This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C37CA7E71577E7E86E7A213DC193C7D5A250CFAF83FF0570553691DD700529D/0/323830333a663230303a3a2f33322d3332203d3e203532333232.roa
File:                     323830333a663230303a3a2f33322d3332203d3e203532333232.roa (raw, json)
Hash identifier:          YYSBAPlDpJATAKvVjmevS7kBnfFVg00fIYDGPZa3L1s=
Subject key identifier:   FD:72:06:03:C9:8F:42:68:CC:C0:6B:28:EA:67:05:19:86:AE:11:F8
Certificate issuer:       /CN=C29F087109B76309AE65BC7A7F7BAE0D3175209C
Certificate serial:       4086019CB6B9E32A1B3D2D8A379D5A53A2664914
Authority key identifier: C2:9F:08:71:09:B7:63:09:AE:65:BC:7A:7F:7B:AE:0D:31:75:20:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C29F087109B76309AE65BC7A7F7BAE0D3175209C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C37CA7E71577E7E86E7A213DC193C7D5A250CFAF83FF0570553691DD700529D/0/323830333a663230303a3a2f33322d3332203d3e203532333232.roa
Signing time:             Tue 06 Jan 2026 20:58:38 +0000
ROA not before:           Tue 06 Jan 2026 20:53:38 +0000
ROA not after:            Tue 05 Jan 2027 20:58:38 +0000
asID:                     52322
IP address blocks:        2803:f200::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C37CA7E71577E7E86E7A213DC193C7D5A250CFAF83FF0570553691DD700529D/0/C29F087109B76309AE65BC7A7F7BAE0D3175209C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C37CA7E71577E7E86E7A213DC193C7D5A250CFAF83FF0570553691DD700529D/0/C29F087109B76309AE65BC7A7F7BAE0D3175209C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C29F087109B76309AE65BC7A7F7BAE0D3175209C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:86:01:9c:b6:b9:e3:2a:1b:3d:2d:8a:37:9d:5a:53:a2:66:49:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C29F087109B76309AE65BC7A7F7BAE0D3175209C
        Validity
            Not Before: Jan  6 20:53:38 2026 GMT
            Not After : Jan  5 20:58:38 2027 GMT
        Subject: CN=FD720603C98F4268CCC06B28EA67051986AE11F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7d:9b:6a:01:f3:cf:61:f4:94:e1:46:0a:22:
                    1e:d2:9a:fe:45:35:60:44:27:75:3f:cc:d7:ea:6d:
                    cf:a5:ef:9d:83:02:35:01:80:82:96:71:6e:a3:a0:
                    b0:ce:3a:0d:c0:af:19:3f:f6:8d:5f:6c:77:eb:96:
                    95:8b:dc:d9:18:ff:2d:8e:e5:08:c9:88:88:6f:ed:
                    b1:ba:76:9f:25:e6:4d:5b:ef:b1:54:f7:f1:e7:b0:
                    a5:8d:e2:39:3e:0c:57:33:4a:31:52:fa:90:83:da:
                    13:e5:eb:e8:86:6c:cd:9e:01:b3:b5:e8:a0:b0:c3:
                    95:53:92:c3:60:42:85:06:71:4f:9a:ce:54:b2:c3:
                    32:38:0a:c7:7d:f7:fb:b9:a8:68:3b:8c:5a:5a:23:
                    e1:6c:02:3d:52:dd:a8:6d:3c:8d:bd:ba:6f:07:c8:
                    93:ba:06:4f:87:66:56:29:c4:80:ca:a9:7f:50:01:
                    e5:b1:51:2e:1a:6f:ae:cf:c7:be:e0:ed:1d:62:9c:
                    18:36:30:ac:81:2d:ca:92:2f:b3:86:2a:e3:92:ad:
                    66:ca:e3:cb:72:b6:29:db:0a:7e:ab:2a:25:94:70:
                    b1:81:89:0a:2f:75:77:d3:50:ee:06:fb:8b:c8:c0:
                    ca:70:1f:e0:1f:99:e6:76:e3:d2:e0:93:99:2a:8f:
                    67:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:72:06:03:C9:8F:42:68:CC:C0:6B:28:EA:67:05:19:86:AE:11:F8
            X509v3 Authority Key Identifier:
                keyid:C2:9F:08:71:09:B7:63:09:AE:65:BC:7A:7F:7B:AE:0D:31:75:20:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C37CA7E71577E7E86E7A213DC193C7D5A250CFAF83FF0570553691DD700529D/0/C29F087109B76309AE65BC7A7F7BAE0D3175209C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C29F087109B76309AE65BC7A7F7BAE0D3175209C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C37CA7E71577E7E86E7A213DC193C7D5A250CFAF83FF0570553691DD700529D/0/323830333a663230303a3a2f33322d3332203d3e203532333232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f200::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:22:99:a9:ec:76:a9:51:29:22:77:c7:4d:bb:45:72:30:0e:
         d8:62:b1:ba:e3:89:78:3b:f7:5d:20:37:92:e1:6f:6a:bd:c7:
         45:ca:dd:9f:8e:7b:29:89:1a:7c:45:d1:fe:da:0f:49:f1:5b:
         6b:88:dd:93:d6:f1:3c:1b:f4:32:32:03:eb:ee:50:9c:a4:b4:
         ce:c7:8d:be:f4:3b:f8:69:1d:8c:63:7c:2e:9a:83:ff:6a:cf:
         dd:13:3f:84:c5:51:4d:e4:ee:dc:6b:cd:39:6c:c5:3f:eb:dd:
         6b:db:ca:d8:4a:86:df:26:e9:5b:ef:cd:8c:5d:b5:71:79:27:
         60:ff:2d:39:4e:87:31:d4:c8:49:54:ba:06:1c:14:f8:f0:33:
         fb:e3:1e:ce:df:4c:a9:92:b4:15:85:17:0d:c8:48:79:b4:fa:
         da:c0:62:6f:6c:59:b2:33:2b:70:cd:2b:2a:73:74:05:b5:1a:
         bc:5a:37:45:b1:98:dd:51:0d:b6:0c:54:9f:49:f8:7f:99:54:
         a9:2a:bc:c8:34:99:cf:f2:b0:82:ab:f0:f7:5d:a9:51:9d:84:
         96:7f:15:86:3e:98:ff:65:48:e6:c5:60:b7:d3:17:5d:1a:f9:
         d7:10:8a:ae:2c:72:81:61:fe:b7:52:3f:72:ce:08:d0:f4:34:
         fa:85:fc:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:30:41 2026 by rpki-client