This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D5F66F08A7D1AC141B2D62ED65FAEC9F7C957DD00B84937B5175B638EE52F04/0/323830333a643561303a3a2f33322d3332203d3e203631343636.roa
File:                     323830333a643561303a3a2f33322d3332203d3e203631343636.roa (raw, json)
Hash identifier:          fQ+QRJkW4Y47f55Q9PnFaJDg55ejIfGAtK+v5cadKrQ=
Subject key identifier:   AB:F4:5F:6E:FA:0E:3C:BE:21:BF:93:9E:C1:B2:22:99:8F:03:07:E2
Certificate issuer:       /CN=A8D5E43848A8CF388939A53395C03EA7BB10B2EC
Certificate serial:       39A1CDE75E3ADEA0FB581FEC7C88DDADC89A2EB3
Authority key identifier: A8:D5:E4:38:48:A8:CF:38:89:39:A5:33:95:C0:3E:A7:BB:10:B2:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8D5E43848A8CF388939A53395C03EA7BB10B2EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7D5F66F08A7D1AC141B2D62ED65FAEC9F7C957DD00B84937B5175B638EE52F04/0/323830333a643561303a3a2f33322d3332203d3e203631343636.roa
Signing time:             Tue 06 Jan 2026 19:13:07 +0000
ROA not before:           Tue 06 Jan 2026 19:08:07 +0000
ROA not after:            Tue 05 Jan 2027 19:13:07 +0000
asID:                     61466
IP address blocks:        2803:d5a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7D5F66F08A7D1AC141B2D62ED65FAEC9F7C957DD00B84937B5175B638EE52F04/0/A8D5E43848A8CF388939A53395C03EA7BB10B2EC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7D5F66F08A7D1AC141B2D62ED65FAEC9F7C957DD00B84937B5175B638EE52F04/0/A8D5E43848A8CF388939A53395C03EA7BB10B2EC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8D5E43848A8CF388939A53395C03EA7BB10B2EC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:a1:cd:e7:5e:3a:de:a0:fb:58:1f:ec:7c:88:dd:ad:c8:9a:2e:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8D5E43848A8CF388939A53395C03EA7BB10B2EC
        Validity
            Not Before: Jan  6 19:08:07 2026 GMT
            Not After : Jan  5 19:13:07 2027 GMT
        Subject: CN=ABF45F6EFA0E3CBE21BF939EC1B222998F0307E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:05:bc:30:86:a9:50:b3:c9:4a:c6:c1:b0:0e:
                    b7:2b:26:6b:66:32:15:36:76:32:b9:e4:8a:85:e2:
                    c8:0d:8e:83:b3:75:50:01:ed:f7:b3:b8:c0:21:1c:
                    52:7d:22:d2:c0:8c:fc:0c:07:8f:71:6c:50:80:ef:
                    b2:c6:6b:5e:f9:57:44:f1:77:e8:0b:98:55:75:42:
                    a3:05:85:98:50:d3:a9:43:dc:1d:d4:df:3d:59:1d:
                    e7:f9:60:88:ed:a2:d8:d2:3a:26:79:c4:8f:54:a2:
                    dc:68:37:ef:e5:d9:2e:bd:17:ff:dd:e9:f5:18:9a:
                    e0:76:3e:82:c2:68:09:a3:b4:62:8c:c9:25:b4:39:
                    bd:f7:47:56:fd:5b:4a:ba:e9:b7:31:28:18:57:a6:
                    c7:62:a1:ed:1b:e0:50:5f:4d:f1:41:62:95:23:5a:
                    0f:07:96:a3:eb:b6:0c:f0:9b:04:dc:5b:e1:65:4a:
                    d2:3c:77:b9:a9:2f:49:91:19:ab:b1:83:00:db:d2:
                    a2:e3:e7:fb:7d:b9:00:ab:8d:de:fc:ac:01:3e:a5:
                    d6:60:fa:57:b8:67:cf:73:0c:94:b0:22:3d:68:4d:
                    37:1d:f7:01:bd:ae:43:f7:02:df:62:6c:34:76:b4:
                    a7:91:47:73:4c:4b:da:6e:17:f6:20:67:cf:ee:cc:
                    00:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F4:5F:6E:FA:0E:3C:BE:21:BF:93:9E:C1:B2:22:99:8F:03:07:E2
            X509v3 Authority Key Identifier:
                keyid:A8:D5:E4:38:48:A8:CF:38:89:39:A5:33:95:C0:3E:A7:BB:10:B2:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7D5F66F08A7D1AC141B2D62ED65FAEC9F7C957DD00B84937B5175B638EE52F04/0/A8D5E43848A8CF388939A53395C03EA7BB10B2EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8D5E43848A8CF388939A53395C03EA7BB10B2EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D5F66F08A7D1AC141B2D62ED65FAEC9F7C957DD00B84937B5175B638EE52F04/0/323830333a643561303a3a2f33322d3332203d3e203631343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d5a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:71:32:67:6a:91:2c:94:5f:43:58:8d:dc:7c:dc:9d:72:21:
         12:1a:4f:88:98:84:0e:ce:63:50:54:c0:db:b0:9e:76:2d:b9:
         96:49:e5:f5:54:8a:b8:c0:c2:80:c6:b6:18:bf:08:12:b7:e1:
         fd:e1:db:ab:67:f3:cc:c7:ed:e8:9f:fa:bd:14:36:f0:00:0f:
         91:da:b1:ee:e0:05:e8:01:97:f7:8a:d9:81:58:2b:44:51:cf:
         be:46:cd:9a:a9:8a:08:1f:73:7e:d7:f1:e3:49:14:7f:74:21:
         74:5c:95:df:24:08:ec:99:76:54:d1:27:72:6e:65:a5:bd:3d:
         0b:cb:e3:93:e9:87:cf:af:b3:41:61:a5:9f:90:ba:c8:cc:1b:
         95:c1:83:ba:5a:7f:59:b6:13:ea:50:2f:92:5e:fb:af:11:22:
         09:fe:62:3e:10:4b:17:14:91:ac:70:41:59:c9:17:42:95:37:
         8f:64:ff:e0:c8:c6:c5:2b:95:53:fa:05:01:41:9f:e4:96:a6:
         e7:a6:8f:93:f3:2c:c0:49:86:f1:c0:31:cd:66:a4:9c:11:ef:
         77:e1:cd:2c:75:fb:0a:ab:0d:02:61:1a:ae:48:3c:b5:50:70:
         6f:ab:b4:f4:45:1b:8a:e4:0c:2b:56:98:06:c5:36:ac:43:3d:
         22:79:c2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:24 2026 by rpki-client