This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C3B3D1FA9E72DD18DA88D6C3BFCBCCEAD6E18A1668506CEF025050D3CF50D527/0/323830333a663936303a3a2f33322d3332203d3e20323639373439.roa
File:                     323830333a663936303a3a2f33322d3332203d3e20323639373439.roa (raw, json)
Hash identifier:          /v97xzGqN3H8gBMbFGSeu416V9GCCL6SZSj0x1Lx9GA=
Subject key identifier:   AA:5F:4F:41:D9:BF:74:03:00:B8:9B:73:10:A9:8C:CD:22:DB:94:98
Certificate issuer:       /CN=A19564CD95B76786E9E89DB7EEDD22CF6E2D90DC
Certificate serial:       1B23BC5EF4DA011DDE8A8EB692A74ACC18F70C3F
Authority key identifier: A1:95:64:CD:95:B7:67:86:E9:E8:9D:B7:EE:DD:22:CF:6E:2D:90:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A19564CD95B76786E9E89DB7EEDD22CF6E2D90DC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C3B3D1FA9E72DD18DA88D6C3BFCBCCEAD6E18A1668506CEF025050D3CF50D527/0/323830333a663936303a3a2f33322d3332203d3e20323639373439.roa
Signing time:             Tue 06 Jan 2026 18:59:22 +0000
ROA not before:           Tue 06 Jan 2026 18:54:22 +0000
ROA not after:            Tue 05 Jan 2027 18:59:22 +0000
asID:                     269749
IP address blocks:        2803:f960::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C3B3D1FA9E72DD18DA88D6C3BFCBCCEAD6E18A1668506CEF025050D3CF50D527/0/A19564CD95B76786E9E89DB7EEDD22CF6E2D90DC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C3B3D1FA9E72DD18DA88D6C3BFCBCCEAD6E18A1668506CEF025050D3CF50D527/0/A19564CD95B76786E9E89DB7EEDD22CF6E2D90DC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A19564CD95B76786E9E89DB7EEDD22CF6E2D90DC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:23:bc:5e:f4:da:01:1d:de:8a:8e:b6:92:a7:4a:cc:18:f7:0c:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A19564CD95B76786E9E89DB7EEDD22CF6E2D90DC
        Validity
            Not Before: Jan  6 18:54:22 2026 GMT
            Not After : Jan  5 18:59:22 2027 GMT
        Subject: CN=AA5F4F41D9BF740300B89B7310A98CCD22DB9498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ea:99:a4:cb:c3:18:5a:be:e4:09:a1:a5:85:
                    02:8b:7b:02:b3:4e:04:1b:29:7d:92:7d:b8:61:42:
                    5c:a6:d9:ac:87:19:d8:e3:e0:55:66:aa:94:e2:0a:
                    69:8c:9f:f2:42:87:66:31:0d:28:e1:60:86:d7:3a:
                    af:ca:0a:79:c0:1e:33:de:6d:e0:a2:9f:4f:89:0c:
                    b9:8d:61:61:fe:c3:1e:76:e0:dc:b6:70:e2:0e:06:
                    bd:e5:ba:02:ad:04:20:8e:e9:47:0f:2b:6c:c7:a7:
                    e2:01:dc:66:bb:e6:fb:32:b1:1d:bf:7d:30:84:56:
                    b5:c9:e1:49:c6:57:99:38:f9:94:f7:d0:f5:fc:fa:
                    b1:05:07:ed:e1:43:16:b5:fa:a7:c3:fa:9e:3b:8e:
                    01:a6:d6:d5:52:3d:44:55:ac:b8:ec:62:da:b7:ce:
                    8f:de:54:3c:d1:b4:a9:17:4c:52:f7:21:bd:73:e6:
                    49:05:a6:9d:75:ce:f3:a9:03:62:58:e4:4b:45:6b:
                    62:82:ee:aa:21:b0:13:4a:86:f7:d0:85:75:b2:79:
                    72:af:92:03:9b:93:35:4f:a9:f1:de:38:17:c7:a5:
                    4d:59:ff:8f:0b:9f:c4:7d:b9:c0:13:c4:6f:0b:06:
                    f9:3b:c8:f4:1b:0d:4d:ed:e5:6e:da:77:7c:cc:89:
                    5f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:5F:4F:41:D9:BF:74:03:00:B8:9B:73:10:A9:8C:CD:22:DB:94:98
            X509v3 Authority Key Identifier:
                keyid:A1:95:64:CD:95:B7:67:86:E9:E8:9D:B7:EE:DD:22:CF:6E:2D:90:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C3B3D1FA9E72DD18DA88D6C3BFCBCCEAD6E18A1668506CEF025050D3CF50D527/0/A19564CD95B76786E9E89DB7EEDD22CF6E2D90DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A19564CD95B76786E9E89DB7EEDD22CF6E2D90DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C3B3D1FA9E72DD18DA88D6C3BFCBCCEAD6E18A1668506CEF025050D3CF50D527/0/323830333a663936303a3a2f33322d3332203d3e20323639373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f960::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:72:f7:f9:bb:89:34:4e:c2:cb:53:74:80:a9:d4:7d:9c:18:
         b5:d0:08:56:f0:6b:a2:d8:8a:30:f5:d7:11:1b:69:96:c3:5f:
         4b:b8:72:ca:59:44:a9:a7:38:e9:1e:6b:26:65:c5:5d:3f:b8:
         64:97:e9:01:0a:74:a2:df:bc:61:3b:46:37:95:04:d9:0a:c0:
         3a:24:de:2e:c2:f9:53:2e:93:d3:88:36:ee:a8:4d:ab:12:06:
         7d:41:cf:6e:95:22:63:c9:20:e1:8f:04:6a:5a:40:4e:d1:57:
         36:ce:7a:32:1c:45:59:11:a4:eb:ca:93:28:be:9f:99:fa:d7:
         20:5e:9f:b7:08:6c:cd:54:59:7a:2e:93:a8:5e:63:f1:93:be:
         98:b9:24:dc:30:04:92:26:bf:40:ae:cd:6e:5c:09:32:3c:5f:
         01:c9:f2:6c:d6:03:7e:d2:44:29:b9:b5:ee:c5:0e:98:0f:99:
         b2:16:fd:b9:1c:5b:31:49:e1:7c:1e:cd:27:e2:da:7e:25:71:
         6b:1c:60:6b:ba:59:f7:59:0d:5d:6a:42:84:9b:ce:ab:0f:33:
         d3:96:22:c5:90:1a:fa:ec:24:52:65:10:06:12:7a:dc:89:6d:
         c1:85:62:6b:7b:21:18:04:21:ba:7c:d1:a9:2d:92:fd:6d:6c:
         24:41:5a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:29:51 2026 by rpki-client