This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B33AEDAA72312FE86C592AA93FB2C38B1709B2FA781D461F0F659059201DE0A5/0/323830333a333032303a3a2f33322d3634203d3e20323635373939.roa
File:                     323830333a333032303a3a2f33322d3634203d3e20323635373939.roa (raw, json)
Hash identifier:          LEn3y7MHMLiojbttKZPifN5JJ+eys6CFW+aIlGpE41Q=
Subject key identifier:   CB:2E:8E:05:53:F2:84:EC:37:F4:AE:D9:04:48:88:AD:03:0B:B5:0B
Certificate issuer:       /CN=516E4B36DE8A5CC83BFE17D6CD4377B7CC2B6F2C
Certificate serial:       3513031F70719D6B9746A0503BFA29589EA5BE24
Authority key identifier: 51:6E:4B:36:DE:8A:5C:C8:3B:FE:17:D6:CD:43:77:B7:CC:2B:6F:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516E4B36DE8A5CC83BFE17D6CD4377B7CC2B6F2C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B33AEDAA72312FE86C592AA93FB2C38B1709B2FA781D461F0F659059201DE0A5/0/323830333a333032303a3a2f33322d3634203d3e20323635373939.roa
Signing time:             Tue 06 Jan 2026 18:59:07 +0000
ROA not before:           Tue 06 Jan 2026 18:54:07 +0000
ROA not after:            Tue 05 Jan 2027 18:59:07 +0000
asID:                     265799
IP address blocks:        2803:3020::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B33AEDAA72312FE86C592AA93FB2C38B1709B2FA781D461F0F659059201DE0A5/0/516E4B36DE8A5CC83BFE17D6CD4377B7CC2B6F2C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B33AEDAA72312FE86C592AA93FB2C38B1709B2FA781D461F0F659059201DE0A5/0/516E4B36DE8A5CC83BFE17D6CD4377B7CC2B6F2C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516E4B36DE8A5CC83BFE17D6CD4377B7CC2B6F2C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 12:26:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:13:03:1f:70:71:9d:6b:97:46:a0:50:3b:fa:29:58:9e:a5:be:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516E4B36DE8A5CC83BFE17D6CD4377B7CC2B6F2C
        Validity
            Not Before: Jan  6 18:54:07 2026 GMT
            Not After : Jan  5 18:59:07 2027 GMT
        Subject: CN=CB2E8E0553F284EC37F4AED9044888AD030BB50B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a0:0e:d7:a3:12:97:d0:b3:ba:98:08:d7:bb:
                    7c:ba:82:de:bc:1a:a8:c4:40:f9:22:64:9c:30:7b:
                    6f:5d:b6:1f:f5:3e:8e:94:f3:88:39:14:55:a8:83:
                    86:53:f5:1d:9b:a8:fc:b5:ca:3a:48:98:ff:4a:14:
                    aa:e9:c7:51:fb:3b:27:f0:47:a6:7f:17:43:f5:89:
                    04:27:f2:24:b2:97:b6:14:85:a0:3c:82:3b:9c:1b:
                    cb:eb:b8:48:3c:14:01:81:14:b0:db:80:5d:81:2c:
                    45:28:49:e4:ab:7a:d7:6a:4d:4c:cc:43:b0:b9:7a:
                    22:ab:cd:9c:77:21:19:5e:5f:ff:72:18:a6:f9:f5:
                    9b:66:de:e2:2d:c4:e0:01:05:4f:39:e8:2a:75:7d:
                    34:0f:fb:84:60:73:00:25:8e:df:2b:72:6d:60:63:
                    e8:11:08:93:57:6a:84:ff:7b:8a:27:5a:3d:2f:e1:
                    f7:e3:52:b7:cc:4b:4c:b6:84:40:00:00:af:48:6b:
                    d7:f4:45:b2:21:06:d9:4e:6f:81:99:e3:1f:9a:d9:
                    8c:a2:d5:56:d2:ab:d6:ef:3e:36:f0:f0:ae:7e:85:
                    d0:c6:f4:36:13:38:06:22:32:3d:62:a8:55:dc:57:
                    87:c4:ed:7d:3c:25:4b:ba:06:52:eb:9b:be:bd:8f:
                    ae:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:2E:8E:05:53:F2:84:EC:37:F4:AE:D9:04:48:88:AD:03:0B:B5:0B
            X509v3 Authority Key Identifier:
                keyid:51:6E:4B:36:DE:8A:5C:C8:3B:FE:17:D6:CD:43:77:B7:CC:2B:6F:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B33AEDAA72312FE86C592AA93FB2C38B1709B2FA781D461F0F659059201DE0A5/0/516E4B36DE8A5CC83BFE17D6CD4377B7CC2B6F2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516E4B36DE8A5CC83BFE17D6CD4377B7CC2B6F2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B33AEDAA72312FE86C592AA93FB2C38B1709B2FA781D461F0F659059201DE0A5/0/323830333a333032303a3a2f33322d3634203d3e20323635373939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3020::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:42:bf:7e:0a:e8:a0:67:7b:14:e1:a1:65:41:e5:65:7d:d4:
         e4:61:13:80:d9:c0:8a:fd:1e:e4:bd:a7:56:56:8a:e9:be:29:
         ef:93:8a:4c:6e:75:43:27:0c:84:70:97:22:3e:4a:66:8d:ce:
         a3:f3:34:d8:57:cc:13:00:fa:55:24:9e:34:d5:10:14:d5:fe:
         3f:dc:d3:28:8b:25:db:a8:99:aa:58:03:5f:58:2e:44:1c:1c:
         bc:c4:df:97:2a:37:d7:cd:f9:97:ce:ff:3d:d0:b0:b6:90:ef:
         8e:90:99:1f:c3:b3:ec:d4:b3:d6:33:1b:2e:88:5b:da:f6:93:
         4d:b8:d9:93:46:08:cf:55:09:03:1e:ee:09:91:f8:15:ce:d2:
         f1:56:0d:dc:1f:8e:7d:55:bf:a7:30:a4:a3:52:9e:14:12:42:
         c7:9c:39:63:7c:f1:e1:b2:2f:82:dc:5d:a4:87:70:f0:5b:26:
         ee:39:29:52:5f:be:27:fa:ec:00:1b:dd:10:92:b3:52:73:76:
         1a:79:d7:d8:3d:7f:b9:89:ec:24:2e:35:30:26:62:62:a3:1b:
         2d:68:bf:61:af:b2:d9:85:c1:ca:15:dc:c4:6b:c5:4d:4d:b9:
         7a:39:f7:6d:9b:03:f6:c9:1f:50:51:6b:02:37:bf:65:97:e1:
         03:69:52:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:34 2026 by rpki-client