This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E83E9530FD2523ACC48E9176102A76C83E41CACA874A1F819AA18AF2A1941D78/0/323830333a633635303a3a2f33322d3338203d3e20323733313935.roa
File:                     323830333a633635303a3a2f33322d3338203d3e20323733313935.roa (raw, json)
Hash identifier:          1fTlizInmzcqou4fZ/dEUvX7c2ZCAD6HpZHyVoIM8SU=
Subject key identifier:   D4:51:4A:71:35:BD:EE:F6:EA:54:DD:50:17:7D:BD:CA:5A:0B:7C:0E
Certificate issuer:       /CN=2E9FA3F35A2B5E2A62F128B1E11A6414B42D7109
Certificate serial:       3EB8034320681C7568ED90BA0838D2E42AB75161
Authority key identifier: 2E:9F:A3:F3:5A:2B:5E:2A:62:F1:28:B1:E1:1A:64:14:B4:2D:71:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E9FA3F35A2B5E2A62F128B1E11A6414B42D7109.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E83E9530FD2523ACC48E9176102A76C83E41CACA874A1F819AA18AF2A1941D78/0/323830333a633635303a3a2f33322d3338203d3e20323733313935.roa
Signing time:             Fri 23 Jan 2026 16:27:08 +0000
ROA not before:           Fri 23 Jan 2026 16:22:08 +0000
ROA not after:            Fri 22 Jan 2027 16:27:08 +0000
asID:                     273195
IP address blocks:        2803:c650::/32 maxlen: 38
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E83E9530FD2523ACC48E9176102A76C83E41CACA874A1F819AA18AF2A1941D78/0/2E9FA3F35A2B5E2A62F128B1E11A6414B42D7109.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E83E9530FD2523ACC48E9176102A76C83E41CACA874A1F819AA18AF2A1941D78/0/2E9FA3F35A2B5E2A62F128B1E11A6414B42D7109.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E9FA3F35A2B5E2A62F128B1E11A6414B42D7109.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 00:34:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:b8:03:43:20:68:1c:75:68:ed:90:ba:08:38:d2:e4:2a:b7:51:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E9FA3F35A2B5E2A62F128B1E11A6414B42D7109
        Validity
            Not Before: Jan 23 16:22:08 2026 GMT
            Not After : Jan 22 16:27:08 2027 GMT
        Subject: CN=D4514A7135BDEEF6EA54DD50177DBDCA5A0B7C0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fd:7d:55:20:6b:4c:8b:c3:0f:c2:b3:66:20:
                    7c:1a:ac:65:64:63:ec:63:9a:95:84:f0:e3:dd:7a:
                    2e:3d:85:af:8e:1e:9d:ae:1a:5b:e9:98:ba:23:0e:
                    c7:8e:04:60:28:0f:85:d2:7f:a0:90:23:20:79:83:
                    42:7e:fb:99:5d:bd:ac:bd:57:14:b1:2c:b6:bc:92:
                    07:9d:2b:c8:d5:10:67:08:50:60:f7:bc:27:2c:8e:
                    ad:26:82:9f:57:71:cb:aa:a7:c5:38:b5:e4:7d:97:
                    a8:3a:23:5c:21:34:cc:ac:df:5e:c0:36:63:78:c4:
                    e6:27:57:b8:c8:d4:5f:75:1a:ff:a4:1c:06:99:f5:
                    95:eb:bb:08:5d:7b:27:f6:42:de:b9:e9:49:db:38:
                    49:f1:69:99:b5:bf:48:40:fd:76:4c:fe:6f:a0:b7:
                    12:64:ab:73:76:1e:26:c7:c9:b4:d8:5b:a7:1a:c0:
                    b9:7a:7f:a9:82:b2:a0:82:78:d1:24:cf:c6:e1:aa:
                    24:8a:7c:a2:9a:d8:dc:76:6e:7b:fe:38:67:b8:20:
                    9f:e3:54:df:c3:41:26:74:fe:a9:4f:24:ee:ed:84:
                    f6:05:93:3f:3a:d9:6e:ea:ef:ef:6f:76:7c:c9:1e:
                    7f:45:d1:1d:67:78:88:fb:db:d2:02:f6:62:5c:99:
                    65:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:51:4A:71:35:BD:EE:F6:EA:54:DD:50:17:7D:BD:CA:5A:0B:7C:0E
            X509v3 Authority Key Identifier:
                keyid:2E:9F:A3:F3:5A:2B:5E:2A:62:F1:28:B1:E1:1A:64:14:B4:2D:71:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E83E9530FD2523ACC48E9176102A76C83E41CACA874A1F819AA18AF2A1941D78/0/2E9FA3F35A2B5E2A62F128B1E11A6414B42D7109.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E9FA3F35A2B5E2A62F128B1E11A6414B42D7109.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E83E9530FD2523ACC48E9176102A76C83E41CACA874A1F819AA18AF2A1941D78/0/323830333a633635303a3a2f33322d3338203d3e20323733313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c650::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:90:31:76:62:06:92:c0:be:3a:40:ca:fb:d2:60:f6:9e:38:
         03:1c:9f:3e:ca:dc:3b:3e:0b:37:3e:0c:e6:17:92:95:15:82:
         21:9d:07:95:da:fd:51:cb:fb:de:3a:31:b0:6f:12:bd:72:ce:
         ec:ab:7e:42:ff:5c:a2:b7:b3:f6:23:02:b6:0a:b6:e9:8d:49:
         37:20:61:f4:28:51:25:b7:18:f5:49:a8:f6:ae:ba:6d:46:3b:
         32:59:95:39:f7:05:82:32:eb:bf:26:22:62:84:0b:f5:d3:60:
         69:d5:f6:d8:88:df:8b:29:ef:a4:fe:2d:c6:dc:3d:ca:7d:30:
         6d:52:9e:b7:75:3e:5d:07:ed:4d:5b:f7:7e:fe:38:d6:34:c4:
         d6:d6:df:69:9d:cf:e2:85:1f:28:4d:81:3a:d3:fe:e2:ce:a3:
         f4:bc:da:9d:93:88:ed:0f:24:95:df:5f:f2:f3:4f:70:e9:8f:
         56:fb:af:c7:8d:e1:b8:84:d4:a9:ca:98:f7:8d:25:1b:30:a6:
         5d:78:0b:e0:45:80:ff:e2:37:8d:06:dd:88:64:8b:cc:68:dd:
         73:e6:ac:f7:ab:63:e3:80:85:b4:ea:07:76:f8:86:09:8c:68:
         9a:7d:01:1a:46:1a:0a:36:30:c1:53:63:91:52:8f:86:f9:0b:
         ad:81:22:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:55:46 2026 by rpki-client