This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD4A8420D0926D97FB3843697FC4B592D7C823D66995F3C00000CFA2C5E4502B/0/323830333a366563303a3a2f33322d3332203d3e20323634363638.roa
File:                     323830333a366563303a3a2f33322d3332203d3e20323634363638.roa (raw, json)
Hash identifier:          0NBK5VSa4CwlKMZUT5H5lbKItxRcgSeELiWSKEF7SKE=
Subject key identifier:   FF:F3:10:64:58:F1:A2:5A:3F:53:FF:A7:85:47:A1:4C:88:DA:CC:03
Certificate issuer:       /CN=F1BC5A3AF8D77F603855EA8FCD43EAB619B5F518
Certificate serial:       35E3E360A80B94ACE403E49AB06C4630D25B1AD1
Authority key identifier: F1:BC:5A:3A:F8:D7:7F:60:38:55:EA:8F:CD:43:EA:B6:19:B5:F5:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1BC5A3AF8D77F603855EA8FCD43EAB619B5F518.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD4A8420D0926D97FB3843697FC4B592D7C823D66995F3C00000CFA2C5E4502B/0/323830333a366563303a3a2f33322d3332203d3e20323634363638.roa
Signing time:             Tue 06 Jan 2026 19:38:49 +0000
ROA not before:           Tue 06 Jan 2026 19:33:49 +0000
ROA not after:            Tue 05 Jan 2027 19:38:49 +0000
asID:                     264668
IP address blocks:        2803:6ec0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD4A8420D0926D97FB3843697FC4B592D7C823D66995F3C00000CFA2C5E4502B/0/F1BC5A3AF8D77F603855EA8FCD43EAB619B5F518.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD4A8420D0926D97FB3843697FC4B592D7C823D66995F3C00000CFA2C5E4502B/0/F1BC5A3AF8D77F603855EA8FCD43EAB619B5F518.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1BC5A3AF8D77F603855EA8FCD43EAB619B5F518.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 01:27:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:e3:e3:60:a8:0b:94:ac:e4:03:e4:9a:b0:6c:46:30:d2:5b:1a:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1BC5A3AF8D77F603855EA8FCD43EAB619B5F518
        Validity
            Not Before: Jan  6 19:33:49 2026 GMT
            Not After : Jan  5 19:38:49 2027 GMT
        Subject: CN=FFF3106458F1A25A3F53FFA78547A14C88DACC03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:2f:b6:2b:76:bc:8f:9d:f6:0b:8f:f3:35:90:
                    83:02:39:07:33:af:11:8c:f4:72:b1:b4:85:b5:da:
                    2e:6e:07:22:78:f2:98:13:d3:bb:69:75:f2:9e:ff:
                    c8:80:76:37:22:f9:f6:59:f0:b2:85:b6:47:80:67:
                    9a:38:ce:46:b1:64:8b:95:6b:14:70:fc:3e:67:99:
                    a8:93:1c:5b:81:bc:e1:09:29:20:5f:3f:b9:43:79:
                    ad:d5:56:38:e5:9f:dc:40:ff:9b:14:30:72:2b:4e:
                    62:19:64:de:69:95:de:50:79:d4:e4:24:07:93:57:
                    27:7e:8f:7e:48:bc:7d:a5:c1:22:5a:c8:ba:a2:60:
                    44:c3:17:48:03:3e:34:24:10:e9:be:f7:f1:9a:03:
                    64:c4:7b:e9:69:a0:e0:fb:0f:84:fc:17:02:35:26:
                    26:2b:3b:b0:16:3d:2d:d0:c8:f4:fa:ca:db:00:1e:
                    ff:2c:07:ce:1e:ad:78:e1:64:7e:d3:d3:1f:bd:98:
                    b9:1e:c8:12:09:b2:70:8c:80:c3:44:dc:d6:c2:fa:
                    a7:39:a7:05:fb:80:f4:39:8f:19:a1:8a:a0:ef:0c:
                    79:de:3d:4e:0e:ff:8b:cb:16:bd:db:f2:a2:81:29:
                    47:e0:51:b5:b3:1d:b7:95:48:5c:7e:15:d7:5f:b2:
                    82:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F3:10:64:58:F1:A2:5A:3F:53:FF:A7:85:47:A1:4C:88:DA:CC:03
            X509v3 Authority Key Identifier:
                keyid:F1:BC:5A:3A:F8:D7:7F:60:38:55:EA:8F:CD:43:EA:B6:19:B5:F5:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD4A8420D0926D97FB3843697FC4B592D7C823D66995F3C00000CFA2C5E4502B/0/F1BC5A3AF8D77F603855EA8FCD43EAB619B5F518.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1BC5A3AF8D77F603855EA8FCD43EAB619B5F518.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD4A8420D0926D97FB3843697FC4B592D7C823D66995F3C00000CFA2C5E4502B/0/323830333a366563303a3a2f33322d3332203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:2a:8c:f4:41:7c:3e:bc:45:04:0b:41:ec:4d:bb:da:c5:46:
         87:6a:bb:6d:ba:d3:87:30:63:1f:6d:82:1a:24:c2:e9:60:57:
         7d:d0:7c:c1:5a:6d:f9:77:4b:f5:12:97:c9:ea:1d:18:6c:6f:
         93:02:40:5a:f7:62:6d:0f:ca:1e:ac:37:81:76:51:b5:fd:b1:
         24:b4:80:8f:6d:ad:bf:2b:eb:f6:44:5e:c1:ad:c4:55:cd:22:
         3c:6f:20:4a:85:16:15:03:bf:25:48:cb:b1:e9:bb:93:83:8a:
         70:55:c7:88:f9:c3:81:05:1a:65:f8:f4:f6:9d:51:96:d8:5b:
         a9:9e:41:ad:72:38:7d:f6:e2:17:fd:65:00:89:9f:4e:27:a2:
         da:df:41:8b:7e:26:58:7e:1d:e5:ed:ee:20:c0:b2:62:2f:94:
         b0:15:09:de:bf:20:5f:f7:14:85:ec:e1:d6:16:02:c8:3e:72:
         0f:ad:51:91:66:05:22:3a:0e:b5:89:15:77:f4:76:ba:fd:8c:
         4a:44:a9:95:17:89:53:1a:84:03:bf:0e:d5:d4:62:0e:71:8c:
         e2:2d:d7:38:6a:22:d7:8e:cb:29:12:9b:80:09:0c:d3:d2:7f:
         23:81:0a:93:94:3b:2f:c3:ed:f7:b5:bb:d1:18:9a:84:f3:71:
         cf:74:35:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:30:44 2026 by rpki-client