This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E7564F059A8BBA4032207653FDDE6D660203002CFB10E156AF7C897E56198AC2/0/323830333a326561303a3a2f33322d3332203d3e20323637363737.roa
File:                     323830333a326561303a3a2f33322d3332203d3e20323637363737.roa (raw, json)
Hash identifier:          LbX8+Xs/XRVPSwGBI9GMqHBRIiSOxxgvzzaXaSTNO00=
Subject key identifier:   F6:D1:D4:49:74:8B:39:41:4C:E3:14:AA:97:92:C3:1C:2D:A7:74:8A
Certificate issuer:       /CN=A8605CAD99068BCEB84CE0EC5B22362F590A5BEE
Certificate serial:       6027BD976C088635ABA8C1DDEDFA7369C09EC7F8
Authority key identifier: A8:60:5C:AD:99:06:8B:CE:B8:4C:E0:EC:5B:22:36:2F:59:0A:5B:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8605CAD99068BCEB84CE0EC5B22362F590A5BEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E7564F059A8BBA4032207653FDDE6D660203002CFB10E156AF7C897E56198AC2/0/323830333a326561303a3a2f33322d3332203d3e20323637363737.roa
Signing time:             Tue 06 Jan 2026 19:27:12 +0000
ROA not before:           Tue 06 Jan 2026 19:22:12 +0000
ROA not after:            Tue 05 Jan 2027 19:27:12 +0000
asID:                     267677
IP address blocks:        2803:2ea0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E7564F059A8BBA4032207653FDDE6D660203002CFB10E156AF7C897E56198AC2/0/A8605CAD99068BCEB84CE0EC5B22362F590A5BEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E7564F059A8BBA4032207653FDDE6D660203002CFB10E156AF7C897E56198AC2/0/A8605CAD99068BCEB84CE0EC5B22362F590A5BEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8605CAD99068BCEB84CE0EC5B22362F590A5BEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 20:36:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:27:bd:97:6c:08:86:35:ab:a8:c1:dd:ed:fa:73:69:c0:9e:c7:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8605CAD99068BCEB84CE0EC5B22362F590A5BEE
        Validity
            Not Before: Jan  6 19:22:12 2026 GMT
            Not After : Jan  5 19:27:12 2027 GMT
        Subject: CN=F6D1D449748B39414CE314AA9792C31C2DA7748A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:67:a2:de:f3:e6:b1:70:92:7f:65:a2:0b:70:
                    68:c4:ff:0a:d2:53:0b:70:9a:91:47:c0:68:8f:2d:
                    2a:16:4d:21:d2:f6:7c:a9:1e:29:32:c8:4b:52:a0:
                    00:44:68:34:ac:9d:fb:7b:3b:4a:ce:af:2e:79:b0:
                    bb:aa:35:06:e6:05:e8:5e:17:d0:a8:16:0b:49:57:
                    11:b7:c0:15:7b:cc:21:c3:7b:02:9f:24:6f:3b:aa:
                    79:a3:d6:7a:09:1a:78:cd:70:1b:c3:c4:50:cf:cc:
                    41:aa:df:31:01:43:9e:10:d6:95:72:b4:50:8d:e8:
                    64:ca:a7:6a:35:89:a0:e4:e0:26:14:b1:d1:e9:8c:
                    18:be:a4:fb:f4:7d:d5:d8:9c:82:5a:7d:c8:d2:be:
                    66:fd:8d:36:ea:24:b8:ab:36:e0:43:90:3a:09:8e:
                    4e:5d:52:23:f2:a2:56:69:06:f4:b1:7b:3b:d8:33:
                    2b:d3:da:6d:6f:43:d8:7a:d7:45:92:1f:50:a4:e8:
                    b1:ab:55:d0:05:e8:5c:55:07:10:50:ec:43:9c:cc:
                    44:c0:43:d4:26:8e:0c:9a:b3:fa:ea:95:a1:59:68:
                    80:30:16:e6:08:92:82:65:89:af:a4:69:d1:ff:3e:
                    56:55:6b:ba:bf:13:02:ac:1d:56:55:be:eb:e6:7b:
                    c4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:D1:D4:49:74:8B:39:41:4C:E3:14:AA:97:92:C3:1C:2D:A7:74:8A
            X509v3 Authority Key Identifier:
                keyid:A8:60:5C:AD:99:06:8B:CE:B8:4C:E0:EC:5B:22:36:2F:59:0A:5B:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E7564F059A8BBA4032207653FDDE6D660203002CFB10E156AF7C897E56198AC2/0/A8605CAD99068BCEB84CE0EC5B22362F590A5BEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8605CAD99068BCEB84CE0EC5B22362F590A5BEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E7564F059A8BBA4032207653FDDE6D660203002CFB10E156AF7C897E56198AC2/0/323830333a326561303a3a2f33322d3332203d3e20323637363737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2ea0::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:f4:1e:a3:9e:4f:cd:fb:3f:2e:f3:b4:40:63:68:18:6b:fb:
         5e:f6:1c:2e:dc:f4:f9:7e:b2:3c:9c:1e:62:e2:bc:b7:b7:7b:
         7e:06:91:a2:b5:d5:6b:5f:6b:1b:ae:90:87:70:09:82:e8:2e:
         c9:6d:e7:72:be:84:a8:74:3a:79:8b:80:5e:a9:42:99:51:ec:
         e1:8a:e9:e9:3b:85:02:bb:50:80:62:cf:b1:80:ed:ca:e6:54:
         eb:24:9e:d4:53:72:60:ae:2d:4a:85:0e:3d:6e:8a:8e:dc:1b:
         90:37:d1:e3:3f:cf:c7:92:ac:cd:eb:39:d6:fb:79:b1:9c:73:
         1b:b7:9f:37:a0:f2:f3:16:2a:3b:63:f4:ed:29:22:fc:a1:b1:
         89:47:de:7a:e6:8e:4f:3b:3d:6d:67:31:47:00:28:65:3f:0d:
         b6:08:4c:d6:c5:90:fb:31:d1:7d:fe:9b:b9:a5:fa:0a:5a:54:
         df:bf:c1:9e:9b:51:f6:a0:48:3f:25:01:0a:5d:79:7d:c9:3f:
         68:33:45:02:59:7b:6a:a9:4f:c0:07:7c:1d:b9:67:d9:1f:33:
         7a:9a:39:63:59:a2:b7:b3:9d:58:35:a8:bf:2a:14:ad:d7:36:
         c4:fb:83:e3:79:49:01:f7:5f:09:4b:14:e1:d3:3c:2d:53:de:
         94:b7:74:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:04:48 2026 by rpki-client