This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9C5371F83A0F5B0E9A8BE2AC1F57956FEF9B8D60DD4EF5ADD920169442298490/0/323830333a376238303a3a2f33322d3332203d3e20323633363932.roa
File:                     323830333a376238303a3a2f33322d3332203d3e20323633363932.roa (raw, json)
Hash identifier:          M9gOsei3lpSzkcGeXg5m56m0S5U8nU5iZ1cJQDYRnME=
Subject key identifier:   41:8C:9B:DF:E2:89:F6:4E:14:2F:CA:DB:9D:25:9F:29:75:F4:64:A1
Certificate issuer:       /CN=6D3556529CE5599E78565FB2F26BF5285D573D92
Certificate serial:       464425D9CEBB759BC6AFB612457D53FC7BA5A35F
Authority key identifier: 6D:35:56:52:9C:E5:59:9E:78:56:5F:B2:F2:6B:F5:28:5D:57:3D:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D3556529CE5599E78565FB2F26BF5285D573D92.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9C5371F83A0F5B0E9A8BE2AC1F57956FEF9B8D60DD4EF5ADD920169442298490/0/323830333a376238303a3a2f33322d3332203d3e20323633363932.roa
Signing time:             Tue 06 Jan 2026 19:29:59 +0000
ROA not before:           Tue 06 Jan 2026 19:24:59 +0000
ROA not after:            Tue 05 Jan 2027 19:29:59 +0000
asID:                     263692
IP address blocks:        2803:7b80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9C5371F83A0F5B0E9A8BE2AC1F57956FEF9B8D60DD4EF5ADD920169442298490/0/6D3556529CE5599E78565FB2F26BF5285D573D92.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9C5371F83A0F5B0E9A8BE2AC1F57956FEF9B8D60DD4EF5ADD920169442298490/0/6D3556529CE5599E78565FB2F26BF5285D573D92.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D3556529CE5599E78565FB2F26BF5285D573D92.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 04:31:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:44:25:d9:ce:bb:75:9b:c6:af:b6:12:45:7d:53:fc:7b:a5:a3:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D3556529CE5599E78565FB2F26BF5285D573D92
        Validity
            Not Before: Jan  6 19:24:59 2026 GMT
            Not After : Jan  5 19:29:59 2027 GMT
        Subject: CN=418C9BDFE289F64E142FCADB9D259F2975F464A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7a:23:96:c3:68:ad:46:b8:db:50:02:ed:89:
                    5d:0c:39:0e:74:67:11:a8:98:f4:c6:1b:91:26:2c:
                    f9:41:29:16:e4:26:e5:d9:a7:c7:0b:94:df:e1:6d:
                    7a:a5:f5:a8:fe:48:a6:01:d6:0e:15:7a:e7:e8:37:
                    96:41:fe:7f:b5:30:cf:a5:b0:86:d4:3c:ce:1d:d4:
                    c8:d1:be:fd:01:21:3e:99:2b:1b:d1:f3:0d:e1:56:
                    40:47:63:a6:f6:ed:a4:4c:64:af:6d:3c:dc:09:8f:
                    c4:66:4b:14:17:4e:f9:13:b8:d3:36:37:d8:32:30:
                    47:5e:58:5b:c2:a5:b2:31:22:27:c7:26:21:4d:b7:
                    e7:98:46:12:0a:3d:b3:13:b8:c4:36:a0:6e:db:92:
                    14:ad:ee:52:f0:11:3f:cf:5e:93:6b:d1:0d:c2:71:
                    58:a6:d4:b6:43:0f:6a:1a:c5:ae:90:77:23:77:81:
                    a8:58:94:39:02:1e:d0:2d:90:54:52:c9:64:bc:56:
                    fe:5d:8a:e7:be:fe:8b:18:cb:29:1d:94:53:78:15:
                    a1:00:fe:67:c8:a0:8d:ed:7e:1b:d1:f0:cb:f5:1e:
                    75:7b:2b:41:40:70:af:83:4d:d7:75:8b:3d:ff:26:
                    f3:46:98:10:42:00:47:a6:30:3b:a9:86:57:ec:18:
                    9b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:8C:9B:DF:E2:89:F6:4E:14:2F:CA:DB:9D:25:9F:29:75:F4:64:A1
            X509v3 Authority Key Identifier:
                keyid:6D:35:56:52:9C:E5:59:9E:78:56:5F:B2:F2:6B:F5:28:5D:57:3D:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9C5371F83A0F5B0E9A8BE2AC1F57956FEF9B8D60DD4EF5ADD920169442298490/0/6D3556529CE5599E78565FB2F26BF5285D573D92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D3556529CE5599E78565FB2F26BF5285D573D92.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9C5371F83A0F5B0E9A8BE2AC1F57956FEF9B8D60DD4EF5ADD920169442298490/0/323830333a376238303a3a2f33322d3332203d3e20323633363932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7b80::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:da:b2:20:f2:da:2d:81:d1:03:73:96:77:aa:63:cf:ef:bc:
         80:0f:4d:57:01:b7:c7:26:f1:97:0c:30:a5:f9:e9:2d:8c:b7:
         7f:53:ab:9c:19:11:b2:67:90:fd:e7:a1:40:5f:60:ed:0e:4f:
         7d:43:d4:b0:0c:d8:74:3d:b3:66:25:5d:61:31:03:4f:b3:c2:
         e1:a9:0f:59:8a:34:cf:c5:c0:f5:55:93:c1:99:2b:f3:f4:85:
         92:1e:1a:ff:17:46:42:ad:b5:83:36:60:87:ce:27:69:c7:2d:
         04:4d:04:a5:62:a8:68:ae:95:89:3c:e7:c8:b2:ab:43:52:e9:
         10:17:96:9f:97:57:fd:33:b8:2a:42:59:2f:0e:65:0f:05:54:
         8b:2f:ed:48:e4:5b:ab:53:0b:4d:c6:a4:48:de:d3:86:ae:96:
         2b:6b:c0:da:3f:4c:a4:64:a7:32:19:59:dd:d4:30:b9:d0:14:
         ba:18:c8:12:b1:1b:54:f9:d6:27:d4:54:3f:ce:6b:bd:e4:93:
         06:94:77:06:d2:67:3d:69:ff:8c:77:a2:bb:4a:7c:fc:b0:cd:
         9a:50:ed:9f:89:4c:e1:81:e7:01:61:cd:5c:0a:17:83:21:71:
         98:c1:af:bc:4a:de:17:2c:02:3a:d1:c0:fa:dd:21:c7:d3:30:
         fa:12:e4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:16:45 2026 by rpki-client