This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/921523E2087B31AA33415C2E4EE0626BAE10581780DBE0D66EB548BA431010BE/0/323830333a336332303a3a2f33322d3438203d3e20323636363732.roa
File:                     323830333a336332303a3a2f33322d3438203d3e20323636363732.roa (raw, json)
Hash identifier:          w7d8gFL3Qw9rPQ+d5dev6TF0Mfn8wubMdWHQycl97zw=
Subject key identifier:   A2:3D:C1:89:68:42:32:8B:F5:EE:BA:55:81:83:E6:3B:CB:24:4C:9B
Certificate issuer:       /CN=7535BB4128902438F1DBC015961C2F410A3FD565
Certificate serial:       26C1F24EFF2A5B565E2B926C516F7F0E6A82BCAB
Authority key identifier: 75:35:BB:41:28:90:24:38:F1:DB:C0:15:96:1C:2F:41:0A:3F:D5:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7535BB4128902438F1DBC015961C2F410A3FD565.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/921523E2087B31AA33415C2E4EE0626BAE10581780DBE0D66EB548BA431010BE/0/323830333a336332303a3a2f33322d3438203d3e20323636363732.roa
Signing time:             Tue 06 Jan 2026 19:34:45 +0000
ROA not before:           Tue 06 Jan 2026 19:29:45 +0000
ROA not after:            Tue 05 Jan 2027 19:34:45 +0000
asID:                     266672
IP address blocks:        2803:3c20::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/921523E2087B31AA33415C2E4EE0626BAE10581780DBE0D66EB548BA431010BE/0/7535BB4128902438F1DBC015961C2F410A3FD565.crl
                          rsync://repository.lacnic.net/rpki/lacnic/921523E2087B31AA33415C2E4EE0626BAE10581780DBE0D66EB548BA431010BE/0/7535BB4128902438F1DBC015961C2F410A3FD565.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7535BB4128902438F1DBC015961C2F410A3FD565.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c1:f2:4e:ff:2a:5b:56:5e:2b:92:6c:51:6f:7f:0e:6a:82:bc:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7535BB4128902438F1DBC015961C2F410A3FD565
        Validity
            Not Before: Jan  6 19:29:45 2026 GMT
            Not After : Jan  5 19:34:45 2027 GMT
        Subject: CN=A23DC1896842328BF5EEBA558183E63BCB244C9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:da:6a:e1:8e:1b:e4:5e:51:08:ea:b1:24:8c:
                    47:2e:26:f2:50:bc:49:f0:ef:d4:05:17:1c:d1:a7:
                    e9:32:da:a9:c8:9c:19:24:d0:e9:08:18:27:a1:5d:
                    e7:53:57:a2:8a:11:3a:90:c0:da:de:2f:82:9a:33:
                    22:14:9d:19:f6:03:1c:05:bc:20:5c:1b:91:ab:fd:
                    79:f0:82:f4:a6:b4:1c:fa:e9:7c:48:ed:89:5d:7a:
                    71:91:c9:94:b4:b4:0f:cc:ef:98:7c:96:24:79:e6:
                    26:00:f4:22:7a:16:8c:f3:9e:6b:50:3f:ab:0a:b2:
                    60:ef:64:c9:9e:5b:27:e7:a3:9d:14:f9:09:12:12:
                    22:bc:56:eb:14:90:83:ff:23:07:50:13:f6:35:d0:
                    f9:94:95:c7:8d:cf:a8:78:13:a5:e2:63:3a:50:be:
                    06:1e:c0:7c:a3:8f:98:58:2b:a2:34:94:49:f6:fd:
                    a2:65:9c:81:38:ed:9b:0a:46:89:35:b2:c2:af:ad:
                    86:17:21:79:95:85:c7:66:16:3e:60:1a:08:3f:83:
                    16:6e:ae:1f:5a:2b:4f:d9:8a:1f:10:69:6f:6e:1a:
                    e6:54:58:93:3f:58:ae:5a:21:56:ff:e3:58:55:11:
                    c2:3b:bf:b8:25:bc:f9:7d:eb:d6:2d:61:d5:f7:0b:
                    56:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:3D:C1:89:68:42:32:8B:F5:EE:BA:55:81:83:E6:3B:CB:24:4C:9B
            X509v3 Authority Key Identifier:
                keyid:75:35:BB:41:28:90:24:38:F1:DB:C0:15:96:1C:2F:41:0A:3F:D5:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/921523E2087B31AA33415C2E4EE0626BAE10581780DBE0D66EB548BA431010BE/0/7535BB4128902438F1DBC015961C2F410A3FD565.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7535BB4128902438F1DBC015961C2F410A3FD565.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/921523E2087B31AA33415C2E4EE0626BAE10581780DBE0D66EB548BA431010BE/0/323830333a336332303a3a2f33322d3438203d3e20323636363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:6c:94:0c:d1:aa:e3:a5:5b:0e:9e:f5:24:ff:26:f0:d0:bd:
         36:3c:8c:94:4f:a9:a8:fd:d7:aa:94:58:bb:1d:da:ff:f8:80:
         c1:e9:70:31:fd:85:ba:4b:f0:0f:24:b3:3a:d0:d3:ac:29:4f:
         85:ba:de:a5:d1:83:14:ca:66:e5:7e:ee:db:d0:91:fb:bd:10:
         11:49:19:cb:18:40:f9:45:dc:09:3a:28:98:37:88:bc:9d:92:
         ce:4a:f4:a0:1c:9c:49:c7:f0:4f:ed:9a:25:2f:54:09:fc:4d:
         94:cb:67:46:b4:8d:00:b1:aa:f5:da:50:86:c4:28:f8:74:07:
         d9:1c:95:ac:0e:8e:97:01:e4:64:12:33:e9:84:9d:7c:d9:50:
         d6:f0:29:f8:9d:f2:b6:c1:fb:5d:93:e4:fe:15:bc:ad:a3:56:
         e8:39:3f:3c:3b:a2:6a:b4:dd:a5:88:76:6b:0e:b6:96:7f:fb:
         af:e3:db:5d:73:f4:09:8f:93:ab:3f:6b:0c:22:47:06:60:c7:
         af:67:e0:cc:2c:b3:30:c6:43:6a:eb:ce:23:a7:55:9a:74:13:
         6d:91:02:e2:b1:5f:f4:6a:cb:d9:6c:80:6b:00:49:0e:40:75:
         2c:cc:90:22:c1:87:3e:c9:d0:64:a1:a6:01:33:08:ea:55:e4:
         3c:0f:96:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:15:43 2026 by rpki-client