This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/323830333a613061303a3530303a3a2f34302d3430203d3e20323636373930.roa
File:                     323830333a613061303a3530303a3a2f34302d3430203d3e20323636373930.roa (raw, json)
Hash identifier:          h0TwKiCC9qV5Xe9f9L3iWEMKGTD9Rdr7yRgPSyfP5p4=
Subject key identifier:   B6:58:80:6B:FA:05:D7:88:A7:E3:42:1A:39:B6:C0:1B:A8:A6:37:34
Certificate issuer:       /CN=69B942F2442A4B878DCF7E43089B60B94955608D
Certificate serial:       72942066A12B6051444933CE2400566FD41A6A51
Authority key identifier: 69:B9:42:F2:44:2A:4B:87:8D:CF:7E:43:08:9B:60:B9:49:55:60:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/323830333a613061303a3530303a3a2f34302d3430203d3e20323636373930.roa
Signing time:             Tue 20 Jan 2026 18:26:21 +0000
ROA not before:           Tue 20 Jan 2026 18:21:21 +0000
ROA not after:            Tue 19 Jan 2027 18:26:21 +0000
asID:                     266790
IP address blocks:        2803:a0a0:500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 03:52:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:94:20:66:a1:2b:60:51:44:49:33:ce:24:00:56:6f:d4:1a:6a:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69B942F2442A4B878DCF7E43089B60B94955608D
        Validity
            Not Before: Jan 20 18:21:21 2026 GMT
            Not After : Jan 19 18:26:21 2027 GMT
        Subject: CN=B658806BFA05D788A7E3421A39B6C01BA8A63734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:86:2a:37:58:f0:a9:6f:0c:25:d4:9e:4e:56:
                    6a:78:f3:b2:4d:60:7b:87:1d:01:3a:9e:9c:3e:ea:
                    b2:cb:b2:d7:7e:80:2d:1e:4c:92:fc:9a:28:68:d2:
                    c0:19:72:dc:71:be:b7:ad:98:94:a8:5e:7f:12:36:
                    54:eb:cb:a1:7f:6e:5a:49:95:73:df:8f:f8:ef:1f:
                    9f:66:d0:93:4c:28:ba:d9:51:97:8e:9d:70:15:63:
                    19:9b:da:01:92:a6:19:35:d9:9c:88:37:52:40:d4:
                    51:57:cd:1e:21:cf:35:9b:54:c8:35:1d:24:ca:3a:
                    5c:4a:92:05:71:5c:46:1a:92:b2:55:44:90:6d:29:
                    ec:0d:a8:15:09:6c:2d:e7:78:cf:88:ef:ac:e9:75:
                    79:07:76:52:0e:f0:9a:d8:43:26:58:72:6b:72:e6:
                    f6:e3:fb:18:06:5b:aa:b8:e1:ab:7c:e9:32:31:58:
                    04:ca:b4:ca:7e:9a:f1:5a:03:c0:df:d9:f6:17:e8:
                    eb:43:d0:47:e1:31:f5:30:40:94:8b:dd:fe:f4:e6:
                    54:90:63:f4:6f:e0:dc:ab:a7:52:cd:cc:98:a4:36:
                    8b:fb:56:8e:8f:b6:b3:83:5d:a6:4e:0f:6f:9d:56:
                    be:23:11:71:b0:a0:f2:c5:fb:e0:8c:03:8a:82:1b:
                    36:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:58:80:6B:FA:05:D7:88:A7:E3:42:1A:39:B6:C0:1B:A8:A6:37:34
            X509v3 Authority Key Identifier:
                keyid:69:B9:42:F2:44:2A:4B:87:8D:CF:7E:43:08:9B:60:B9:49:55:60:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/323830333a613061303a3530303a3a2f34302d3430203d3e20323636373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a0a0:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         0b:bb:84:93:68:47:0d:8c:b4:7e:22:e0:65:f1:a2:8c:d5:c4:
         fa:04:37:3e:ac:c6:ff:39:65:4f:89:bf:ba:37:ae:3c:82:c2:
         37:64:e2:a8:d4:94:03:1c:bb:40:9b:58:61:2f:44:a4:88:c3:
         58:e1:8f:e5:b0:80:3f:8d:57:21:a0:61:74:46:91:e6:1e:73:
         62:06:44:ba:84:4d:76:66:21:11:52:9c:01:ef:13:45:10:8c:
         45:94:79:ab:aa:c1:cc:c7:e3:c7:d3:4c:9a:be:37:70:53:fd:
         3f:a2:07:6d:0f:95:9c:16:c0:6e:20:07:ac:9b:45:9d:0d:81:
         64:5a:ab:40:ac:11:1e:7e:cf:79:ed:2e:85:1b:de:eb:42:e6:
         35:69:39:68:8a:c1:4e:1b:21:63:18:4d:8c:c2:28:ca:71:00:
         d6:f5:a5:8a:99:4f:d2:02:49:74:00:72:2b:4e:a0:7c:f9:e8:
         5a:15:b5:8d:53:d2:51:3e:cd:3e:74:60:9a:c8:68:b4:c5:a4:
         f6:33:de:15:20:11:f5:ee:ea:c6:c4:bf:db:8c:d9:11:9f:bd:
         64:f4:97:df:0c:b0:4a:3c:ee:6a:31:9e:9f:ae:22:8a:68:5b:
         0d:41:f1:4e:de:ee:e6:11:4e:96:e1:2b:29:47:c3:6d:b5:0a:
         01:ed:2b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:07:37 2026 by rpki-client