This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8CDE50B2A28AE41AC50105F07A2A5A4581DFD2A3804D49E8EA51A29D0B01EB8E/0/323830333a363636303a3a2f33322d3438203d3e20323637383935.roa
File:                     323830333a363636303a3a2f33322d3438203d3e20323637383935.roa (raw, json)
Hash identifier:          hxfVYZaGDfyxy+d7oG/hnc7IYN7K2L1WNgda+d7UmFc=
Subject key identifier:   EC:CD:CD:2B:D0:9C:8D:DC:07:7D:60:C1:AF:C6:DF:A7:A6:71:5A:2D
Certificate issuer:       /CN=44968DAE5ECDC431BCAA7B2AB42A202C6B2454D8
Certificate serial:       064738B34031725D576A129CE535D7B876F5AE2B
Authority key identifier: 44:96:8D:AE:5E:CD:C4:31:BC:AA:7B:2A:B4:2A:20:2C:6B:24:54:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44968DAE5ECDC431BCAA7B2AB42A202C6B2454D8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8CDE50B2A28AE41AC50105F07A2A5A4581DFD2A3804D49E8EA51A29D0B01EB8E/0/323830333a363636303a3a2f33322d3438203d3e20323637383935.roa
Signing time:             Tue 06 Jan 2026 19:18:27 +0000
ROA not before:           Tue 06 Jan 2026 19:13:27 +0000
ROA not after:            Tue 05 Jan 2027 19:18:27 +0000
asID:                     267895
IP address blocks:        2803:6660::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8CDE50B2A28AE41AC50105F07A2A5A4581DFD2A3804D49E8EA51A29D0B01EB8E/0/44968DAE5ECDC431BCAA7B2AB42A202C6B2454D8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8CDE50B2A28AE41AC50105F07A2A5A4581DFD2A3804D49E8EA51A29D0B01EB8E/0/44968DAE5ECDC431BCAA7B2AB42A202C6B2454D8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44968DAE5ECDC431BCAA7B2AB42A202C6B2454D8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 18:26:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:47:38:b3:40:31:72:5d:57:6a:12:9c:e5:35:d7:b8:76:f5:ae:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44968DAE5ECDC431BCAA7B2AB42A202C6B2454D8
        Validity
            Not Before: Jan  6 19:13:27 2026 GMT
            Not After : Jan  5 19:18:27 2027 GMT
        Subject: CN=ECCDCD2BD09C8DDC077D60C1AFC6DFA7A6715A2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cb:b9:97:63:77:44:8f:1f:ce:18:52:8a:6a:
                    45:1f:94:d9:f6:1d:19:f8:a8:6a:72:24:94:4a:5a:
                    9e:12:fe:e4:61:3b:de:74:09:c9:9d:69:5b:01:de:
                    5e:33:6e:e2:9e:6b:78:e2:db:30:54:12:da:76:4b:
                    8d:ca:bc:83:90:32:78:f2:69:f7:8f:cc:cb:5a:2f:
                    15:4c:b8:f3:0a:82:29:d0:ec:64:88:d8:ae:4a:a9:
                    21:e8:df:08:1f:53:cd:b9:a9:a5:34:fa:2f:cc:d0:
                    f9:e7:7b:bd:7f:58:50:1f:15:84:53:f5:55:21:25:
                    c8:e6:db:ad:ca:65:61:b1:4b:36:6d:61:0b:9d:28:
                    98:7a:38:dc:b9:09:41:d9:5e:e9:27:8c:76:79:5b:
                    bd:a7:84:99:63:36:fe:ac:c9:59:e0:6c:9f:e5:6b:
                    c6:b5:67:14:c8:c2:eb:58:cd:ac:45:0a:a7:43:4f:
                    41:6a:f6:21:de:0f:c2:71:a8:87:28:0e:51:9b:00:
                    af:57:b5:4b:43:f5:95:ad:a3:9c:0e:27:eb:b0:82:
                    c7:1e:71:75:0a:b8:1b:9d:18:e3:9f:55:f8:4e:fd:
                    47:58:00:8d:96:ff:c9:64:b6:d9:ed:79:6c:e2:f4:
                    b6:66:17:28:4b:69:91:ec:7b:38:ad:22:ad:63:a7:
                    b3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CD:CD:2B:D0:9C:8D:DC:07:7D:60:C1:AF:C6:DF:A7:A6:71:5A:2D
            X509v3 Authority Key Identifier:
                keyid:44:96:8D:AE:5E:CD:C4:31:BC:AA:7B:2A:B4:2A:20:2C:6B:24:54:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8CDE50B2A28AE41AC50105F07A2A5A4581DFD2A3804D49E8EA51A29D0B01EB8E/0/44968DAE5ECDC431BCAA7B2AB42A202C6B2454D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44968DAE5ECDC431BCAA7B2AB42A202C6B2454D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8CDE50B2A28AE41AC50105F07A2A5A4581DFD2A3804D49E8EA51A29D0B01EB8E/0/323830333a363636303a3a2f33322d3438203d3e20323637383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6660::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:fa:76:6f:b8:4a:33:fb:e9:f1:eb:a3:47:d4:0a:ed:c6:40:
         c3:91:18:44:43:b3:66:8e:4f:88:74:13:ef:ec:7e:23:25:e5:
         d3:4e:b5:7e:03:5c:f5:73:05:7a:9f:e1:9a:6f:ed:8c:ef:2a:
         8a:94:d5:d0:eb:16:24:77:97:51:3b:63:54:37:76:13:72:83:
         e0:05:5b:f4:6a:ef:b1:fe:cd:c6:38:dd:38:25:9e:2e:f2:06:
         29:4d:49:30:7d:22:88:29:5c:43:c8:19:e0:e8:3a:a1:e3:fe:
         d7:61:31:8e:d2:8d:59:76:36:f0:ef:89:d2:47:4f:04:7c:f1:
         51:71:1c:94:26:35:93:39:7f:69:e6:85:ee:1d:33:d5:b1:4d:
         03:3f:60:7b:68:53:d4:8a:d2:09:9a:24:52:ae:cc:29:c3:a0:
         21:48:f5:2b:37:27:df:e2:8c:6d:7a:ea:e2:66:03:af:71:ef:
         5c:8b:96:a4:65:a4:73:25:be:18:db:f0:c9:04:af:05:a3:8c:
         30:77:b0:19:f3:4c:4e:45:5d:8c:7e:ea:30:b8:65:12:61:88:
         f8:cf:64:95:26:1a:d9:59:56:d6:0f:39:3b:7b:ca:e1:de:77:
         f2:37:33:c5:d6:d3:06:9b:8d:75:e4:4a:fe:31:5c:fd:7d:5b:
         b7:bc:56:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:38:57 2026 by rpki-client