This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D0B55A168814D5F885710371612D4E760FEA4E066B8DCF680B0674C5739BF06/0/323830333a373731303a3a2f33322d3634203d3e20323732313130.roa
File:                     323830333a373731303a3a2f33322d3634203d3e20323732313130.roa (raw, json)
Hash identifier:          3KFekREi/mEFVd68D63xUvB30yRyeDLLc3HTr3gf+QU=
Subject key identifier:   D6:79:B4:89:8C:DF:EA:86:34:AB:A6:F2:F5:D9:F5:B0:F6:E5:72:03
Certificate issuer:       /CN=1D43B7E6E5BDF6F233B25AFA485A315BCF67E07A
Certificate serial:       1DDC81153609B2AEED6F7AE4ACE03B4DC17E8EAD
Authority key identifier: 1D:43:B7:E6:E5:BD:F6:F2:33:B2:5A:FA:48:5A:31:5B:CF:67:E0:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D43B7E6E5BDF6F233B25AFA485A315BCF67E07A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D0B55A168814D5F885710371612D4E760FEA4E066B8DCF680B0674C5739BF06/0/323830333a373731303a3a2f33322d3634203d3e20323732313130.roa
Signing time:             Tue 06 Jan 2026 19:35:40 +0000
ROA not before:           Tue 06 Jan 2026 19:30:40 +0000
ROA not after:            Tue 05 Jan 2027 19:35:40 +0000
asID:                     272110
IP address blocks:        2803:7710::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D0B55A168814D5F885710371612D4E760FEA4E066B8DCF680B0674C5739BF06/0/1D43B7E6E5BDF6F233B25AFA485A315BCF67E07A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D0B55A168814D5F885710371612D4E760FEA4E066B8DCF680B0674C5739BF06/0/1D43B7E6E5BDF6F233B25AFA485A315BCF67E07A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D43B7E6E5BDF6F233B25AFA485A315BCF67E07A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 16:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:dc:81:15:36:09:b2:ae:ed:6f:7a:e4:ac:e0:3b:4d:c1:7e:8e:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D43B7E6E5BDF6F233B25AFA485A315BCF67E07A
        Validity
            Not Before: Jan  6 19:30:40 2026 GMT
            Not After : Jan  5 19:35:40 2027 GMT
        Subject: CN=D679B4898CDFEA8634ABA6F2F5D9F5B0F6E57203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:85:0d:bd:8a:38:f3:77:4e:0e:a8:f6:ba:69:
                    d6:32:94:13:6b:ba:bb:7d:6e:f3:c8:13:5c:a2:8f:
                    3d:f6:9f:8f:63:8f:2c:18:3b:a8:7d:6a:31:f7:61:
                    bc:3c:25:76:6a:96:0b:6f:97:7c:1d:08:83:7b:d7:
                    a2:8a:30:d1:13:ae:d4:5d:68:d6:a0:33:f5:9d:97:
                    04:ab:aa:f9:6a:b1:70:a6:0f:31:39:5b:d8:44:c1:
                    1d:e7:2e:2d:67:6f:a1:32:21:a0:57:0f:a1:b4:80:
                    43:29:ed:ff:e6:9e:59:d8:66:eb:30:26:04:6b:c5:
                    22:52:96:43:da:9e:69:ae:53:e2:27:cc:ea:04:5a:
                    ef:fd:0f:5f:5b:a7:33:13:f6:ee:81:f4:c8:f9:18:
                    d7:dc:61:4e:21:34:4c:83:95:96:68:58:12:4f:1c:
                    ed:9b:d2:9a:f9:9b:38:78:85:bf:e7:54:07:98:50:
                    98:f4:62:a5:01:44:de:d0:73:7f:2c:c7:33:d0:93:
                    f7:c2:16:7a:2a:c0:bb:48:4a:1f:c4:5d:e4:c9:91:
                    2b:41:29:2e:ff:26:77:cd:d8:ad:ca:94:53:be:38:
                    e6:0f:e6:f9:8b:2d:4e:4f:40:6b:de:38:dc:e5:3a:
                    00:d3:0e:fc:6f:c9:13:07:e7:e0:16:ae:1d:5d:7d:
                    0f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:79:B4:89:8C:DF:EA:86:34:AB:A6:F2:F5:D9:F5:B0:F6:E5:72:03
            X509v3 Authority Key Identifier:
                keyid:1D:43:B7:E6:E5:BD:F6:F2:33:B2:5A:FA:48:5A:31:5B:CF:67:E0:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D0B55A168814D5F885710371612D4E760FEA4E066B8DCF680B0674C5739BF06/0/1D43B7E6E5BDF6F233B25AFA485A315BCF67E07A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D43B7E6E5BDF6F233B25AFA485A315BCF67E07A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D0B55A168814D5F885710371612D4E760FEA4E066B8DCF680B0674C5739BF06/0/323830333a373731303a3a2f33322d3634203d3e20323732313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7710::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:61:38:c1:c7:30:d9:61:4b:0f:a5:0e:6d:d9:34:86:45:ad:
         5a:11:66:05:1b:d6:f3:d6:c9:74:0d:cc:be:92:fa:c1:2b:52:
         75:8a:57:b4:c5:b6:ba:7a:d2:ca:cd:fc:e4:21:70:31:1c:36:
         ef:d6:b5:2c:70:f7:8a:0b:78:4d:99:f5:af:08:c6:b7:0f:5f:
         96:cd:49:50:f7:38:12:b1:ad:44:10:8a:a3:c7:5c:30:ab:86:
         86:d8:d8:a9:f0:d3:4e:3d:1a:7c:01:5b:92:01:8b:56:09:3f:
         a6:b5:c0:93:e9:a1:33:ea:5b:cd:23:81:81:7b:40:8c:8e:60:
         c1:e0:20:dd:23:29:92:33:11:c8:d1:00:ba:d0:2c:59:42:d2:
         51:65:9d:09:5f:a8:c7:38:24:63:5d:e6:c9:bb:64:e8:79:6a:
         b1:d6:c5:4a:86:de:45:87:a5:e0:16:5c:52:ac:90:5f:53:bc:
         64:7f:1e:fb:cf:f8:47:cd:1a:87:42:ac:34:2d:6b:2e:38:35:
         63:f9:89:88:d0:1b:ca:40:5f:c9:d8:75:e0:0f:f9:c7:56:01:
         c0:12:93:e3:57:7e:b9:88:e0:5b:12:2b:fc:a4:9b:08:29:8f:
         af:67:66:0c:54:c6:1b:e2:4c:8e:ce:92:92:a0:0e:8f:6f:7a:
         86:d5:10:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:41:23 2026 by rpki-client