This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/323830333a353838303a3a2f33322d3634203d3e203532343933.roa
File:                     323830333a353838303a3a2f33322d3634203d3e203532343933.roa (raw, json)
Hash identifier:          X5aGDt1VCZn7teBEXQmQz/kW+QMxI9IBPQCSWEpsi9o=
Subject key identifier:   BF:A4:BD:9D:E3:68:28:5D:6D:93:A2:BA:E7:E5:D2:BC:0B:86:48:5E
Certificate issuer:       /CN=6CD081A4A402C107D88705AFD93558A5645EE0CA
Certificate serial:       74C84A11575ADE9A266B3D1D3859535AD7967D06
Authority key identifier: 6C:D0:81:A4:A4:02:C1:07:D8:87:05:AF:D9:35:58:A5:64:5E:E0:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/323830333a353838303a3a2f33322d3634203d3e203532343933.roa
Signing time:             Tue 06 Jan 2026 19:10:26 +0000
ROA not before:           Tue 06 Jan 2026 19:05:26 +0000
ROA not after:            Tue 05 Jan 2027 19:10:26 +0000
asID:                     52493
IP address blocks:        2803:5880::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 16:29:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c8:4a:11:57:5a:de:9a:26:6b:3d:1d:38:59:53:5a:d7:96:7d:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CD081A4A402C107D88705AFD93558A5645EE0CA
        Validity
            Not Before: Jan  6 19:05:26 2026 GMT
            Not After : Jan  5 19:10:26 2027 GMT
        Subject: CN=BFA4BD9DE368285D6D93A2BAE7E5D2BC0B86485E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1a:82:39:f1:74:b8:b6:a5:f5:52:5e:35:cb:
                    ba:9d:0d:ca:a0:98:44:1c:cf:db:49:76:60:14:de:
                    db:4c:11:76:ed:0f:5b:8d:46:63:e6:28:56:bc:9c:
                    6c:69:d4:a6:6c:d7:44:76:2c:ef:85:43:42:ea:e4:
                    f3:b0:ad:f1:3f:55:e7:1d:ea:ef:a5:31:09:51:16:
                    14:e1:77:bf:6a:e0:ef:22:ac:9f:8e:00:e2:cf:22:
                    fb:7c:8d:5f:3f:97:35:d4:02:f3:61:0d:ab:53:9a:
                    53:ab:cb:68:42:60:2c:72:d5:9c:72:ca:ac:60:f7:
                    ff:86:c2:49:72:4f:6b:6f:e0:a9:84:43:7c:56:51:
                    fb:cd:6c:d2:a9:68:8a:2a:2c:fd:a3:93:ab:8e:91:
                    b1:96:f3:b7:29:e7:13:05:90:72:4d:bb:64:35:ba:
                    73:6c:30:9a:03:da:49:78:ce:6c:40:20:6b:5b:62:
                    03:9d:01:ff:81:14:49:70:cc:de:b7:5d:de:ad:79:
                    fe:5d:df:fc:d2:9f:13:1e:fd:58:2e:5d:59:5d:10:
                    34:0c:2a:ff:ad:0c:51:3e:ae:52:51:36:f6:31:a6:
                    bc:8c:da:47:88:8f:54:2a:ae:91:06:9f:a1:71:b2:
                    79:41:72:61:0c:8c:97:e7:a5:96:0d:00:e3:a2:21:
                    05:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A4:BD:9D:E3:68:28:5D:6D:93:A2:BA:E7:E5:D2:BC:0B:86:48:5E
            X509v3 Authority Key Identifier:
                keyid:6C:D0:81:A4:A4:02:C1:07:D8:87:05:AF:D9:35:58:A5:64:5E:E0:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/323830333a353838303a3a2f33322d3634203d3e203532343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5880::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:1b:2b:08:4e:36:58:29:da:66:27:3f:0f:af:c7:8f:47:81:
         bf:f2:04:73:b0:1a:a2:4f:8c:7d:9e:37:a2:12:27:d4:10:22:
         50:41:89:6d:ce:df:d1:20:8c:2d:63:e1:91:1c:81:97:9f:1e:
         80:6d:06:62:1f:c0:44:90:2b:1c:72:18:d4:14:61:73:80:7f:
         47:de:e5:6e:01:3a:90:d9:fd:73:dc:8b:56:5d:2d:3c:29:04:
         eb:ad:f4:07:ca:34:87:e2:84:d5:bf:f5:b9:ef:5c:7b:6d:53:
         f8:34:2e:09:ec:cb:51:9e:3d:12:a3:1c:25:ac:98:14:1b:cc:
         b3:d8:cf:e3:33:0c:ed:d8:a7:30:59:a4:e9:43:0f:5c:ce:6b:
         a0:76:d5:30:06:2f:67:8f:65:a7:6b:87:8f:25:93:be:04:9e:
         14:d9:e9:ad:8e:d2:a3:9c:1b:27:27:d5:92:c6:3a:69:75:51:
         c7:bb:98:60:9c:5d:e7:a2:20:59:1c:de:98:c8:62:23:c5:39:
         9b:77:6f:45:53:00:ae:e6:a2:df:55:26:2d:07:f1:5c:67:87:
         5d:9c:d9:1f:0f:e9:12:3c:f8:e2:ba:92:a9:60:e2:ff:4e:09:
         d8:7b:7e:12:c1:76:dc:9a:10:ec:9d:a4:bc:85:49:b2:ee:35:
         51:d1:27:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:12 2026 by rpki-client