This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D8D389EFB2AB3FA1807B96BA53497ABE04A0F5972C2681E622A3540646E0E20/0/323830333a623532303a3a2f33322d3438203d3e20323636363933.roa
File:                     323830333a623532303a3a2f33322d3438203d3e20323636363933.roa (raw, json)
Hash identifier:          RfuFS+g+Md5tSR86EfD53AVDiAVse6RwDROH326zrzs=
Subject key identifier:   05:A7:ED:DF:E9:D2:BA:5A:44:F7:08:0D:E3:26:37:13:A4:7B:17:72
Certificate issuer:       /CN=BDCCFDE2FE1388F24130105293A56A9F271FF8D9
Certificate serial:       662B58746305F5C78482DE4E51E4CD443F140C3A
Authority key identifier: BD:CC:FD:E2:FE:13:88:F2:41:30:10:52:93:A5:6A:9F:27:1F:F8:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDCCFDE2FE1388F24130105293A56A9F271FF8D9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7D8D389EFB2AB3FA1807B96BA53497ABE04A0F5972C2681E622A3540646E0E20/0/323830333a623532303a3a2f33322d3438203d3e20323636363933.roa
Signing time:             Tue 06 Jan 2026 20:56:18 +0000
ROA not before:           Tue 06 Jan 2026 20:51:18 +0000
ROA not after:            Tue 05 Jan 2027 20:56:18 +0000
asID:                     266693
IP address blocks:        2803:b520::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7D8D389EFB2AB3FA1807B96BA53497ABE04A0F5972C2681E622A3540646E0E20/0/BDCCFDE2FE1388F24130105293A56A9F271FF8D9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7D8D389EFB2AB3FA1807B96BA53497ABE04A0F5972C2681E622A3540646E0E20/0/BDCCFDE2FE1388F24130105293A56A9F271FF8D9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDCCFDE2FE1388F24130105293A56A9F271FF8D9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 01:56:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:2b:58:74:63:05:f5:c7:84:82:de:4e:51:e4:cd:44:3f:14:0c:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDCCFDE2FE1388F24130105293A56A9F271FF8D9
        Validity
            Not Before: Jan  6 20:51:18 2026 GMT
            Not After : Jan  5 20:56:18 2027 GMT
        Subject: CN=05A7EDDFE9D2BA5A44F7080DE3263713A47B1772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:94:41:47:d0:2f:f8:ea:19:f8:29:46:99:be:
                    14:7b:03:e9:b3:01:17:3c:47:80:9d:bd:e9:4b:be:
                    d5:2f:ad:85:14:fd:ee:cd:b0:d3:a7:63:e7:10:20:
                    1c:d3:64:80:65:69:ef:ac:e2:a3:82:6b:f1:b0:7d:
                    88:51:8a:28:10:f1:80:af:b9:a1:79:be:47:3c:df:
                    9c:42:4a:41:73:84:79:8f:59:d6:32:03:8c:95:ec:
                    a4:94:29:33:0f:d8:76:5c:15:6f:8e:53:12:21:c8:
                    01:2e:68:12:d9:9a:df:8b:74:9f:c4:a4:63:c4:c5:
                    b2:73:60:c2:db:38:46:0f:78:03:63:bd:5b:4c:fc:
                    b6:1e:3c:88:5c:61:da:c1:fc:bd:36:70:33:33:f6:
                    e8:81:7e:53:ec:a1:48:ae:6c:65:2c:be:5b:93:c5:
                    d6:a6:11:47:be:b3:6b:2f:19:0f:a2:fb:a9:55:32:
                    d9:82:95:5a:82:71:6e:fb:be:21:8e:b6:b9:19:17:
                    ca:b0:3b:85:d3:37:5b:24:2d:8e:59:21:bf:1f:f9:
                    80:04:97:a2:30:26:8a:43:d0:19:5e:d8:67:76:93:
                    d3:57:79:48:c1:63:c3:6e:9e:5e:f0:48:45:35:8a:
                    16:bc:1c:0e:38:a4:36:22:b5:c3:1c:b3:4f:08:44:
                    8a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A7:ED:DF:E9:D2:BA:5A:44:F7:08:0D:E3:26:37:13:A4:7B:17:72
            X509v3 Authority Key Identifier:
                keyid:BD:CC:FD:E2:FE:13:88:F2:41:30:10:52:93:A5:6A:9F:27:1F:F8:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7D8D389EFB2AB3FA1807B96BA53497ABE04A0F5972C2681E622A3540646E0E20/0/BDCCFDE2FE1388F24130105293A56A9F271FF8D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDCCFDE2FE1388F24130105293A56A9F271FF8D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D8D389EFB2AB3FA1807B96BA53497ABE04A0F5972C2681E622A3540646E0E20/0/323830333a623532303a3a2f33322d3438203d3e20323636363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b520::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:f3:ef:dc:a8:96:92:dd:e5:1b:6a:95:b6:31:8f:80:21:a8:
         04:b0:b0:ea:05:04:40:8d:17:ce:85:2c:e2:f3:eb:8b:0f:7d:
         b1:e7:8b:67:ad:ea:6b:2d:64:4d:fe:7f:ac:3c:bc:e5:66:b6:
         25:6a:eb:62:7e:e7:48:e9:e6:2b:c0:31:c1:a7:17:6d:cd:b2:
         64:90:4c:af:97:75:6b:55:9b:56:b6:93:ef:e4:a5:29:1c:c6:
         c4:15:9d:a7:0f:cd:c3:ac:3b:d8:10:18:e7:c9:02:a8:c5:dd:
         24:94:76:0a:98:ea:c8:d0:37:55:a8:a6:76:a7:ce:df:3e:e5:
         44:ae:7c:96:7e:5d:64:94:17:1f:7c:d0:aa:c4:00:a1:63:3d:
         d7:6c:cd:75:ed:fd:0f:fd:ff:0a:0b:4d:28:74:1b:9e:f7:9f:
         dd:80:29:24:09:bd:ae:1f:54:fa:b5:e2:9c:13:be:2b:e5:bc:
         f3:16:dc:17:63:7d:9f:90:10:2e:a8:59:ec:19:a2:4a:f8:b7:
         ff:4e:4e:ef:a7:7d:f7:e8:39:8a:06:e9:ed:e2:5b:0b:79:1a:
         16:6b:03:09:8d:69:c8:3f:67:f3:fe:f6:3b:ac:55:21:9c:4b:
         3c:de:2f:23:17:f3:d1:05:33:e5:a5:4d:d3:b6:2d:c2:d7:59:
         82:9e:f9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:06 2026 by rpki-client