This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/323830333a663665303a3a2f33322d3438203d3e20323639393736.roa
File:                     323830333a663665303a3a2f33322d3438203d3e20323639393736.roa (raw, json)
Hash identifier:          nDwa8tvW8ouU8NAYyUPsUCxuMQumbR0OLx66E1Y3O6s=
Subject key identifier:   60:30:80:5B:59:62:A0:7E:D3:0C:DA:CA:03:F2:6D:74:FC:73:CF:CF
Certificate issuer:       /CN=8C70DCCF275B14717F6A12414F1EE13DAFCE4E72
Certificate serial:       2159158C5D67070B86E76976230BC150733965CC
Authority key identifier: 8C:70:DC:CF:27:5B:14:71:7F:6A:12:41:4F:1E:E1:3D:AF:CE:4E:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/323830333a663665303a3a2f33322d3438203d3e20323639393736.roa
Signing time:             Tue 06 Jan 2026 19:34:31 +0000
ROA not before:           Tue 06 Jan 2026 19:29:31 +0000
ROA not after:            Tue 05 Jan 2027 19:34:31 +0000
asID:                     269976
IP address blocks:        2803:f6e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 04:33:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:59:15:8c:5d:67:07:0b:86:e7:69:76:23:0b:c1:50:73:39:65:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C70DCCF275B14717F6A12414F1EE13DAFCE4E72
        Validity
            Not Before: Jan  6 19:29:31 2026 GMT
            Not After : Jan  5 19:34:31 2027 GMT
        Subject: CN=6030805B5962A07ED30CDACA03F26D74FC73CFCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:42:c0:5d:2f:0f:2a:bd:ba:4a:99:18:05:e5:
                    f7:da:30:90:22:83:39:a7:6f:e4:43:8c:f2:b0:b2:
                    be:1b:20:f1:ac:95:37:f4:c3:c6:ed:54:b6:3a:89:
                    40:0c:66:f4:91:de:c0:23:16:f4:9c:15:ac:2c:1b:
                    f7:65:79:e6:cd:dd:ea:bf:d9:c3:6f:62:65:a5:81:
                    80:9d:12:a0:eb:8d:99:4c:0b:a8:ef:1e:38:27:99:
                    9b:c4:90:76:87:2c:c3:51:95:4f:45:ce:b8:c6:d5:
                    30:cd:cd:00:30:06:ca:03:59:d2:f8:1e:5b:e7:32:
                    99:c7:26:ba:97:d8:86:af:f4:22:30:de:fe:a0:b0:
                    14:fa:c7:95:e6:b7:5f:3b:f2:83:3d:9d:b6:d6:72:
                    35:08:fc:a9:83:db:c1:00:69:6b:f7:69:45:d8:0b:
                    0f:c0:90:d3:a3:2e:71:de:35:cd:20:ff:5b:5d:bd:
                    a4:91:3c:f8:6e:ce:6c:6b:b0:19:37:83:dc:b8:fc:
                    3b:92:22:f6:70:7c:9d:93:b7:f2:47:3d:4f:21:33:
                    86:37:57:95:a0:42:5c:c4:dd:b9:25:06:0d:f7:b3:
                    15:36:1c:be:6f:0d:d8:c8:df:45:9d:68:41:7e:2f:
                    91:a8:eb:73:82:7a:0d:37:c1:8b:7a:e2:87:b7:2c:
                    5e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:30:80:5B:59:62:A0:7E:D3:0C:DA:CA:03:F2:6D:74:FC:73:CF:CF
            X509v3 Authority Key Identifier:
                keyid:8C:70:DC:CF:27:5B:14:71:7F:6A:12:41:4F:1E:E1:3D:AF:CE:4E:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/323830333a663665303a3a2f33322d3438203d3e20323639393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:6b:fd:7d:04:01:47:4c:5f:a2:b9:37:6a:28:1b:05:60:a6:
         d5:3e:4a:72:e0:12:a6:a5:f3:3a:ac:29:e7:2c:fa:e1:8d:44:
         34:2b:67:81:fc:45:55:c9:a3:7c:50:2f:e1:d9:ca:b7:84:9f:
         fc:71:03:ac:ab:c7:74:86:9c:63:22:dc:9e:ee:46:55:88:23:
         5f:53:b3:0d:bc:15:e2:f8:dc:ea:b4:1a:4a:12:4c:13:99:ed:
         89:ea:60:98:91:10:21:ef:2b:3a:e5:08:e4:26:84:0a:2f:2b:
         1b:b4:b0:b2:90:86:48:c5:e4:0d:97:78:99:f6:0b:2c:97:66:
         c2:55:62:4f:6f:62:4a:74:95:05:04:e2:5d:0a:4e:25:ac:3a:
         9b:11:71:06:ba:9e:85:8d:b7:45:62:02:91:5b:99:f9:11:83:
         25:69:83:3f:91:fe:5e:6e:79:5c:57:21:f7:37:f6:7b:95:a0:
         14:c6:22:41:ca:6f:86:b4:b4:21:a0:be:5c:c8:5d:68:84:62:
         1c:e7:e9:20:42:bc:83:65:38:75:b2:af:7e:21:19:61:0e:89:
         72:6f:3e:98:1f:7c:e0:0b:3a:4c:ef:4b:91:89:0d:26:c6:04:
         90:d6:46:8a:ef:d5:40:71:f8:2f:09:20:b0:6b:cc:ab:f8:a8:
         a4:02:39:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:28 2026 by rpki-client