This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59F36B0CBC171A077B2C875AF9E151B9693CD3C0EE3EE4D5E8B2B4A6A5BD7C50/0/323830333a393231303a3a2f33322d3438203d3e20323731393039.roa
File:                     323830333a393231303a3a2f33322d3438203d3e20323731393039.roa (raw, json)
Hash identifier:          TQT1mVfoFqBaexvJd3+PBh8hqQPuE0hAsiynuWh/980=
Subject key identifier:   29:1B:69:82:BC:81:AA:DE:12:7F:EF:D3:6C:85:77:DE:EF:73:67:30
Certificate issuer:       /CN=923C8F2614D4C90EE12E7F692F19A572D92A35FC
Certificate serial:       4E90D6769A4E43CE44B84B7A727DC109B0D47990
Authority key identifier: 92:3C:8F:26:14:D4:C9:0E:E1:2E:7F:69:2F:19:A5:72:D9:2A:35:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/923C8F2614D4C90EE12E7F692F19A572D92A35FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59F36B0CBC171A077B2C875AF9E151B9693CD3C0EE3EE4D5E8B2B4A6A5BD7C50/0/323830333a393231303a3a2f33322d3438203d3e20323731393039.roa
Signing time:             Tue 06 Jan 2026 19:34:45 +0000
ROA not before:           Tue 06 Jan 2026 19:29:45 +0000
ROA not after:            Tue 05 Jan 2027 19:34:45 +0000
asID:                     271909
IP address blocks:        2803:9210::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59F36B0CBC171A077B2C875AF9E151B9693CD3C0EE3EE4D5E8B2B4A6A5BD7C50/0/923C8F2614D4C90EE12E7F692F19A572D92A35FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59F36B0CBC171A077B2C875AF9E151B9693CD3C0EE3EE4D5E8B2B4A6A5BD7C50/0/923C8F2614D4C90EE12E7F692F19A572D92A35FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/923C8F2614D4C90EE12E7F692F19A572D92A35FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 06:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:90:d6:76:9a:4e:43:ce:44:b8:4b:7a:72:7d:c1:09:b0:d4:79:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=923C8F2614D4C90EE12E7F692F19A572D92A35FC
        Validity
            Not Before: Jan  6 19:29:45 2026 GMT
            Not After : Jan  5 19:34:45 2027 GMT
        Subject: CN=291B6982BC81AADE127FEFD36C8577DEEF736730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d3:25:21:de:1a:c5:6a:1a:ef:00:4c:6a:79:
                    e2:3e:94:63:8d:65:60:a8:9a:67:35:e5:24:ec:a5:
                    6c:9a:91:b2:09:a8:3b:b5:13:f3:41:63:5f:df:b7:
                    f3:e6:65:97:4a:31:43:63:5b:0f:d5:f4:41:ed:ab:
                    e1:5e:29:69:4b:51:e1:6e:c8:56:33:33:38:5b:4e:
                    b3:27:b1:bd:30:bf:3e:65:d3:c5:56:ca:02:0f:ce:
                    e8:c4:a9:bf:f1:70:40:52:61:25:e7:f6:9b:4e:1c:
                    24:db:5e:9c:bd:d2:08:4b:3b:e5:1a:68:ed:b6:3f:
                    01:7b:f1:63:74:9b:c2:34:c3:14:df:72:92:22:e6:
                    c6:a4:74:ff:fa:89:02:dd:9d:40:7d:f6:fa:19:f9:
                    7e:9e:20:fc:5a:e7:84:4f:1b:ec:b0:c1:cf:b8:7c:
                    94:b8:ad:10:ea:2b:d9:1d:ba:97:d0:a7:99:2a:8c:
                    a0:bd:ec:9d:5b:72:1b:9e:54:31:5b:78:f1:f6:d1:
                    af:f9:7f:1e:e3:c2:42:6b:84:b6:af:0f:46:88:02:
                    35:74:f1:a8:f7:1f:f9:51:c0:4b:10:3d:09:86:a5:
                    16:bd:e4:4f:4f:af:18:ce:70:5f:0f:aa:22:46:56:
                    80:a3:72:7d:e2:ca:32:c2:32:15:08:bf:c5:65:8e:
                    a9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:1B:69:82:BC:81:AA:DE:12:7F:EF:D3:6C:85:77:DE:EF:73:67:30
            X509v3 Authority Key Identifier:
                keyid:92:3C:8F:26:14:D4:C9:0E:E1:2E:7F:69:2F:19:A5:72:D9:2A:35:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59F36B0CBC171A077B2C875AF9E151B9693CD3C0EE3EE4D5E8B2B4A6A5BD7C50/0/923C8F2614D4C90EE12E7F692F19A572D92A35FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/923C8F2614D4C90EE12E7F692F19A572D92A35FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59F36B0CBC171A077B2C875AF9E151B9693CD3C0EE3EE4D5E8B2B4A6A5BD7C50/0/323830333a393231303a3a2f33322d3438203d3e20323731393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9210::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:03:25:0d:29:ad:a6:0c:32:34:9b:d2:49:7a:35:6c:5d:76:
         f1:9a:61:57:15:4b:d7:aa:fd:8b:c0:3d:80:d9:19:b4:0a:70:
         c4:4a:55:e4:06:7f:a3:19:49:4e:72:d2:12:91:fc:d0:25:da:
         1c:17:ad:d7:67:33:73:77:aa:38:01:dc:c0:25:15:d9:24:fe:
         8f:d5:9a:8c:38:f5:97:88:a3:1e:45:c2:a7:e9:4a:4b:2c:53:
         d5:41:e9:05:90:c6:ee:8a:98:be:a9:35:b3:cd:25:d7:c0:d1:
         0e:9a:c4:79:90:49:b5:9a:08:01:37:5b:82:71:63:10:d3:d3:
         5b:66:3e:12:29:a0:1e:b5:ba:9e:43:9e:8d:01:2f:45:56:b4:
         05:61:26:6b:bd:e7:17:56:00:3a:d0:f6:66:05:44:d4:a3:64:
         cc:1b:8c:c8:ad:83:e7:90:cc:f2:0d:6e:29:2f:a0:42:ca:1c:
         1c:61:af:c2:f7:ff:40:52:20:fa:72:49:91:15:45:d0:32:6f:
         c5:95:74:89:7a:6c:58:89:80:bb:8c:b9:f5:fb:b1:e2:f6:1d:
         b8:08:a1:4f:42:1c:b1:a2:ba:12:9f:f5:b1:cc:f1:da:45:d4:
         22:c0:a0:a0:86:37:db:de:eb:d6:09:c3:8c:a9:73:e5:3f:51:
         a3:f4:55:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:06:54 2026 by rpki-client