This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/323830333a393236303a3a2f33322d3332203d3e203237393531.roa
File:                     323830333a393236303a3a2f33322d3332203d3e203237393531.roa (raw, json)
Hash identifier:          wloDwaQ0QU0mh2p0FpokPd3CQhFmxc8KqcBLfhAdCSU=
Subject key identifier:   91:F6:56:2D:77:3A:43:93:F7:F7:2F:EA:9C:3B:17:0E:FD:81:10:4C
Certificate issuer:       /CN=E48C5AD5CAD244C1A19CF65CED538162C984F4AD
Certificate serial:       0B470E7F2E72D52E96A583191F9148912637E491
Authority key identifier: E4:8C:5A:D5:CA:D2:44:C1:A1:9C:F6:5C:ED:53:81:62:C9:84:F4:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/323830333a393236303a3a2f33322d3332203d3e203237393531.roa
Signing time:             Tue 06 Jan 2026 19:41:49 +0000
ROA not before:           Tue 06 Jan 2026 19:36:49 +0000
ROA not after:            Tue 05 Jan 2027 19:41:49 +0000
asID:                     27951
IP address blocks:        2803:9260::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:47:0e:7f:2e:72:d5:2e:96:a5:83:19:1f:91:48:91:26:37:e4:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E48C5AD5CAD244C1A19CF65CED538162C984F4AD
        Validity
            Not Before: Jan  6 19:36:49 2026 GMT
            Not After : Jan  5 19:41:49 2027 GMT
        Subject: CN=91F6562D773A4393F7F72FEA9C3B170EFD81104C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7a:92:94:61:23:cf:51:ed:83:34:a8:3f:a4:
                    69:65:80:44:06:2f:9a:f1:85:14:44:6b:9e:a7:8a:
                    68:68:37:c9:13:b6:2c:cb:c4:6e:20:40:6d:07:2f:
                    7c:4b:81:af:98:0c:48:b6:bb:f1:53:8c:98:b5:8d:
                    e9:77:a0:0e:a2:a5:b1:de:a8:b3:fd:66:81:bd:4a:
                    c1:99:30:05:79:0f:81:d0:dd:7d:c0:cc:b5:ea:92:
                    7a:c4:9a:44:3a:0d:cb:55:f8:31:3f:5a:86:f1:4b:
                    39:53:25:b9:34:52:ee:17:13:cb:65:7f:d2:c5:04:
                    7b:c6:70:c9:74:23:d8:51:6e:46:fc:6b:10:bd:15:
                    bf:38:3c:8f:1d:67:0c:f9:fd:7d:3b:88:74:75:86:
                    e8:73:d8:fa:81:38:3a:da:c2:87:41:62:bc:63:30:
                    3f:1b:a3:73:04:0d:f4:00:27:82:64:3f:18:09:07:
                    66:a2:ec:8b:d2:8c:4f:e2:51:38:7a:14:14:6f:eb:
                    04:7a:c5:5c:31:d9:d3:85:c2:7a:a2:4c:c8:9c:bc:
                    68:8b:c5:4b:79:fd:03:20:73:bd:bc:2a:72:5c:5c:
                    90:0c:08:1e:70:54:45:43:8d:40:9c:9c:91:e0:b2:
                    e7:50:c9:06:d8:3c:ee:36:4e:ba:95:d1:a4:f9:0a:
                    aa:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F6:56:2D:77:3A:43:93:F7:F7:2F:EA:9C:3B:17:0E:FD:81:10:4C
            X509v3 Authority Key Identifier:
                keyid:E4:8C:5A:D5:CA:D2:44:C1:A1:9C:F6:5C:ED:53:81:62:C9:84:F4:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/323830333a393236303a3a2f33322d3332203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9260::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:6f:ea:f7:dd:59:61:be:78:49:30:50:b5:b1:4b:4f:37:e6:
         cf:7b:bf:09:76:b3:62:62:fa:42:2f:3a:b6:ae:bf:fd:9e:a6:
         81:b5:b7:19:60:7d:12:c0:1c:ca:c0:bc:36:23:e3:f5:ef:d9:
         b8:2c:0e:84:63:ce:f3:d2:39:be:e9:d4:c9:f3:08:3c:cf:42:
         a0:d8:d0:4f:f4:98:b0:86:2f:30:4a:b7:eb:fc:fa:b8:74:16:
         af:ff:ee:93:ed:5c:54:81:85:de:0f:d6:9a:35:36:da:ee:eb:
         4d:77:1f:1c:d5:a5:08:e2:ed:16:d2:0f:07:26:27:3b:bd:8c:
         cc:d8:00:2a:df:b4:1e:4e:bc:c0:cc:0b:78:ae:1f:2c:94:83:
         82:07:ba:19:0c:05:f5:ff:3b:fa:12:9c:5f:72:82:0a:98:0a:
         50:cc:42:fc:b9:31:86:7e:ee:c0:5d:69:28:32:c3:13:43:72:
         1e:3d:53:66:d3:cd:da:29:51:8a:8b:28:3a:a7:9e:5d:a9:7d:
         ab:7a:f9:79:f9:ee:8d:cf:d7:27:aa:5d:fd:af:f5:47:3e:6d:
         f0:70:87:26:c0:b1:38:67:10:a7:50:9a:ab:c8:f9:26:1c:af:
         f8:1e:07:e7:8a:bf:24:e2:c7:95:d1:5e:c2:91:af:48:6e:4b:
         6a:8d:81:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:30:00 2026 by rpki-client