This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/81F05B3B01566FCD01DC949A8D3E7C6A74C323648C51E3F4E68E5A6119F7162B/0/323830333a343963303a3a2f33322d3438203d3e20323635363937.roa
File:                     323830333a343963303a3a2f33322d3438203d3e20323635363937.roa (raw, json)
Hash identifier:          u7CknaLxKIB0Df++V0plQxOrvxBdKaSzVAMOUz1RvUs=
Subject key identifier:   66:E6:46:4D:6A:E1:14:7C:C4:BF:CC:AC:B3:62:FE:9F:9E:C7:A4:D5
Certificate issuer:       /CN=A3F24A104113DA66AF5689F21A09320D283B2DE0
Certificate serial:       4C9AB6054DB46B1125C0877C5B687DEC882C1E6A
Authority key identifier: A3:F2:4A:10:41:13:DA:66:AF:56:89:F2:1A:09:32:0D:28:3B:2D:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A3F24A104113DA66AF5689F21A09320D283B2DE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/81F05B3B01566FCD01DC949A8D3E7C6A74C323648C51E3F4E68E5A6119F7162B/0/323830333a343963303a3a2f33322d3438203d3e20323635363937.roa
Signing time:             Tue 06 Jan 2026 19:10:45 +0000
ROA not before:           Tue 06 Jan 2026 19:05:45 +0000
ROA not after:            Tue 05 Jan 2027 19:10:45 +0000
asID:                     265697
IP address blocks:        2803:49c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/81F05B3B01566FCD01DC949A8D3E7C6A74C323648C51E3F4E68E5A6119F7162B/0/A3F24A104113DA66AF5689F21A09320D283B2DE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/81F05B3B01566FCD01DC949A8D3E7C6A74C323648C51E3F4E68E5A6119F7162B/0/A3F24A104113DA66AF5689F21A09320D283B2DE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A3F24A104113DA66AF5689F21A09320D283B2DE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:9a:b6:05:4d:b4:6b:11:25:c0:87:7c:5b:68:7d:ec:88:2c:1e:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3F24A104113DA66AF5689F21A09320D283B2DE0
        Validity
            Not Before: Jan  6 19:05:45 2026 GMT
            Not After : Jan  5 19:10:45 2027 GMT
        Subject: CN=66E6464D6AE1147CC4BFCCACB362FE9F9EC7A4D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d0:67:39:40:3a:fa:3a:b1:99:58:06:53:bd:
                    a0:6c:a4:6c:ed:be:59:e4:6c:6d:d7:be:f8:39:2a:
                    07:d4:d0:ce:a9:50:e2:e4:83:c0:57:85:56:d8:53:
                    01:b5:95:8c:85:d3:ba:cb:d1:40:17:69:56:45:60:
                    c0:65:b8:88:ca:7b:9e:7c:4c:65:37:4e:9e:7d:04:
                    56:af:28:10:8d:23:a4:37:f0:37:02:cb:f6:1f:be:
                    8f:c2:66:8b:a3:4c:6e:7e:01:74:ea:8b:6b:e9:6d:
                    86:7d:b1:ae:8d:83:f9:ac:d3:cb:5a:17:a7:26:de:
                    e9:3a:96:4d:9a:ef:db:0a:43:d3:e3:86:3d:0e:c0:
                    85:a8:72:87:f7:8f:72:72:f8:6b:77:5a:81:78:d0:
                    ff:9f:ff:85:e4:1a:41:6a:2d:e2:59:70:22:2d:cd:
                    d8:e4:fe:19:af:2e:c2:3f:35:65:74:79:68:a9:e0:
                    ba:fc:84:b1:b0:b8:80:bb:d3:82:7c:44:56:35:22:
                    a4:b0:94:a1:cf:54:a1:bb:fd:22:6a:7e:03:43:ba:
                    e0:65:23:cc:b4:cc:bd:22:19:e0:45:a7:09:3d:bf:
                    4d:ac:b5:a5:1c:82:c0:56:8c:70:74:23:96:b7:ed:
                    b5:4e:c4:77:f4:6c:4c:5d:05:03:b6:5a:f6:1e:42:
                    ea:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E6:46:4D:6A:E1:14:7C:C4:BF:CC:AC:B3:62:FE:9F:9E:C7:A4:D5
            X509v3 Authority Key Identifier:
                keyid:A3:F2:4A:10:41:13:DA:66:AF:56:89:F2:1A:09:32:0D:28:3B:2D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/81F05B3B01566FCD01DC949A8D3E7C6A74C323648C51E3F4E68E5A6119F7162B/0/A3F24A104113DA66AF5689F21A09320D283B2DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A3F24A104113DA66AF5689F21A09320D283B2DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/81F05B3B01566FCD01DC949A8D3E7C6A74C323648C51E3F4E68E5A6119F7162B/0/323830333a343963303a3a2f33322d3438203d3e20323635363937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:49c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:21:24:0c:5d:68:4f:00:89:5f:fb:37:47:b4:00:5b:74:61:
         64:66:af:65:93:39:09:aa:b8:d3:82:be:86:c7:22:06:02:22:
         b4:48:51:d4:25:b9:2c:64:16:a8:bc:ef:67:4c:05:40:25:c5:
         71:1c:77:05:cc:d7:75:1b:c1:9a:88:67:6d:f1:ba:bd:26:7f:
         74:84:9a:6d:54:fc:1b:e2:42:96:a3:79:27:de:36:fa:2f:d2:
         03:6b:69:d3:0c:a8:8c:47:20:f6:de:d1:24:42:89:44:58:d8:
         48:c7:8f:ea:dd:32:31:ec:f2:89:68:57:55:c0:1d:b7:a9:5a:
         77:0c:d5:20:0e:b1:2e:91:3b:2c:51:e5:8e:f6:aa:c5:56:ad:
         5a:60:b2:a6:ce:0f:c5:00:69:d6:b9:f4:82:b0:d1:8c:62:e9:
         62:ec:f4:c3:62:18:1b:1e:25:27:5a:84:3d:ea:45:11:22:ca:
         e2:a5:68:8d:e0:49:49:c3:e9:89:d1:2f:09:b9:9e:29:89:9e:
         66:a9:4e:53:62:5f:89:38:ab:44:c3:36:41:1e:da:a2:cc:ef:
         32:59:1e:58:18:05:2e:27:92:61:1f:57:68:5d:66:c4:22:da:
         2c:06:64:e0:a6:cf:8d:5f:e8:31:e0:15:6d:64:9d:4d:25:dd:
         a9:06:07:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:19:01 2026 by rpki-client