This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/568734A90ED95B6AA712241ADE9D6E8FB28CAD6AA75CCDD9F4325C252A4457D6/0/323830333a646661303a3a2f33322d3634203d3e20323637373937.roa
File:                     323830333a646661303a3a2f33322d3634203d3e20323637373937.roa (raw, json)
Hash identifier:          su5vJsxtWNoDpAvWlmNBKAmkAF0/gMjalJDFcGCgfDk=
Subject key identifier:   C2:5D:F2:86:CD:31:EA:3B:26:80:FC:AA:94:AD:3F:9B:D7:C3:B8:E5
Certificate issuer:       /CN=E11C9AAE95EDFC53E36D6684141102643EAC48E8
Certificate serial:       2DF41A629B59AD143453960871D54FD880CF2DEE
Authority key identifier: E1:1C:9A:AE:95:ED:FC:53:E3:6D:66:84:14:11:02:64:3E:AC:48:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E11C9AAE95EDFC53E36D6684141102643EAC48E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/568734A90ED95B6AA712241ADE9D6E8FB28CAD6AA75CCDD9F4325C252A4457D6/0/323830333a646661303a3a2f33322d3634203d3e20323637373937.roa
Signing time:             Tue 06 Jan 2026 20:53:36 +0000
ROA not before:           Tue 06 Jan 2026 20:48:36 +0000
ROA not after:            Tue 05 Jan 2027 20:53:36 +0000
asID:                     267797
IP address blocks:        2803:dfa0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/568734A90ED95B6AA712241ADE9D6E8FB28CAD6AA75CCDD9F4325C252A4457D6/0/E11C9AAE95EDFC53E36D6684141102643EAC48E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/568734A90ED95B6AA712241ADE9D6E8FB28CAD6AA75CCDD9F4325C252A4457D6/0/E11C9AAE95EDFC53E36D6684141102643EAC48E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E11C9AAE95EDFC53E36D6684141102643EAC48E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 13:07:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:f4:1a:62:9b:59:ad:14:34:53:96:08:71:d5:4f:d8:80:cf:2d:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E11C9AAE95EDFC53E36D6684141102643EAC48E8
        Validity
            Not Before: Jan  6 20:48:36 2026 GMT
            Not After : Jan  5 20:53:36 2027 GMT
        Subject: CN=C25DF286CD31EA3B2680FCAA94AD3F9BD7C3B8E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:73:99:30:1a:1a:ba:67:0c:0d:b1:95:9f:9d:
                    5e:ce:80:84:e5:bb:61:89:88:7a:fb:fe:2c:3c:7a:
                    ee:ae:c9:d5:51:14:1e:33:2b:5e:10:c2:2d:60:2e:
                    0b:4f:a5:ce:76:03:b7:a1:ea:17:a5:d2:a8:19:0d:
                    2c:f1:fd:c8:04:09:b4:17:7b:f9:80:b8:3b:01:33:
                    14:6d:b1:e2:a7:2b:81:f5:81:f1:e2:d0:00:1a:2f:
                    9f:7f:6b:79:d9:b4:b0:3a:86:24:e0:21:4f:7a:7d:
                    4d:84:36:ab:5e:b9:d2:da:d5:33:34:91:0f:40:c5:
                    94:6b:b8:b3:51:e7:f7:64:6b:aa:b3:ed:b3:26:8f:
                    4b:19:e4:c5:0f:ec:fc:74:76:d9:38:55:ec:5b:ea:
                    2c:65:cb:b8:ff:02:7f:63:a6:91:aa:b9:3c:3a:47:
                    56:45:d0:05:e0:72:27:d8:31:26:cc:f9:41:96:e5:
                    34:54:e5:b2:db:2f:3d:77:e9:47:df:7b:3c:98:cb:
                    24:0f:c9:f8:16:d4:2b:29:67:e0:59:9d:6d:be:c6:
                    cf:fa:5f:b5:8e:bf:b0:32:15:2e:28:bc:ff:c5:d4:
                    22:fa:19:2e:ba:82:51:cf:b9:48:91:bf:98:11:b6:
                    9b:1f:13:8d:83:0e:95:21:2a:4d:56:e9:c1:9d:09:
                    41:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:5D:F2:86:CD:31:EA:3B:26:80:FC:AA:94:AD:3F:9B:D7:C3:B8:E5
            X509v3 Authority Key Identifier:
                keyid:E1:1C:9A:AE:95:ED:FC:53:E3:6D:66:84:14:11:02:64:3E:AC:48:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/568734A90ED95B6AA712241ADE9D6E8FB28CAD6AA75CCDD9F4325C252A4457D6/0/E11C9AAE95EDFC53E36D6684141102643EAC48E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E11C9AAE95EDFC53E36D6684141102643EAC48E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/568734A90ED95B6AA712241ADE9D6E8FB28CAD6AA75CCDD9F4325C252A4457D6/0/323830333a646661303a3a2f33322d3634203d3e20323637373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dfa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:6a:f1:0f:16:b2:46:1f:af:f2:a6:4b:05:bf:8e:55:a3:04:
         db:bb:05:11:11:2c:00:82:06:41:8e:24:de:ca:e1:b7:64:26:
         f4:d5:fc:b0:5d:3b:53:49:31:05:68:bb:a4:15:cf:d0:bd:e3:
         fd:bd:d3:3c:e1:1e:89:3f:0c:82:af:b0:7b:7d:99:5a:ff:6a:
         7b:cc:9b:ad:53:32:70:e6:fd:8d:3c:bd:7e:b3:6e:e7:13:97:
         15:be:20:7d:c4:07:73:fa:40:3c:e1:3c:47:58:9a:26:ed:e4:
         48:18:37:47:44:96:cb:ee:aa:df:7d:dc:66:7c:29:a9:5b:08:
         e6:e5:21:e6:93:4b:2a:2d:f8:73:36:32:fc:77:2f:52:45:93:
         e3:77:b7:21:75:d2:9f:40:10:a0:55:68:f7:27:68:de:98:ad:
         7d:f3:95:29:e3:52:0c:bb:f9:af:ec:be:b6:36:43:68:c4:3c:
         58:b3:a6:64:da:27:5a:32:8a:bb:c8:39:0a:4f:0b:41:f2:60:
         6f:62:7f:66:c2:3a:26:37:a8:59:3d:1f:f1:90:68:59:69:23:
         fc:4f:7b:3f:60:c5:24:59:89:3f:ac:44:c1:e2:79:ef:df:f2:
         5d:be:36:f5:64:37:e7:69:4a:2c:71:8b:06:0e:5b:8d:81:30:
         4e:1e:d7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:25:33 2026 by rpki-client