This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/323830333a333832303a3a2f33322d3332203d3e20323635383134.roa
File:                     323830333a333832303a3a2f33322d3332203d3e20323635383134.roa (raw, json)
Hash identifier:          7nyWFZqmWXQSgc2vMkGLZsiUj1TT6vu46INlTokJIIs=
Subject key identifier:   E5:C0:A3:AE:2F:9E:23:3C:96:B3:40:09:AA:63:A6:05:C0:9E:F6:96
Certificate issuer:       /CN=D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C
Certificate serial:       08E21617913D5DF9EB9434985A798565A1D87288
Authority key identifier: D9:D3:E0:DB:C4:C3:EB:0E:E7:CA:56:4F:0F:91:A0:38:A1:D5:87:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/323830333a333832303a3a2f33322d3332203d3e20323635383134.roa
Signing time:             Tue 06 Jan 2026 19:45:44 +0000
ROA not before:           Tue 06 Jan 2026 19:40:44 +0000
ROA not after:            Tue 05 Jan 2027 19:45:44 +0000
asID:                     265814
IP address blocks:        2803:3820::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:e2:16:17:91:3d:5d:f9:eb:94:34:98:5a:79:85:65:a1:d8:72:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C
        Validity
            Not Before: Jan  6 19:40:44 2026 GMT
            Not After : Jan  5 19:45:44 2027 GMT
        Subject: CN=E5C0A3AE2F9E233C96B34009AA63A605C09EF696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b8:c3:cd:b1:06:ce:2e:89:22:9a:82:1b:25:
                    8a:a0:3c:3c:c4:e4:8a:61:2a:8c:7c:36:10:56:ad:
                    96:50:84:12:a9:e5:f6:c5:f9:9f:6d:a5:27:84:ba:
                    9d:e2:be:42:d0:bd:f5:24:c8:c8:ae:ee:25:60:84:
                    62:61:d0:90:0d:61:7f:e6:f7:05:5e:17:1b:9c:4b:
                    a3:04:b0:97:93:16:f6:ba:ff:dd:25:37:f4:12:9f:
                    d6:19:e1:47:55:70:33:d7:40:94:3d:43:9b:f7:59:
                    c2:fa:08:5c:dc:80:d7:e4:13:fe:6b:01:51:1e:7b:
                    d0:94:11:b7:f8:70:ab:b3:f6:e8:dd:ca:60:54:2a:
                    26:d5:28:38:a2:b6:20:d7:dc:9b:12:79:99:af:16:
                    27:aa:06:1f:cc:13:4d:d5:47:e9:d7:80:fe:62:95:
                    ae:73:01:79:67:15:c8:aa:69:a9:bd:cb:e9:db:74:
                    76:c5:cb:21:86:e6:b2:be:35:99:3c:2f:ec:05:31:
                    d6:da:63:d7:a2:03:ae:1f:87:1a:8f:93:c7:42:09:
                    91:68:fc:d0:95:46:1c:16:17:4a:9c:2e:fb:32:2e:
                    85:ae:86:b6:df:fc:72:db:59:c0:19:a2:b1:07:95:
                    a2:86:ac:84:b9:4b:14:53:13:71:f0:56:bf:87:03:
                    02:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C0:A3:AE:2F:9E:23:3C:96:B3:40:09:AA:63:A6:05:C0:9E:F6:96
            X509v3 Authority Key Identifier:
                keyid:D9:D3:E0:DB:C4:C3:EB:0E:E7:CA:56:4F:0F:91:A0:38:A1:D5:87:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/323830333a333832303a3a2f33322d3332203d3e20323635383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3820::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:97:4b:25:9c:64:16:a0:fe:b5:0e:a9:6a:d9:f1:37:d6:2e:
         f0:d0:01:3b:71:97:66:7a:43:9a:35:03:80:50:5e:26:d2:7c:
         49:b9:54:dc:40:fa:2d:4f:3f:0f:b9:4a:c7:0c:2c:e5:65:dc:
         65:c7:f6:a9:cb:e5:5f:25:0d:3f:fe:24:20:48:d5:f0:1f:21:
         4f:65:b8:3a:1c:49:b6:d6:08:04:c5:93:44:fe:9c:71:38:b2:
         eb:0d:b4:2a:c7:9d:b3:a8:89:63:a5:17:a3:43:0c:e3:2b:c0:
         28:d3:e3:d2:c9:5b:b3:a7:88:7a:56:45:96:fd:ae:7f:2c:12:
         63:97:10:1a:83:ba:7b:de:86:1c:de:d1:63:36:d1:4d:76:8d:
         89:59:7d:b9:a0:9c:1c:09:5f:88:bb:65:d7:b4:af:ba:92:3f:
         11:fd:aa:9a:18:30:d9:12:6e:29:23:64:72:87:a1:4d:9f:85:
         70:71:30:f6:9e:3c:28:3f:52:b6:b8:c5:7c:24:f2:4b:2d:6c:
         52:81:4e:d5:e3:a2:0e:a3:81:02:71:b9:f8:a5:8a:56:be:0c:
         bb:d8:47:ba:43:6d:d7:1a:34:a1:cb:6d:e3:3f:ce:2f:dd:86:
         f1:43:20:52:b7:7a:36:8b:cc:34:de:19:96:d7:4f:60:5b:51:
         ce:cd:8c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:44:04 2026 by rpki-client