This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4AAD381D56BB1246F9A08210B02C7D0414BC98C8CD7F9A62687DF7BFCCA5F4AE/0/323830333a653036303a3a2f33322d3332203d3e20323632313931.roa
File:                     323830333a653036303a3a2f33322d3332203d3e20323632313931.roa (raw, json)
Hash identifier:          s4Y/FISIWbAhEkbaDuOWpI+tI1VuOjklMM72iE9MfVA=
Subject key identifier:   C8:9B:DE:03:6C:3E:76:D1:93:FA:D0:40:7D:BF:B2:83:5F:EF:A6:D6
Certificate issuer:       /CN=B3AA883DF802251B99A42D7F578AD8768A729025
Certificate serial:       55EF667A682D2F8030C09D1454E162A0091ED668
Authority key identifier: B3:AA:88:3D:F8:02:25:1B:99:A4:2D:7F:57:8A:D8:76:8A:72:90:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3AA883DF802251B99A42D7F578AD8768A729025.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4AAD381D56BB1246F9A08210B02C7D0414BC98C8CD7F9A62687DF7BFCCA5F4AE/0/323830333a653036303a3a2f33322d3332203d3e20323632313931.roa
Signing time:             Tue 06 Jan 2026 19:44:50 +0000
ROA not before:           Tue 06 Jan 2026 19:39:50 +0000
ROA not after:            Tue 05 Jan 2027 19:44:50 +0000
asID:                     262191
IP address blocks:        2803:e060::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4AAD381D56BB1246F9A08210B02C7D0414BC98C8CD7F9A62687DF7BFCCA5F4AE/0/B3AA883DF802251B99A42D7F578AD8768A729025.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4AAD381D56BB1246F9A08210B02C7D0414BC98C8CD7F9A62687DF7BFCCA5F4AE/0/B3AA883DF802251B99A42D7F578AD8768A729025.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3AA883DF802251B99A42D7F578AD8768A729025.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:ef:66:7a:68:2d:2f:80:30:c0:9d:14:54:e1:62:a0:09:1e:d6:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3AA883DF802251B99A42D7F578AD8768A729025
        Validity
            Not Before: Jan  6 19:39:50 2026 GMT
            Not After : Jan  5 19:44:50 2027 GMT
        Subject: CN=C89BDE036C3E76D193FAD0407DBFB2835FEFA6D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:aa:bd:86:3e:e0:f6:f1:24:c8:a7:91:b0:fe:
                    e0:b8:b5:cb:01:ed:1f:e7:e3:19:97:f4:7d:a1:ae:
                    df:39:db:2e:5f:06:35:70:ce:d2:0d:44:96:0d:3b:
                    97:04:8c:1f:5e:61:af:48:be:7b:3f:1f:93:87:7f:
                    04:4a:93:33:a2:b8:cd:9b:9e:df:8b:ba:65:d6:94:
                    89:e3:29:23:30:e9:f2:12:2e:2e:02:77:f0:1b:fe:
                    96:67:a0:00:35:92:58:ff:54:2f:2a:37:10:fd:d0:
                    80:36:c5:fd:e5:db:8c:e7:bb:42:c2:0f:82:2d:45:
                    14:fe:cc:62:a0:77:a0:e3:66:29:80:ed:f0:28:b5:
                    d3:ce:f6:52:73:05:0e:f2:92:d4:d7:ba:39:4a:c2:
                    58:d3:d2:42:40:8a:c4:40:20:9c:63:a2:ec:13:66:
                    2c:e5:2a:50:9d:5f:00:5c:b8:ad:45:13:7a:c8:c1:
                    ff:07:42:6a:f6:2b:cf:c1:e7:87:09:99:ad:cf:3c:
                    d4:0a:9d:c3:4a:6d:1a:08:d9:b7:c6:60:dd:a0:7b:
                    ae:81:a2:4b:45:9f:94:be:d0:a3:3b:e5:f4:f8:da:
                    c9:03:1d:34:47:ae:cc:de:02:24:a1:f9:50:0b:6c:
                    e6:bb:86:7b:d9:f9:5a:28:28:aa:56:b8:25:80:9d:
                    5a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:9B:DE:03:6C:3E:76:D1:93:FA:D0:40:7D:BF:B2:83:5F:EF:A6:D6
            X509v3 Authority Key Identifier:
                keyid:B3:AA:88:3D:F8:02:25:1B:99:A4:2D:7F:57:8A:D8:76:8A:72:90:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4AAD381D56BB1246F9A08210B02C7D0414BC98C8CD7F9A62687DF7BFCCA5F4AE/0/B3AA883DF802251B99A42D7F578AD8768A729025.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3AA883DF802251B99A42D7F578AD8768A729025.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4AAD381D56BB1246F9A08210B02C7D0414BC98C8CD7F9A62687DF7BFCCA5F4AE/0/323830333a653036303a3a2f33322d3332203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e060::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:8f:b7:30:0c:59:6d:de:1f:53:b8:42:52:58:b8:ec:9e:76:
         82:56:96:31:02:28:97:47:7e:45:69:b7:0d:6f:11:fa:93:0c:
         fa:0c:33:03:60:19:53:e2:31:6e:ac:86:62:79:ac:24:4c:bc:
         46:21:ac:4e:1e:7d:ad:91:2b:61:dc:61:ba:2e:0f:29:84:98:
         c5:6c:0a:b6:06:db:63:d6:28:6d:43:ba:fa:2a:52:f1:82:f6:
         5d:03:10:f5:d1:ad:23:6e:a8:df:83:92:f3:61:83:f7:30:3e:
         7c:cb:d3:74:29:f2:01:20:a7:a2:18:e2:8b:39:91:11:8e:8d:
         4f:4d:2e:29:1c:5c:36:01:24:8e:1f:0d:30:1f:de:97:d0:60:
         da:a2:f8:1b:f1:b2:cf:48:65:74:5b:1a:ac:d0:db:51:d7:fe:
         f1:27:33:f9:23:bd:a4:5e:50:e9:f0:4f:b2:50:09:f8:6a:4f:
         f0:bd:ef:df:98:b9:ae:b9:56:58:be:ae:c9:20:73:05:29:e9:
         e1:c7:95:ad:8a:c4:4d:3e:af:e9:24:07:92:9e:19:4d:cb:c0:
         a6:c6:50:c9:f4:09:1c:da:a3:41:07:28:78:b0:64:4d:8a:66:
         aa:9b:82:6e:ae:8c:0e:7f:65:c6:48:45:35:15:ab:8a:01:23:
         9e:a2:16:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:05:41 2026 by rpki-client