This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A9001C1AF8BA512DE0C413F6A9FB7CA6D38B6DC591008C58A679ECFE29386C77/0/323830333a316431303a3a2f33322d3438203d3e20323732303531.roa
File:                     323830333a316431303a3a2f33322d3438203d3e20323732303531.roa (raw, json)
Hash identifier:          KzB4McF3h/aedRZQL7YPTaEYHiPtkK5jo4qmMyvP5LU=
Subject key identifier:   38:63:03:59:B4:B8:F9:65:83:8F:9C:54:81:23:FA:23:A2:0F:79:40
Certificate issuer:       /CN=6FA9D8355B4041A0E854F533B0B64560F79C9808
Certificate serial:       1D480C92256C110B177FEF0F6457A55858040C8A
Authority key identifier: 6F:A9:D8:35:5B:40:41:A0:E8:54:F5:33:B0:B6:45:60:F7:9C:98:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6FA9D8355B4041A0E854F533B0B64560F79C9808.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A9001C1AF8BA512DE0C413F6A9FB7CA6D38B6DC591008C58A679ECFE29386C77/0/323830333a316431303a3a2f33322d3438203d3e20323732303531.roa
Signing time:             Tue 06 Jan 2026 19:33:13 +0000
ROA not before:           Tue 06 Jan 2026 19:28:13 +0000
ROA not after:            Tue 05 Jan 2027 19:33:13 +0000
asID:                     272051
IP address blocks:        2803:1d10::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A9001C1AF8BA512DE0C413F6A9FB7CA6D38B6DC591008C58A679ECFE29386C77/0/6FA9D8355B4041A0E854F533B0B64560F79C9808.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A9001C1AF8BA512DE0C413F6A9FB7CA6D38B6DC591008C58A679ECFE29386C77/0/6FA9D8355B4041A0E854F533B0B64560F79C9808.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6FA9D8355B4041A0E854F533B0B64560F79C9808.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:48:0c:92:25:6c:11:0b:17:7f:ef:0f:64:57:a5:58:58:04:0c:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FA9D8355B4041A0E854F533B0B64560F79C9808
        Validity
            Not Before: Jan  6 19:28:13 2026 GMT
            Not After : Jan  5 19:33:13 2027 GMT
        Subject: CN=38630359B4B8F965838F9C548123FA23A20F7940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3f:3a:25:f1:a7:0d:13:db:00:73:65:f3:d0:
                    20:ca:73:a8:6b:04:01:8c:84:ed:18:4a:6f:1e:b1:
                    e1:5a:20:40:25:45:23:d9:48:27:b0:d0:99:ad:c4:
                    30:e6:35:fd:2f:a4:a6:2b:a3:62:71:b5:d9:b8:e8:
                    cf:76:84:ca:8c:cc:66:7a:9d:9f:9b:e8:70:18:52:
                    23:32:79:a2:96:e1:e7:f2:5e:c2:bb:a7:62:cf:da:
                    33:bc:5f:5f:b4:4c:1a:14:12:a0:c2:cd:3b:42:3d:
                    60:0d:68:5d:05:fe:99:fc:94:09:9c:5f:05:ee:37:
                    03:0b:a2:f6:c2:36:82:8e:7a:73:57:57:46:cf:0b:
                    7a:4b:49:9e:30:73:71:30:e2:78:30:06:3c:15:1d:
                    d0:ee:cf:f8:d8:52:cc:73:b0:3b:c2:b8:26:9b:d4:
                    37:b1:1e:6b:4b:89:b1:49:67:be:f3:43:14:22:25:
                    fa:4e:2e:80:89:11:11:0d:78:22:9e:f2:19:20:bc:
                    6c:09:c2:3e:c1:17:33:40:ef:51:e6:28:f4:16:72:
                    b4:fc:9e:92:aa:b3:9e:65:44:0f:7e:2c:52:96:dd:
                    3b:33:dc:5c:79:4d:f2:4a:a2:19:c0:cf:6e:88:c9:
                    1e:06:d6:37:55:e0:12:ea:05:7b:c4:73:8e:0b:c3:
                    d1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:63:03:59:B4:B8:F9:65:83:8F:9C:54:81:23:FA:23:A2:0F:79:40
            X509v3 Authority Key Identifier:
                keyid:6F:A9:D8:35:5B:40:41:A0:E8:54:F5:33:B0:B6:45:60:F7:9C:98:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A9001C1AF8BA512DE0C413F6A9FB7CA6D38B6DC591008C58A679ECFE29386C77/0/6FA9D8355B4041A0E854F533B0B64560F79C9808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6FA9D8355B4041A0E854F533B0B64560F79C9808.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A9001C1AF8BA512DE0C413F6A9FB7CA6D38B6DC591008C58A679ECFE29386C77/0/323830333a316431303a3a2f33322d3438203d3e20323732303531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1d10::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:f8:7b:d4:c5:59:48:ce:97:7d:b5:4d:73:a5:ba:8b:2f:e0:
         40:dd:f5:33:58:43:f7:19:a2:fb:57:dd:00:cc:1c:2f:11:0d:
         05:f6:f4:29:f4:c0:c9:80:bd:07:39:8f:93:46:24:2b:02:5f:
         03:6b:9f:99:f3:55:28:c5:bd:19:c7:2e:40:e3:50:34:34:08:
         78:86:68:fd:a9:62:e5:c4:4c:63:38:8c:bf:b4:13:90:81:5b:
         3f:0c:a1:f0:13:63:50:d8:4b:1d:90:b7:c0:42:48:c6:98:f0:
         34:22:60:af:23:48:a5:a3:c0:99:e4:dc:81:5b:c9:17:f6:a5:
         e6:61:dd:45:24:47:f0:14:d3:f6:ef:d9:16:f8:60:ec:a2:5b:
         57:c4:f0:88:da:1b:7a:5e:ec:a7:d8:db:4d:b1:54:1a:07:15:
         c5:01:ba:e3:a9:d1:7a:66:6d:3a:b6:ef:45:d8:95:6f:6a:37:
         cc:d6:77:8a:fb:2f:f1:1e:3b:24:67:2f:17:14:ad:95:10:b7:
         74:82:70:d5:54:74:6f:51:bb:4d:fc:66:49:27:87:bd:a0:01:
         43:0f:d3:1d:ca:72:86:80:f3:e1:2c:56:d3:c2:89:e7:76:e4:
         a1:16:cc:52:61:87:8f:7a:1d:f7:f5:a9:8d:ff:54:3d:28:04:
         86:ea:5a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:37:27 2026 by rpki-client