This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/323830333a363061303a3a2f33322d3332203d3e20323636383039.roa
File:                     323830333a363061303a3a2f33322d3332203d3e20323636383039.roa (raw, json)
Hash identifier:          yF7+ttNFNk29NXMIBxkNb84u8ljYkHPS7JCHrOjsij0=
Subject key identifier:   AB:10:83:EF:41:9C:06:6A:0B:52:51:49:97:72:EE:16:83:8E:BC:13
Certificate issuer:       /CN=226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D
Certificate serial:       3291C6B065751687F465290C0F828E646A24D894
Authority key identifier: 22:61:00:C1:EB:3A:9C:EB:94:E4:55:0B:DB:99:7B:7B:3D:F9:BC:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/323830333a363061303a3a2f33322d3332203d3e20323636383039.roa
Signing time:             Tue 06 Jan 2026 19:10:40 +0000
ROA not before:           Tue 06 Jan 2026 19:05:40 +0000
ROA not after:            Tue 05 Jan 2027 19:10:40 +0000
asID:                     266809
IP address blocks:        2803:60a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:91:c6:b0:65:75:16:87:f4:65:29:0c:0f:82:8e:64:6a:24:d8:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D
        Validity
            Not Before: Jan  6 19:05:40 2026 GMT
            Not After : Jan  5 19:10:40 2027 GMT
        Subject: CN=AB1083EF419C066A0B5251499772EE16838EBC13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2f:e3:f8:60:50:45:19:46:21:99:fe:11:38:
                    4d:8c:1d:2c:e0:66:65:ef:f1:7a:94:dd:74:aa:6e:
                    3f:5c:32:17:a6:bb:88:24:94:8d:57:d1:36:1d:8f:
                    ba:23:6a:8f:8f:84:be:87:77:9d:e6:a7:e9:db:6c:
                    32:7d:23:65:26:4c:a3:19:95:85:40:e5:19:10:a3:
                    f8:66:70:ba:24:56:4d:93:ce:6c:00:c0:35:80:d5:
                    e8:ec:ae:da:4a:7b:72:47:5c:7c:23:5c:a2:6f:a7:
                    3a:d0:5d:b7:b6:c2:2c:a3:a3:ff:14:a3:1e:75:48:
                    9c:0e:12:44:bb:00:eb:c4:8d:0e:78:e2:06:39:b1:
                    9e:74:98:db:4d:d3:00:9c:d5:ae:80:54:47:36:3b:
                    05:2e:e0:c7:86:8b:1c:e0:3d:23:9a:97:91:0f:33:
                    c2:03:d3:da:8c:7a:11:ad:a8:89:72:2e:b8:9f:6f:
                    83:20:98:14:33:3e:61:cf:ad:9a:e3:db:f0:91:13:
                    c7:ac:0d:d8:67:1e:5c:52:ab:f6:99:86:98:7f:a3:
                    85:07:7c:61:e6:02:2f:c0:20:5d:ad:b4:19:aa:cb:
                    98:13:10:ee:af:f5:a7:32:99:44:77:75:38:19:aa:
                    bd:6c:2a:5e:e2:91:01:ff:47:78:ed:da:85:9c:b4:
                    8c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:10:83:EF:41:9C:06:6A:0B:52:51:49:97:72:EE:16:83:8E:BC:13
            X509v3 Authority Key Identifier:
                keyid:22:61:00:C1:EB:3A:9C:EB:94:E4:55:0B:DB:99:7B:7B:3D:F9:BC:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/323830333a363061303a3a2f33322d3332203d3e20323636383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:60a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c2:7a:e1:33:b2:c7:e5:97:38:52:6a:d4:f0:02:1b:4f:2a:37:
         69:bf:8b:c8:c3:6e:3e:ee:1f:21:04:ed:cc:75:0f:65:31:76:
         a6:d6:4f:07:47:0c:56:95:fa:63:03:90:d4:19:93:be:fc:0e:
         52:98:f8:bc:07:48:e0:63:e8:d4:c1:fa:21:55:9c:2d:05:d4:
         35:b0:dc:70:78:40:e8:a5:51:b0:d3:d7:23:cb:37:08:47:59:
         35:e9:15:9c:1f:58:ed:81:60:64:7b:32:a8:6b:8c:d8:ff:df:
         fd:3e:0e:b8:1d:45:cf:a2:08:6e:31:48:57:df:a6:a8:e9:4f:
         fc:07:44:72:63:5f:b1:03:86:7f:a6:28:22:fe:7b:6f:40:a0:
         d5:75:6f:ed:9e:c7:a7:73:b3:ac:b9:53:7f:da:20:9d:f4:9e:
         c4:bc:3a:bf:ed:f1:72:be:aa:19:d2:9d:4f:dd:ba:68:b3:7d:
         07:1f:8d:36:fe:00:47:89:15:8d:9f:9e:19:0c:7b:67:36:25:
         0c:28:17:12:0e:71:1d:60:92:d9:cd:fa:be:1e:c2:91:29:33:
         14:31:69:c8:cd:2e:e6:a6:b3:88:06:06:f9:c4:f3:d6:2a:6f:
         f8:59:12:a2:be:b7:73:b1:36:ab:bd:ea:5e:49:f6:58:40:6c:
         6b:94:7e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:19:38 2026 by rpki-client