This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/323830333a383038303a3a2f33322d3332203d3e203437383639.roa
File:                     323830333a383038303a3a2f33322d3332203d3e203437383639.roa (raw, json)
Hash identifier:          H7nYtTqubKlyBG3604RWavV9e6u23YkmNXFw3ZEhg+I=
Subject key identifier:   E7:51:61:43:A8:5E:17:98:1F:11:55:2A:89:23:11:B7:63:00:79:61
Certificate issuer:       /CN=BD459ECC75B18B5274DF19D2C3A50A019B34696E
Certificate serial:       361CFB093B577C260FCBC5647952B5186BA66338
Authority key identifier: BD:45:9E:CC:75:B1:8B:52:74:DF:19:D2:C3:A5:0A:01:9B:34:69:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/323830333a383038303a3a2f33322d3332203d3e203437383639.roa
Signing time:             Tue 06 Jan 2026 20:57:20 +0000
ROA not before:           Tue 06 Jan 2026 20:52:20 +0000
ROA not after:            Tue 05 Jan 2027 20:57:20 +0000
asID:                     47869
IP address blocks:        2803:8080::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 11:47:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:1c:fb:09:3b:57:7c:26:0f:cb:c5:64:79:52:b5:18:6b:a6:63:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD459ECC75B18B5274DF19D2C3A50A019B34696E
        Validity
            Not Before: Jan  6 20:52:20 2026 GMT
            Not After : Jan  5 20:57:20 2027 GMT
        Subject: CN=E7516143A85E17981F11552A892311B763007961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:54:1b:a7:7c:b2:47:c0:84:46:88:3d:d1:78:
                    af:00:71:4b:63:02:64:be:66:7c:b8:7a:bd:d6:c2:
                    cc:74:28:3e:4b:ba:59:6d:a6:1f:fd:16:8c:24:c3:
                    29:cf:d3:5d:7a:b9:f5:dd:8e:b6:44:e7:5b:4b:f4:
                    ac:d1:59:b6:40:49:15:be:68:8f:1f:bc:23:78:8c:
                    de:da:07:82:f6:a3:3a:6b:25:be:bc:03:14:a2:50:
                    66:3a:8c:09:55:51:ca:6b:15:78:b2:1b:e0:fd:6c:
                    f9:55:27:2e:6e:28:b9:0c:52:6e:43:21:56:22:20:
                    7f:31:c2:73:3e:eb:b4:b1:5a:87:07:b7:0a:c3:84:
                    7c:12:a0:65:a7:19:0b:35:9a:87:4c:fc:08:8a:f9:
                    05:43:fd:75:63:f4:6d:92:d8:25:01:81:21:95:a2:
                    3f:c0:03:cb:1c:cc:af:03:fc:64:22:ec:b6:a8:22:
                    f8:2b:10:c8:21:ee:69:2c:ab:68:2c:71:bd:51:f5:
                    d1:85:a7:e8:d4:87:72:4c:07:24:ad:70:18:d5:7a:
                    96:e8:8c:a9:80:8e:78:41:ee:96:e7:32:1d:16:7a:
                    ae:1d:53:49:df:74:eb:e2:9c:29:12:4e:98:d9:82:
                    e5:7c:cc:0b:4b:34:86:6c:ea:55:78:1e:01:5c:e3:
                    cd:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:51:61:43:A8:5E:17:98:1F:11:55:2A:89:23:11:B7:63:00:79:61
            X509v3 Authority Key Identifier:
                keyid:BD:45:9E:CC:75:B1:8B:52:74:DF:19:D2:C3:A5:0A:01:9B:34:69:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/323830333a383038303a3a2f33322d3332203d3e203437383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8080::/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:a6:ff:3a:80:5c:51:76:86:2a:50:79:c8:b4:17:1c:99:fe:
         12:03:b5:ce:7c:ea:4e:53:c8:a5:ea:bf:b7:fa:29:fc:bd:73:
         cb:cf:28:41:82:ec:0c:df:05:6d:c2:a9:31:2a:80:a2:f3:10:
         1e:d9:ed:ca:12:67:78:20:60:14:d3:16:5a:d8:38:54:5a:b5:
         ff:3b:a7:b2:dc:85:32:d2:63:49:32:76:ea:46:35:e0:a4:97:
         c6:61:e4:77:96:a0:51:a4:bf:92:6d:35:2f:17:85:ed:1a:c7:
         6c:ff:3d:85:a4:45:c2:78:f1:da:79:99:89:c5:4a:93:a4:da:
         40:af:8a:80:93:0a:bc:9d:29:0b:e6:21:37:e8:c8:3d:26:24:
         24:cc:62:a9:7f:84:e7:28:40:2f:43:ea:f5:93:81:ee:28:28:
         32:2c:44:a6:62:63:94:39:30:c0:88:65:82:ec:42:6f:b4:01:
         09:a0:d0:9e:11:19:e7:99:15:2c:11:ee:f7:14:06:27:ec:57:
         f0:23:2f:ab:ae:34:b6:e3:f1:5f:87:20:61:23:fc:f3:92:4b:
         66:94:03:79:e6:9e:8d:ea:d6:9b:b6:3e:eb:a6:85:64:24:54:
         f0:17:d0:ea:9c:00:0c:fd:c3:d8:a3:cb:d3:c2:30:db:ab:62:
         b5:7c:ed:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:25:54 2026 by rpki-client