This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a353a3a2f34382d3438203d3e20323632313832.roa
File:                     323830333a6630303a353a3a2f34382d3438203d3e20323632313832.roa (raw, json)
Hash identifier:          X80IzFU/nWk+UtICav/uOJYbNDYCNAg/Ric4Pje5avU=
Subject key identifier:   27:19:16:A7:F1:F8:58:B2:F7:AD:73:38:7A:FF:16:18:28:B1:41:7E
Certificate issuer:       /CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Certificate serial:       68F84EA584C646622987369B47692742AED65BD3
Authority key identifier: 3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a353a3a2f34382d3438203d3e20323632313832.roa
Signing time:             Mon 12 Jan 2026 21:00:05 +0000
ROA not before:           Mon 12 Jan 2026 20:55:05 +0000
ROA not after:            Mon 11 Jan 2027 21:00:05 +0000
asID:                     262182
IP address blocks:        2803:f00:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:f8:4e:a5:84:c6:46:62:29:87:36:9b:47:69:27:42:ae:d6:5b:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
        Validity
            Not Before: Jan 12 20:55:05 2026 GMT
            Not After : Jan 11 21:00:05 2027 GMT
        Subject: CN=271916A7F1F858B2F7AD73387AFF161828B1417E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:82:8b:9c:f1:08:ed:14:24:ba:7e:05:c2:ed:
                    98:e9:96:3c:84:79:bc:b9:3e:a0:c6:64:ab:b3:df:
                    c8:27:ea:c6:24:8d:00:e0:2e:27:c1:7a:80:66:ca:
                    6e:40:77:08:9e:fd:e2:6c:00:01:40:8d:05:72:df:
                    56:69:3c:75:f9:a6:30:01:d3:a8:aa:5a:3a:18:db:
                    22:ce:ef:cc:87:d7:48:60:37:c5:de:95:df:8b:0d:
                    db:bb:ae:6e:ad:0b:5e:f3:a3:b1:31:f9:f7:70:36:
                    95:28:1b:06:88:c4:ff:df:c0:22:42:0e:4e:d1:9b:
                    e1:55:13:ce:a0:5f:02:ae:c6:ba:08:d4:7f:5e:6e:
                    a9:e3:a4:26:9f:7c:aa:3b:63:5d:09:3b:f9:38:ab:
                    35:cd:16:51:a5:c8:38:5d:60:4b:0d:92:7a:4b:dd:
                    95:13:b6:50:e7:c0:82:ce:62:bc:d8:05:50:7d:77:
                    19:ef:02:52:24:3a:65:41:53:45:27:4b:9e:c0:69:
                    c0:af:03:96:5c:b3:c5:1b:48:26:a9:e3:9c:b3:43:
                    e4:a3:a3:57:9b:31:60:7d:1d:58:2e:ef:e4:5e:e6:
                    f5:2d:cd:79:7c:fb:a7:ec:cb:e2:77:21:35:23:18:
                    65:01:a2:8d:3d:80:c9:38:6c:0f:3c:46:1a:39:0f:
                    85:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:19:16:A7:F1:F8:58:B2:F7:AD:73:38:7A:FF:16:18:28:B1:41:7E
            X509v3 Authority Key Identifier:
                keyid:3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a353a3a2f34382d3438203d3e20323632313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f00:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:08:e9:cb:31:f8:cc:43:b5:c3:c8:3e:d5:16:a2:53:51:df:
         2a:d0:44:fb:3d:ed:68:c0:d2:19:0b:0e:16:54:16:85:e6:f7:
         9e:f7:eb:da:b9:04:b7:62:85:65:99:e0:79:de:e0:0e:51:77:
         5b:29:97:1e:ce:05:ed:52:7e:af:61:76:78:c5:7a:b5:1a:12:
         c8:94:b0:92:82:4c:5d:2c:37:96:40:e0:d9:94:ad:9d:56:00:
         f1:5a:48:9c:7f:7c:b2:78:6d:47:81:bf:4c:0e:d3:84:c8:21:
         aa:6c:39:c9:80:9c:5c:84:46:1b:1f:86:45:e4:45:d0:70:be:
         75:3a:12:de:d6:98:27:68:73:9d:b3:3c:34:c3:e4:07:b5:48:
         d3:5b:f3:61:30:12:90:fa:2f:5a:f5:50:8a:be:04:f5:62:9b:
         ac:d0:2d:48:c9:f7:c1:a5:ba:ff:e9:0a:b7:2d:6e:d8:c2:b2:
         7d:f0:b9:53:e8:8a:be:52:5e:ba:b7:71:0c:87:8c:08:93:5c:
         8f:b1:e4:16:0a:20:04:35:62:e2:27:45:ff:c7:9d:d2:8a:10:
         59:f4:90:db:15:ae:8a:5c:2e:8c:3a:54:7a:a0:4f:5a:33:61:
         50:8c:07:fe:ff:22:77:98:60:45:83:08:51:f4:84:51:a7:df:
         f1:a0:dd:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:05:31 2026 by rpki-client