This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9E5DA6A46D8582A3AC672D5744AF4793C5C0C55C06AD919F84AC45CCB94F07DD/0/323830333a366432303a3a2f33322d3438203d3e20323636373032.roa
File:                     323830333a366432303a3a2f33322d3438203d3e20323636373032.roa (raw, json)
Hash identifier:          Uih/0XeeRjrlDi5zlb7/38jIYaurRBmE6hYGFBz4zfs=
Subject key identifier:   50:6F:CE:52:44:E0:2A:3F:5D:82:AF:59:1A:25:EB:73:45:36:74:D6
Certificate issuer:       /CN=27FE79291A5C3D66DAA7564D181C08DDA1B23D02
Certificate serial:       7C790CDB06FEB33C59AA5EFD298843E751A27086
Authority key identifier: 27:FE:79:29:1A:5C:3D:66:DA:A7:56:4D:18:1C:08:DD:A1:B2:3D:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27FE79291A5C3D66DAA7564D181C08DDA1B23D02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9E5DA6A46D8582A3AC672D5744AF4793C5C0C55C06AD919F84AC45CCB94F07DD/0/323830333a366432303a3a2f33322d3438203d3e20323636373032.roa
Signing time:             Tue 06 Jan 2026 20:52:30 +0000
ROA not before:           Tue 06 Jan 2026 20:47:30 +0000
ROA not after:            Tue 05 Jan 2027 20:52:30 +0000
asID:                     266702
IP address blocks:        2803:6d20::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9E5DA6A46D8582A3AC672D5744AF4793C5C0C55C06AD919F84AC45CCB94F07DD/0/27FE79291A5C3D66DAA7564D181C08DDA1B23D02.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9E5DA6A46D8582A3AC672D5744AF4793C5C0C55C06AD919F84AC45CCB94F07DD/0/27FE79291A5C3D66DAA7564D181C08DDA1B23D02.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27FE79291A5C3D66DAA7564D181C08DDA1B23D02.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:79:0c:db:06:fe:b3:3c:59:aa:5e:fd:29:88:43:e7:51:a2:70:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27FE79291A5C3D66DAA7564D181C08DDA1B23D02
        Validity
            Not Before: Jan  6 20:47:30 2026 GMT
            Not After : Jan  5 20:52:30 2027 GMT
        Subject: CN=506FCE5244E02A3F5D82AF591A25EB73453674D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2d:1f:03:6c:52:ed:28:69:78:41:b1:77:f6:
                    26:60:13:bd:8d:d0:97:c7:f7:33:77:90:53:06:3c:
                    9f:a9:9d:ca:5f:b5:66:ae:a9:b6:4b:98:dc:47:a7:
                    92:cb:80:a5:55:14:04:1a:fa:5c:3a:22:04:62:fe:
                    ba:d8:89:09:46:88:3c:b8:ac:e7:58:9e:a2:e1:0c:
                    bd:db:51:86:dd:b6:2b:ee:05:cc:eb:9e:2e:e2:67:
                    1b:23:2a:b0:aa:9e:99:04:79:d4:bf:76:5b:65:d9:
                    02:bc:c9:99:71:7b:75:75:10:17:4e:7f:cf:16:29:
                    08:76:2c:4d:b7:ad:81:d6:f9:1a:bd:8e:13:88:04:
                    9f:fd:25:6d:3b:f9:0f:9f:41:99:19:26:10:fb:f7:
                    8f:70:72:11:f9:16:74:41:b5:ad:1b:2e:13:67:78:
                    f1:29:63:a2:2b:6e:0f:82:30:34:d0:bb:ce:de:37:
                    a9:eb:70:de:cd:09:f8:0d:cf:6e:5a:b1:e5:14:7f:
                    75:40:ab:11:de:23:92:bf:3d:5c:01:29:1d:fe:9e:
                    19:54:65:cb:a3:b7:72:b6:2a:e0:ff:67:33:45:62:
                    56:00:1b:43:56:8f:bd:b4:c1:70:13:21:c8:6d:a5:
                    50:c4:87:54:ea:70:58:c8:be:21:52:23:c6:35:c5:
                    58:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:6F:CE:52:44:E0:2A:3F:5D:82:AF:59:1A:25:EB:73:45:36:74:D6
            X509v3 Authority Key Identifier:
                keyid:27:FE:79:29:1A:5C:3D:66:DA:A7:56:4D:18:1C:08:DD:A1:B2:3D:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9E5DA6A46D8582A3AC672D5744AF4793C5C0C55C06AD919F84AC45CCB94F07DD/0/27FE79291A5C3D66DAA7564D181C08DDA1B23D02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27FE79291A5C3D66DAA7564D181C08DDA1B23D02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9E5DA6A46D8582A3AC672D5744AF4793C5C0C55C06AD919F84AC45CCB94F07DD/0/323830333a366432303a3a2f33322d3438203d3e20323636373032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6d20::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:c6:63:c8:3f:aa:d1:e6:39:a8:a5:2c:30:2e:37:e1:e0:35:
         85:54:92:fc:22:83:5e:eb:64:bc:a2:70:ef:7c:e8:5d:e5:3e:
         01:07:2a:dc:4e:1f:05:09:73:43:c0:4f:8f:4d:75:3f:6b:11:
         fc:a6:bb:9a:35:b7:44:b9:d4:fe:15:11:db:5a:39:91:76:cd:
         f3:58:bf:ac:7c:e9:45:f2:62:50:fc:c3:e9:75:1f:b7:b9:de:
         fa:1c:74:76:09:67:4d:b4:21:c1:b4:07:11:9c:d6:58:ba:03:
         22:2c:8a:ab:5e:4d:4e:56:07:76:3b:b4:c2:be:8f:89:6f:d8:
         48:0a:ff:b2:75:1d:35:d2:7f:af:c1:3b:d4:24:6f:b2:f2:cc:
         32:54:0c:e4:b1:f4:3a:d4:07:ce:16:52:8c:aa:bc:99:9b:7a:
         ef:2b:a9:58:71:82:65:cd:1f:b1:32:a1:2e:8b:71:fe:d8:f0:
         18:17:33:3f:5c:4c:ff:d8:3a:f5:8a:80:a0:00:d4:57:98:b1:
         2c:19:66:2c:a4:e2:1b:0a:7e:c4:0a:22:a2:18:0d:d1:35:81:
         5b:4e:31:68:48:aa:3f:d8:01:a2:0f:00:66:a8:35:35:6a:62:
         a1:d8:5e:b9:9d:a0:34:a5:93:81:41:b9:0b:94:1b:4f:32:7d:
         2d:de:da:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:26:16 2026 by rpki-client