This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59672F6C5768FDB8F5B53E4B4FABE8317B9D9F288357DFEB38054AA2DC7E8C29/0/323830333a313532303a3a2f33322d3332203d3e20323636363838.roa
File:                     323830333a313532303a3a2f33322d3332203d3e20323636363838.roa (raw, json)
Hash identifier:          8XMTVUQmtpt28BdCcf7J5trKq0k5JYxhy7HBbzbL7P8=
Subject key identifier:   4A:CC:BA:51:DC:AC:DB:62:29:8F:32:76:CF:7B:4D:86:94:B4:CA:9F
Certificate issuer:       /CN=65ECEAC06B89A1E4244A5695B4C5FBA9D3A9F8B5
Certificate serial:       2A16052791132B6BFD26EBF46345D0945821A002
Authority key identifier: 65:EC:EA:C0:6B:89:A1:E4:24:4A:56:95:B4:C5:FB:A9:D3:A9:F8:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65ECEAC06B89A1E4244A5695B4C5FBA9D3A9F8B5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59672F6C5768FDB8F5B53E4B4FABE8317B9D9F288357DFEB38054AA2DC7E8C29/0/323830333a313532303a3a2f33322d3332203d3e20323636363838.roa
Signing time:             Tue 06 Jan 2026 19:20:04 +0000
ROA not before:           Tue 06 Jan 2026 19:15:04 +0000
ROA not after:            Tue 05 Jan 2027 19:20:04 +0000
asID:                     266688
IP address blocks:        2803:1520::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59672F6C5768FDB8F5B53E4B4FABE8317B9D9F288357DFEB38054AA2DC7E8C29/0/65ECEAC06B89A1E4244A5695B4C5FBA9D3A9F8B5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59672F6C5768FDB8F5B53E4B4FABE8317B9D9F288357DFEB38054AA2DC7E8C29/0/65ECEAC06B89A1E4244A5695B4C5FBA9D3A9F8B5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65ECEAC06B89A1E4244A5695B4C5FBA9D3A9F8B5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 18:26:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:16:05:27:91:13:2b:6b:fd:26:eb:f4:63:45:d0:94:58:21:a0:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65ECEAC06B89A1E4244A5695B4C5FBA9D3A9F8B5
        Validity
            Not Before: Jan  6 19:15:04 2026 GMT
            Not After : Jan  5 19:20:04 2027 GMT
        Subject: CN=4ACCBA51DCACDB62298F3276CF7B4D8694B4CA9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f5:2a:6f:2d:17:39:3f:a2:53:3d:8a:48:c8:
                    3c:37:bf:4c:c5:f4:f0:4f:e8:ee:45:b9:8d:bf:41:
                    03:7f:cb:c7:55:ef:a6:02:f0:75:91:43:e8:a9:81:
                    c5:12:e9:c8:86:11:00:13:2d:eb:fe:7b:d5:20:5f:
                    07:47:94:d9:1c:e7:aa:eb:9c:36:3b:b2:08:81:a9:
                    6e:98:6e:50:f3:98:8b:e1:fc:5d:94:b1:21:40:3c:
                    c6:13:d3:d0:78:7c:1a:b7:7d:15:cc:b5:91:3f:92:
                    73:90:a9:4a:60:a1:8f:86:5d:af:8f:fe:da:d2:f1:
                    c4:32:80:4b:8e:8f:9e:6d:f7:1e:ba:f2:30:f4:0d:
                    0b:90:70:32:6e:84:aa:1f:5c:0e:17:7f:cb:b8:f1:
                    b9:ac:99:1f:59:b1:e9:f7:e6:81:44:ea:49:67:dd:
                    3e:bd:fa:9b:b0:ab:87:3e:b8:e1:05:98:0b:11:0c:
                    72:c9:82:7a:88:f9:9d:99:76:5c:14:21:ee:32:c5:
                    8e:d4:86:25:b1:be:a3:d9:47:24:84:3c:5b:fc:9d:
                    bf:97:16:98:33:c4:08:a5:12:84:0f:c0:48:7e:08:
                    f4:8c:48:70:69:33:ba:a1:ab:91:11:33:53:3b:a4:
                    f1:81:1d:b1:1e:6f:ca:29:a4:45:65:67:92:b7:e5:
                    32:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:CC:BA:51:DC:AC:DB:62:29:8F:32:76:CF:7B:4D:86:94:B4:CA:9F
            X509v3 Authority Key Identifier:
                keyid:65:EC:EA:C0:6B:89:A1:E4:24:4A:56:95:B4:C5:FB:A9:D3:A9:F8:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59672F6C5768FDB8F5B53E4B4FABE8317B9D9F288357DFEB38054AA2DC7E8C29/0/65ECEAC06B89A1E4244A5695B4C5FBA9D3A9F8B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65ECEAC06B89A1E4244A5695B4C5FBA9D3A9F8B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59672F6C5768FDB8F5B53E4B4FABE8317B9D9F288357DFEB38054AA2DC7E8C29/0/323830333a313532303a3a2f33322d3332203d3e20323636363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1520::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:dd:c5:04:0a:c7:53:61:e6:62:63:43:e0:55:ad:5d:49:79:
         71:25:c2:ce:94:cb:37:68:7c:01:10:13:58:0f:f9:36:c7:4c:
         32:b1:19:5a:73:7b:f6:b4:22:fc:bc:89:47:67:98:d3:e3:21:
         3f:ee:5e:2e:80:3a:f5:69:90:3b:60:a1:c7:33:6d:12:a9:1e:
         d7:97:54:e9:8e:0f:99:87:4b:9b:7c:f1:73:33:2e:22:f3:e9:
         df:61:85:8c:d5:79:fc:17:04:08:13:db:4f:13:43:85:56:56:
         12:86:95:f5:70:64:5e:b1:33:91:b0:5e:64:8e:b1:46:67:89:
         5a:51:c4:9c:aa:99:e2:76:44:4c:83:54:39:13:97:17:80:65:
         80:19:27:af:52:f8:6a:51:29:a8:f6:ee:7d:95:41:17:76:61:
         55:7d:8b:6b:ce:9f:8f:af:5a:75:09:3c:8e:e8:75:7a:01:1e:
         c3:9d:f1:d9:15:13:0b:9a:47:30:4b:43:bb:d6:23:b9:8f:b8:
         e7:ef:05:86:da:55:3a:a0:b0:c5:68:07:60:1c:10:f9:f5:1b:
         f8:29:cc:eb:21:d8:77:ae:18:6a:fc:dd:77:44:3d:08:11:fb:
         5f:db:e2:72:da:35:be:c6:ce:74:f5:f8:b4:69:8b:4d:90:75:
         57:bf:d2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:00:28 2026 by rpki-client