This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A617CC547E5C627EB95D5E0BD1E83126DA8CCE1215B28E5897498AE179053F96/0/323830333a633836303a3a2f33322d3332203d3e20323637383139.roa
File:                     323830333a633836303a3a2f33322d3332203d3e20323637383139.roa (raw, json)
Hash identifier:          gUGWgkCcI8WaTDdSx9MBRUYKigAd8XMOoLUCplwA0QU=
Subject key identifier:   26:8D:26:9F:E0:6C:F8:EA:D7:BE:F1:22:2F:5C:D5:C8:1F:E7:8E:68
Certificate issuer:       /CN=F2F56A7D46F18855519ECBFCA7BDC0C7D3508748
Certificate serial:       3A2809331DFF3B0B062DD928ACE2FA70B9653FBD
Authority key identifier: F2:F5:6A:7D:46:F1:88:55:51:9E:CB:FC:A7:BD:C0:C7:D3:50:87:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2F56A7D46F18855519ECBFCA7BDC0C7D3508748.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A617CC547E5C627EB95D5E0BD1E83126DA8CCE1215B28E5897498AE179053F96/0/323830333a633836303a3a2f33322d3332203d3e20323637383139.roa
Signing time:             Tue 06 Jan 2026 19:15:18 +0000
ROA not before:           Tue 06 Jan 2026 19:10:18 +0000
ROA not after:            Tue 05 Jan 2027 19:15:18 +0000
asID:                     267819
IP address blocks:        2803:c860::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A617CC547E5C627EB95D5E0BD1E83126DA8CCE1215B28E5897498AE179053F96/0/F2F56A7D46F18855519ECBFCA7BDC0C7D3508748.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A617CC547E5C627EB95D5E0BD1E83126DA8CCE1215B28E5897498AE179053F96/0/F2F56A7D46F18855519ECBFCA7BDC0C7D3508748.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2F56A7D46F18855519ECBFCA7BDC0C7D3508748.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 05:56:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:28:09:33:1d:ff:3b:0b:06:2d:d9:28:ac:e2:fa:70:b9:65:3f:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2F56A7D46F18855519ECBFCA7BDC0C7D3508748
        Validity
            Not Before: Jan  6 19:10:18 2026 GMT
            Not After : Jan  5 19:15:18 2027 GMT
        Subject: CN=268D269FE06CF8EAD7BEF1222F5CD5C81FE78E68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a3:4f:51:05:87:44:2c:57:87:4e:be:47:91:
                    5a:d5:ea:1f:09:06:8a:95:24:e5:79:18:54:f9:48:
                    1b:09:3b:bf:21:fe:2b:68:61:e6:94:14:02:b2:b8:
                    c9:7e:9d:54:69:05:b0:b3:16:8e:c3:4d:c4:85:f4:
                    08:0d:12:8b:2a:72:70:49:cf:11:d5:50:a3:da:a7:
                    d4:81:4d:68:19:d7:70:26:b8:1b:82:35:11:a4:d5:
                    3a:8e:8b:e5:13:5e:d9:1f:4f:e0:fa:a7:a7:9b:24:
                    12:14:01:6f:e5:68:c6:09:b2:e8:91:c4:ef:23:10:
                    e6:57:74:f6:50:96:60:fa:8e:9a:4e:f5:08:8d:92:
                    f4:87:a9:a3:a2:f8:d3:bb:45:26:58:ad:fc:69:38:
                    6f:d8:27:e4:55:d9:a3:4b:72:da:b5:0b:28:9f:8d:
                    20:25:f5:9c:4f:e6:5a:f7:7e:ec:a1:6a:92:ea:f9:
                    6f:70:78:bd:1e:90:0a:bd:01:a8:2b:d7:2f:58:7c:
                    07:d3:55:ea:a8:c8:50:64:89:57:57:ab:e5:43:af:
                    b7:22:77:e4:be:bc:88:36:51:c8:68:29:d6:7b:e3:
                    cf:ae:ba:87:75:55:81:ce:3c:f1:e8:42:8e:67:4e:
                    da:81:69:67:8e:2e:78:45:b9:24:46:d3:8d:09:f1:
                    9b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:8D:26:9F:E0:6C:F8:EA:D7:BE:F1:22:2F:5C:D5:C8:1F:E7:8E:68
            X509v3 Authority Key Identifier:
                keyid:F2:F5:6A:7D:46:F1:88:55:51:9E:CB:FC:A7:BD:C0:C7:D3:50:87:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A617CC547E5C627EB95D5E0BD1E83126DA8CCE1215B28E5897498AE179053F96/0/F2F56A7D46F18855519ECBFCA7BDC0C7D3508748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2F56A7D46F18855519ECBFCA7BDC0C7D3508748.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A617CC547E5C627EB95D5E0BD1E83126DA8CCE1215B28E5897498AE179053F96/0/323830333a633836303a3a2f33322d3332203d3e20323637383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c860::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:fb:c3:9f:be:98:73:02:39:de:da:00:a0:a3:74:8c:8d:4e:
         53:f3:fa:b2:ef:6d:33:2a:7f:fd:f4:f9:ff:e7:7d:70:3c:94:
         14:e9:3a:d2:c3:fe:2c:fa:26:b0:34:0c:75:11:f1:73:64:2d:
         54:0c:03:39:f3:14:d3:c4:cf:3e:ae:e8:e5:87:3b:d4:ae:87:
         c6:8e:ac:5f:1b:51:0a:dc:39:9e:63:38:64:25:7b:fe:8e:81:
         03:00:7d:05:d5:7c:05:fa:2d:e3:7c:f6:f7:db:c8:e9:3b:e1:
         8a:11:d9:df:1a:b9:07:0f:00:b0:28:a6:27:9f:09:8a:a2:0b:
         62:42:71:cc:46:5e:bd:91:ec:f2:e9:36:1f:79:09:11:51:cc:
         25:95:7a:82:0b:fd:3d:dc:cd:95:f5:e4:03:ac:2d:87:1e:d4:
         ad:ee:3c:28:0f:02:2d:cf:f7:aa:c9:c6:14:b9:b3:36:01:6a:
         0a:97:c3:c0:9f:c6:98:20:ee:45:80:83:21:9a:c7:e0:08:49:
         e6:0b:ee:bb:06:f0:f2:31:c5:3b:09:82:c3:e8:08:03:14:77:
         69:0b:f8:57:45:26:11:58:b4:cf:ba:2d:ba:76:54:8c:99:ad:
         7f:8b:84:2c:74:f0:89:32:28:57:91:a4:e9:f9:0e:c3:6a:f4:
         f0:70:02:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:05:53 2026 by rpki-client