This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/323830333a333438303a3a2f33382d3338203d3e203532343139.roa
File:                     323830333a333438303a3a2f33382d3338203d3e203532343139.roa (raw, json)
Hash identifier:          0EBSmQ89xmoVYLxX5jbn6g8CexmJwV1yl/sIpyse1b4=
Subject key identifier:   DA:1A:3D:CC:44:92:E2:99:25:82:1B:08:A4:9A:DE:9F:34:B2:6E:F3
Certificate issuer:       /CN=D8D44DD84F3FDBD732870581DB91456D40862FA2
Certificate serial:       2BF50B66FBDDDF1ED68AA42E2532CB863266D244
Authority key identifier: D8:D4:4D:D8:4F:3F:DB:D7:32:87:05:81:DB:91:45:6D:40:86:2F:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/323830333a333438303a3a2f33382d3338203d3e203532343139.roa
Signing time:             Tue 06 Jan 2026 19:18:18 +0000
ROA not before:           Tue 06 Jan 2026 19:13:18 +0000
ROA not after:            Tue 05 Jan 2027 19:18:18 +0000
asID:                     52419
IP address blocks:        2803:3480::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:f5:0b:66:fb:dd:df:1e:d6:8a:a4:2e:25:32:cb:86:32:66:d2:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8D44DD84F3FDBD732870581DB91456D40862FA2
        Validity
            Not Before: Jan  6 19:13:18 2026 GMT
            Not After : Jan  5 19:18:18 2027 GMT
        Subject: CN=DA1A3DCC4492E29925821B08A49ADE9F34B26EF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:e1:d3:f2:52:8b:1a:a5:7b:1c:c3:10:af:18:
                    4d:ae:f7:a0:43:b1:6c:5d:c9:59:cf:0a:b8:fc:bb:
                    e9:bf:96:9e:de:ff:70:59:c1:e9:b7:70:8e:e6:f0:
                    aa:43:ca:50:1f:9b:07:8f:84:54:9c:88:50:c5:b4:
                    fe:02:79:17:af:c3:14:c9:08:aa:42:28:cb:39:e3:
                    bf:8d:03:f7:b2:ae:b2:6e:4b:5f:cf:c9:30:7e:34:
                    3b:d3:24:2c:d7:5b:c3:5d:ec:c5:18:5d:cf:26:bc:
                    03:21:f8:99:4f:9a:a1:cb:1d:6d:cc:29:46:78:ec:
                    1d:6f:39:97:14:fd:f5:fa:d9:8f:d3:f3:8f:fc:4d:
                    56:c0:7b:4e:38:2c:95:7b:43:43:e8:50:5c:a0:cb:
                    6a:1f:e7:c3:05:43:9f:7d:93:df:91:6f:4b:d3:2b:
                    05:52:8e:c5:34:ef:e5:3f:8d:8a:24:9d:85:e7:f9:
                    6e:ca:dd:32:d7:76:b4:ce:82:7c:c2:6e:08:1f:88:
                    94:8c:e4:98:88:70:9c:ae:fe:e2:e2:33:fa:32:ac:
                    eb:73:39:94:fb:50:f2:74:7b:93:56:a5:67:c0:5a:
                    7d:e3:9c:34:2d:02:cd:63:4d:11:4c:5c:a4:4b:39:
                    fd:2f:70:14:af:02:67:d1:d7:e1:06:08:80:75:c7:
                    0a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:1A:3D:CC:44:92:E2:99:25:82:1B:08:A4:9A:DE:9F:34:B2:6E:F3
            X509v3 Authority Key Identifier:
                keyid:D8:D4:4D:D8:4F:3F:DB:D7:32:87:05:81:DB:91:45:6D:40:86:2F:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/323830333a333438303a3a2f33382d3338203d3e203532343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3480::/38

    Signature Algorithm: sha256WithRSAEncryption
         b0:4d:17:0c:5b:cf:d0:0b:a8:82:bc:8e:fb:f6:33:fa:e1:8d:
         fa:f1:06:cc:22:5b:93:06:3d:20:d4:e3:53:04:30:5d:83:cb:
         74:80:66:3a:8d:0f:62:45:9e:75:ab:a9:a5:6c:90:ce:79:98:
         7e:c7:9c:7c:b6:57:f2:05:26:56:ea:a8:f3:c8:4b:e4:1f:5f:
         7d:81:ef:66:d6:15:0e:53:1c:6d:f3:03:35:ee:0c:e4:6a:34:
         d9:be:9d:98:49:b6:45:a5:cb:39:28:28:31:26:6c:22:46:ef:
         53:c7:1a:4a:cb:a2:f7:8a:8c:b9:f6:42:b0:ac:28:b3:b5:99:
         fe:ee:bf:6f:56:82:39:8e:0c:e7:24:cc:4f:ec:fe:fc:ae:26:
         ba:e0:a1:57:e2:91:d2:0f:2a:4c:d7:1b:fe:6d:2f:4f:71:ac:
         79:0f:87:2f:07:2e:f9:3b:e9:21:e2:3c:8a:a4:9e:b5:ef:ce:
         9f:e5:a1:42:4b:1f:88:d1:15:fa:78:73:08:b7:66:0f:11:49:
         90:e2:39:77:20:71:a6:59:aa:2b:8e:02:f5:a9:99:e9:fb:e7:
         e8:1c:35:69:8e:3a:de:77:82:b8:e2:13:3e:54:c6:a7:22:8e:
         2c:b7:0f:b4:0f:68:3d:ac:4d:69:d0:43:cc:2f:27:b4:38:66:
         e0:37:0a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:42:49 2026 by rpki-client