This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0517548BD700E17CC87398351D2B7FDF7BB46B8F373B2857C41355A5BAB576B/0/323830333a383731303a3a2f33322d3332203d3e20323732303935.roa
File:                     323830333a383731303a3a2f33322d3332203d3e20323732303935.roa (raw, json)
Hash identifier:          rpG7o8qgdJKyPa6/smk/Reh/42YsWJ3BPYLKTUy2rP4=
Subject key identifier:   45:02:21:B6:81:2D:B2:61:E8:D3:C0:32:F9:83:DD:F5:3C:1C:07:52
Certificate issuer:       /CN=1B966A77A40BA76AB130280B62E4FDAFDEA7DF1C
Certificate serial:       4AC1A3C46634D084DEC4F91D221059B6B4D359FB
Authority key identifier: 1B:96:6A:77:A4:0B:A7:6A:B1:30:28:0B:62:E4:FD:AF:DE:A7:DF:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B966A77A40BA76AB130280B62E4FDAFDEA7DF1C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0517548BD700E17CC87398351D2B7FDF7BB46B8F373B2857C41355A5BAB576B/0/323830333a383731303a3a2f33322d3332203d3e20323732303935.roa
Signing time:             Wed 14 Jan 2026 03:00:27 +0000
ROA not before:           Wed 14 Jan 2026 02:55:27 +0000
ROA not after:            Wed 13 Jan 2027 03:00:27 +0000
asID:                     272095
IP address blocks:        2803:8710::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0517548BD700E17CC87398351D2B7FDF7BB46B8F373B2857C41355A5BAB576B/0/1B966A77A40BA76AB130280B62E4FDAFDEA7DF1C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0517548BD700E17CC87398351D2B7FDF7BB46B8F373B2857C41355A5BAB576B/0/1B966A77A40BA76AB130280B62E4FDAFDEA7DF1C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B966A77A40BA76AB130280B62E4FDAFDEA7DF1C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:c1:a3:c4:66:34:d0:84:de:c4:f9:1d:22:10:59:b6:b4:d3:59:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B966A77A40BA76AB130280B62E4FDAFDEA7DF1C
        Validity
            Not Before: Jan 14 02:55:27 2026 GMT
            Not After : Jan 13 03:00:27 2027 GMT
        Subject: CN=450221B6812DB261E8D3C032F983DDF53C1C0752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d0:2d:f2:5a:f6:f5:ce:b2:d2:69:77:8f:0a:
                    bc:ed:fa:7d:2e:5c:09:a9:c0:0f:ab:3b:b5:9b:f7:
                    5f:42:87:dc:73:d5:7b:24:d9:45:82:c1:87:3d:7a:
                    01:8d:e4:92:ab:71:40:5a:a0:f0:1a:a4:eb:78:22:
                    bf:bd:a5:34:f7:a1:61:d2:1a:3c:08:9d:bc:36:50:
                    a0:f9:7e:86:27:f8:6f:55:d2:66:f1:be:04:4c:c0:
                    dc:dd:e7:d0:47:71:b8:f6:3f:e2:b0:f8:ee:5d:00:
                    e4:1c:11:52:d8:0b:23:41:f8:2b:e4:56:6f:bc:a4:
                    c8:b0:6b:12:6f:09:e5:a2:b1:a1:55:c7:5e:93:c6:
                    73:43:1e:5c:6f:96:d0:58:63:eb:5b:6f:c3:2c:90:
                    1d:3d:f5:c5:ee:37:7c:72:54:b2:d4:e2:15:04:e1:
                    eb:72:0c:f1:5e:e7:e2:6f:13:33:f1:2a:75:a3:e3:
                    b5:27:3b:2a:0f:b6:9c:30:04:ef:ca:6d:5f:cf:35:
                    f0:30:11:39:e1:27:0e:03:1a:6d:6d:4e:34:c7:29:
                    66:88:5c:77:f6:0f:b9:76:50:4c:96:00:fa:78:56:
                    37:66:f5:4f:98:b3:17:f7:d3:22:82:71:98:11:e0:
                    0b:86:08:5c:7b:a4:f7:d6:19:74:14:7c:02:f5:c2:
                    40:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:02:21:B6:81:2D:B2:61:E8:D3:C0:32:F9:83:DD:F5:3C:1C:07:52
            X509v3 Authority Key Identifier:
                keyid:1B:96:6A:77:A4:0B:A7:6A:B1:30:28:0B:62:E4:FD:AF:DE:A7:DF:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0517548BD700E17CC87398351D2B7FDF7BB46B8F373B2857C41355A5BAB576B/0/1B966A77A40BA76AB130280B62E4FDAFDEA7DF1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B966A77A40BA76AB130280B62E4FDAFDEA7DF1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0517548BD700E17CC87398351D2B7FDF7BB46B8F373B2857C41355A5BAB576B/0/323830333a383731303a3a2f33322d3332203d3e20323732303935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8710::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:b0:95:d9:bf:19:62:e1:be:82:16:dc:21:1e:8e:ab:26:e6:
         61:59:7b:00:a5:9b:c9:81:df:df:9a:a1:a4:96:d6:09:79:70:
         a2:10:3a:3e:f8:61:ec:24:0c:ad:64:7d:81:fa:93:62:2a:fd:
         0c:cc:16:ff:97:ea:f3:a1:5b:7f:e2:65:27:0f:4a:ad:2c:e1:
         63:b4:f4:b1:1d:ea:f9:db:c5:30:63:69:41:79:50:33:e5:13:
         7d:6d:30:3a:f3:a7:c9:07:27:b6:80:d2:dc:90:df:0a:85:57:
         53:0f:d4:90:7d:c0:fd:50:dc:fe:1e:d1:ce:7d:7e:87:66:7d:
         a4:e3:af:9a:42:0a:c0:31:c9:4a:71:3d:85:dd:67:69:c3:53:
         65:75:e7:55:f4:02:8c:94:36:6d:d0:53:07:18:60:01:30:58:
         aa:05:b3:89:5c:db:fe:f0:d9:17:03:8e:f4:64:0e:40:c3:93:
         9b:72:68:84:07:ae:f3:be:48:af:9a:06:0e:98:9f:ec:ae:b8:
         3f:31:ca:7f:d7:96:92:82:87:82:5a:e4:03:73:43:fa:41:4d:
         1d:e8:9f:59:50:ae:fd:d9:e8:7f:56:a3:1d:82:f7:24:fa:30:
         7b:38:58:8b:aa:15:f5:25:82:2e:46:d9:56:00:ae:b4:a5:7a:
         b5:5b:f2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:30:34 2026 by rpki-client