This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C3B3D1FA9E72DD18DA88D6C3BFCBCCEAD6E18A1668506CEF025050D3CF50D527/0/323830333a663936303a3a2f33322d3438203d3e20323639373439.roa
File:                     323830333a663936303a3a2f33322d3438203d3e20323639373439.roa (raw, json)
Hash identifier:          3aVMUPZf/tfx9SVfsmIzksdYqIHOhnhoLSpBteopkHY=
Subject key identifier:   04:07:36:D7:CC:8E:29:E8:0B:E2:34:B3:3F:59:94:40:0A:98:01:61
Certificate issuer:       /CN=A19564CD95B76786E9E89DB7EEDD22CF6E2D90DC
Certificate serial:       0904D4C8CC9FE096A05D076DEF90CABB8E43AD59
Authority key identifier: A1:95:64:CD:95:B7:67:86:E9:E8:9D:B7:EE:DD:22:CF:6E:2D:90:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A19564CD95B76786E9E89DB7EEDD22CF6E2D90DC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C3B3D1FA9E72DD18DA88D6C3BFCBCCEAD6E18A1668506CEF025050D3CF50D527/0/323830333a663936303a3a2f33322d3438203d3e20323639373439.roa
Signing time:             Tue 06 Jan 2026 18:59:22 +0000
ROA not before:           Tue 06 Jan 2026 18:54:22 +0000
ROA not after:            Tue 05 Jan 2027 18:59:22 +0000
asID:                     269749
IP address blocks:        2803:f960::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C3B3D1FA9E72DD18DA88D6C3BFCBCCEAD6E18A1668506CEF025050D3CF50D527/0/A19564CD95B76786E9E89DB7EEDD22CF6E2D90DC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C3B3D1FA9E72DD18DA88D6C3BFCBCCEAD6E18A1668506CEF025050D3CF50D527/0/A19564CD95B76786E9E89DB7EEDD22CF6E2D90DC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A19564CD95B76786E9E89DB7EEDD22CF6E2D90DC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:04:d4:c8:cc:9f:e0:96:a0:5d:07:6d:ef:90:ca:bb:8e:43:ad:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A19564CD95B76786E9E89DB7EEDD22CF6E2D90DC
        Validity
            Not Before: Jan  6 18:54:22 2026 GMT
            Not After : Jan  5 18:59:22 2027 GMT
        Subject: CN=040736D7CC8E29E80BE234B33F5994400A980161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:97:0a:24:76:7b:42:f9:ee:46:ce:6b:fe:7f:
                    e1:ac:05:a3:6b:c9:9d:a8:eb:b0:f2:9a:9c:5f:dd:
                    3c:ca:b5:11:4f:3b:56:31:ea:4d:3c:29:29:bd:56:
                    e8:8c:90:72:01:d7:9d:29:18:ce:b1:0d:4c:76:6d:
                    cf:3b:b2:d1:f7:40:9a:57:db:36:ec:72:6e:49:15:
                    c5:12:45:5e:3e:e8:93:72:40:30:89:e1:8d:86:02:
                    6a:7a:dc:61:d7:fc:8a:4b:4b:5f:68:b6:b8:ca:dd:
                    b0:99:5b:c2:1f:73:13:86:8f:6e:1e:47:a4:26:c9:
                    c7:d6:d9:87:d7:d6:6a:47:33:ae:99:64:f3:8e:22:
                    2e:1c:5e:fa:9e:28:22:c5:7a:b5:e5:0d:09:bb:3e:
                    e7:4f:8c:68:6a:a5:19:92:72:de:6b:1b:57:2d:7c:
                    69:70:21:09:fe:66:0e:85:31:2d:90:81:7f:1f:a7:
                    68:fd:5f:44:9f:c3:de:d2:45:a4:10:d3:fa:22:d5:
                    9d:74:d4:5c:9d:63:7a:eb:ae:b0:13:1e:91:28:97:
                    16:e3:28:18:34:5b:16:7d:86:eb:b7:e8:1f:d8:89:
                    69:5f:13:96:b3:70:d4:34:7d:72:d8:f0:fb:7e:06:
                    35:97:a8:d1:99:75:61:d3:8f:2a:5a:5b:49:40:44:
                    51:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:07:36:D7:CC:8E:29:E8:0B:E2:34:B3:3F:59:94:40:0A:98:01:61
            X509v3 Authority Key Identifier:
                keyid:A1:95:64:CD:95:B7:67:86:E9:E8:9D:B7:EE:DD:22:CF:6E:2D:90:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C3B3D1FA9E72DD18DA88D6C3BFCBCCEAD6E18A1668506CEF025050D3CF50D527/0/A19564CD95B76786E9E89DB7EEDD22CF6E2D90DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A19564CD95B76786E9E89DB7EEDD22CF6E2D90DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C3B3D1FA9E72DD18DA88D6C3BFCBCCEAD6E18A1668506CEF025050D3CF50D527/0/323830333a663936303a3a2f33322d3438203d3e20323639373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f960::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:f3:e5:0f:5d:f0:83:cb:7e:c4:bc:a6:6f:1c:56:cd:4e:2c:
         93:4f:cf:ba:31:0e:75:66:1b:e6:f1:fe:be:b0:0a:ab:11:e9:
         7e:b0:dc:a6:b5:1e:c0:9f:db:ab:ee:30:e2:7e:fe:5f:c5:63:
         a5:c2:22:71:0b:6e:db:5b:61:8b:16:96:58:e7:c1:92:fe:01:
         50:82:57:52:b7:49:08:4f:a8:d4:88:be:79:f4:37:5b:7d:be:
         0f:b1:fa:89:dc:81:c5:f2:bf:71:8e:1a:e3:a7:88:97:ac:af:
         df:87:70:67:b5:d5:95:5c:e7:bf:f0:4e:a5:f2:0a:00:ba:95:
         52:f7:06:96:b0:05:81:1b:8c:c2:da:73:23:b0:64:22:36:a1:
         21:13:17:8d:51:d9:1d:9c:c7:ac:64:85:b1:71:7b:20:d1:e3:
         76:08:be:5b:71:9f:04:2f:eb:c4:5a:cf:98:2f:a6:af:79:44:
         ae:83:b3:34:29:17:4a:8d:43:06:6c:24:dd:e9:b9:76:ce:87:
         d2:b3:3f:f7:3d:3d:3c:48:ee:c5:be:7c:e4:98:3c:66:cb:98:
         3a:0f:5e:7f:98:94:8d:00:e6:5f:42:06:c6:b2:38:a0:7f:71:
         04:61:16:db:a5:df:74:63:75:24:a0:7a:21:ee:94:47:22:d4:
         4c:05:f1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:30:25 2026 by rpki-client