This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8EF707C4FD266762D19EF19863D8B5CB58EFAC8132BE06535A3DDAA2A2C47CBE/0/323830333a353965303a3a2f33322d3332203d3e20323730303231.roa
File:                     323830333a353965303a3a2f33322d3332203d3e20323730303231.roa (raw, json)
Hash identifier:          rRZ4ymwgvIxqazjhfZahN5jF2LCiU16xEpnZEs+ATE0=
Subject key identifier:   85:23:BE:FA:00:63:52:5A:AB:1E:80:F6:0F:5D:DB:7B:44:2E:1B:5A
Certificate issuer:       /CN=6D9C794B5D39E9E3CCC978B3378627D090E06C4F
Certificate serial:       5C7D606EB24D0EAC2D53814DDC4D0FCFB51A904C
Authority key identifier: 6D:9C:79:4B:5D:39:E9:E3:CC:C9:78:B3:37:86:27:D0:90:E0:6C:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D9C794B5D39E9E3CCC978B3378627D090E06C4F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8EF707C4FD266762D19EF19863D8B5CB58EFAC8132BE06535A3DDAA2A2C47CBE/0/323830333a353965303a3a2f33322d3332203d3e20323730303231.roa
Signing time:             Tue 06 Jan 2026 18:57:55 +0000
ROA not before:           Tue 06 Jan 2026 18:52:55 +0000
ROA not after:            Tue 05 Jan 2027 18:57:55 +0000
asID:                     270021
IP address blocks:        2803:59e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8EF707C4FD266762D19EF19863D8B5CB58EFAC8132BE06535A3DDAA2A2C47CBE/0/6D9C794B5D39E9E3CCC978B3378627D090E06C4F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8EF707C4FD266762D19EF19863D8B5CB58EFAC8132BE06535A3DDAA2A2C47CBE/0/6D9C794B5D39E9E3CCC978B3378627D090E06C4F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D9C794B5D39E9E3CCC978B3378627D090E06C4F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:7d:60:6e:b2:4d:0e:ac:2d:53:81:4d:dc:4d:0f:cf:b5:1a:90:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D9C794B5D39E9E3CCC978B3378627D090E06C4F
        Validity
            Not Before: Jan  6 18:52:55 2026 GMT
            Not After : Jan  5 18:57:55 2027 GMT
        Subject: CN=8523BEFA0063525AAB1E80F60F5DDB7B442E1B5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0c:15:5f:69:e4:1c:8b:ed:fa:ac:7a:e7:7d:
                    dd:28:e9:9d:11:c5:e3:5f:2c:0d:73:21:e4:f3:05:
                    dc:a8:2a:4f:76:d6:fe:4e:ce:54:6e:55:4e:dc:cd:
                    df:e3:22:c0:1e:7e:64:24:73:14:44:30:93:b6:d5:
                    ec:44:e4:ef:ea:6a:d5:fe:4f:fb:06:28:b7:ab:5f:
                    48:c2:c9:7e:91:fd:51:fb:6d:b6:57:d3:3d:b7:8d:
                    7f:af:4e:4a:c9:41:87:bf:5d:f1:58:06:02:51:8b:
                    f1:cb:db:0f:f4:b4:e3:1f:19:bf:8f:86:51:17:32:
                    08:c2:30:1c:88:e6:14:f5:96:bb:1d:af:48:ac:0e:
                    c4:1a:e1:b0:69:92:ed:f0:c6:08:76:f4:46:bb:98:
                    e0:7a:c2:94:c1:27:19:92:43:94:32:2f:94:57:fe:
                    43:c7:6f:9a:e0:28:bb:d2:04:b3:b9:28:0a:ac:b3:
                    4d:90:28:49:3f:3a:61:dc:7c:f6:7f:43:b3:46:bc:
                    12:d0:94:b8:73:d2:d8:e4:6c:41:63:68:71:4e:6c:
                    fe:a2:67:68:2d:14:f4:c0:c7:66:49:29:18:fb:38:
                    7a:82:54:7d:1d:54:00:66:75:cb:62:d4:fa:d5:f0:
                    49:32:48:86:09:7e:38:29:3d:28:aa:18:3b:b9:09:
                    4d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:23:BE:FA:00:63:52:5A:AB:1E:80:F6:0F:5D:DB:7B:44:2E:1B:5A
            X509v3 Authority Key Identifier:
                keyid:6D:9C:79:4B:5D:39:E9:E3:CC:C9:78:B3:37:86:27:D0:90:E0:6C:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8EF707C4FD266762D19EF19863D8B5CB58EFAC8132BE06535A3DDAA2A2C47CBE/0/6D9C794B5D39E9E3CCC978B3378627D090E06C4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D9C794B5D39E9E3CCC978B3378627D090E06C4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8EF707C4FD266762D19EF19863D8B5CB58EFAC8132BE06535A3DDAA2A2C47CBE/0/323830333a353965303a3a2f33322d3332203d3e20323730303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:59e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:d1:c9:3e:85:3d:71:f2:a4:fe:e7:fc:0d:5d:4e:f5:0b:a7:
         44:ae:29:f9:b6:84:e3:b3:bb:b6:b0:ce:2a:65:d6:3a:47:02:
         c0:b8:71:bd:b6:c8:a1:81:3f:0d:7e:d5:e6:01:97:9d:df:51:
         9c:a9:f1:ae:a6:d2:c0:66:f0:e6:ec:01:65:2e:b7:61:9b:91:
         c0:82:73:e2:09:e6:aa:07:b1:ef:57:af:21:7d:87:a4:45:5e:
         60:29:36:f8:f9:41:33:c2:d0:fa:66:94:f2:19:09:62:92:54:
         b8:6c:4e:e9:86:8e:b8:f2:49:52:cc:5a:2a:c7:b9:6a:7c:86:
         4e:3c:b9:26:3f:35:d9:85:3b:4c:54:da:53:06:c0:72:9f:61:
         84:a4:98:5d:43:25:82:46:55:1b:82:77:ff:63:71:b8:47:50:
         66:3c:cf:4d:40:80:a3:c9:93:10:e4:c5:4c:07:54:e0:d0:2c:
         27:5c:a1:f2:08:b0:2a:83:80:da:b4:fb:63:a6:9f:18:8e:c7:
         35:0d:fc:71:db:9c:df:9d:c4:c8:1c:5f:ab:bd:2e:a8:6e:51:
         d7:a3:ef:81:95:ef:77:43:5b:d9:4b:68:a1:98:dc:34:e8:f9:
         fc:eb:58:0d:c0:e2:b7:39:4c:15:05:ee:a6:6f:21:3c:8f:15:
         4d:be:ca:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:28 2026 by rpki-client