This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E78A3CCF571C59EEB66C6F44286771BE1EA6CF99F5B3E448CEA6205EB6BE03E4/0/323830333a653661303a3a2f33322d3438203d3e20323636383932.roa
File:                     323830333a653661303a3a2f33322d3438203d3e20323636383932.roa (raw, json)
Hash identifier:          hqEv5CvKr5BYZqVJc7s1YfzTvYVYvDFqXm9y+yqPkS0=
Subject key identifier:   6F:7A:95:12:02:ED:11:D4:D1:D4:69:76:4C:5D:1A:67:9C:34:FC:E0
Certificate issuer:       /CN=C9440A39F85D8DC2A99D0C5F54E2AE3A21347E1C
Certificate serial:       2E0D2B8035011BDAEF8E4C3CF0250A0F303D7D52
Authority key identifier: C9:44:0A:39:F8:5D:8D:C2:A9:9D:0C:5F:54:E2:AE:3A:21:34:7E:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9440A39F85D8DC2A99D0C5F54E2AE3A21347E1C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E78A3CCF571C59EEB66C6F44286771BE1EA6CF99F5B3E448CEA6205EB6BE03E4/0/323830333a653661303a3a2f33322d3438203d3e20323636383932.roa
Signing time:             Tue 06 Jan 2026 19:05:24 +0000
ROA not before:           Tue 06 Jan 2026 19:00:24 +0000
ROA not after:            Tue 05 Jan 2027 19:05:24 +0000
asID:                     266892
IP address blocks:        2803:e6a0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E78A3CCF571C59EEB66C6F44286771BE1EA6CF99F5B3E448CEA6205EB6BE03E4/0/C9440A39F85D8DC2A99D0C5F54E2AE3A21347E1C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E78A3CCF571C59EEB66C6F44286771BE1EA6CF99F5B3E448CEA6205EB6BE03E4/0/C9440A39F85D8DC2A99D0C5F54E2AE3A21347E1C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9440A39F85D8DC2A99D0C5F54E2AE3A21347E1C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:0d:2b:80:35:01:1b:da:ef:8e:4c:3c:f0:25:0a:0f:30:3d:7d:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9440A39F85D8DC2A99D0C5F54E2AE3A21347E1C
        Validity
            Not Before: Jan  6 19:00:24 2026 GMT
            Not After : Jan  5 19:05:24 2027 GMT
        Subject: CN=6F7A951202ED11D4D1D469764C5D1A679C34FCE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:42:59:e8:c5:7e:fc:01:2b:b9:15:86:80:6d:
                    55:c8:02:d5:43:e3:cf:e0:49:5a:e9:83:8e:5b:7e:
                    ea:f4:18:8e:2e:8f:78:44:e2:b1:74:13:3e:59:17:
                    c6:b3:aa:ad:82:c9:9f:ef:e0:45:d3:c2:d4:fa:06:
                    d1:37:10:44:ae:dd:26:0d:e3:f6:d6:2d:fd:3a:9a:
                    ad:d1:b5:4e:0e:84:4a:df:67:11:07:c3:90:7a:2f:
                    e4:09:2b:d6:17:be:fe:3d:a9:04:19:7f:df:7e:e9:
                    71:e1:32:6f:58:16:9c:69:3e:0e:b3:f0:69:97:ec:
                    e4:9e:99:46:ec:e5:c0:a1:27:26:be:15:01:ee:b7:
                    d7:99:60:78:eb:4a:d2:d7:89:e0:ed:27:95:23:9c:
                    0e:3f:80:9b:d3:d2:de:4c:2f:0d:4a:21:ba:8a:4b:
                    55:d8:59:fc:81:c1:dc:29:60:bb:93:c8:0a:67:40:
                    21:92:e4:43:50:45:2e:dd:14:97:78:80:90:35:00:
                    2c:10:82:e1:22:66:d6:5f:9f:92:7b:10:06:b7:8a:
                    6f:7b:47:de:77:6f:a6:99:bc:0f:5a:48:e0:5b:e3:
                    9d:e9:18:84:bc:c4:40:9a:4e:17:bb:08:8b:fa:f1:
                    78:71:6e:df:e6:39:04:b3:cb:d8:17:c9:9e:59:af:
                    b4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7A:95:12:02:ED:11:D4:D1:D4:69:76:4C:5D:1A:67:9C:34:FC:E0
            X509v3 Authority Key Identifier:
                keyid:C9:44:0A:39:F8:5D:8D:C2:A9:9D:0C:5F:54:E2:AE:3A:21:34:7E:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E78A3CCF571C59EEB66C6F44286771BE1EA6CF99F5B3E448CEA6205EB6BE03E4/0/C9440A39F85D8DC2A99D0C5F54E2AE3A21347E1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9440A39F85D8DC2A99D0C5F54E2AE3A21347E1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E78A3CCF571C59EEB66C6F44286771BE1EA6CF99F5B3E448CEA6205EB6BE03E4/0/323830333a653661303a3a2f33322d3438203d3e20323636383932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e6a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:e1:ce:de:4f:ee:ca:a6:ab:ed:b9:ed:18:2b:8e:af:2b:fa:
         2e:4b:41:4f:ef:ac:df:01:7a:58:d9:cf:ea:24:73:fc:15:0b:
         7a:a4:56:58:fa:0a:4a:01:c3:31:f8:bc:e2:62:68:d0:62:09:
         85:60:05:5f:e0:0e:16:f4:2b:92:c3:0e:bb:54:61:f1:f0:e4:
         74:54:f0:20:f2:0b:f2:23:52:d6:f1:e1:ed:e0:61:8b:c8:87:
         62:1f:d6:1b:53:b3:a5:81:d8:21:fb:c4:a2:76:6c:1c:2c:b0:
         0e:30:0f:09:0b:81:a2:7b:ed:2d:18:c3:88:7f:23:ca:7d:95:
         84:69:32:a6:14:0b:07:d5:ea:19:55:91:51:c8:03:eb:ed:e8:
         66:1e:72:b3:b2:f6:26:04:f5:d0:35:b7:fa:41:17:1a:e8:cb:
         43:3d:7a:e8:b4:07:31:b6:6a:b4:26:ff:e7:fc:43:25:c0:b9:
         26:db:4b:02:22:df:1c:e2:f5:cf:c6:be:cf:d9:f7:ff:c1:04:
         2a:98:89:fe:37:4e:52:2e:3e:a4:91:94:62:53:61:0c:14:ff:
         5b:ac:54:74:f1:c7:06:ef:dc:32:5a:08:a5:d7:d3:2e:71:e3:
         fe:36:34:25:5c:d5:b0:f2:c7:72:c6:8a:75:2c:30:45:3f:43:
         f3:97:52:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:17:18 2026 by rpki-client