This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/323830333a353661303a3a2f33322d3634203d3e20323636383934.roa
File:                     323830333a353661303a3a2f33322d3634203d3e20323636383934.roa (raw, json)
Hash identifier:          5Gv0n+DMR0dqKdfYN5ogx8t1IiVsPcNniKJSDYzEagI=
Subject key identifier:   3B:00:DD:6A:B5:4B:6B:F6:F6:74:A9:DE:A6:9D:5B:DC:3E:76:97:13
Certificate issuer:       /CN=6913998846C57916C081CA47CE0BCEB486460BE1
Certificate serial:       01C3469CD3BEEB490D86801450039E9C5FEB962A
Authority key identifier: 69:13:99:88:46:C5:79:16:C0:81:CA:47:CE:0B:CE:B4:86:46:0B:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6913998846C57916C081CA47CE0BCEB486460BE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/323830333a353661303a3a2f33322d3634203d3e20323636383934.roa
Signing time:             Tue 20 Jan 2026 04:00:00 +0000
ROA not before:           Tue 20 Jan 2026 03:55:00 +0000
ROA not after:            Tue 19 Jan 2027 04:00:00 +0000
asID:                     266894
IP address blocks:        2803:56a0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/6913998846C57916C081CA47CE0BCEB486460BE1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/6913998846C57916C081CA47CE0BCEB486460BE1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6913998846C57916C081CA47CE0BCEB486460BE1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:c3:46:9c:d3:be:eb:49:0d:86:80:14:50:03:9e:9c:5f:eb:96:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6913998846C57916C081CA47CE0BCEB486460BE1
        Validity
            Not Before: Jan 20 03:55:00 2026 GMT
            Not After : Jan 19 04:00:00 2027 GMT
        Subject: CN=3B00DD6AB54B6BF6F674A9DEA69D5BDC3E769713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:a0:bc:84:c0:f5:4c:8c:5a:fb:a8:43:0a:b0:
                    1d:59:fc:98:e9:03:70:f0:86:c2:87:61:b5:e8:a1:
                    e5:1b:6d:7d:51:31:5c:5f:06:21:9a:c2:f6:2d:91:
                    60:a7:a1:ce:7b:c8:9b:69:aa:fd:70:da:f8:42:68:
                    65:ae:d7:66:ff:ad:81:3a:cf:a9:0e:bf:59:d9:98:
                    63:69:b6:a2:0d:7a:64:d4:b0:ad:e0:cf:14:67:be:
                    73:40:e8:72:e8:99:e1:1c:e3:fe:72:79:97:0c:3d:
                    74:8c:97:aa:68:c9:56:ce:47:6c:b7:bb:39:6d:32:
                    86:29:08:63:20:ee:91:71:8d:e5:ca:22:b4:0f:7a:
                    e5:1a:32:95:ad:c0:60:8a:8e:b0:4e:f0:76:a0:1c:
                    f5:3a:cd:a3:62:db:c4:8d:eb:83:31:df:c6:a7:ff:
                    0a:22:60:c3:01:01:14:39:68:09:9b:a6:90:d9:94:
                    60:c3:a7:d5:ed:a6:00:f2:92:ea:74:0b:84:87:4f:
                    fc:a5:b0:cd:cb:b8:b2:1f:b5:1f:4c:f2:f9:7f:02:
                    90:36:b2:b4:3f:69:d0:88:0e:cc:e4:ab:15:42:17:
                    c1:b4:84:5f:5e:8e:e2:c1:1e:66:ad:b9:13:fd:d2:
                    94:21:3f:bb:f2:a3:e7:c1:f0:1e:84:ae:7e:2d:12:
                    8c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:00:DD:6A:B5:4B:6B:F6:F6:74:A9:DE:A6:9D:5B:DC:3E:76:97:13
            X509v3 Authority Key Identifier:
                keyid:69:13:99:88:46:C5:79:16:C0:81:CA:47:CE:0B:CE:B4:86:46:0B:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/6913998846C57916C081CA47CE0BCEB486460BE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6913998846C57916C081CA47CE0BCEB486460BE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/323830333a353661303a3a2f33322d3634203d3e20323636383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:56a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b6:c2:cb:38:3d:5e:0d:80:a0:d3:a2:47:6f:48:4e:64:36:09:
         b8:8b:4e:42:fc:43:09:48:f0:80:f4:3c:81:85:f2:89:10:a5:
         43:85:68:37:f5:21:6d:82:87:e3:54:8d:24:9f:b4:11:78:d8:
         6b:73:f6:95:42:b0:5a:7e:62:b7:30:d3:d1:f1:71:1b:7f:51:
         de:95:f0:50:9e:ae:35:c8:6e:f8:98:8a:82:78:d6:f3:9f:86:
         0c:0d:cd:e6:fa:87:34:44:38:9e:e3:fa:e8:b8:a0:d8:f0:1d:
         f5:62:5a:fd:e0:d9:2c:c1:98:09:e0:a3:01:ce:84:54:99:f0:
         fc:41:51:6c:34:fc:97:94:56:6e:42:95:ee:47:c0:15:39:28:
         95:7c:96:cc:b2:c7:ca:f3:0b:bd:57:54:af:10:3c:12:44:5f:
         5f:7d:b4:3f:21:3e:11:16:55:42:05:ac:b9:2c:88:6f:c0:69:
         17:09:f0:1e:6c:35:8a:99:25:f5:95:ed:25:33:ec:da:79:50:
         59:87:dc:74:b2:77:24:41:46:91:56:99:d5:3a:8b:e8:d4:0e:
         88:1f:e9:53:1f:16:77:ba:88:f7:24:4f:be:71:41:7f:96:16:
         e7:eb:3f:38:6c:9a:97:28:f5:6c:1f:b8:f3:66:8f:65:ff:a8:
         2e:27:fc:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:47:00 2026 by rpki-client