This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A4452BDC754ED1E78D55652858B0009DA850BD6968FB367DC80452D75D5C660D/0/323830333a636331303a3a2f33322d3332203d3e20323731383733.roa
File:                     323830333a636331303a3a2f33322d3332203d3e20323731383733.roa (raw, json)
Hash identifier:          HyF2OuLzTAIV/iVdcGcc3LBhVRuUuPpCk1hSEZZF97w=
Subject key identifier:   D8:0C:5D:57:32:82:ED:31:A9:CF:51:22:9D:4F:EE:12:62:EA:E0:C4
Certificate issuer:       /CN=477C86AB811FE40DA5075F15ED042F906B69E19C
Certificate serial:       4CC9460DF96DA7AD820CF20AAD5EBD3943972131
Authority key identifier: 47:7C:86:AB:81:1F:E4:0D:A5:07:5F:15:ED:04:2F:90:6B:69:E1:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/477C86AB811FE40DA5075F15ED042F906B69E19C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A4452BDC754ED1E78D55652858B0009DA850BD6968FB367DC80452D75D5C660D/0/323830333a636331303a3a2f33322d3332203d3e20323731383733.roa
Signing time:             Tue 06 Jan 2026 19:19:10 +0000
ROA not before:           Tue 06 Jan 2026 19:14:10 +0000
ROA not after:            Tue 05 Jan 2027 19:19:10 +0000
asID:                     271873
IP address blocks:        2803:cc10::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A4452BDC754ED1E78D55652858B0009DA850BD6968FB367DC80452D75D5C660D/0/477C86AB811FE40DA5075F15ED042F906B69E19C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A4452BDC754ED1E78D55652858B0009DA850BD6968FB367DC80452D75D5C660D/0/477C86AB811FE40DA5075F15ED042F906B69E19C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/477C86AB811FE40DA5075F15ED042F906B69E19C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 21:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:c9:46:0d:f9:6d:a7:ad:82:0c:f2:0a:ad:5e:bd:39:43:97:21:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=477C86AB811FE40DA5075F15ED042F906B69E19C
        Validity
            Not Before: Jan  6 19:14:10 2026 GMT
            Not After : Jan  5 19:19:10 2027 GMT
        Subject: CN=D80C5D573282ED31A9CF51229D4FEE1262EAE0C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e6:5c:19:d9:d7:88:9f:24:12:c9:8e:1b:bc:
                    96:f9:8a:f5:1c:42:d7:34:5c:c2:9f:00:0a:35:ec:
                    30:2d:d8:d6:90:34:2e:1f:6d:09:d2:10:66:37:84:
                    15:bc:71:0f:ae:16:54:eb:fb:fd:57:63:ef:5d:55:
                    78:1b:44:e3:e1:8d:be:51:22:3e:ca:c7:a0:ef:ea:
                    12:4a:a9:26:11:a2:3a:ae:98:c5:55:b1:a0:c1:42:
                    88:fe:a1:44:14:12:60:eb:c4:07:f8:d5:a6:3f:a1:
                    07:b1:2e:25:01:93:01:a8:23:fd:79:2e:0e:d9:2e:
                    d0:98:5e:00:af:3d:3a:b4:eb:32:f7:94:f4:3d:46:
                    f8:57:85:76:43:a0:a4:11:6f:29:80:94:4b:b2:79:
                    96:3a:04:e9:ae:ab:17:49:df:f1:e9:3c:09:50:e0:
                    d2:36:65:e4:cf:39:ca:51:d0:b3:98:33:36:f3:7b:
                    ce:07:45:7d:c7:5a:3c:60:c5:15:fb:b9:a5:c2:c8:
                    34:f4:30:31:6f:46:d3:7f:1c:f9:35:79:ba:3f:99:
                    e6:f4:65:12:84:b3:2f:24:01:98:4a:0f:14:f6:cc:
                    53:57:1d:ba:52:d5:77:2b:71:0f:ae:1c:87:a8:5b:
                    f7:20:c2:cf:99:52:dd:5e:c8:39:33:6b:d5:fb:57:
                    90:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:0C:5D:57:32:82:ED:31:A9:CF:51:22:9D:4F:EE:12:62:EA:E0:C4
            X509v3 Authority Key Identifier:
                keyid:47:7C:86:AB:81:1F:E4:0D:A5:07:5F:15:ED:04:2F:90:6B:69:E1:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A4452BDC754ED1E78D55652858B0009DA850BD6968FB367DC80452D75D5C660D/0/477C86AB811FE40DA5075F15ED042F906B69E19C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/477C86AB811FE40DA5075F15ED042F906B69E19C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A4452BDC754ED1E78D55652858B0009DA850BD6968FB367DC80452D75D5C660D/0/323830333a636331303a3a2f33322d3332203d3e20323731383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cc10::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:7d:0b:1c:7c:32:8a:c1:69:ab:7c:74:7e:65:e5:1a:87:68:
         1f:92:6b:29:58:b0:5d:b4:a2:ad:55:1e:b7:a5:24:3f:90:db:
         bf:0b:9b:34:79:52:43:0c:b2:56:ad:78:c0:09:0e:68:20:21:
         c6:ec:86:44:05:d4:52:b0:11:e1:b9:11:6b:60:25:51:33:67:
         79:19:20:7c:3f:73:94:1d:6a:d9:01:2c:cf:f1:be:57:31:c9:
         3a:d7:53:38:be:27:48:0c:a6:c9:70:d3:20:54:f8:e5:78:43:
         27:d7:3f:c1:b5:31:ff:cf:32:f1:1a:c9:0c:90:a2:e4:e4:d9:
         06:e8:04:b6:b3:b9:6c:4f:e8:eb:b4:2e:fa:1c:d4:be:ed:8b:
         34:1e:4f:b9:f2:5c:fe:d7:05:57:02:08:04:1b:68:d0:0a:8c:
         7a:e6:2f:79:61:ca:8d:01:09:74:4d:6a:ac:91:3d:d5:b5:85:
         ca:8f:6a:e1:39:74:0e:c5:28:0e:5d:4c:16:22:aa:3f:53:62:
         28:7e:ac:d9:2c:29:29:23:74:c3:2b:7f:f9:22:a1:27:1f:dc:
         25:e2:c3:5f:90:fc:30:22:59:62:fe:e1:48:ce:ad:9d:5d:ca:
         ec:98:b4:6f:93:c8:50:7f:bd:5f:96:f9:3d:41:d7:29:c5:e8:
         64:0e:0c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:59:33 2026 by rpki-client