This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E89A25762E817B4ABAD4AE619618A2027CDA10E65EA17AE320EAB24829F102F7/0/323830333a643638303a3a2f33322d3336203d3e20323633323234.roa
File:                     323830333a643638303a3a2f33322d3336203d3e20323633323234.roa (raw, json)
Hash identifier:          XJ76nwnnKEpElBxjejFWoTK4y/iouP/0PJzORb+Xk+k=
Subject key identifier:   D4:4F:54:08:18:1F:F8:BE:E9:89:9F:8F:E2:4A:1A:8F:E7:2E:5C:4D
Certificate issuer:       /CN=A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478
Certificate serial:       7782618FD5BD5725EB5A7336C5BD33EDAD510958
Authority key identifier: A9:96:A5:FE:83:CD:F4:C0:C2:A3:11:F2:2A:2C:F3:DB:1D:02:C4:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E89A25762E817B4ABAD4AE619618A2027CDA10E65EA17AE320EAB24829F102F7/0/323830333a643638303a3a2f33322d3336203d3e20323633323234.roa
Signing time:             Tue 20 Jan 2026 18:26:22 +0000
ROA not before:           Tue 20 Jan 2026 18:21:22 +0000
ROA not after:            Tue 19 Jan 2027 18:26:22 +0000
asID:                     263224
IP address blocks:        2803:d680::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E89A25762E817B4ABAD4AE619618A2027CDA10E65EA17AE320EAB24829F102F7/0/A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E89A25762E817B4ABAD4AE619618A2027CDA10E65EA17AE320EAB24829F102F7/0/A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 20:10:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:82:61:8f:d5:bd:57:25:eb:5a:73:36:c5:bd:33:ed:ad:51:09:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478
        Validity
            Not Before: Jan 20 18:21:22 2026 GMT
            Not After : Jan 19 18:26:22 2027 GMT
        Subject: CN=D44F5408181FF8BEE9899F8FE24A1A8FE72E5C4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1a:e5:e3:8b:a8:a3:c2:75:2a:11:89:a1:37:
                    7c:31:08:bc:6b:59:a3:e7:f4:f0:f1:45:9c:eb:35:
                    4c:f0:a8:1c:16:63:98:ae:48:29:ad:89:fa:f4:e6:
                    a9:82:d3:42:47:95:f0:d6:9b:14:3e:e2:da:b8:09:
                    f9:3a:e0:08:77:aa:fd:8d:9f:b1:14:bb:96:24:32:
                    3b:4d:ac:67:72:22:64:85:af:fd:15:67:8f:89:f2:
                    ec:a3:5b:94:5e:a4:74:8e:ba:18:27:c3:d5:f1:8a:
                    a7:08:5f:9a:92:b8:88:92:ad:f4:04:c3:d3:48:7a:
                    9a:57:17:97:54:f8:5a:a1:7f:a2:4a:d1:d6:69:ae:
                    a4:b3:e2:70:bf:f6:8d:12:ca:be:e6:bb:4e:d7:59:
                    92:03:4a:ba:3b:47:6b:8e:37:5e:98:be:f5:29:4b:
                    c6:dd:41:98:b9:b1:39:60:02:fe:a3:17:9d:ba:23:
                    c6:d0:c5:3c:28:66:cc:a5:81:6c:69:2a:3e:50:b7:
                    6b:5a:53:37:16:de:4d:3e:87:ed:02:a5:bc:f3:96:
                    36:45:dc:9f:3b:91:b8:c7:71:a5:a7:da:f3:0d:65:
                    21:1e:0a:d2:9a:bb:dd:b1:18:9c:9b:31:55:b1:83:
                    56:8e:27:9c:e1:ca:4e:d8:3e:e6:73:5d:b4:40:52:
                    68:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:4F:54:08:18:1F:F8:BE:E9:89:9F:8F:E2:4A:1A:8F:E7:2E:5C:4D
            X509v3 Authority Key Identifier:
                keyid:A9:96:A5:FE:83:CD:F4:C0:C2:A3:11:F2:2A:2C:F3:DB:1D:02:C4:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E89A25762E817B4ABAD4AE619618A2027CDA10E65EA17AE320EAB24829F102F7/0/A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E89A25762E817B4ABAD4AE619618A2027CDA10E65EA17AE320EAB24829F102F7/0/323830333a643638303a3a2f33322d3336203d3e20323633323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d680::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:19:24:8a:c2:85:d4:3f:fb:e7:85:cf:1c:bb:24:73:ff:89:
         5b:ae:51:56:8a:10:4a:56:ee:a6:9e:b5:06:55:72:28:92:68:
         db:83:b2:98:9e:cf:a8:63:9f:a5:a7:e7:16:c0:09:b5:91:b5:
         48:8c:2c:5d:7f:73:62:d8:47:3d:e0:f5:83:35:cf:3b:ff:70:
         14:3f:69:80:14:13:35:71:4c:9a:7a:d7:83:09:e9:84:1d:50:
         fb:17:3a:72:4e:96:7b:3a:c6:cd:82:cb:b6:ea:d2:6d:b6:e6:
         5c:be:79:8b:53:f5:51:ad:c6:e2:01:7a:f3:4e:ad:d5:4b:ed:
         32:01:95:bb:34:b5:50:1e:72:4b:d3:ae:02:4d:66:0b:f3:f7:
         bd:3e:25:b6:86:d0:00:80:c8:00:50:10:03:14:45:5b:2e:bc:
         d1:f1:b9:05:db:2f:18:49:51:75:fa:5a:ff:37:82:4e:29:ad:
         f4:e4:44:15:93:1f:10:c7:83:d1:64:a1:d7:f7:fa:09:f0:38:
         e3:f5:74:34:87:9f:5c:bf:cc:2b:62:11:fb:2d:40:ad:67:cf:
         f2:4d:ee:9e:2a:28:54:ad:e1:de:ea:86:a8:42:ff:77:cc:63:
         45:ae:4b:fa:ca:c1:8c:4d:2e:b9:d8:79:f7:0a:c9:24:ad:6d:
         6c:9e:48:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:16:53 2026 by rpki-client