This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EBC29DAE2BB999CF4FF367D05705451FB42EE8E2DA9BCC2BC5CE3CC22E32E5D0/0/323830333a616661303a3a2f33322d3332203d3e20323637373931.roa
File:                     323830333a616661303a3a2f33322d3332203d3e20323637373931.roa (raw, json)
Hash identifier:          LV0sHy0FFNSjw39KGWuj6i70bGWzLIZ9ZSdsaq+7D6I=
Subject key identifier:   9A:4C:F9:C7:D2:E8:4E:DD:E8:EF:06:FC:4E:69:10:C1:44:12:AC:94
Certificate issuer:       /CN=353F7C9A66591AC01FC52C773EE1A04559086A6B
Certificate serial:       03EC7088874C9580B2C26160BCE6F51B8CB17513
Authority key identifier: 35:3F:7C:9A:66:59:1A:C0:1F:C5:2C:77:3E:E1:A0:45:59:08:6A:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/353F7C9A66591AC01FC52C773EE1A04559086A6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EBC29DAE2BB999CF4FF367D05705451FB42EE8E2DA9BCC2BC5CE3CC22E32E5D0/0/323830333a616661303a3a2f33322d3332203d3e20323637373931.roa
Signing time:             Tue 06 Jan 2026 19:17:19 +0000
ROA not before:           Tue 06 Jan 2026 19:12:19 +0000
ROA not after:            Tue 05 Jan 2027 19:17:19 +0000
asID:                     267791
IP address blocks:        2803:afa0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EBC29DAE2BB999CF4FF367D05705451FB42EE8E2DA9BCC2BC5CE3CC22E32E5D0/0/353F7C9A66591AC01FC52C773EE1A04559086A6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EBC29DAE2BB999CF4FF367D05705451FB42EE8E2DA9BCC2BC5CE3CC22E32E5D0/0/353F7C9A66591AC01FC52C773EE1A04559086A6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/353F7C9A66591AC01FC52C773EE1A04559086A6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 06:18:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ec:70:88:87:4c:95:80:b2:c2:61:60:bc:e6:f5:1b:8c:b1:75:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=353F7C9A66591AC01FC52C773EE1A04559086A6B
        Validity
            Not Before: Jan  6 19:12:19 2026 GMT
            Not After : Jan  5 19:17:19 2027 GMT
        Subject: CN=9A4CF9C7D2E84EDDE8EF06FC4E6910C14412AC94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:26:c4:fd:24:29:10:fd:e8:11:7c:d1:d4:24:
                    a1:ed:d5:e1:fd:f7:3a:4b:88:bb:0d:cd:6d:29:a8:
                    59:82:66:ea:c9:91:c9:15:87:4d:63:7e:10:16:1b:
                    98:20:ac:10:cc:6d:b4:c0:57:d0:90:0b:0d:b7:fe:
                    b4:a1:a9:a0:0a:75:53:64:17:f8:b1:fe:c6:75:c2:
                    80:ec:6b:71:6e:74:6b:50:c3:64:72:2c:af:a7:08:
                    eb:a2:4f:9e:57:e4:c7:ac:f5:fb:c1:85:23:2a:56:
                    ed:d3:2a:ff:d0:1a:02:cf:69:da:1b:51:2d:a8:6d:
                    d6:da:5b:6b:dd:18:7b:8f:23:da:a9:8a:7f:d4:19:
                    fd:d7:34:c1:04:1e:1d:4a:52:06:1d:11:62:5a:70:
                    4b:95:6f:14:d3:7c:1b:b3:96:17:95:6d:73:6e:a5:
                    30:2d:cf:c6:71:09:2a:e7:18:b7:d8:a1:eb:f9:f2:
                    b8:46:d9:d4:b0:ad:34:b2:a5:63:16:37:60:24:f8:
                    8a:9c:61:45:a0:4a:cc:86:01:ea:aa:72:19:38:d9:
                    c5:4d:bc:bf:ef:ee:16:03:cc:d0:d5:88:ff:d1:78:
                    56:98:92:e9:2d:ef:78:82:a3:1c:07:44:46:88:bc:
                    57:ee:30:6a:23:ae:0a:3f:0a:94:fd:7c:30:6d:ef:
                    2a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:4C:F9:C7:D2:E8:4E:DD:E8:EF:06:FC:4E:69:10:C1:44:12:AC:94
            X509v3 Authority Key Identifier:
                keyid:35:3F:7C:9A:66:59:1A:C0:1F:C5:2C:77:3E:E1:A0:45:59:08:6A:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EBC29DAE2BB999CF4FF367D05705451FB42EE8E2DA9BCC2BC5CE3CC22E32E5D0/0/353F7C9A66591AC01FC52C773EE1A04559086A6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/353F7C9A66591AC01FC52C773EE1A04559086A6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EBC29DAE2BB999CF4FF367D05705451FB42EE8E2DA9BCC2BC5CE3CC22E32E5D0/0/323830333a616661303a3a2f33322d3332203d3e20323637373931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:afa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:94:76:73:e7:fc:b4:3f:81:8b:6b:94:a3:ea:92:ad:39:40:
         45:7a:51:8b:86:8d:5f:88:c2:d6:9d:6b:bf:b1:12:a9:06:db:
         49:ce:98:1e:d0:f4:00:e1:02:97:f4:8e:3f:eb:3c:29:98:8f:
         2b:d8:f5:c5:05:eb:e3:37:76:a8:84:f4:94:4c:ec:56:78:65:
         7c:d2:3f:ec:5d:db:47:db:a6:7a:d8:f9:5d:a9:42:46:2f:f8:
         ae:24:0c:f4:cb:c4:4f:ba:70:a5:88:80:a1:8d:4c:d9:35:fd:
         d9:f4:6d:23:02:be:2b:82:5e:07:e1:4b:60:35:dc:c9:73:04:
         96:98:49:03:4f:e3:23:33:9f:56:29:e5:63:b6:f5:d8:26:90:
         53:6b:91:85:33:8b:97:65:af:95:0a:d4:32:99:f0:7a:6f:1f:
         18:46:5f:52:64:4d:cb:c7:07:d3:38:2a:01:19:59:04:3d:1d:
         27:fc:4b:36:8a:1a:01:c1:0c:ae:db:84:ce:24:6d:32:a4:d4:
         f7:f1:ce:c2:b6:c6:70:02:bc:cd:58:35:12:b6:d1:7f:fa:21:
         67:a1:ff:59:c3:51:cb:92:17:69:61:4b:f1:ff:69:ee:73:86:
         52:3c:a5:4b:14:e5:01:a2:1e:ef:2c:c8:9e:ae:6e:c5:8c:bd:
         8a:47:b8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:42 2026 by rpki-client