This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/323830333a363835303a393a3a2f34382d3438203d3e20323733313133.roa
File:                     323830333a363835303a393a3a2f34382d3438203d3e20323733313133.roa (raw, json)
Hash identifier:          qzkrhDOoWipnbRs+wOZ5v+nT0WMtsObNFSOHA0BYny8=
Subject key identifier:   D8:FD:56:81:60:A9:59:82:82:47:DE:00:70:3C:E5:F2:8E:1E:AC:E3
Certificate issuer:       /CN=1642A8D6C14F94500E7FF6111DCC5D5107143798
Certificate serial:       9C0E82E0106AC77A44DAF0698D3A458CE710B6
Authority key identifier: 16:42:A8:D6:C1:4F:94:50:0E:7F:F6:11:1D:CC:5D:51:07:14:37:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/323830333a363835303a393a3a2f34382d3438203d3e20323733313133.roa
Signing time:             Tue 06 Jan 2026 19:24:13 +0000
ROA not before:           Tue 06 Jan 2026 19:19:13 +0000
ROA not after:            Tue 05 Jan 2027 19:24:13 +0000
asID:                     273113
IP address blocks:        2803:6850:9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 20:58:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            9c:0e:82:e0:10:6a:c7:7a:44:da:f0:69:8d:3a:45:8c:e7:10:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1642A8D6C14F94500E7FF6111DCC5D5107143798
        Validity
            Not Before: Jan  6 19:19:13 2026 GMT
            Not After : Jan  5 19:24:13 2027 GMT
        Subject: CN=D8FD568160A959828247DE00703CE5F28E1EACE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:06:22:6d:c0:db:ad:42:39:57:a2:d7:7f:89:
                    a4:84:82:fe:b8:8e:f1:27:e2:28:3b:54:f7:89:60:
                    d7:ba:78:75:e7:1d:fc:76:b5:5e:0d:be:4c:8f:48:
                    2a:d6:b7:10:81:b5:51:60:bc:bd:bb:6e:af:a4:de:
                    a4:00:85:7f:d6:3a:d1:cd:80:05:6d:9a:e7:35:60:
                    c4:3c:da:4d:81:31:de:b6:69:af:10:6b:32:82:ec:
                    e6:af:ff:73:02:51:22:0b:71:53:ae:88:15:c9:5f:
                    5e:1f:6a:81:6f:60:fc:ee:19:20:d3:b0:9a:74:7d:
                    6d:b0:0d:10:ac:74:86:15:44:5a:f5:7f:c3:88:96:
                    cf:6f:22:47:6c:71:24:b0:c8:85:bd:d1:30:d9:95:
                    d5:2d:f1:ee:53:8d:ea:3e:21:34:21:50:3c:a8:d1:
                    a1:f3:83:40:a8:ad:bd:29:16:b0:65:86:70:32:9f:
                    0f:0b:9c:42:0d:93:e7:7f:ed:83:4b:b3:0a:97:33:
                    9d:9c:d4:dd:3f:38:bc:dc:f1:95:9e:8a:ab:eb:f9:
                    63:83:ed:b7:49:05:d1:4b:33:ce:a9:dc:df:68:e5:
                    bb:31:74:ed:a8:d9:2a:45:86:9d:78:24:d4:50:08:
                    c9:18:45:6c:a7:e3:31:ee:95:c1:0c:f5:fc:27:90:
                    18:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:FD:56:81:60:A9:59:82:82:47:DE:00:70:3C:E5:F2:8E:1E:AC:E3
            X509v3 Authority Key Identifier:
                keyid:16:42:A8:D6:C1:4F:94:50:0E:7F:F6:11:1D:CC:5D:51:07:14:37:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/323830333a363835303a393a3a2f34382d3438203d3e20323733313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6850:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:9d:de:a8:36:46:9e:39:8c:59:0c:a3:95:2e:0d:57:9e:96:
         8c:18:b9:d1:ae:f6:54:fb:3f:76:c8:ae:b5:01:d1:d8:bd:ad:
         43:08:9d:5f:f0:02:b5:29:69:2c:94:a8:ed:75:32:5c:1f:44:
         51:24:8d:a5:f6:e6:0c:c6:43:6b:8e:b9:f5:21:36:23:82:57:
         2f:b5:a4:f4:a8:be:7a:fe:8f:49:87:2b:a7:4b:0c:8c:0c:df:
         68:e3:40:36:15:e5:66:2e:e2:04:f8:d4:9e:a5:ce:f7:79:c7:
         7d:88:4a:ed:60:f5:f9:b3:a4:09:e0:4f:ab:9e:72:48:95:6c:
         3c:7d:4f:48:ee:6c:61:3e:ed:92:41:0c:e6:72:5c:40:d2:93:
         3b:20:99:c3:bf:da:9b:5d:e0:e8:6b:b7:bb:99:70:b6:5a:df:
         25:17:f6:0d:b5:ca:c0:52:69:6d:1c:60:25:c5:20:46:ce:65:
         9c:87:6c:df:1c:97:2e:ec:d4:e6:e8:c5:4e:7d:bb:8b:52:c1:
         be:0a:39:7b:83:64:47:2d:87:41:fc:53:f1:fb:12:b3:0c:ac:
         af:bd:41:7f:e6:09:e7:3e:95:52:18:e1:15:13:b7:90:51:cb:
         5f:ab:62:ac:67:cb:0e:7c:20:10:f1:63:f2:24:2c:21:6f:e0:
         9f:6d:39:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:31:33 2026 by rpki-client