This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B2AD650D650357E8F73DE0796EE41A0EF32BB6457E6CFC1340EE5F0C46BAE363/0/323830333a353035303a3a2f33322d3438203d3e20323733303939.roa
File:                     323830333a353035303a3a2f33322d3438203d3e20323733303939.roa (raw, json)
Hash identifier:          4TNZQuw5uRM9f93ejhBvjrd1q+4rJzh6BVmWDPMv99U=
Subject key identifier:   AC:58:9F:9C:33:52:30:B0:DA:3F:CF:61:6F:88:4A:68:90:97:D5:1F
Certificate issuer:       /CN=16C7C8578107D6479F39A5ED67AD600E679CB254
Certificate serial:       0768FDC2A2A69016B83DB267E6AA6F0C59B9639E
Authority key identifier: 16:C7:C8:57:81:07:D6:47:9F:39:A5:ED:67:AD:60:0E:67:9C:B2:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16C7C8578107D6479F39A5ED67AD600E679CB254.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B2AD650D650357E8F73DE0796EE41A0EF32BB6457E6CFC1340EE5F0C46BAE363/0/323830333a353035303a3a2f33322d3438203d3e20323733303939.roa
Signing time:             Tue 06 Jan 2026 19:09:09 +0000
ROA not before:           Tue 06 Jan 2026 19:04:09 +0000
ROA not after:            Tue 05 Jan 2027 19:09:09 +0000
asID:                     273099
IP address blocks:        2803:5050::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B2AD650D650357E8F73DE0796EE41A0EF32BB6457E6CFC1340EE5F0C46BAE363/0/16C7C8578107D6479F39A5ED67AD600E679CB254.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B2AD650D650357E8F73DE0796EE41A0EF32BB6457E6CFC1340EE5F0C46BAE363/0/16C7C8578107D6479F39A5ED67AD600E679CB254.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16C7C8578107D6479F39A5ED67AD600E679CB254.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 00:06:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:68:fd:c2:a2:a6:90:16:b8:3d:b2:67:e6:aa:6f:0c:59:b9:63:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16C7C8578107D6479F39A5ED67AD600E679CB254
        Validity
            Not Before: Jan  6 19:04:09 2026 GMT
            Not After : Jan  5 19:09:09 2027 GMT
        Subject: CN=AC589F9C335230B0DA3FCF616F884A689097D51F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:58:c6:4c:29:fe:0d:67:6b:d6:bf:05:96:7d:
                    1a:69:2b:67:50:2f:4a:94:2b:47:fe:ce:37:42:28:
                    81:e0:03:e4:bd:64:19:85:81:0b:1a:28:24:e6:73:
                    f6:79:75:5c:0e:08:c6:12:fa:bb:e2:7d:2d:dc:96:
                    4b:97:ef:95:e5:fd:3e:c4:cc:25:6e:57:51:df:15:
                    cf:71:db:cf:94:16:50:46:af:91:a2:d7:5d:97:33:
                    72:2a:bf:54:3b:75:4e:5d:52:9a:c6:75:3f:fa:dc:
                    a0:b3:42:50:1d:a5:19:ee:2f:eb:58:e1:53:38:51:
                    b3:fd:9b:e4:9b:44:25:ac:4a:b0:60:58:94:a4:4a:
                    c3:2b:52:f2:94:b6:ec:0e:26:41:60:51:4b:2a:dc:
                    c1:f2:66:d0:b0:09:bd:f2:d8:87:57:1b:d0:b7:49:
                    33:9f:38:0e:71:ce:5c:66:6d:bf:52:d0:32:dd:1a:
                    3e:33:cb:bb:06:1b:e5:61:ce:20:9f:34:08:b3:d0:
                    8c:48:39:cd:35:93:c6:48:b6:08:9a:39:e0:4d:9e:
                    bf:86:a5:08:49:f3:06:09:6c:6f:35:20:8d:5e:e6:
                    2d:32:53:05:db:80:4d:6c:d9:25:02:ba:e5:b5:84:
                    da:7e:73:54:67:54:c6:b6:8e:c5:50:9b:b2:80:e4:
                    40:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:58:9F:9C:33:52:30:B0:DA:3F:CF:61:6F:88:4A:68:90:97:D5:1F
            X509v3 Authority Key Identifier:
                keyid:16:C7:C8:57:81:07:D6:47:9F:39:A5:ED:67:AD:60:0E:67:9C:B2:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B2AD650D650357E8F73DE0796EE41A0EF32BB6457E6CFC1340EE5F0C46BAE363/0/16C7C8578107D6479F39A5ED67AD600E679CB254.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16C7C8578107D6479F39A5ED67AD600E679CB254.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B2AD650D650357E8F73DE0796EE41A0EF32BB6457E6CFC1340EE5F0C46BAE363/0/323830333a353035303a3a2f33322d3438203d3e20323733303939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5050::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:2b:ec:dd:aa:c3:88:88:9f:c5:0e:a8:8d:47:5d:19:25:9e:
         e7:e6:dc:1b:e8:06:f6:27:5c:93:85:cb:6a:f9:b7:fb:b0:f5:
         23:e2:e7:7e:0b:dc:d3:aa:f8:68:3a:a0:26:e6:ee:f2:bf:e7:
         b1:9e:94:24:a4:21:21:cd:50:91:89:78:0e:6c:ae:31:51:4e:
         31:54:cc:f1:23:2e:cc:85:b8:4f:a1:1f:c2:8f:d7:49:4f:23:
         49:7a:7c:86:ef:41:ee:33:95:0a:9c:19:97:98:5a:3d:ea:00:
         4d:eb:4f:e5:21:51:0a:a9:11:63:30:98:f4:8d:e0:eb:bc:db:
         2c:0e:e7:60:10:ab:cc:b5:47:2a:ae:d1:1c:55:e7:13:56:2c:
         2d:cf:ca:1f:b0:c3:0d:e2:ff:2d:ae:d8:29:9f:1c:6a:d9:02:
         3a:b4:c9:9a:7c:a9:e2:fb:e0:20:01:41:29:c7:03:a4:17:a9:
         94:c1:53:b8:05:be:f6:3d:4a:8f:fe:f6:0e:a3:6d:ce:bc:39:
         fc:c5:e3:2e:b3:75:2e:31:6e:e9:87:e5:ff:a4:c6:b9:f3:c8:
         0b:c3:ce:13:5a:55:60:82:70:fc:98:48:a0:68:00:47:0b:16:
         3f:bb:7b:ca:66:d8:f8:fb:10:42:53:53:ed:21:69:66:98:2a:
         6b:0e:5d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:28:10 2026 by rpki-client