This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/323830333a363835303a323a3a2f34382d3438203d3e20323733313133.roa
File:                     323830333a363835303a323a3a2f34382d3438203d3e20323733313133.roa (raw, json)
Hash identifier:          owBkU/S+cIgqWw5U0JTiYq+k9qhjvR29EIjKcvbtov0=
Subject key identifier:   5A:DE:0E:77:E2:E8:29:96:D4:51:E9:A2:99:1D:8D:0A:72:92:E4:60
Certificate issuer:       /CN=1642A8D6C14F94500E7FF6111DCC5D5107143798
Certificate serial:       33108524AC2705E0611280ACD4DF1DC0D607AD55
Authority key identifier: 16:42:A8:D6:C1:4F:94:50:0E:7F:F6:11:1D:CC:5D:51:07:14:37:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/323830333a363835303a323a3a2f34382d3438203d3e20323733313133.roa
Signing time:             Tue 06 Jan 2026 19:24:14 +0000
ROA not before:           Tue 06 Jan 2026 19:19:14 +0000
ROA not after:            Tue 05 Jan 2027 19:24:14 +0000
asID:                     273113
IP address blocks:        2803:6850:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 20:58:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:10:85:24:ac:27:05:e0:61:12:80:ac:d4:df:1d:c0:d6:07:ad:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1642A8D6C14F94500E7FF6111DCC5D5107143798
        Validity
            Not Before: Jan  6 19:19:14 2026 GMT
            Not After : Jan  5 19:24:14 2027 GMT
        Subject: CN=5ADE0E77E2E82996D451E9A2991D8D0A7292E460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:53:81:c0:ae:10:d0:9b:7a:61:c1:16:12:10:
                    49:a5:fd:43:81:6a:4a:a4:42:fa:60:b4:8e:54:83:
                    67:73:f1:fb:aa:11:00:b1:a7:54:cb:ce:8c:90:bd:
                    fd:4f:61:d0:2c:8a:0f:5c:f6:3b:a2:67:a8:6a:51:
                    44:e4:44:65:a8:51:0d:d3:2a:4d:47:b8:6a:eb:73:
                    b3:ef:bc:4b:c7:1c:22:92:02:fa:4e:7e:ff:cf:ed:
                    3b:de:a6:73:0e:88:ee:5c:ca:a6:c1:d7:5f:09:58:
                    31:8e:41:ef:14:02:a2:52:ca:8b:67:5a:af:56:a3:
                    3b:bf:3b:c0:c3:4d:f0:4f:43:51:57:73:8f:c7:11:
                    4f:82:cb:02:3b:52:89:b2:a8:62:08:30:3c:cd:de:
                    a1:ff:54:6d:36:97:bf:48:f7:23:3c:42:e2:57:8e:
                    6a:82:80:f4:09:67:58:79:db:61:4a:fe:cb:fe:b2:
                    47:e3:4e:76:55:18:7c:b2:04:49:be:16:8a:b9:0e:
                    9d:e8:16:8b:d2:fb:6f:c0:d3:f6:67:6f:c5:a0:38:
                    0a:e1:f1:d5:c0:2a:a9:94:66:e7:ad:53:90:66:96:
                    57:62:87:59:c8:23:96:e4:5b:dd:dd:a7:c1:ea:4a:
                    d3:09:41:db:ce:4b:38:d1:13:1c:a7:c4:7b:b8:44:
                    81:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:DE:0E:77:E2:E8:29:96:D4:51:E9:A2:99:1D:8D:0A:72:92:E4:60
            X509v3 Authority Key Identifier:
                keyid:16:42:A8:D6:C1:4F:94:50:0E:7F:F6:11:1D:CC:5D:51:07:14:37:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/323830333a363835303a323a3a2f34382d3438203d3e20323733313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6850:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:45:0d:a1:ae:1a:e2:5a:32:7c:87:e7:15:40:2a:1a:93:18:
         a9:6b:36:ec:81:32:bc:41:80:ab:95:af:b1:9f:f6:ef:35:ac:
         85:c9:b8:92:68:2e:8b:5d:a4:23:48:d9:35:46:aa:6a:71:ff:
         99:a6:7f:2d:38:f4:21:b6:52:c9:a6:f2:0f:10:68:cb:70:ef:
         c3:38:ee:9b:95:d5:74:01:46:26:22:f7:92:71:f2:2b:d7:a3:
         b3:fa:05:06:01:01:63:47:fe:fc:47:83:bd:92:4c:09:e4:43:
         84:51:5a:43:48:cd:a8:dc:ea:08:03:89:08:47:fb:11:26:86:
         9b:65:28:cf:b6:7e:64:21:bd:8e:e7:c1:7a:1a:27:9c:d1:7e:
         68:5f:ba:95:4a:ff:b9:7e:a8:bf:81:c0:42:70:aa:b4:69:b4:
         64:bd:88:92:45:11:ff:22:fd:bf:9f:cb:df:26:a6:f2:36:e1:
         62:61:05:22:e3:ca:fc:f7:e3:61:0f:37:5c:06:93:57:f3:11:
         84:70:27:5f:7e:77:a7:80:b2:7e:bc:04:47:61:ba:01:82:ef:
         96:3b:fb:01:8c:91:3e:df:7d:aa:0b:13:2b:79:21:a4:7e:25:
         a6:6a:74:36:ff:54:94:2d:32:8c:c0:d0:d5:08:31:57:56:40:
         60:93:db:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:31:35 2026 by rpki-client