This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D964D1E9B8462204668ECB74A188721FD5266E51EBAE6FD2997AE9B09F1E5B05/0/323830333a393761303a3a2f33322d3438203d3e20323637373738.roa
File:                     323830333a393761303a3a2f33322d3438203d3e20323637373738.roa (raw, json)
Hash identifier:          7t7yWut8Q+v4Cn3nX3I3wFiXerjGOTjv9YTWyxCiD4A=
Subject key identifier:   4E:27:C0:24:9D:07:4E:E6:16:32:72:F3:F6:CA:8B:2F:61:75:99:39
Certificate issuer:       /CN=6F511F1EFD0D671D1190C938CA5D7F2B6A911071
Certificate serial:       71A3E112D6D53E93D6E718FFB13B1BCA8E90B9D3
Authority key identifier: 6F:51:1F:1E:FD:0D:67:1D:11:90:C9:38:CA:5D:7F:2B:6A:91:10:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F511F1EFD0D671D1190C938CA5D7F2B6A911071.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D964D1E9B8462204668ECB74A188721FD5266E51EBAE6FD2997AE9B09F1E5B05/0/323830333a393761303a3a2f33322d3438203d3e20323637373738.roa
Signing time:             Tue 06 Jan 2026 19:25:36 +0000
ROA not before:           Tue 06 Jan 2026 19:20:36 +0000
ROA not after:            Tue 05 Jan 2027 19:25:36 +0000
asID:                     267778
IP address blocks:        2803:97a0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D964D1E9B8462204668ECB74A188721FD5266E51EBAE6FD2997AE9B09F1E5B05/0/6F511F1EFD0D671D1190C938CA5D7F2B6A911071.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D964D1E9B8462204668ECB74A188721FD5266E51EBAE6FD2997AE9B09F1E5B05/0/6F511F1EFD0D671D1190C938CA5D7F2B6A911071.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F511F1EFD0D671D1190C938CA5D7F2B6A911071.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 07:44:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:a3:e1:12:d6:d5:3e:93:d6:e7:18:ff:b1:3b:1b:ca:8e:90:b9:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F511F1EFD0D671D1190C938CA5D7F2B6A911071
        Validity
            Not Before: Jan  6 19:20:36 2026 GMT
            Not After : Jan  5 19:25:36 2027 GMT
        Subject: CN=4E27C0249D074EE6163272F3F6CA8B2F61759939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:79:b6:54:e4:f7:3d:1d:18:9d:bf:13:3e:92:
                    8a:60:d2:c0:9f:46:4e:42:3e:aa:ce:34:be:79:d9:
                    39:9f:4a:ba:3a:29:91:da:02:bf:07:a1:62:61:ca:
                    c1:ec:3e:2c:bb:ae:d2:f9:70:b4:1a:13:14:98:ee:
                    0b:f3:a0:19:56:50:9e:4a:fc:15:26:d1:73:59:f6:
                    31:87:74:65:b9:59:17:d1:9a:3e:c1:18:f5:8a:dc:
                    9d:60:09:47:ef:c7:ed:64:fc:ba:05:ce:9b:96:a2:
                    c7:97:b5:6b:25:e3:ff:e7:49:f7:22:df:9b:b1:72:
                    15:fc:25:02:4a:37:e2:d0:63:55:54:75:18:82:c5:
                    c8:19:6f:a3:c0:84:74:4e:00:6a:a6:e3:a9:9b:01:
                    32:83:00:9f:bb:88:16:ef:51:13:cc:43:58:c1:ca:
                    09:36:c6:aa:25:d8:97:8c:49:99:85:cd:2a:a5:5b:
                    2e:3f:b5:01:b5:fc:d6:3d:70:9c:cd:a1:b5:bd:1a:
                    43:d2:cc:db:0e:62:2e:dd:45:99:53:19:9f:72:8a:
                    6e:3e:b2:9c:94:92:06:c0:db:bd:49:ab:e3:31:44:
                    94:8f:93:c5:c5:8f:eb:a5:38:48:61:75:6f:ab:79:
                    7c:8f:3a:87:c6:8e:ae:e0:73:7d:ad:c8:5e:e7:4f:
                    ec:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:27:C0:24:9D:07:4E:E6:16:32:72:F3:F6:CA:8B:2F:61:75:99:39
            X509v3 Authority Key Identifier:
                keyid:6F:51:1F:1E:FD:0D:67:1D:11:90:C9:38:CA:5D:7F:2B:6A:91:10:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D964D1E9B8462204668ECB74A188721FD5266E51EBAE6FD2997AE9B09F1E5B05/0/6F511F1EFD0D671D1190C938CA5D7F2B6A911071.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F511F1EFD0D671D1190C938CA5D7F2B6A911071.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D964D1E9B8462204668ECB74A188721FD5266E51EBAE6FD2997AE9B09F1E5B05/0/323830333a393761303a3a2f33322d3438203d3e20323637373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:97a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:44:c5:4e:0f:cb:95:eb:72:4f:72:b3:14:e7:0a:e9:eb:d8:
         a9:a5:83:3d:b9:5c:c5:cd:79:67:c2:45:15:b0:92:5b:4b:ba:
         b7:f5:c7:77:34:88:3f:b4:06:31:4b:2b:ed:99:46:b0:de:b8:
         60:1d:01:60:83:a7:f1:a7:9d:e1:66:35:6e:04:57:05:c9:cf:
         6f:ca:04:6f:09:cf:f5:0e:2d:81:47:1a:5b:13:60:a6:47:9a:
         6b:8b:b4:e1:ad:87:fa:d4:ef:b6:b4:42:2d:01:cd:72:f9:1a:
         1c:9c:86:7e:53:62:8b:41:cf:7d:79:50:49:42:20:dd:94:fe:
         cd:37:90:d1:b9:84:cb:a5:5a:c2:ba:af:1b:8b:5e:f4:b6:11:
         56:7c:f4:e4:33:bc:64:14:94:fe:db:8d:ad:0a:9b:57:f7:db:
         21:e9:f5:b9:20:54:b4:69:be:34:10:68:bf:5f:5e:23:f9:1c:
         0c:99:41:f4:6c:01:29:93:93:63:2f:0b:e1:48:6a:10:0e:1d:
         a3:e1:79:c8:83:08:59:7b:69:b8:54:56:90:9a:98:24:c1:ac:
         b2:32:ab:0f:f4:95:ef:9c:9e:5b:88:5f:f9:c2:c5:67:84:48:
         e5:e3:53:59:42:41:fe:9e:15:34:f9:ce:aa:40:8f:1c:2f:e2:
         c7:31:71:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:28:16 2026 by rpki-client