This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/323830333a366561303a3a2f34382d3438203d3e20323637363739.roa
File:                     323830333a366561303a3a2f34382d3438203d3e20323637363739.roa (raw, json)
Hash identifier:          9dW8G3RMT9yrJYBfiUh0XJxcO1AvVhjugJa3pcB7yPw=
Subject key identifier:   B2:D4:1A:D0:63:F5:C0:FE:4B:42:EF:43:A3:90:DC:B4:E0:C9:DD:19
Certificate issuer:       /CN=11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795
Certificate serial:       147EC52C1B4F321C1FBEDF4F1A2FA9BA29D18520
Authority key identifier: 11:C8:44:BF:5D:63:47:E3:DB:9F:44:B8:C3:EF:AC:1F:14:99:B7:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/323830333a366561303a3a2f34382d3438203d3e20323637363739.roa
Signing time:             Tue 06 Jan 2026 19:28:06 +0000
ROA not before:           Tue 06 Jan 2026 19:23:06 +0000
ROA not after:            Tue 05 Jan 2027 19:28:06 +0000
asID:                     267679
IP address blocks:        2803:6ea0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 12:50:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:7e:c5:2c:1b:4f:32:1c:1f:be:df:4f:1a:2f:a9:ba:29:d1:85:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795
        Validity
            Not Before: Jan  6 19:23:06 2026 GMT
            Not After : Jan  5 19:28:06 2027 GMT
        Subject: CN=B2D41AD063F5C0FE4B42EF43A390DCB4E0C9DD19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:de:b4:3e:1e:62:c2:a8:e0:8e:25:4d:53:56:
                    02:39:47:ae:0f:af:91:75:c7:fa:da:82:b4:58:af:
                    df:da:ce:3b:fd:95:a3:0d:66:62:e9:39:f9:16:bb:
                    9d:b2:bc:f7:55:70:f6:66:4e:d8:f3:46:52:c5:18:
                    2c:b9:c5:3e:e5:97:4a:f5:3d:1d:22:4b:f9:90:26:
                    20:97:c7:89:69:20:18:b9:40:80:95:26:be:a9:12:
                    e8:76:e3:49:05:49:42:0f:5f:cd:1c:c0:d2:33:39:
                    46:4f:02:28:b6:0a:67:ed:d6:fc:5e:72:b1:47:36:
                    ad:51:35:03:bd:1c:fe:b6:ca:35:b6:d4:00:bf:3b:
                    4d:8c:ec:95:12:61:88:62:f3:6b:03:8f:1c:e0:be:
                    d6:1a:00:5f:5c:99:cb:c2:f9:6b:5e:5e:c7:2c:4e:
                    56:65:18:75:6f:23:5c:63:ce:a9:65:f2:07:c4:ed:
                    ea:f8:22:bb:c6:a1:81:a7:25:d5:29:ea:e4:9e:40:
                    f8:fb:bc:cd:d4:bf:2e:27:ac:ab:6d:24:40:02:34:
                    4c:b0:a2:76:cc:f1:ec:91:78:e3:16:09:eb:4d:46:
                    bd:25:e7:1a:93:22:41:56:02:6a:a1:1a:bb:58:08:
                    5b:a2:8f:17:46:c5:7a:b9:35:8a:ca:07:f0:aa:e6:
                    a3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D4:1A:D0:63:F5:C0:FE:4B:42:EF:43:A3:90:DC:B4:E0:C9:DD:19
            X509v3 Authority Key Identifier:
                keyid:11:C8:44:BF:5D:63:47:E3:DB:9F:44:B8:C3:EF:AC:1F:14:99:B7:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/323830333a366561303a3a2f34382d3438203d3e20323637363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6ea0::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:dc:a4:80:f8:6a:31:0e:ea:75:b8:fd:96:50:2b:58:fe:a7:
         2a:96:b4:06:3e:c8:7e:96:f0:50:a4:53:c7:88:2d:46:f5:48:
         17:d1:7c:d2:82:a7:d7:75:d9:47:6d:f8:7e:85:b1:6c:3b:b9:
         01:d6:7c:a8:14:1f:5d:eb:df:50:1b:a2:7d:68:2e:0c:79:92:
         77:b3:f1:68:9c:b9:49:76:da:29:0c:7f:d3:e7:8a:37:4e:d1:
         c2:5e:95:3c:07:a7:ef:8e:bb:29:65:3d:b2:0a:8a:f8:5a:77:
         02:86:20:68:38:f5:25:a4:66:41:11:d9:7b:90:c9:7f:66:85:
         d0:6d:f7:e3:54:e0:09:90:24:fe:4d:56:69:e2:b8:7c:2e:d7:
         5c:22:f4:8f:84:09:47:c0:77:b9:ad:43:fa:1c:91:02:12:ca:
         bc:65:0a:93:d3:09:ec:9f:73:3b:7a:cd:84:2c:d0:a6:cc:ad:
         78:8c:b2:e6:b8:41:28:0c:d9:0d:6e:c2:c5:c5:39:0f:8d:78:
         2e:79:d9:f5:19:6c:0d:07:62:f6:e6:df:82:bf:05:9c:99:c0:
         14:80:da:07:5a:34:7a:74:7f:99:2a:84:a6:9b:2a:c1:cf:3d:
         42:94:a5:d8:10:11:93:52:16:19:db:0d:02:80:a1:56:6d:1b:
         eb:80:31:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:31:02 2026 by rpki-client