This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DDB201F6FA82D551FD4804520FA77DE3A67BD1461B64099C5DD9FC5F5FB04F98/0/323830333a393561303a3a2f33322d3332203d3e20323637373331.roa
File:                     323830333a393561303a3a2f33322d3332203d3e20323637373331.roa (raw, json)
Hash identifier:          Qachza1K+j4sawmbhYcXLKe3EW39aMFWAMXw0nTDxKg=
Subject key identifier:   D4:D7:84:D7:C9:C3:DE:9E:A9:BE:B6:CB:94:FA:4D:1A:48:88:56:3E
Certificate issuer:       /CN=1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB
Certificate serial:       276C587D9B89092EB89D02AB4728AC56425F45B0
Authority key identifier: 1F:5F:5C:11:C4:97:16:D8:46:EA:AF:C3:D8:25:E3:CE:A2:CF:91:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DDB201F6FA82D551FD4804520FA77DE3A67BD1461B64099C5DD9FC5F5FB04F98/0/323830333a393561303a3a2f33322d3332203d3e20323637373331.roa
Signing time:             Tue 06 Jan 2026 19:15:01 +0000
ROA not before:           Tue 06 Jan 2026 19:10:01 +0000
ROA not after:            Tue 05 Jan 2027 19:15:01 +0000
asID:                     267731
IP address blocks:        2803:95a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DDB201F6FA82D551FD4804520FA77DE3A67BD1461B64099C5DD9FC5F5FB04F98/0/1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DDB201F6FA82D551FD4804520FA77DE3A67BD1461B64099C5DD9FC5F5FB04F98/0/1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:6c:58:7d:9b:89:09:2e:b8:9d:02:ab:47:28:ac:56:42:5f:45:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB
        Validity
            Not Before: Jan  6 19:10:01 2026 GMT
            Not After : Jan  5 19:15:01 2027 GMT
        Subject: CN=D4D784D7C9C3DE9EA9BEB6CB94FA4D1A4888563E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f8:20:48:7f:cf:80:00:d5:40:3d:eb:b4:90:
                    69:69:7c:04:1e:c7:c5:3d:0a:c1:6a:cc:2e:93:2d:
                    87:9b:f2:d7:6a:c1:e3:7c:36:ba:66:23:2d:48:52:
                    47:18:ff:93:c6:b2:0d:70:83:1e:e7:7d:f0:d2:53:
                    dd:9f:57:55:85:91:df:3e:1b:81:91:6c:d2:75:70:
                    71:26:50:30:24:36:de:05:af:af:c2:a9:49:4d:86:
                    67:fc:d0:ef:7e:2a:f9:55:0f:39:4f:0c:e1:1b:fb:
                    55:d6:6d:b1:2d:f1:6e:c7:bc:57:6d:5c:f2:80:2f:
                    2d:a1:66:6c:cb:fb:86:ea:89:86:e1:a7:bd:58:f7:
                    27:1e:61:a0:12:da:b8:29:c1:3d:8b:ba:d3:fc:15:
                    06:b1:3c:ab:d7:3b:e7:8c:dd:f8:7c:5c:78:64:d6:
                    3a:1f:0e:a5:28:d9:f2:a1:35:bd:5b:59:59:9f:ad:
                    f5:1a:19:07:2f:0c:5c:a6:7c:e5:98:5f:c0:63:d0:
                    00:ba:d7:e6:7f:56:62:fb:7e:f8:23:24:3e:fd:08:
                    a2:66:de:49:2c:7f:97:8e:44:c9:b6:8f:d0:30:65:
                    ef:f5:63:14:4d:1a:85:43:13:cb:0a:24:57:3e:da:
                    2e:4e:d4:94:9a:00:4d:96:2f:39:41:6e:6d:9b:5c:
                    e0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D7:84:D7:C9:C3:DE:9E:A9:BE:B6:CB:94:FA:4D:1A:48:88:56:3E
            X509v3 Authority Key Identifier:
                keyid:1F:5F:5C:11:C4:97:16:D8:46:EA:AF:C3:D8:25:E3:CE:A2:CF:91:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DDB201F6FA82D551FD4804520FA77DE3A67BD1461B64099C5DD9FC5F5FB04F98/0/1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DDB201F6FA82D551FD4804520FA77DE3A67BD1461B64099C5DD9FC5F5FB04F98/0/323830333a393561303a3a2f33322d3332203d3e20323637373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:95a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:4d:13:b7:b4:37:0c:32:82:7b:4e:fc:7e:fe:7e:b8:2e:f6:
         a0:30:3d:97:eb:83:71:62:5f:ea:27:31:fe:e9:ed:73:50:9e:
         ec:5a:e2:36:bb:dd:2e:ac:f5:db:d0:09:cf:65:99:35:d1:13:
         d2:73:25:06:a3:d2:46:a4:f2:84:ad:1b:ec:90:b0:53:e3:b0:
         fa:1e:b7:46:66:a4:3a:b8:d2:d9:60:d0:ff:cb:7f:47:46:eb:
         b8:6f:cb:6f:90:1c:ab:ae:89:f7:79:7f:94:fa:68:b5:b7:1a:
         00:d8:1d:d6:8e:d5:f0:5d:84:50:29:da:d1:c9:c1:c8:1a:23:
         44:ab:d2:7e:67:ac:c3:b5:6e:d1:b3:33:bb:67:f0:8c:ae:ac:
         de:c3:ca:28:8b:f7:e8:91:4c:4f:b1:b1:73:ad:58:eb:d1:47:
         5e:eb:a4:4c:12:ca:b3:46:8e:87:07:1d:d5:2b:d4:2d:cb:17:
         0b:3f:0b:ef:8b:73:54:0f:5d:84:98:3c:3d:76:1c:ac:5e:4f:
         c9:54:65:13:4b:d7:5d:eb:2f:21:7f:64:37:b3:34:a4:99:3e:
         dd:a8:99:13:c5:3c:d1:08:6b:5b:82:36:51:73:cc:b0:cb:8d:
         22:3c:d9:21:4c:ed:15:65:68:ad:52:25:2c:d4:e9:b8:31:12:
         ab:9b:3c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:57:48 2026 by rpki-client