2f:d7:e9:9e:03:54:e8:00:5e:
                    79:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:4F:D3:8F:08:91:F5:E2:0C:7A:FB:8A:48:EA:B1:66:DA:A7:A4:2E
            X509v3 Authority Key Identifier:
                keyid:C9:A2:3B:0E:44:88:1F:29:E5:47:66:EB:C8:C9:B7:E6:71:B4:19:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/481AC8B769F99864CC4BD6B532F2C057ED5ECDBAA0EE15AD8C459B223EA57447/0/C9A23B0E44881F29E54766EBC8C9B7E671B419C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9A23B0E44881F29E54766EBC8C9B7E671B419C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/481AC8B769F99864CC4BD6B532F2C057ED5ECDBAA0EE15AD8C459B223EA57447/0/323830333a373065303a3a2f33322d3438203d3e20323633323335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:70e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:18:9b:29:22:de:a2:c5:db:77:65:ea:fb:72:d9:25:af:29:
         06:a4:0d:3e:b7:c2:c0:5b:7d:46:05:cd:c3:5b:b3:2c:6d:f5:
         8d:dc:ab:05:82:a3:a2:46:61:e8:b2:8a:5e:88:8c:c2:17:99:
         72:df:d1:82:7d:0c:0e:2b:f0:3c:0d:3e:b4:0c:bd:e8:fa:84:
         f8:e5:54:1e:e1:ad:d5:df:69:9d:51:de:a9:b5:d7:19:a9:23:
         56:30:e3:22:f8:0f:df:89:be:9b:f6:31:87:77:dd:8f:fb:59:
         77:9f:57:05:14:95:1e:2e:eb:bd:a9:30:75:f2:a9:2a:e1:a7:
         4d:2d:b7:04:b9:46:c5:25:29:ce:3e:72:9d:f4:b3:ad:dd:1d:
         b4:d0:3d:1e:85:b5:5d:fb:bd:28:aa:56:c2:72:f4:9a:0c:49:
         8d:7a:da:5f:4f:4b:16:21:06:f8:3c:6e:19:82:30:82:78:65:
         bf:49:55:4f:39:b7:4a:9a:03:95:ff:53:c8:03:48:22:73:cc:
         d3:37:17:f1:73:b7:5a:6b:96:1e:bc:4c:ba:b8:60:f1:a8:08:
         62:fc:20:eb:45:17:dd:88:ab:42:92:e9:80:0b:d8:2d:34:d4:
         17:ad:f3:af:df:92:e6:1c:f8:2e:09:89:b7:e9:69:81:5b:b5:
         d1:f7:d2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:15:34 2026 by rpki-client