This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C4EF079256E3658C084DA3B0F6EEC5E581FC3B42732B18EF8D3347D0A13A7052/0/323830333a646165303a3a2f33322d3438203d3e20323639393433.roa
File:                     323830333a646165303a3a2f33322d3438203d3e20323639393433.roa (raw, json)
Hash identifier:          gddozRMteWNZLHxPkFdXpLyGJEgNOtXb3gVIV0KZH1w=
Subject key identifier:   51:9E:AE:8D:DB:B4:3D:08:6A:01:C6:2F:AC:7D:81:1A:3E:5E:EE:64
Certificate issuer:       /CN=2C77F325F2D7DD23DDBC32FBE7C8B676F7902BC6
Certificate serial:       734156ECCEC0B07FD67F6A5C85AA93C0E3BD894B
Authority key identifier: 2C:77:F3:25:F2:D7:DD:23:DD:BC:32:FB:E7:C8:B6:76:F7:90:2B:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C77F325F2D7DD23DDBC32FBE7C8B676F7902BC6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C4EF079256E3658C084DA3B0F6EEC5E581FC3B42732B18EF8D3347D0A13A7052/0/323830333a646165303a3a2f33322d3438203d3e20323639393433.roa
Signing time:             Tue 06 Jan 2026 19:25:43 +0000
ROA not before:           Tue 06 Jan 2026 19:20:43 +0000
ROA not after:            Tue 05 Jan 2027 19:25:43 +0000
asID:                     269943
IP address blocks:        2803:dae0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C4EF079256E3658C084DA3B0F6EEC5E581FC3B42732B18EF8D3347D0A13A7052/0/2C77F325F2D7DD23DDBC32FBE7C8B676F7902BC6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C4EF079256E3658C084DA3B0F6EEC5E581FC3B42732B18EF8D3347D0A13A7052/0/2C77F325F2D7DD23DDBC32FBE7C8B676F7902BC6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C77F325F2D7DD23DDBC32FBE7C8B676F7902BC6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 23:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:41:56:ec:ce:c0:b0:7f:d6:7f:6a:5c:85:aa:93:c0:e3:bd:89:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C77F325F2D7DD23DDBC32FBE7C8B676F7902BC6
        Validity
            Not Before: Jan  6 19:20:43 2026 GMT
            Not After : Jan  5 19:25:43 2027 GMT
        Subject: CN=519EAE8DDBB43D086A01C62FAC7D811A3E5EEE64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2e:6a:8d:e4:13:2c:da:58:05:a2:fa:65:b8:
                    02:a2:96:a1:12:b5:ba:8f:7e:76:8a:fd:dc:c6:e8:
                    32:b3:5d:8c:81:19:04:cd:1d:15:bb:0e:21:20:69:
                    87:6e:b9:26:f4:70:f6:e7:56:c3:66:9c:f3:34:5f:
                    0f:d4:94:ca:7b:04:b2:ad:e2:e8:fa:58:62:55:31:
                    fa:88:30:25:63:b4:b4:8e:02:de:4f:d5:b4:e1:d7:
                    81:78:ae:3b:72:66:12:b4:8e:04:7b:e2:88:b9:56:
                    6e:90:c5:19:a7:05:7c:8c:c1:41:f0:3e:30:17:ce:
                    57:e0:10:bb:1f:86:7d:e7:c0:dd:d8:8b:89:03:25:
                    c6:90:f8:ae:eb:ea:d0:c0:34:31:08:24:a8:1b:6a:
                    9f:8f:7f:b0:b5:46:a2:2c:17:89:17:6b:b4:19:30:
                    8f:cb:59:5a:16:88:5d:5b:f6:17:ae:e9:2a:67:9f:
                    87:26:43:ee:7f:f2:c9:e9:01:89:0f:8a:d2:39:98:
                    24:c8:71:17:54:3b:86:8a:2c:5f:52:73:cf:60:2f:
                    57:85:70:78:56:43:76:22:3b:ab:52:89:36:7f:94:
                    06:11:88:c4:9e:dd:ce:c7:fd:63:06:81:0c:cf:7d:
                    b5:1b:7c:e2:41:2d:51:27:23:90:ac:63:f4:87:89:
                    b6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:9E:AE:8D:DB:B4:3D:08:6A:01:C6:2F:AC:7D:81:1A:3E:5E:EE:64
            X509v3 Authority Key Identifier:
                keyid:2C:77:F3:25:F2:D7:DD:23:DD:BC:32:FB:E7:C8:B6:76:F7:90:2B:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C4EF079256E3658C084DA3B0F6EEC5E581FC3B42732B18EF8D3347D0A13A7052/0/2C77F325F2D7DD23DDBC32FBE7C8B676F7902BC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C77F325F2D7DD23DDBC32FBE7C8B676F7902BC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C4EF079256E3658C084DA3B0F6EEC5E581FC3B42732B18EF8D3347D0A13A7052/0/323830333a646165303a3a2f33322d3438203d3e20323639393433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:71:d2:bd:15:a0:2b:06:f2:ff:dd:1f:fa:b0:f3:00:10:79:
         c4:07:d1:f7:e2:98:40:8a:f7:b3:ef:87:d6:0b:35:2e:fd:59:
         7b:8d:a2:09:fa:1d:42:49:30:74:05:eb:eb:58:49:38:97:a9:
         4f:33:39:e4:ea:05:d6:b2:6f:da:85:22:44:63:32:92:63:c2:
         b8:bd:cc:85:8c:d2:f6:6d:94:01:9f:4c:c0:a1:ed:79:ba:c5:
         03:02:39:4f:02:72:ba:10:7c:cb:36:69:2e:04:67:d5:03:59:
         c7:ff:cd:60:03:2a:f0:57:93:e3:1a:05:a3:0e:b4:f9:c1:1b:
         cf:3c:eb:de:62:ae:13:b4:f0:e9:ff:3e:f6:7f:5b:19:04:61:
         c6:aa:98:3e:5f:05:ce:dc:5b:6d:55:92:f1:31:2d:64:b2:f3:
         dc:72:29:b9:42:80:dd:3a:c6:fe:3b:e3:35:ec:23:de:38:d4:
         83:17:64:16:7a:ac:99:f8:60:c3:08:27:9b:dc:03:c5:7f:da:
         bb:df:65:4d:9b:ea:42:03:d9:69:79:0d:c6:3d:c3:6a:cf:12:
         7d:73:a6:b0:12:1b:e0:c6:62:8a:ab:c0:93:7d:c1:0e:3a:92:
         7a:76:a9:a8:5b:f3:ac:08:8a:f7:ff:17:7d:a7:44:0d:7b:9d:
         8f:f0:af:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:41:56 2026 by rpki-client