This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8A7D32AC0A6E29C38CCC9D5374EC6447FA98FDC0BFFEDF7673671A0BF6CAA226/0/323830333a613539303a3a2f33322d3332203d3e20323732393730.roa
File:                     323830333a613539303a3a2f33322d3332203d3e20323732393730.roa (raw, json)
Hash identifier:          VebMPByJPDjaofzAGQ/3jla1NI4swar/dOub0rfczTg=
Subject key identifier:   67:CA:1E:20:E8:CD:8B:DE:D1:7F:8F:37:84:DA:07:7A:78:92:07:1B
Certificate issuer:       /CN=1821D3EAA1F96B6844A88CCD90D1BC327F454A72
Certificate serial:       4B6907027A6A9E552F06997A342F3F92EE04A305
Authority key identifier: 18:21:D3:EA:A1:F9:6B:68:44:A8:8C:CD:90:D1:BC:32:7F:45:4A:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1821D3EAA1F96B6844A88CCD90D1BC327F454A72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8A7D32AC0A6E29C38CCC9D5374EC6447FA98FDC0BFFEDF7673671A0BF6CAA226/0/323830333a613539303a3a2f33322d3332203d3e20323732393730.roa
Signing time:             Tue 06 Jan 2026 19:22:32 +0000
ROA not before:           Tue 06 Jan 2026 19:17:32 +0000
ROA not after:            Tue 05 Jan 2027 19:22:32 +0000
asID:                     272970
IP address blocks:        2803:a590::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8A7D32AC0A6E29C38CCC9D5374EC6447FA98FDC0BFFEDF7673671A0BF6CAA226/0/1821D3EAA1F96B6844A88CCD90D1BC327F454A72.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8A7D32AC0A6E29C38CCC9D5374EC6447FA98FDC0BFFEDF7673671A0BF6CAA226/0/1821D3EAA1F96B6844A88CCD90D1BC327F454A72.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1821D3EAA1F96B6844A88CCD90D1BC327F454A72.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 06:14:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:69:07:02:7a:6a:9e:55:2f:06:99:7a:34:2f:3f:92:ee:04:a3:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1821D3EAA1F96B6844A88CCD90D1BC327F454A72
        Validity
            Not Before: Jan  6 19:17:32 2026 GMT
            Not After : Jan  5 19:22:32 2027 GMT
        Subject: CN=67CA1E20E8CD8BDED17F8F3784DA077A7892071B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ab:ae:ad:6a:c8:ff:f7:a9:83:63:d0:10:fe:
                    46:5a:f4:99:3a:0a:1e:de:18:9a:37:0c:1e:16:ba:
                    5a:dc:0f:b5:f7:34:4f:d9:83:3b:d8:b0:00:73:71:
                    89:94:53:01:45:54:4e:3a:ce:11:6f:fa:59:dc:07:
                    6e:18:13:95:32:3d:ef:f9:a8:01:bf:cd:cf:70:09:
                    65:01:3a:41:8e:97:c1:4d:65:15:c6:3f:13:8a:ef:
                    3e:96:0d:1f:1c:d0:0c:4b:15:2c:1f:69:7c:a6:2c:
                    a0:2a:3f:f4:1a:e6:78:9a:d3:f2:cb:3c:8a:98:7d:
                    ac:a2:f4:1e:da:0d:ba:9a:4b:2a:d6:36:6e:f6:13:
                    15:bd:13:a1:b1:c5:e5:d8:4b:7c:e8:51:ba:04:10:
                    f0:74:ed:d3:f2:a1:54:e0:7b:c9:09:b6:24:e2:e2:
                    15:3b:03:db:f0:f7:f5:50:a6:36:9d:32:2b:fc:33:
                    09:fb:0b:fd:76:f5:09:e9:13:61:54:b9:7a:e0:9d:
                    78:cf:1b:31:8f:6d:dc:05:e6:89:bd:96:6f:54:76:
                    30:fb:fc:8e:32:a8:a8:03:28:48:03:13:52:73:7d:
                    b7:1b:13:c7:a6:a1:a7:a9:40:9d:da:24:60:63:fe:
                    60:99:a2:38:57:9e:a7:03:02:90:5c:40:19:14:e7:
                    b4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:CA:1E:20:E8:CD:8B:DE:D1:7F:8F:37:84:DA:07:7A:78:92:07:1B
            X509v3 Authority Key Identifier:
                keyid:18:21:D3:EA:A1:F9:6B:68:44:A8:8C:CD:90:D1:BC:32:7F:45:4A:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8A7D32AC0A6E29C38CCC9D5374EC6447FA98FDC0BFFEDF7673671A0BF6CAA226/0/1821D3EAA1F96B6844A88CCD90D1BC327F454A72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1821D3EAA1F96B6844A88CCD90D1BC327F454A72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8A7D32AC0A6E29C38CCC9D5374EC6447FA98FDC0BFFEDF7673671A0BF6CAA226/0/323830333a613539303a3a2f33322d3332203d3e20323732393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a590::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:c0:5e:cb:82:13:19:0e:d9:6c:e1:8c:a8:08:9d:2f:09:4e:
         4f:08:6f:03:99:cc:79:fb:68:94:ba:27:00:9c:50:05:3d:e4:
         68:bf:39:5c:82:6b:70:95:95:65:eb:9a:ec:3d:ea:0b:e1:ea:
         1d:cb:0d:8d:a8:f5:7d:8c:8d:b5:d2:a9:22:bb:a8:e0:90:87:
         82:26:6b:b7:6f:43:e9:6a:a0:b8:8f:c4:5e:6f:52:32:a6:18:
         ae:07:f9:4f:2d:4d:31:9c:81:31:ee:6f:0c:b1:95:5d:20:ee:
         e4:b7:66:3c:76:f2:11:02:28:b6:8b:d6:68:b4:2e:a2:12:43:
         1f:e5:47:67:81:a2:bc:17:39:c3:6c:3c:86:a6:0b:bc:a2:ef:
         d0:ec:be:64:98:e3:4f:fb:c5:b8:13:4e:8e:f5:db:57:ba:3b:
         dd:77:c8:79:86:36:7e:6f:c4:c3:73:20:51:7e:e9:c9:2b:6c:
         6d:de:11:05:96:b1:01:4a:62:0e:72:4e:9d:92:11:8b:45:75:
         b6:9f:ef:32:7d:41:77:a4:94:d9:58:ff:64:33:dc:5c:5c:a0:
         20:31:e6:cb:be:5d:6f:36:5a:48:fe:55:54:c2:e0:0e:ca:e6:
         f9:f9:e3:59:65:dc:fd:1c:9e:98:cb:ba:0a:87:ca:6a:1e:e1:
         6e:19:9e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:45:42 2026 by rpki-client