This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A4C6893F40CD802E42882ADF9040AE745B2899D3B7D8FECFB6B63DF4DCCFF273/0/323830333a3431303a3a2f33322d3438203d3e20323731383436.roa
File:                     323830333a3431303a3a2f33322d3438203d3e20323731383436.roa (raw, json)
Hash identifier:          NNMQG4MB9vGHHFC4QQsD/ZJPuVw0k0IjzZkCBGboORM=
Subject key identifier:   DC:51:F2:B0:D9:BC:69:D9:9B:E3:EA:23:C4:D0:16:1B:38:B5:4D:C7
Certificate issuer:       /CN=D69D719244579050CE56AAA81D512523E96439A5
Certificate serial:       4140012442F5D1AE011C9786D9FD7DA9E0B09EF9
Authority key identifier: D6:9D:71:92:44:57:90:50:CE:56:AA:A8:1D:51:25:23:E9:64:39:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D69D719244579050CE56AAA81D512523E96439A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A4C6893F40CD802E42882ADF9040AE745B2899D3B7D8FECFB6B63DF4DCCFF273/0/323830333a3431303a3a2f33322d3438203d3e20323731383436.roa
Signing time:             Tue 06 Jan 2026 19:06:05 +0000
ROA not before:           Tue 06 Jan 2026 19:01:05 +0000
ROA not after:            Tue 05 Jan 2027 19:06:05 +0000
asID:                     271846
IP address blocks:        2803:410::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A4C6893F40CD802E42882ADF9040AE745B2899D3B7D8FECFB6B63DF4DCCFF273/0/D69D719244579050CE56AAA81D512523E96439A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A4C6893F40CD802E42882ADF9040AE745B2899D3B7D8FECFB6B63DF4DCCFF273/0/D69D719244579050CE56AAA81D512523E96439A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D69D719244579050CE56AAA81D512523E96439A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:40:01:24:42:f5:d1:ae:01:1c:97:86:d9:fd:7d:a9:e0:b0:9e:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D69D719244579050CE56AAA81D512523E96439A5
        Validity
            Not Before: Jan  6 19:01:05 2026 GMT
            Not After : Jan  5 19:06:05 2027 GMT
        Subject: CN=DC51F2B0D9BC69D99BE3EA23C4D0161B38B54DC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bf:1c:1f:8d:bd:a3:69:3f:50:b8:01:0e:ff:
                    da:2f:01:ba:4e:fe:02:9e:24:49:49:3d:2d:1e:39:
                    9d:e3:7d:44:1a:cb:99:1d:61:2c:b3:20:44:12:de:
                    54:fd:44:0b:7b:3a:28:7f:f6:53:c5:1d:57:4c:14:
                    ad:e7:e4:13:f1:17:20:e0:70:b2:93:f6:fd:59:0f:
                    e3:d9:48:d2:54:1d:9a:6f:9a:2b:28:0c:a9:f2:17:
                    a3:f6:ba:91:75:73:24:c4:8b:eb:1b:7e:f3:20:07:
                    6e:c1:3a:1e:4c:ef:bf:f5:ed:32:ab:26:85:dd:f6:
                    5d:61:ef:7e:22:51:a2:a0:5e:3e:d4:00:c1:c6:c5:
                    c2:be:5c:e8:2b:fc:31:50:cb:ba:f0:67:cd:5e:e8:
                    b5:6e:2b:aa:60:72:f2:c0:9e:92:62:45:49:fd:f5:
                    d3:1f:f7:aa:17:5f:e7:c2:1d:9d:db:bf:26:2c:4b:
                    41:1b:a6:46:e1:6d:cb:be:de:35:80:81:84:5f:e7:
                    9e:cc:64:61:fb:f1:cb:90:9b:19:84:47:9b:46:cb:
                    8c:ba:4a:f8:81:3b:22:fa:fd:e3:2f:bb:fb:8e:2e:
                    d4:7e:b2:c0:a2:22:43:ca:f1:bc:8b:d4:f4:41:1a:
                    7d:6e:e0:1d:d6:57:2a:4b:13:e9:0b:48:b0:df:a8:
                    cc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:51:F2:B0:D9:BC:69:D9:9B:E3:EA:23:C4:D0:16:1B:38:B5:4D:C7
            X509v3 Authority Key Identifier:
                keyid:D6:9D:71:92:44:57:90:50:CE:56:AA:A8:1D:51:25:23:E9:64:39:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A4C6893F40CD802E42882ADF9040AE745B2899D3B7D8FECFB6B63DF4DCCFF273/0/D69D719244579050CE56AAA81D512523E96439A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D69D719244579050CE56AAA81D512523E96439A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A4C6893F40CD802E42882ADF9040AE745B2899D3B7D8FECFB6B63DF4DCCFF273/0/323830333a3431303a3a2f33322d3438203d3e20323731383436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:410::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:a1:d0:8d:85:33:e1:0d:5e:3f:d8:20:d6:e1:52:26:39:9e:
         cd:15:37:77:6b:56:54:4a:99:fb:53:4e:45:42:29:06:a7:5b:
         d3:3e:7a:6e:ae:8d:ff:9e:20:61:01:fd:9d:3f:69:26:94:9e:
         8e:54:16:f9:80:c8:89:2f:5b:43:ea:ca:f0:3f:c6:91:b9:03:
         25:48:40:93:95:29:da:01:ec:a5:f5:ea:54:15:43:c5:76:bc:
         7f:39:22:fe:ff:4b:77:32:4d:e2:79:d0:da:37:0f:37:29:1f:
         b7:3c:59:52:c0:87:ed:b5:af:a0:20:a1:1c:7d:b0:80:32:05:
         83:a1:c7:27:0b:d0:51:8a:fe:c5:ef:47:04:aa:83:b0:bc:cb:
         e3:d5:9a:39:77:eb:e9:16:a1:84:a7:61:ef:7a:7b:bc:2a:ea:
         15:bc:a2:20:56:92:80:bd:f1:11:35:56:a7:21:49:d1:d3:cc:
         24:9b:5b:0f:82:f8:11:c1:ea:28:f9:b8:df:65:41:e3:79:e1:
         7e:53:15:b6:fd:45:33:27:79:6f:e2:78:2a:7f:30:47:5f:5c:
         04:93:d3:8b:e4:0a:8d:46:05:50:03:7d:df:34:27:ee:6b:36:
         0c:f7:d2:74:fe:9e:23:9f:08:6e:aa:f8:e0:9d:6a:69:93:0a:
         1d:9b:c6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:53:57 2026 by rpki-client