This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/323830333a363230303a3a2f33322d3332203d3e20323632323337.roa
File:                     323830333a363230303a3a2f33322d3332203d3e20323632323337.roa (raw, json)
Hash identifier:          ZGCmX9KOoHgdvKT1M/qN4Z6m3GGuJUaiW5f5o+rwplU=
Subject key identifier:   65:16:3E:2F:CF:FF:AD:81:7D:69:CA:90:3A:C2:B3:03:14:57:D0:06
Certificate issuer:       /CN=47A0716C687813D0F1094BC55674B26A68AF90DF
Certificate serial:       1966C4087C10AC7C6A7BC16404CC71402FA00E3D
Authority key identifier: 47:A0:71:6C:68:78:13:D0:F1:09:4B:C5:56:74:B2:6A:68:AF:90:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/323830333a363230303a3a2f33322d3332203d3e20323632323337.roa
Signing time:             Tue 06 Jan 2026 19:07:59 +0000
ROA not before:           Tue 06 Jan 2026 19:02:59 +0000
ROA not after:            Tue 05 Jan 2027 19:07:59 +0000
asID:                     262237
IP address blocks:        2803:6200::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 13:20:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:66:c4:08:7c:10:ac:7c:6a:7b:c1:64:04:cc:71:40:2f:a0:0e:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A0716C687813D0F1094BC55674B26A68AF90DF
        Validity
            Not Before: Jan  6 19:02:59 2026 GMT
            Not After : Jan  5 19:07:59 2027 GMT
        Subject: CN=65163E2FCFFFAD817D69CA903AC2B3031457D006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d1:29:bb:5e:35:7e:f9:0a:ff:8b:b1:a7:41:
                    5e:fd:d3:6d:01:ed:55:d0:ce:e6:a2:21:4c:46:79:
                    56:4a:4e:06:07:37:6f:bb:f7:d2:bc:da:e0:46:8a:
                    de:19:5f:c1:bc:60:70:13:f9:4d:ee:45:d9:21:91:
                    9c:b6:ff:41:89:cd:2e:52:f1:e3:7b:0f:48:b9:92:
                    bf:11:3f:c9:77:af:af:cc:aa:8c:5e:0b:29:07:92:
                    f0:1a:19:c3:45:92:23:81:cc:79:14:4d:30:4f:30:
                    8a:6d:5d:c7:fe:43:44:d6:9b:2c:ce:eb:66:78:72:
                    cb:66:07:ec:aa:c6:64:34:4e:d2:f4:72:2e:9e:51:
                    47:cd:33:4d:b4:cd:67:f3:c5:22:10:75:5f:6f:40:
                    d8:5d:24:61:d8:cb:b1:9a:49:4d:e3:f9:54:0a:c2:
                    ec:ac:44:09:4e:b6:1d:66:aa:8f:63:87:1e:7f:71:
                    a9:7d:95:f9:cd:a4:bb:0d:96:77:0a:45:31:f5:39:
                    0d:b4:00:ca:90:dc:9d:3f:e3:32:92:70:8d:bb:5c:
                    d5:5f:05:b0:02:86:94:4e:68:0c:6c:a5:e8:86:76:
                    5b:00:01:cf:10:6d:be:bf:12:b8:01:9e:d9:aa:f9:
                    08:fa:fa:70:e2:0b:8d:4d:0d:19:2c:9d:98:c4:46:
                    fe:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:16:3E:2F:CF:FF:AD:81:7D:69:CA:90:3A:C2:B3:03:14:57:D0:06
            X509v3 Authority Key Identifier:
                keyid:47:A0:71:6C:68:78:13:D0:F1:09:4B:C5:56:74:B2:6A:68:AF:90:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/323830333a363230303a3a2f33322d3332203d3e20323632323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6200::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:a4:6b:ed:bb:ff:a7:e7:26:c7:03:93:5a:3b:36:db:d7:51:
         eb:a4:4b:15:0d:41:88:59:95:0e:75:7d:75:04:ff:7c:15:82:
         12:e2:5e:91:53:2a:ee:62:0a:4e:b5:47:57:6d:b9:d6:77:6d:
         4d:f6:a8:03:36:4f:72:9d:29:5d:0b:0d:e4:57:02:e0:c1:75:
         9f:7e:26:24:29:99:9a:fc:92:c9:a0:d9:24:32:68:bc:1e:2a:
         df:a5:ef:1d:dc:a4:db:b5:aa:b2:b8:7f:ca:40:68:cd:93:89:
         6a:1e:67:01:44:b7:73:89:1f:db:db:7c:e3:a5:56:69:a1:f3:
         1e:44:39:26:29:ed:1b:91:8c:94:50:6a:59:1f:b2:73:fd:27:
         d2:a5:fe:23:d7:ce:73:d1:b2:b4:64:c9:60:5b:cb:2d:f8:09:
         b0:b4:de:7d:fb:a8:8d:98:14:c9:fb:db:31:f0:23:70:35:24:
         38:ef:18:fd:b7:85:16:fd:89:f8:da:82:6e:3d:89:12:63:ed:
         df:b8:ed:78:c2:1f:32:2e:f3:1e:b5:f8:0a:5e:84:a3:b6:4e:
         68:16:3d:56:12:40:12:59:c8:fc:2d:f2:0b:d7:19:1c:3c:3a:
         8a:60:7e:a4:31:bc:35:5e:9f:5f:7f:06:73:e0:6c:f7:8b:2e:
         81:a9:de:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:29:39 2026 by rpki-client