This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/678910287DB30E95BB634036271485D91041A498EDC277A95898C5BC8DD82AC7/0/323830333a633631303a3a2f33322d3438203d3e20323731393431.roa
File:                     323830333a633631303a3a2f33322d3438203d3e20323731393431.roa (raw, json)
Hash identifier:          1udXSalfscykf50806uvG5YW2B4N8hBqO4YlvA4yDd8=
Subject key identifier:   35:81:76:2B:1E:D4:A3:E9:FD:AA:9F:36:48:79:7C:00:D8:3E:1F:AF
Certificate issuer:       /CN=4F7A09024DBFDCE425E0AF48A86DA754BF686A0F
Certificate serial:       019ADE2B0AEF2144044EE3CB31809494657E70B3
Authority key identifier: 4F:7A:09:02:4D:BF:DC:E4:25:E0:AF:48:A8:6D:A7:54:BF:68:6A:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F7A09024DBFDCE425E0AF48A86DA754BF686A0F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/678910287DB30E95BB634036271485D91041A498EDC277A95898C5BC8DD82AC7/0/323830333a633631303a3a2f33322d3438203d3e20323731393431.roa
Signing time:             Tue 06 Jan 2026 19:26:06 +0000
ROA not before:           Tue 06 Jan 2026 19:21:06 +0000
ROA not after:            Tue 05 Jan 2027 19:26:06 +0000
asID:                     271941
IP address blocks:        2803:c610::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/678910287DB30E95BB634036271485D91041A498EDC277A95898C5BC8DD82AC7/0/4F7A09024DBFDCE425E0AF48A86DA754BF686A0F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/678910287DB30E95BB634036271485D91041A498EDC277A95898C5BC8DD82AC7/0/4F7A09024DBFDCE425E0AF48A86DA754BF686A0F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F7A09024DBFDCE425E0AF48A86DA754BF686A0F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 02:44:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:de:2b:0a:ef:21:44:04:4e:e3:cb:31:80:94:94:65:7e:70:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F7A09024DBFDCE425E0AF48A86DA754BF686A0F
        Validity
            Not Before: Jan  6 19:21:06 2026 GMT
            Not After : Jan  5 19:26:06 2027 GMT
        Subject: CN=3581762B1ED4A3E9FDAA9F3648797C00D83E1FAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:90:d9:a5:2f:09:4d:18:77:65:af:de:c7:b8:
                    b0:de:0f:2f:99:39:a2:a4:b8:5a:e6:dd:8e:2c:cb:
                    af:12:23:23:81:3b:24:51:d4:3a:51:5d:f9:0e:ff:
                    01:92:58:57:dc:ab:8f:12:7f:b6:6f:5e:fa:29:d9:
                    00:21:7d:4f:aa:37:13:ac:5e:78:1e:de:31:60:2a:
                    f0:55:c9:d8:0e:ca:a2:c3:cb:d0:ce:16:1f:7c:a2:
                    3e:a9:bb:c5:5b:61:bf:c3:64:8d:a5:0d:a0:dc:90:
                    d5:ac:f5:dc:b2:7b:0a:8f:e1:d7:79:18:5f:75:79:
                    3a:b0:8a:1b:19:f1:70:94:c8:7a:ec:8a:7b:e5:9c:
                    8e:b6:03:34:52:88:39:0e:b9:87:7d:7a:79:2d:68:
                    e2:1b:7b:99:c5:11:25:ed:3a:01:80:42:9e:cb:05:
                    b6:53:cb:0f:24:41:41:e3:ac:b1:83:dc:15:38:0e:
                    23:1b:1f:de:d0:5c:60:40:60:36:b7:9d:8f:1a:25:
                    30:6b:1c:bc:3e:57:e8:33:e7:9c:a1:8a:85:80:b9:
                    25:e9:8c:bd:3e:2b:70:36:f8:f5:ec:26:ed:b4:f7:
                    9a:a1:eb:22:13:10:2e:de:c0:26:5e:1b:a7:c5:53:
                    6d:98:a7:12:4e:e9:5a:d7:c2:1a:ac:72:4e:a1:be:
                    ee:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:81:76:2B:1E:D4:A3:E9:FD:AA:9F:36:48:79:7C:00:D8:3E:1F:AF
            X509v3 Authority Key Identifier:
                keyid:4F:7A:09:02:4D:BF:DC:E4:25:E0:AF:48:A8:6D:A7:54:BF:68:6A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/678910287DB30E95BB634036271485D91041A498EDC277A95898C5BC8DD82AC7/0/4F7A09024DBFDCE425E0AF48A86DA754BF686A0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F7A09024DBFDCE425E0AF48A86DA754BF686A0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/678910287DB30E95BB634036271485D91041A498EDC277A95898C5BC8DD82AC7/0/323830333a633631303a3a2f33322d3438203d3e20323731393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c610::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:ee:d4:ab:1a:ef:14:26:14:92:1c:fe:12:c1:fb:05:6e:9f:
         68:e3:16:fb:15:f3:97:ee:89:4c:0b:93:cd:e7:5c:f2:76:e2:
         a6:bd:b2:c5:d4:f3:c4:4b:85:41:02:8a:04:85:3f:a7:dc:c0:
         f6:f9:6e:2c:79:f7:26:f2:b1:12:49:76:53:8e:88:6a:cb:e6:
         16:8e:7d:fd:69:c9:7b:c4:58:8e:ae:7e:61:24:d5:56:7e:b9:
         fb:f4:ab:7b:54:a6:ca:01:4c:af:5e:ef:3f:41:f5:8d:a5:1b:
         99:eb:10:8b:63:53:f3:ec:38:b5:4e:93:26:98:39:34:f9:39:
         40:fe:f0:92:5a:d9:f8:07:a8:f7:14:55:8d:2e:13:76:00:68:
         c4:4b:74:ff:c7:bc:34:b9:eb:63:1f:59:2f:d6:bd:cb:53:88:
         a2:03:31:e0:5a:0d:e5:54:37:75:4d:3d:8d:9b:8d:94:f2:70:
         2d:31:fb:91:da:d6:2e:6c:58:80:be:3a:08:4a:cf:30:0d:5e:
         d5:bf:47:79:ba:01:68:cd:67:96:fc:cf:df:fc:91:cd:ee:d4:
         a6:50:bf:53:f9:ce:e8:97:a2:2c:40:ea:4a:5c:64:70:cd:d8:
         2c:12:70:6a:da:87:a4:7b:60:ad:26:5d:a4:01:86:75:dd:ee:
         79:48:5d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:57:25 2026 by rpki-client