This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/596A89FD132EAD65D72620CA847240E50CFA9C071E093DFED5A5E042C466659C/0/323830333a316665303a3a2f33322d3332203d3e20323731373832.roa
File:                     323830333a316665303a3a2f33322d3332203d3e20323731373832.roa (raw, json)
Hash identifier:          cqWfFnXL14qKD+etdfnTGtmVTeLQlM+l6Np7N0tYmxM=
Subject key identifier:   AE:EF:44:41:25:46:6F:17:69:26:01:28:CC:32:C4:DE:86:A8:79:2F
Certificate issuer:       /CN=F02DCCDD304DCCE58FE027F11108F440B11FD910
Certificate serial:       2616F25B31CCA9F587D16CD0BB9A45E4B92D7FA2
Authority key identifier: F0:2D:CC:DD:30:4D:CC:E5:8F:E0:27:F1:11:08:F4:40:B1:1F:D9:10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F02DCCDD304DCCE58FE027F11108F440B11FD910.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/596A89FD132EAD65D72620CA847240E50CFA9C071E093DFED5A5E042C466659C/0/323830333a316665303a3a2f33322d3332203d3e20323731373832.roa
Signing time:             Tue 06 Jan 2026 18:57:27 +0000
ROA not before:           Tue 06 Jan 2026 18:52:27 +0000
ROA not after:            Tue 05 Jan 2027 18:57:27 +0000
asID:                     271782
IP address blocks:        2803:1fe0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/596A89FD132EAD65D72620CA847240E50CFA9C071E093DFED5A5E042C466659C/0/F02DCCDD304DCCE58FE027F11108F440B11FD910.crl
                          rsync://repository.lacnic.net/rpki/lacnic/596A89FD132EAD65D72620CA847240E50CFA9C071E093DFED5A5E042C466659C/0/F02DCCDD304DCCE58FE027F11108F440B11FD910.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F02DCCDD304DCCE58FE027F11108F440B11FD910.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 13:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:16:f2:5b:31:cc:a9:f5:87:d1:6c:d0:bb:9a:45:e4:b9:2d:7f:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F02DCCDD304DCCE58FE027F11108F440B11FD910
        Validity
            Not Before: Jan  6 18:52:27 2026 GMT
            Not After : Jan  5 18:57:27 2027 GMT
        Subject: CN=AEEF444125466F1769260128CC32C4DE86A8792F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bc:8b:1b:88:0e:8c:32:69:0d:8d:6d:4d:93:
                    f9:cc:d9:d6:0f:9d:8d:9a:3a:53:ad:7f:eb:bb:d1:
                    b2:53:f1:c5:cd:eb:62:3e:da:9d:a0:59:6c:06:d3:
                    5d:ba:23:bf:23:49:99:fd:43:bb:d3:1d:f3:8c:8d:
                    21:34:a1:48:23:9f:8d:92:b2:7c:2c:14:f3:00:82:
                    d6:37:b8:97:22:db:d4:e5:f2:71:fa:98:0a:63:cc:
                    33:bd:61:1b:94:97:f4:4b:c1:ee:9a:77:93:9f:18:
                    2d:2e:1e:4c:46:1a:de:22:fb:c3:97:03:c3:ce:0a:
                    1c:04:7b:2f:d3:76:1e:2b:58:8e:44:13:35:4f:42:
                    db:fd:fe:dc:24:53:29:28:97:48:98:75:f8:29:67:
                    e1:f6:f6:f4:0c:59:42:c5:ad:6d:63:51:e1:64:1a:
                    4e:cd:d3:fc:f8:ed:31:03:86:bf:8c:e8:f6:53:e5:
                    eb:73:11:09:8d:0d:e3:48:89:75:74:71:83:63:1f:
                    90:3d:a2:7f:91:a9:5b:bc:96:33:8d:dc:1b:7f:2e:
                    0f:05:1f:e0:0e:59:c3:b4:ec:1a:19:e1:62:5a:2e:
                    70:04:b2:99:d7:81:ee:ca:0e:bd:8c:40:4b:a0:fc:
                    a7:e1:6b:ee:a9:3f:da:8e:03:91:72:53:15:76:0a:
                    17:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:EF:44:41:25:46:6F:17:69:26:01:28:CC:32:C4:DE:86:A8:79:2F
            X509v3 Authority Key Identifier:
                keyid:F0:2D:CC:DD:30:4D:CC:E5:8F:E0:27:F1:11:08:F4:40:B1:1F:D9:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/596A89FD132EAD65D72620CA847240E50CFA9C071E093DFED5A5E042C466659C/0/F02DCCDD304DCCE58FE027F11108F440B11FD910.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F02DCCDD304DCCE58FE027F11108F440B11FD910.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/596A89FD132EAD65D72620CA847240E50CFA9C071E093DFED5A5E042C466659C/0/323830333a316665303a3a2f33322d3332203d3e20323731373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1fe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:10:5f:4e:6b:83:a0:c5:2d:df:73:04:09:d9:07:d1:b2:7d:
         70:07:97:f6:51:ae:6d:57:43:0c:64:0c:36:ad:bf:9a:b1:22:
         64:bd:1a:40:18:27:d6:9d:ee:6f:e8:c3:d5:e3:89:f0:15:ec:
         7d:e7:bc:71:42:30:33:5d:dc:41:c3:2e:5b:02:43:59:95:3a:
         03:e0:40:ce:4d:8b:17:6f:65:f7:86:49:b6:24:50:ac:9c:32:
         de:82:d6:4f:28:8e:ec:af:ff:b3:5b:d7:8f:62:d0:cb:c8:d6:
         ef:3e:c6:cb:b3:0b:64:f7:18:b4:41:21:0a:07:85:af:cc:97:
         da:13:24:17:e6:7a:c0:43:00:85:bd:c6:35:1e:be:1c:7c:19:
         eb:1f:70:01:45:29:c9:11:2e:e9:fc:47:7c:58:83:b7:0b:6c:
         6d:76:2e:f7:16:04:ff:4a:e4:26:f9:51:42:0d:b9:76:17:a3:
         84:97:ce:b2:fc:da:7d:27:35:6a:c8:dc:23:22:3e:25:b1:ec:
         fa:70:25:25:c7:41:3d:7a:18:f5:27:81:e2:1c:95:24:8e:bf:
         af:4a:aa:06:58:99:4e:90:36:2f:d8:1a:6c:1c:59:15:f6:ce:
         08:95:ac:4e:35:77:e6:c7:04:28:70:88:b9:0c:a6:ec:b0:f1:
         96:f4:58:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:43:54 2026 by rpki-client