This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/323830333a333438303a3430303a3a2f33382d3338203d3e203532343139.roa
File:                     323830333a333438303a3430303a3a2f33382d3338203d3e203532343139.roa (raw, json)
Hash identifier:          Tt6ECgFcwcVtltKHPQh777L17OlUH0svETP8mwR6gQw=
Subject key identifier:   D3:4E:1F:AB:17:E9:2F:55:FD:16:1D:43:EB:55:96:BF:73:1F:B5:C7
Certificate issuer:       /CN=D8D44DD84F3FDBD732870581DB91456D40862FA2
Certificate serial:       140B04E1D5CDC91F9027FD894BF179A0F645BA9D
Authority key identifier: D8:D4:4D:D8:4F:3F:DB:D7:32:87:05:81:DB:91:45:6D:40:86:2F:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/323830333a333438303a3430303a3a2f33382d3338203d3e203532343139.roa
Signing time:             Tue 06 Jan 2026 19:18:19 +0000
ROA not before:           Tue 06 Jan 2026 19:13:19 +0000
ROA not after:            Tue 05 Jan 2027 19:18:19 +0000
asID:                     52419
IP address blocks:        2803:3480:400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:0b:04:e1:d5:cd:c9:1f:90:27:fd:89:4b:f1:79:a0:f6:45:ba:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8D44DD84F3FDBD732870581DB91456D40862FA2
        Validity
            Not Before: Jan  6 19:13:19 2026 GMT
            Not After : Jan  5 19:18:19 2027 GMT
        Subject: CN=D34E1FAB17E92F55FD161D43EB5596BF731FB5C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:45:03:0b:6d:5a:5f:81:fe:fd:ba:86:ce:5f:
                    a9:d4:53:e1:4d:5f:22:76:65:44:cb:8e:b1:ac:25:
                    e3:2a:0e:ef:b7:02:23:4f:80:68:75:cb:81:04:25:
                    0e:b1:1f:d8:87:6c:fd:fa:23:dc:d0:1e:d2:ff:22:
                    e3:b3:ce:eb:0f:de:df:4d:ad:57:9f:7f:99:95:79:
                    c7:27:d4:d7:db:08:f5:d9:de:12:fb:75:f8:6d:77:
                    d2:ef:0b:8c:1e:76:d0:1b:90:ea:b6:cd:5b:78:17:
                    85:fc:9a:3d:8d:bc:86:a5:ef:a0:03:fc:64:1a:4b:
                    a3:cd:be:ad:a8:28:99:ba:04:94:ef:73:ab:86:fc:
                    a2:08:df:09:b4:fb:a5:29:0a:94:61:9e:4d:d8:a3:
                    31:8d:75:e8:b5:3b:43:98:08:a1:36:09:97:6b:aa:
                    5c:7c:b0:72:9a:d8:96:e8:7e:6c:ad:63:76:9c:71:
                    5b:04:5e:a9:54:d2:e9:97:94:55:6c:40:f1:21:34:
                    85:97:18:1e:7f:85:23:f7:d6:32:1d:78:6d:6c:7b:
                    ec:97:63:e5:cc:f8:53:89:0b:5e:36:b1:5d:01:7a:
                    6e:16:70:78:af:01:73:44:e3:f9:9c:18:f2:ce:93:
                    93:ec:c1:7c:7d:a3:60:9f:5e:e3:55:5c:c7:8e:af:
                    14:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:4E:1F:AB:17:E9:2F:55:FD:16:1D:43:EB:55:96:BF:73:1F:B5:C7
            X509v3 Authority Key Identifier:
                keyid:D8:D4:4D:D8:4F:3F:DB:D7:32:87:05:81:DB:91:45:6D:40:86:2F:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/323830333a333438303a3430303a3a2f33382d3338203d3e203532343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3480:400::/38

    Signature Algorithm: sha256WithRSAEncryption
         02:2c:08:2e:a0:d5:df:b2:81:0a:84:d4:d8:7b:36:3e:8a:6f:
         fe:57:b3:99:07:e9:da:51:8d:98:48:26:93:4c:1c:e8:9c:c9:
         9a:19:2d:1e:5f:2c:c5:60:4b:54:66:b6:92:a3:aa:86:bd:68:
         fd:d3:7c:40:53:33:04:13:1b:92:0a:74:c2:ba:04:9f:01:ad:
         06:ee:06:88:16:38:79:7a:fd:4a:2c:da:f9:c6:7e:b4:6b:2e:
         f3:ee:81:c4:94:55:7c:b7:97:92:79:ab:31:7e:85:cf:92:3b:
         0a:67:09:f5:ee:4e:5c:3a:a9:8f:d7:f9:41:4a:ba:e6:72:01:
         34:32:71:2f:21:e5:f7:a8:64:74:be:71:65:b2:75:55:6c:85:
         46:07:ea:d2:cc:24:d4:0e:18:5a:af:04:bb:01:25:06:10:8d:
         9d:38:79:d4:bf:08:91:cb:05:07:8d:a8:61:01:33:d6:b6:ff:
         88:e7:cf:ca:7a:7c:dd:fc:d4:ec:79:97:e5:e2:c3:6b:1a:ef:
         aa:a7:40:e9:dd:5c:15:67:f4:68:65:60:f4:ce:94:17:fa:1a:
         16:93:96:69:8e:56:2c:f2:86:d0:73:99:26:24:71:ed:6f:c6:
         75:b3:1c:bc:cd:4c:dc:fd:71:ec:12:00:11:3b:dc:c3:8f:2e:
         58:0d:ee:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:43:55 2026 by rpki-client