This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3E92E6AD40AA0C9FEAB99AC81E2F2FE4F89BCFF80B8AE8F38912B295F0E9914/0/323830333a623561303a3a2f33322d3334203d3e20323639383034.roa
File:                     323830333a623561303a3a2f33322d3334203d3e20323639383034.roa (raw, json)
Hash identifier:          prcFkKfwKxngoPQL6e3Ti6/T3a/MfKLM5rrSyvg/AX8=
Subject key identifier:   8F:E5:FD:9A:C7:D3:4A:0D:7D:78:44:CD:F2:47:CC:44:00:49:46:74
Certificate issuer:       /CN=6CFC0CD36DE83898AFE4634C103FE1CF06563CF4
Certificate serial:       67A0DFAD04EE274F61244C29BB2788F74E6E97F7
Authority key identifier: 6C:FC:0C:D3:6D:E8:38:98:AF:E4:63:4C:10:3F:E1:CF:06:56:3C:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CFC0CD36DE83898AFE4634C103FE1CF06563CF4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3E92E6AD40AA0C9FEAB99AC81E2F2FE4F89BCFF80B8AE8F38912B295F0E9914/0/323830333a623561303a3a2f33322d3334203d3e20323639383034.roa
Signing time:             Tue 06 Jan 2026 19:05:13 +0000
ROA not before:           Tue 06 Jan 2026 19:00:13 +0000
ROA not after:            Tue 05 Jan 2027 19:05:13 +0000
asID:                     269804
IP address blocks:        2803:b5a0::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3E92E6AD40AA0C9FEAB99AC81E2F2FE4F89BCFF80B8AE8F38912B295F0E9914/0/6CFC0CD36DE83898AFE4634C103FE1CF06563CF4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3E92E6AD40AA0C9FEAB99AC81E2F2FE4F89BCFF80B8AE8F38912B295F0E9914/0/6CFC0CD36DE83898AFE4634C103FE1CF06563CF4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CFC0CD36DE83898AFE4634C103FE1CF06563CF4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 04:05:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:a0:df:ad:04:ee:27:4f:61:24:4c:29:bb:27:88:f7:4e:6e:97:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CFC0CD36DE83898AFE4634C103FE1CF06563CF4
        Validity
            Not Before: Jan  6 19:00:13 2026 GMT
            Not After : Jan  5 19:05:13 2027 GMT
        Subject: CN=8FE5FD9AC7D34A0D7D7844CDF247CC4400494674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:93:75:da:9c:4f:c7:6a:0a:86:47:02:ae:3e:
                    40:af:43:ad:65:2f:93:95:87:84:b7:e9:f3:13:26:
                    cf:31:ff:e2:f6:9e:d0:54:a7:e3:65:7e:90:04:99:
                    e7:ee:5a:98:34:10:e9:b3:ef:7e:a6:95:d7:ed:dc:
                    73:44:02:6c:23:0d:f1:de:1a:65:b6:da:fb:27:8c:
                    a6:83:cb:50:ae:98:9b:0e:b3:e8:c7:6e:7a:09:5f:
                    81:ff:6c:95:c9:d2:ba:3d:6e:85:48:a5:3d:94:a0:
                    c5:c2:c5:40:3c:b6:c9:d9:48:5e:c0:6a:e1:e7:b5:
                    a4:49:71:87:c0:1d:4c:8d:db:7e:e4:84:f8:6b:64:
                    b1:6e:ea:b7:2d:a2:a8:c9:8e:79:32:7b:b5:e7:04:
                    82:27:b7:cb:32:d0:fa:09:0a:10:36:c9:3c:42:f5:
                    b7:a8:56:cf:55:bd:58:bd:9c:45:d3:63:68:eb:4a:
                    ed:a8:14:09:c0:fd:4c:ad:3b:d2:c2:38:3a:c1:1a:
                    d3:68:e1:6f:50:07:99:36:c6:ca:b4:af:a9:8c:c6:
                    7d:c4:57:61:ae:f3:39:46:36:91:c4:7a:bf:4c:0d:
                    60:2c:b2:7b:5a:ae:d9:ab:96:29:d5:5e:31:c5:eb:
                    12:4b:39:dc:6d:43:93:fa:34:19:6b:17:53:00:5c:
                    43:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E5:FD:9A:C7:D3:4A:0D:7D:78:44:CD:F2:47:CC:44:00:49:46:74
            X509v3 Authority Key Identifier:
                keyid:6C:FC:0C:D3:6D:E8:38:98:AF:E4:63:4C:10:3F:E1:CF:06:56:3C:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3E92E6AD40AA0C9FEAB99AC81E2F2FE4F89BCFF80B8AE8F38912B295F0E9914/0/6CFC0CD36DE83898AFE4634C103FE1CF06563CF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CFC0CD36DE83898AFE4634C103FE1CF06563CF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3E92E6AD40AA0C9FEAB99AC81E2F2FE4F89BCFF80B8AE8F38912B295F0E9914/0/323830333a623561303a3a2f33322d3334203d3e20323639383034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b5a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:9c:49:c1:af:67:7f:8a:51:37:3c:20:e5:b1:b3:65:29:ab:
         5e:16:b4:c1:42:f5:9e:0b:f9:39:14:40:0a:73:01:33:3e:5e:
         da:25:34:81:69:dd:0f:a7:9c:c6:40:3c:7e:7f:8c:f3:bc:be:
         c0:90:d1:55:4a:63:b6:ab:47:85:56:26:6c:0b:93:3a:3e:7f:
         36:b9:b8:eb:95:2c:94:2e:67:8d:66:66:6d:c4:63:b7:f1:f4:
         b3:80:ec:c0:13:c1:5e:b4:e0:84:ae:b3:98:bd:8b:63:1b:26:
         f9:b0:46:31:07:f5:fd:1e:28:30:cd:b9:9d:96:a2:59:82:27:
         4b:9b:9a:b8:36:3b:59:ba:ac:fb:be:99:bc:0c:9d:b6:c4:94:
         5e:a6:7f:d4:3e:4e:5c:31:58:ce:54:56:78:d1:7c:97:50:16:
         ea:2e:08:2a:8c:e4:13:bc:76:0b:96:ce:8a:4f:9d:03:3a:ff:
         b2:aa:88:12:8d:43:80:00:3e:14:56:52:44:b9:2c:99:2f:f4:
         de:ea:ad:48:a4:99:75:20:95:fe:8b:98:5c:a6:42:7f:17:c0:
         05:f3:5f:b9:da:e2:0c:1e:5e:66:b9:58:f8:ce:3d:25:7f:6a:
         57:75:6f:77:49:85:93:a3:9a:56:01:b4:70:be:7a:a8:c3:7c:
         74:01:55:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:02:13 2026 by rpki-client