This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/323830333a393236303a3a2f33322d3332203d3e203138363738.roa
File:                     323830333a393236303a3a2f33322d3332203d3e203138363738.roa (raw, json)
Hash identifier:          P+7pbwnwetoJ40TwGQN3dzZeZfK2b0sULac4HlLGZ/w=
Subject key identifier:   32:EE:E4:99:80:9C:29:F0:A3:0E:65:D5:42:56:D2:0A:C4:96:E6:1F
Certificate issuer:       /CN=E48C5AD5CAD244C1A19CF65CED538162C984F4AD
Certificate serial:       337D14B8A2C030DF48B06BBF937092B92469F4F0
Authority key identifier: E4:8C:5A:D5:CA:D2:44:C1:A1:9C:F6:5C:ED:53:81:62:C9:84:F4:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/323830333a393236303a3a2f33322d3332203d3e203138363738.roa
Signing time:             Tue 06 Jan 2026 19:41:48 +0000
ROA not before:           Tue 06 Jan 2026 19:36:48 +0000
ROA not after:            Tue 05 Jan 2027 19:41:48 +0000
asID:                     18678
IP address blocks:        2803:9260::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:7d:14:b8:a2:c0:30:df:48:b0:6b:bf:93:70:92:b9:24:69:f4:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E48C5AD5CAD244C1A19CF65CED538162C984F4AD
        Validity
            Not Before: Jan  6 19:36:48 2026 GMT
            Not After : Jan  5 19:41:48 2027 GMT
        Subject: CN=32EEE499809C29F0A30E65D54256D20AC496E61F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f1:17:b7:09:6d:af:94:c9:cb:f2:11:5c:7e:
                    3b:60:40:97:6c:5e:c7:de:58:5e:1d:6e:64:5a:2b:
                    ae:8e:c8:15:67:4e:64:c0:1a:57:0b:96:29:4d:d8:
                    61:fe:05:68:68:8a:f6:d4:bb:b8:e9:32:66:bb:13:
                    a6:b7:a7:5f:f9:81:9c:fd:ba:22:a5:81:e1:cc:fa:
                    2a:3b:c0:e9:fd:69:63:fa:62:21:16:cd:ef:6b:49:
                    4e:3c:40:37:64:a6:6a:04:3c:90:a2:78:3c:ed:ff:
                    9c:a0:64:cc:bc:54:a3:cc:f4:25:b2:8f:bc:69:ce:
                    83:b9:fc:ae:0c:13:d9:6d:09:ec:8a:f6:7d:5a:26:
                    6d:a5:d7:2d:77:04:96:27:5e:49:1c:06:08:18:22:
                    27:e1:33:f8:05:75:25:4e:ac:f0:12:e1:26:a2:48:
                    c0:4a:ae:e8:c4:b7:a0:3b:ce:0b:52:40:2b:0a:11:
                    c1:b3:17:39:82:7d:d7:3a:f7:3c:7b:9b:4d:00:40:
                    84:45:ec:2b:73:8f:fd:66:84:49:93:2a:7f:17:7e:
                    64:0b:7a:32:cf:f2:f9:eb:70:c0:77:03:4f:39:bd:
                    91:d7:19:9a:eb:45:d8:97:75:27:a6:50:0e:87:cd:
                    30:be:82:a5:03:33:18:d6:4c:d1:cd:6a:ff:75:6d:
                    64:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:EE:E4:99:80:9C:29:F0:A3:0E:65:D5:42:56:D2:0A:C4:96:E6:1F
            X509v3 Authority Key Identifier:
                keyid:E4:8C:5A:D5:CA:D2:44:C1:A1:9C:F6:5C:ED:53:81:62:C9:84:F4:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/323830333a393236303a3a2f33322d3332203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9260::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:2a:32:d1:8a:8f:c3:b5:8d:c0:e8:da:d3:f6:74:96:82:f1:
         16:60:be:37:d4:e5:7a:f5:78:d2:f6:f8:3a:2c:db:c1:eb:40:
         58:13:16:a7:60:6a:a0:73:96:1a:5d:53:57:13:dd:56:80:90:
         14:09:97:64:1f:27:a3:eb:fe:07:5d:ca:8c:48:c7:8b:44:c4:
         88:f0:9e:4f:74:e5:f9:77:9c:d7:83:2a:31:11:bf:21:d7:60:
         d9:2f:ee:3c:6f:98:61:d6:fc:a1:7d:b6:c3:1a:af:76:7b:43:
         f2:0f:be:ee:28:e1:e3:3d:f6:fc:aa:18:87:7a:c9:1a:81:a2:
         14:ee:5e:e2:e6:d4:13:66:35:ea:ec:58:95:0b:84:6f:84:f2:
         20:bd:8c:d1:78:ce:dd:d0:a3:b9:89:37:78:6b:7a:b3:cb:6f:
         88:ca:3d:a7:d0:59:95:0d:b6:27:92:21:25:cd:80:0b:2f:97:
         5b:ac:a4:d1:a0:59:7b:7f:04:4d:cd:24:a7:cf:34:12:50:3d:
         ea:ab:a0:c9:dc:1a:67:48:e2:c8:c3:ff:9d:00:8a:b8:a6:54:
         63:b8:6e:29:25:48:78:34:f7:50:17:34:cb:0b:34:85:21:96:
         aa:0b:1a:f5:37:7c:f8:1f:56:c7:04:65:e0:08:56:8d:75:a6:
         c7:ba:96:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:29:44 2026 by rpki-client