This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AB19A1F333FFA36CC0FA1B59F186DA1CFD5AFC697CF1D898D76C3E7C5F417EBA/0/323830333a333834303a3a2f33322d3438203d3e20323633373730.roa
File:                     323830333a333834303a3a2f33322d3438203d3e20323633373730.roa (raw, json)
Hash identifier:          HV/D9wxedfDRh4oRSLD690DwXWDKW5SoQYiWpMwv5Yk=
Subject key identifier:   60:9F:A0:78:C5:A0:0D:72:3B:2A:B6:50:CA:9F:49:D7:D6:56:B9:A0
Certificate issuer:       /CN=8099611B7BF0F6A8CA74DFD374E3EDF2C89FBD7A
Certificate serial:       25DA712B15340AA5F5FDF52D9C9AC604B76A8225
Authority key identifier: 80:99:61:1B:7B:F0:F6:A8:CA:74:DF:D3:74:E3:ED:F2:C8:9F:BD:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8099611B7BF0F6A8CA74DFD374E3EDF2C89FBD7A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AB19A1F333FFA36CC0FA1B59F186DA1CFD5AFC697CF1D898D76C3E7C5F417EBA/0/323830333a333834303a3a2f33322d3438203d3e20323633373730.roa
Signing time:             Tue 06 Jan 2026 19:03:33 +0000
ROA not before:           Tue 06 Jan 2026 18:58:33 +0000
ROA not after:            Tue 05 Jan 2027 19:03:33 +0000
asID:                     263770
IP address blocks:        2803:3840::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AB19A1F333FFA36CC0FA1B59F186DA1CFD5AFC697CF1D898D76C3E7C5F417EBA/0/8099611B7BF0F6A8CA74DFD374E3EDF2C89FBD7A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AB19A1F333FFA36CC0FA1B59F186DA1CFD5AFC697CF1D898D76C3E7C5F417EBA/0/8099611B7BF0F6A8CA74DFD374E3EDF2C89FBD7A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8099611B7BF0F6A8CA74DFD374E3EDF2C89FBD7A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 11:15:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:da:71:2b:15:34:0a:a5:f5:fd:f5:2d:9c:9a:c6:04:b7:6a:82:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8099611B7BF0F6A8CA74DFD374E3EDF2C89FBD7A
        Validity
            Not Before: Jan  6 18:58:33 2026 GMT
            Not After : Jan  5 19:03:33 2027 GMT
        Subject: CN=609FA078C5A00D723B2AB650CA9F49D7D656B9A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e3:31:7d:9f:ee:1c:5b:bb:eb:74:b5:76:ff:
                    dd:42:01:8e:13:8a:dd:2d:49:7e:33:63:ee:69:51:
                    29:d3:10:46:a7:ab:d5:91:cd:89:36:16:4b:d4:68:
                    e4:f4:07:cc:17:ea:57:06:23:1a:3f:34:f2:65:65:
                    53:f4:07:81:88:8e:4f:ac:c4:4b:64:7a:d0:b9:b3:
                    a3:b2:28:6e:62:88:55:b1:46:21:ea:35:32:d8:86:
                    8b:f2:e9:32:e3:b5:b1:e5:d5:26:93:a7:19:59:a4:
                    19:64:20:65:90:80:4b:9e:f5:fb:cf:cd:0b:81:7e:
                    1e:f2:d7:2d:8f:dd:c9:37:45:76:e2:dc:6e:58:d8:
                    c9:ce:29:03:12:9b:d5:0d:80:17:b5:24:b7:e6:13:
                    d7:f7:f2:4e:ca:fb:bd:b5:44:31:87:bb:64:2f:4a:
                    ef:9c:4e:55:e7:71:c4:6c:44:a9:46:84:67:48:89:
                    d9:8e:ff:ed:8a:44:9f:a8:7b:45:b2:e7:f3:a6:ab:
                    d8:a7:a0:cf:47:3b:e1:01:81:0b:c7:ec:4f:9f:0c:
                    d9:d8:72:b5:ec:a4:cd:d0:f5:a2:7f:39:58:d1:e7:
                    e6:7c:e2:36:a0:5d:ab:db:55:44:dc:e3:ed:99:81:
                    53:fa:84:97:36:a9:90:11:9b:33:88:11:9f:96:6b:
                    d3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:9F:A0:78:C5:A0:0D:72:3B:2A:B6:50:CA:9F:49:D7:D6:56:B9:A0
            X509v3 Authority Key Identifier:
                keyid:80:99:61:1B:7B:F0:F6:A8:CA:74:DF:D3:74:E3:ED:F2:C8:9F:BD:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AB19A1F333FFA36CC0FA1B59F186DA1CFD5AFC697CF1D898D76C3E7C5F417EBA/0/8099611B7BF0F6A8CA74DFD374E3EDF2C89FBD7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8099611B7BF0F6A8CA74DFD374E3EDF2C89FBD7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AB19A1F333FFA36CC0FA1B59F186DA1CFD5AFC697CF1D898D76C3E7C5F417EBA/0/323830333a333834303a3a2f33322d3438203d3e20323633373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3840::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:cf:f8:d0:ef:6a:2b:73:52:19:ca:c1:13:65:b1:2d:c9:de:
         f7:fa:4c:77:a1:2c:06:f0:5b:79:fe:6b:56:4c:0c:a9:e0:2b:
         c0:32:9d:6c:10:21:5e:79:11:22:f9:2f:fd:7d:77:9a:de:b1:
         98:6f:55:1d:6d:bf:a5:f0:e7:90:54:da:94:92:fd:9e:c7:23:
         27:80:3e:64:c2:1b:b7:dc:ef:4c:82:06:57:28:25:02:62:e9:
         36:75:b2:bf:17:14:65:50:b0:1d:79:84:45:be:5e:46:0b:79:
         6e:ce:79:a1:1e:c4:c4:cf:99:4c:2d:ef:91:f4:ff:0c:e6:cd:
         11:72:af:91:cb:2e:76:c0:e2:69:c2:4c:8c:73:93:9d:77:84:
         ce:77:ae:43:85:27:b7:58:2e:66:5b:9c:f2:82:ec:c3:6d:04:
         6a:20:c0:b8:f8:d6:14:84:42:39:eb:fc:26:e7:24:c5:fe:57:
         c2:0d:ac:52:ff:64:07:cb:7b:3f:ca:ff:28:c3:a4:e5:23:6b:
         8e:d5:05:a3:ed:75:af:6a:17:24:a9:b1:c8:b4:e2:49:84:33:
         ca:4f:e9:28:1f:96:eb:95:60:7b:0a:13:a6:e0:24:01:f7:2b:
         ad:aa:9b:ec:e8:ba:ad:65:12:46:8f:06:a8:33:15:92:08:bd:
         b9:5c:52:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:17:17 2026 by rpki-client