This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/323830333a3231303a3a2f33322d3634203d3e20323731383839.roa
File:                     323830333a3231303a3a2f33322d3634203d3e20323731383839.roa (raw, json)
Hash identifier:          KYKKLWH/ewJhMnRYGDW7CqPtJ4XHHGh8JlidwOIsc88=
Subject key identifier:   78:CB:11:83:E6:9A:EC:FC:70:7A:66:89:05:F3:46:A7:18:85:37:20
Certificate issuer:       /CN=E4680E7DB5E2661029DADF95F18EDCCD3A194B02
Certificate serial:       79DA191282D4ED83F636C9C1F420319E65CB0A07
Authority key identifier: E4:68:0E:7D:B5:E2:66:10:29:DA:DF:95:F1:8E:DC:CD:3A:19:4B:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/323830333a3231303a3a2f33322d3634203d3e20323731383839.roa
Signing time:             Tue 06 Jan 2026 19:12:41 +0000
ROA not before:           Tue 06 Jan 2026 19:07:41 +0000
ROA not after:            Tue 05 Jan 2027 19:12:41 +0000
asID:                     271889
IP address blocks:        2803:210::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 13:13:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:da:19:12:82:d4:ed:83:f6:36:c9:c1:f4:20:31:9e:65:cb:0a:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4680E7DB5E2661029DADF95F18EDCCD3A194B02
        Validity
            Not Before: Jan  6 19:07:41 2026 GMT
            Not After : Jan  5 19:12:41 2027 GMT
        Subject: CN=78CB1183E69AECFC707A668905F346A718853720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8e:2b:e6:c1:91:9d:02:83:1e:27:9f:91:4b:
                    7c:c4:54:fd:97:de:2a:78:46:d4:dc:14:78:03:04:
                    a1:75:78:e3:ed:dc:17:fb:44:c1:7a:88:cf:2f:3f:
                    90:9d:87:8b:4f:85:1e:43:80:8a:72:52:c3:b2:55:
                    82:d5:7c:de:61:29:29:30:cd:73:ed:31:6e:88:22:
                    bc:ff:c0:0c:16:f2:9f:bc:72:83:99:35:bc:65:0c:
                    5d:c9:d4:5a:c1:6f:b1:4c:45:1a:5d:d0:1c:5e:5c:
                    38:b5:ac:f0:02:b6:c0:eb:f1:5c:94:48:22:4a:ec:
                    9e:f3:87:bd:40:9e:17:a5:0b:67:c4:a9:b2:1e:24:
                    87:dc:db:6b:c1:48:03:39:9b:3e:df:65:9b:17:bd:
                    aa:6d:f5:62:f1:4d:21:0f:dc:17:13:24:66:d9:63:
                    a7:5d:4f:f9:e2:41:7a:50:f4:12:98:48:cc:45:c6:
                    e2:7d:b1:d0:3e:6c:a1:72:62:1b:d5:dd:07:ef:ac:
                    77:54:7f:42:b9:d4:b3:76:8a:05:d2:79:43:5f:19:
                    aa:93:44:a9:3b:f8:e4:3f:af:a6:51:7e:2d:2f:49:
                    f3:fb:bb:8a:61:0f:60:97:48:f0:33:62:64:b1:bc:
                    1b:06:79:f1:60:b3:79:36:b8:67:be:fd:8e:63:34:
                    dd:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:CB:11:83:E6:9A:EC:FC:70:7A:66:89:05:F3:46:A7:18:85:37:20
            X509v3 Authority Key Identifier:
                keyid:E4:68:0E:7D:B5:E2:66:10:29:DA:DF:95:F1:8E:DC:CD:3A:19:4B:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/323830333a3231303a3a2f33322d3634203d3e20323731383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:210::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:46:67:17:b1:8e:c1:b3:f8:6b:ad:04:2f:1e:f4:29:4f:09:
         8f:01:8e:94:a0:f1:c2:ac:80:9c:9d:4a:04:9f:5d:aa:da:9a:
         57:4c:66:9e:04:a2:2e:8f:1f:a0:68:41:d1:3d:a2:d0:71:7e:
         a8:a4:58:1e:47:18:ee:5b:71:fd:ec:8a:c7:73:63:51:8a:7c:
         b4:93:cb:e8:6a:6f:35:96:f6:61:e9:8a:b7:b8:a7:ab:c0:2f:
         f0:68:eb:76:79:9a:c4:da:ba:92:38:97:d4:d7:17:7f:c9:4e:
         0a:40:1a:3a:12:68:11:33:7a:ed:d4:91:36:79:fb:fa:fd:21:
         43:39:77:88:c5:60:b6:bd:f8:d8:76:6b:bc:c6:4d:e5:3a:f4:
         be:da:0a:59:67:a2:f0:56:c4:c7:ce:55:b4:3a:a9:0e:45:01:
         d8:7c:6f:4c:30:15:4d:1e:4f:62:ce:88:84:f5:d1:aa:00:ad:
         0c:c5:58:8c:5f:a8:0a:75:85:56:9a:8a:8b:14:7e:85:4e:1e:
         73:5c:5a:a0:f4:a2:96:06:4d:59:dc:a9:1e:20:ec:cd:ba:89:
         ec:0c:d4:d9:7a:3b:6c:25:ac:68:ff:63:45:52:09:3b:53:b1:
         be:c4:a9:69:62:af:6d:0d:16:40:21:ed:72:42:0f:c2:14:2b:
         42:14:15:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:04:39 2026 by rpki-client