This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/323830333a336361303a3a2f34382d3438203d3e20323636383435.roa
File:                     323830333a336361303a3a2f34382d3438203d3e20323636383435.roa (raw, json)
Hash identifier:          dVQ5274j94wtbal1CvVclzzB8xjcWI23fdrvuxtEtOU=
Subject key identifier:   84:CF:A0:38:16:A7:B5:09:77:40:D2:91:07:67:4D:4D:88:E1:A7:D2
Certificate issuer:       /CN=9C47A2CE71365140A7ACBE7252BB0916C054BE16
Certificate serial:       261FC110D997EAC3E58366504DFBC68EF8BED2D5
Authority key identifier: 9C:47:A2:CE:71:36:51:40:A7:AC:BE:72:52:BB:09:16:C0:54:BE:16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C47A2CE71365140A7ACBE7252BB0916C054BE16.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/323830333a336361303a3a2f34382d3438203d3e20323636383435.roa
Signing time:             Tue 06 Jan 2026 19:14:31 +0000
ROA not before:           Tue 06 Jan 2026 19:09:31 +0000
ROA not after:            Tue 05 Jan 2027 19:14:31 +0000
asID:                     266845
IP address blocks:        2803:3ca0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/9C47A2CE71365140A7ACBE7252BB0916C054BE16.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/9C47A2CE71365140A7ACBE7252BB0916C054BE16.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C47A2CE71365140A7ACBE7252BB0916C054BE16.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 14:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:1f:c1:10:d9:97:ea:c3:e5:83:66:50:4d:fb:c6:8e:f8:be:d2:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C47A2CE71365140A7ACBE7252BB0916C054BE16
        Validity
            Not Before: Jan  6 19:09:31 2026 GMT
            Not After : Jan  5 19:14:31 2027 GMT
        Subject: CN=84CFA03816A7B5097740D29107674D4D88E1A7D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ea:8f:2f:65:85:3f:f2:4d:01:d7:31:fb:24:
                    35:29:c5:b8:c2:69:b9:0f:b9:78:7e:ae:6f:7b:29:
                    47:0b:a8:67:51:83:19:bf:7d:b5:44:bc:51:8f:a3:
                    e7:43:b4:4d:b9:58:ea:6b:8c:72:57:27:6a:aa:10:
                    1b:1c:32:63:86:37:98:ea:c6:3f:56:ac:34:4b:fb:
                    57:f0:5c:97:64:93:90:2a:4d:dc:8b:b5:47:05:c2:
                    e8:c4:84:00:9b:aa:cc:6b:f4:4b:e2:35:9f:e8:3e:
                    b1:9d:65:a8:41:52:ec:32:bc:f5:49:85:94:92:c2:
                    aa:98:d1:f8:88:d7:43:c4:23:19:ae:8b:c3:ed:bf:
                    4f:8e:66:2c:ff:24:8f:96:d8:c7:77:cb:e9:c1:e1:
                    53:d0:9e:2a:33:3e:30:99:ec:80:07:16:a3:92:73:
                    f1:45:81:d2:9e:41:c4:81:58:db:af:55:88:52:56:
                    01:1d:95:b4:67:49:d4:9a:c9:2b:b1:08:16:39:88:
                    94:72:8e:53:ba:f7:07:ad:55:71:81:be:28:74:75:
                    ba:44:da:4f:a0:c5:19:1c:e7:0e:a6:8c:68:8b:12:
                    bd:05:80:ca:5f:c4:96:64:bd:5d:e7:62:e5:fb:e4:
                    02:7c:ec:a6:51:37:a9:df:2b:d8:17:7a:4c:f5:8d:
                    51:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:CF:A0:38:16:A7:B5:09:77:40:D2:91:07:67:4D:4D:88:E1:A7:D2
            X509v3 Authority Key Identifier:
                keyid:9C:47:A2:CE:71:36:51:40:A7:AC:BE:72:52:BB:09:16:C0:54:BE:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/9C47A2CE71365140A7ACBE7252BB0916C054BE16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C47A2CE71365140A7ACBE7252BB0916C054BE16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/323830333a336361303a3a2f34382d3438203d3e20323636383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3ca0::/48

    Signature Algorithm: sha256WithRSAEncryption
         cd:8e:55:78:76:27:05:75:aa:54:37:60:51:d5:aa:fb:56:2c:
         aa:a6:79:f0:27:3e:4d:eb:94:fc:4a:85:38:fc:ec:4c:b1:93:
         3b:99:60:f0:ae:46:91:20:16:44:47:67:03:dc:65:fe:02:a5:
         8a:59:c9:99:2c:f5:c8:ea:18:e1:2e:9d:ee:d4:06:61:28:20:
         4d:c7:29:29:06:f8:1d:86:f3:ac:52:12:69:08:71:d2:ce:87:
         92:d6:13:82:76:eb:2b:36:ee:de:e3:13:86:16:de:4f:df:ca:
         74:02:5f:9b:59:38:7b:a2:a3:fe:2e:93:49:58:37:f4:66:a2:
         7d:3f:66:cf:f9:5d:a8:a2:b0:79:10:6a:1d:49:d5:41:02:f3:
         40:f0:2b:ad:6a:e9:d1:87:97:4e:94:46:ef:22:2a:ee:57:ed:
         cf:60:ff:45:cd:19:83:23:41:6c:b9:9e:a9:c4:16:dd:f0:ce:
         b8:33:42:31:1c:77:4c:ed:70:69:c8:97:af:c6:83:ef:da:fb:
         f5:80:40:9f:fa:26:72:e7:9e:3f:55:0e:10:92:10:df:d0:ac:
         ab:56:2a:d3:3c:76:8a:90:53:42:a3:3e:01:bb:93:31:bb:db:
         e6:7f:98:2f:43:2c:5c:9e:86:bf:82:6b:e5:a5:42:1a:14:c6:
         7e:a8:29:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:49:48 2026 by rpki-client