This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/323830333a316135303a3a2f34322d3432203d3e20323639393830.roa
File:                     323830333a316135303a3a2f34322d3432203d3e20323639393830.roa (raw, json)
Hash identifier:          oaroHFX2LG8s3SlXE6Zzh6Hngzj8YfFeKZy6LAw6QYM=
Subject key identifier:   AE:E9:FB:AE:39:8F:D0:5E:EE:D1:9B:4A:95:CD:1B:40:96:C8:B1:5D
Certificate issuer:       /CN=B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C
Certificate serial:       73C189E0C666C21642F325F16719BD7285871A4B
Authority key identifier: B1:9D:CD:B6:4E:50:6E:AC:5C:80:E9:A6:A0:E2:2F:0D:F2:5D:72:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/323830333a316135303a3a2f34322d3432203d3e20323639393830.roa
Signing time:             Mon 29 Dec 2025 21:05:00 +0000
ROA not before:           Mon 29 Dec 2025 21:00:00 +0000
ROA not after:            Mon 28 Dec 2026 21:05:00 +0000
asID:                     269980
IP address blocks:        2803:1a50::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 10:39:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:c1:89:e0:c6:66:c2:16:42:f3:25:f1:67:19:bd:72:85:87:1a:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C
        Validity
            Not Before: Dec 29 21:00:00 2025 GMT
            Not After : Dec 28 21:05:00 2026 GMT
        Subject: CN=AEE9FBAE398FD05EEED19B4A95CD1B4096C8B15D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:81:30:48:83:b8:c2:52:c6:ee:f2:06:03:aa:
                    f4:50:b8:5b:fe:62:32:e3:b3:2c:4f:4d:79:8f:84:
                    79:81:c4:4d:a8:d6:21:5c:ad:e1:db:ee:d7:a0:7e:
                    0e:cb:0e:1b:b4:53:5c:e4:d0:2f:a4:f6:d4:88:42:
                    f1:5c:b7:a1:21:38:97:73:b9:f8:6c:a6:eb:8e:12:
                    f4:70:be:5b:67:d1:8b:79:57:6a:8a:db:88:ae:c2:
                    f0:20:e1:e7:80:b9:f1:bd:f0:ad:c3:c4:58:a7:c3:
                    f3:8e:15:8b:f4:3f:81:09:c2:bc:90:b6:8e:a2:0a:
                    52:ee:05:69:db:0a:08:16:50:c0:b7:5b:ca:15:06:
                    c6:f9:28:8c:7b:9a:25:29:b0:33:8e:7b:16:08:84:
                    07:3e:4f:2c:aa:e0:cf:3f:40:bc:c9:7f:a3:78:f2:
                    d7:b9:d8:b7:f4:d4:7a:f5:19:31:2f:57:a7:79:a3:
                    c7:bf:3f:44:22:e8:54:07:63:48:be:6e:15:c4:aa:
                    f2:31:5e:19:54:0e:4d:fc:3f:33:46:68:1d:75:78:
                    72:a4:e2:fd:a2:92:1c:d6:96:98:b7:de:5f:3f:d5:
                    d6:d1:5b:ee:79:f4:8f:68:7d:2f:e5:dd:b2:e0:1d:
                    06:f4:d1:ea:36:50:64:32:4d:e4:50:e1:2d:f8:ce:
                    25:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E9:FB:AE:39:8F:D0:5E:EE:D1:9B:4A:95:CD:1B:40:96:C8:B1:5D
            X509v3 Authority Key Identifier:
                keyid:B1:9D:CD:B6:4E:50:6E:AC:5C:80:E9:A6:A0:E2:2F:0D:F2:5D:72:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/323830333a316135303a3a2f34322d3432203d3e20323639393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1a50::/42

    Signature Algorithm: sha256WithRSAEncryption
         44:cd:45:d8:30:06:24:77:54:66:5b:ef:ef:f6:f7:33:7a:03:
         1c:93:22:f8:b5:30:b1:6b:20:f9:86:57:b8:1c:de:50:82:4e:
         51:79:ac:97:21:08:67:2d:a3:26:9f:2d:b7:79:56:16:0d:b4:
         53:e2:21:90:b7:f2:d6:5d:25:08:67:66:d7:69:32:5e:91:da:
         e0:f2:e9:10:1b:a7:44:fc:27:e7:ef:98:b6:d0:c1:cc:f7:01:
         42:a5:fa:6e:dc:71:60:5e:48:f6:0c:69:87:f0:62:d7:e0:4a:
         9e:6e:78:d5:c4:ef:df:bb:0d:98:fb:05:38:50:8d:b6:46:1d:
         06:3a:e1:48:91:a0:3c:44:70:79:36:0a:68:3a:2c:94:36:63:
         9f:32:66:81:90:e5:16:82:27:79:cc:01:b0:21:11:d2:71:49:
         de:6b:16:a5:3a:a0:e3:4c:58:11:83:26:e5:25:84:01:44:9e:
         27:4b:f0:20:d7:02:35:09:2c:73:91:d0:8c:89:bd:90:5e:5a:
         8f:d8:22:2e:95:48:d2:f3:46:e9:65:d6:16:e1:3d:a9:02:dd:
         6d:d1:de:e0:87:23:1b:42:4d:dc:0d:33:78:73:e0:ad:08:f8:
         ac:4f:a9:e4:a1:ec:61:2c:63:c6:80:df:c5:90:4a:41:ef:5c:
         4b:07:f2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:15:43 2026 by rpki-client