This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84D6D1A221006E09DE738B2BDBC1ADA6BE9AE40310117D8219932A83B6CEB081/0/323830333a653230303a3a2f33322d3634203d3e20323635373438.roa
File:                     323830333a653230303a3a2f33322d3634203d3e20323635373438.roa (raw, json)
Hash identifier:          PRrBfnqShEKz4ts434fgvrXlD4NW7mxc2LjM1uakq1s=
Subject key identifier:   C2:15:1D:36:D1:B0:E2:5E:0C:FA:F2:EB:72:08:1A:A1:C3:A2:24:64
Certificate issuer:       /CN=EFE00A76A9DE935E6CADE268A729CF197AFF2222
Certificate serial:       2543B156045995568557DEC02690E10A289D4098
Authority key identifier: EF:E0:0A:76:A9:DE:93:5E:6C:AD:E2:68:A7:29:CF:19:7A:FF:22:22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFE00A76A9DE935E6CADE268A729CF197AFF2222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84D6D1A221006E09DE738B2BDBC1ADA6BE9AE40310117D8219932A83B6CEB081/0/323830333a653230303a3a2f33322d3634203d3e20323635373438.roa
Signing time:             Tue 06 Jan 2026 19:22:34 +0000
ROA not before:           Tue 06 Jan 2026 19:17:34 +0000
ROA not after:            Tue 05 Jan 2027 19:22:34 +0000
asID:                     265748
IP address blocks:        2803:e200::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/84D6D1A221006E09DE738B2BDBC1ADA6BE9AE40310117D8219932A83B6CEB081/0/EFE00A76A9DE935E6CADE268A729CF197AFF2222.crl
                          rsync://repository.lacnic.net/rpki/lacnic/84D6D1A221006E09DE738B2BDBC1ADA6BE9AE40310117D8219932A83B6CEB081/0/EFE00A76A9DE935E6CADE268A729CF197AFF2222.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFE00A76A9DE935E6CADE268A729CF197AFF2222.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 22:54:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:43:b1:56:04:59:95:56:85:57:de:c0:26:90:e1:0a:28:9d:40:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFE00A76A9DE935E6CADE268A729CF197AFF2222
        Validity
            Not Before: Jan  6 19:17:34 2026 GMT
            Not After : Jan  5 19:22:34 2027 GMT
        Subject: CN=C2151D36D1B0E25E0CFAF2EB72081AA1C3A22464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:71:ef:2a:e3:c0:80:d7:0e:bd:c6:8a:4f:24:
                    63:76:12:a4:c4:9f:2f:66:7d:61:78:31:c3:19:a2:
                    c7:90:77:e3:90:f2:ee:5f:19:ed:85:d2:db:15:82:
                    a9:a4:15:ff:47:6a:93:d0:72:81:4f:bc:b1:e1:b4:
                    9d:0d:99:53:e9:2a:96:6a:2e:26:d3:a0:44:b8:fd:
                    06:48:9d:a0:25:7e:7e:71:05:df:e8:8d:f6:e5:bd:
                    be:5b:92:df:6c:23:70:ad:7a:db:7d:1c:de:93:3f:
                    a7:30:9a:a3:4b:63:82:61:17:3b:19:0b:67:3c:fd:
                    01:f6:45:4b:b4:db:49:7a:f9:f9:d8:46:19:d2:fd:
                    b3:d5:cc:89:e0:bd:0f:0e:09:04:57:8a:c3:aa:17:
                    0a:33:23:9b:2a:bf:b4:ca:e4:00:a9:68:44:a5:97:
                    16:7f:ec:31:73:0c:2d:2e:9d:c4:a4:a3:34:fe:88:
                    5c:af:92:8d:01:c8:fa:ee:0a:1f:6b:1b:14:2f:7c:
                    01:67:e2:58:a5:1c:56:76:8f:63:9e:57:ee:7b:fd:
                    fb:4f:24:dd:4c:32:07:60:69:2e:7b:ca:b3:ec:54:
                    28:8f:24:b2:09:8b:c4:34:bb:5e:b0:56:ca:e3:8f:
                    51:0c:b7:ac:9d:0d:78:e7:30:f1:33:6f:66:aa:52:
                    b1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:15:1D:36:D1:B0:E2:5E:0C:FA:F2:EB:72:08:1A:A1:C3:A2:24:64
            X509v3 Authority Key Identifier:
                keyid:EF:E0:0A:76:A9:DE:93:5E:6C:AD:E2:68:A7:29:CF:19:7A:FF:22:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84D6D1A221006E09DE738B2BDBC1ADA6BE9AE40310117D8219932A83B6CEB081/0/EFE00A76A9DE935E6CADE268A729CF197AFF2222.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFE00A76A9DE935E6CADE268A729CF197AFF2222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84D6D1A221006E09DE738B2BDBC1ADA6BE9AE40310117D8219932A83B6CEB081/0/323830333a653230303a3a2f33322d3634203d3e20323635373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e200::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:f4:3e:8e:62:45:2f:96:ee:4a:e8:9a:9e:9b:30:05:08:5f:
         b8:2d:e9:64:1a:aa:71:71:17:48:64:d1:2c:0d:40:34:ba:90:
         6e:86:d7:88:81:a8:37:f7:07:8d:40:6e:bb:9d:a7:e4:ba:0b:
         c2:23:9a:49:91:5d:1d:45:44:7e:bf:f7:26:77:1a:10:53:5f:
         08:7e:1c:a3:49:03:34:55:a0:b4:03:3c:38:c3:15:0f:27:79:
         e3:73:72:b6:3c:a7:ac:0d:ce:7c:ac:1b:a5:02:96:0e:83:97:
         64:62:87:3a:ec:15:2f:d1:c5:f5:59:3d:88:e2:50:b1:cd:61:
         f6:10:b8:ae:f7:bb:29:bb:1b:e9:fc:a8:84:d9:46:67:77:ca:
         c2:4d:a4:8d:92:85:1d:a8:3b:51:0d:77:07:86:7a:ce:f9:14:
         eb:d0:4e:d3:43:b9:00:fd:6b:1c:c0:5a:d4:33:bb:ea:1e:2b:
         27:36:ea:8f:9e:35:06:c4:d6:71:ab:a9:b3:06:c6:14:96:8e:
         70:03:a0:2b:e0:f2:b4:8e:01:53:c1:21:b3:80:53:eb:d7:d8:
         d6:f4:2a:ab:e0:b2:3d:4b:ec:80:4c:88:a9:dd:6c:f6:62:db:
         d6:81:8a:0b:a4:70:cd:e5:93:8e:1c:43:cb:7c:0d:a0:53:0a:
         8e:7e:ad:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:30:20 2026 by rpki-client