This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6396580A8D0F05B3A280D3D9061291302B2C9C53FA6973BBC3916CD70A010A8F/0/323830333a366439303a3a2f33322d3438203d3e20323732393936.roa
File:                     323830333a366439303a3a2f33322d3438203d3e20323732393936.roa (raw, json)
Hash identifier:          /WEIngQqBBf/qHsIylh0UkwkuzxLBdQe5aq5VpWdAgk=
Subject key identifier:   F4:6E:48:AB:43:2E:27:5F:54:8F:7E:7B:A8:A8:CF:9D:E5:3A:94:32
Certificate issuer:       /CN=4AE2BD6CD73C21411CA8017A254856860F6647F7
Certificate serial:       72114968A6876615431524F3B0A73558E9584075
Authority key identifier: 4A:E2:BD:6C:D7:3C:21:41:1C:A8:01:7A:25:48:56:86:0F:66:47:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4AE2BD6CD73C21411CA8017A254856860F6647F7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6396580A8D0F05B3A280D3D9061291302B2C9C53FA6973BBC3916CD70A010A8F/0/323830333a366439303a3a2f33322d3438203d3e20323732393936.roa
Signing time:             Tue 06 Jan 2026 19:17:45 +0000
ROA not before:           Tue 06 Jan 2026 19:12:45 +0000
ROA not after:            Tue 05 Jan 2027 19:17:45 +0000
asID:                     272996
IP address blocks:        2803:6d90::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6396580A8D0F05B3A280D3D9061291302B2C9C53FA6973BBC3916CD70A010A8F/0/4AE2BD6CD73C21411CA8017A254856860F6647F7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6396580A8D0F05B3A280D3D9061291302B2C9C53FA6973BBC3916CD70A010A8F/0/4AE2BD6CD73C21411CA8017A254856860F6647F7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4AE2BD6CD73C21411CA8017A254856860F6647F7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 11:54:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:11:49:68:a6:87:66:15:43:15:24:f3:b0:a7:35:58:e9:58:40:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AE2BD6CD73C21411CA8017A254856860F6647F7
        Validity
            Not Before: Jan  6 19:12:45 2026 GMT
            Not After : Jan  5 19:17:45 2027 GMT
        Subject: CN=F46E48AB432E275F548F7E7BA8A8CF9DE53A9432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:37:36:e8:73:0f:f9:6d:23:f6:94:17:97:d0:
                    d5:9e:55:15:b5:72:47:12:af:8c:29:14:2b:d9:49:
                    70:66:c2:6b:b8:9d:f0:90:b1:36:95:7d:bc:ab:55:
                    f5:4c:fd:04:ba:02:a9:a2:33:0a:86:6a:01:64:f3:
                    14:80:c3:a6:c6:f2:72:37:36:b5:cb:56:81:b5:b7:
                    42:6b:a2:44:1d:5e:79:11:87:a9:e6:23:02:6a:fd:
                    26:ac:78:7d:bc:06:8c:96:22:fe:eb:31:a1:b8:13:
                    30:fa:55:92:ca:0c:63:91:4a:cf:af:f7:d7:2c:9e:
                    85:2c:32:bb:04:5b:7b:3a:c2:f2:19:f1:0e:86:1c:
                    d0:73:60:f1:7c:46:16:59:eb:33:1f:38:49:25:96:
                    7b:b7:0e:d2:81:86:ab:dd:f0:dd:82:88:bd:eb:a8:
                    40:28:00:3a:ee:5e:6e:65:df:d1:2b:2d:47:11:4e:
                    f1:8a:9d:dc:01:0f:cf:f2:36:22:d7:2d:df:ea:1b:
                    56:0f:96:72:61:fa:e2:84:1d:81:1b:b0:68:9b:fe:
                    e8:bb:e7:8c:01:e3:f0:49:ab:c4:cb:93:5b:60:8a:
                    62:a3:14:a7:1f:31:18:59:f9:9b:bd:f7:29:51:d3:
                    5f:04:42:ff:01:f2:48:85:bb:db:e4:1b:89:e3:aa:
                    13:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:6E:48:AB:43:2E:27:5F:54:8F:7E:7B:A8:A8:CF:9D:E5:3A:94:32
            X509v3 Authority Key Identifier:
                keyid:4A:E2:BD:6C:D7:3C:21:41:1C:A8:01:7A:25:48:56:86:0F:66:47:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6396580A8D0F05B3A280D3D9061291302B2C9C53FA6973BBC3916CD70A010A8F/0/4AE2BD6CD73C21411CA8017A254856860F6647F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4AE2BD6CD73C21411CA8017A254856860F6647F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6396580A8D0F05B3A280D3D9061291302B2C9C53FA6973BBC3916CD70A010A8F/0/323830333a366439303a3a2f33322d3438203d3e20323732393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6d90::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:74:fa:8b:15:65:7e:6e:52:9f:1f:af:3e:9f:33:8f:53:c0:
         dc:66:9e:6d:ed:18:26:d3:c9:2d:bd:2f:9a:22:33:b4:10:54:
         56:e6:ef:ab:9c:e7:bd:ff:96:20:7b:7f:61:99:b9:20:a5:99:
         30:9b:aa:ff:68:d8:5b:e9:40:7a:5e:0e:26:62:10:45:8d:23:
         22:94:06:1a:00:97:8a:86:61:fb:e6:db:51:b0:eb:b3:b0:ab:
         cf:50:f7:63:38:98:e8:1e:e8:8b:57:e1:23:c3:5f:04:0d:52:
         4e:0a:5e:f6:86:c2:17:46:39:64:48:e7:04:1c:4a:64:29:6e:
         ca:2f:e5:28:a8:4f:8d:26:3a:7a:89:53:b0:72:69:73:b8:05:
         31:cd:ef:a7:fc:e6:78:63:e5:3f:bf:59:3d:44:75:66:d2:f9:
         34:39:c6:26:bb:c9:4a:df:fe:4a:07:07:b6:d5:d6:c7:c0:2c:
         0b:d2:bf:27:54:c8:fe:16:e1:43:f8:ed:a4:cd:da:fc:4a:39:
         fe:81:ca:01:32:d5:83:03:ef:91:6e:8f:df:9d:06:99:ff:a5:
         39:aa:41:c8:02:8c:1d:c9:f0:6a:df:7d:4a:cc:22:8f:b3:32:
         93:09:01:12:9c:ac:56:00:d4:84:0a:63:63:49:ea:23:8a:f5:
         66:ba:bb:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:17:28 2026 by rpki-client