This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F1B33EAEEA3E2FBA5F7585A16F9654D02308347819CDA65A2EC88DF9611307D5/0/323830333a323638303a3a2f33322d3332203d3e203631343432.roa
File:                     323830333a323638303a3a2f33322d3332203d3e203631343432.roa (raw, json)
Hash identifier:          equOrcN7agUfjyE98/umlFZqXOkwwnxRdhuY4Nzv9vQ=
Subject key identifier:   D1:D1:86:C5:07:E5:A6:CC:E4:52:D9:E4:52:A5:3C:A4:62:4F:F8:3D
Certificate issuer:       /CN=AA01668E71E93FC51932988C8351C9140C557FEA
Certificate serial:       68244BDBC56FEACE882B731D20CB277610B1B3C5
Authority key identifier: AA:01:66:8E:71:E9:3F:C5:19:32:98:8C:83:51:C9:14:0C:55:7F:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA01668E71E93FC51932988C8351C9140C557FEA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F1B33EAEEA3E2FBA5F7585A16F9654D02308347819CDA65A2EC88DF9611307D5/0/323830333a323638303a3a2f33322d3332203d3e203631343432.roa
Signing time:             Tue 06 Jan 2026 19:43:26 +0000
ROA not before:           Tue 06 Jan 2026 19:38:26 +0000
ROA not after:            Tue 05 Jan 2027 19:43:26 +0000
asID:                     61442
IP address blocks:        2803:2680::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F1B33EAEEA3E2FBA5F7585A16F9654D02308347819CDA65A2EC88DF9611307D5/0/AA01668E71E93FC51932988C8351C9140C557FEA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F1B33EAEEA3E2FBA5F7585A16F9654D02308347819CDA65A2EC88DF9611307D5/0/AA01668E71E93FC51932988C8351C9140C557FEA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA01668E71E93FC51932988C8351C9140C557FEA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 15:05:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:24:4b:db:c5:6f:ea:ce:88:2b:73:1d:20:cb:27:76:10:b1:b3:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA01668E71E93FC51932988C8351C9140C557FEA
        Validity
            Not Before: Jan  6 19:38:26 2026 GMT
            Not After : Jan  5 19:43:26 2027 GMT
        Subject: CN=D1D186C507E5A6CCE452D9E452A53CA4624FF83D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3e:0b:30:5d:e5:1e:a8:05:9c:05:04:cf:cf:
                    12:8c:59:2b:82:c6:36:ca:24:d1:77:c7:4b:00:9b:
                    77:29:6f:9b:04:1b:b1:39:7d:f8:31:ea:86:ec:f8:
                    6b:66:41:b3:36:7e:84:e3:ce:8c:4c:e7:04:6e:43:
                    2e:33:6e:37:d2:45:e6:e7:f7:07:13:4d:a4:23:4c:
                    46:0f:8a:4f:af:11:72:44:12:7f:2e:66:14:50:95:
                    d4:13:9c:73:d8:c1:6e:6b:f5:72:bc:1f:61:13:3d:
                    f4:e0:59:5e:a4:2c:62:00:83:df:fe:f5:2d:a3:8d:
                    28:c2:92:a3:98:2a:53:da:27:f6:29:c1:5b:ca:64:
                    b9:14:af:b1:10:34:23:6a:e4:3b:d5:7e:4f:30:54:
                    dc:55:3d:2f:0a:e5:b2:4a:8a:88:9f:8d:ad:aa:a0:
                    82:9f:47:77:1d:39:42:1e:ed:66:e0:69:69:96:5a:
                    7f:ca:0a:93:7f:52:67:d7:80:37:57:ae:c0:dd:53:
                    e8:3c:53:c3:8a:18:49:52:1d:0d:9d:e4:b1:65:16:
                    80:7e:69:15:fc:7d:97:e3:7a:28:da:06:44:3e:d3:
                    b2:c6:15:26:02:98:83:c4:bc:6a:30:41:23:fb:05:
                    d1:11:23:7d:b9:c1:15:6c:8e:34:4e:f1:c6:c0:4c:
                    3b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D1:86:C5:07:E5:A6:CC:E4:52:D9:E4:52:A5:3C:A4:62:4F:F8:3D
            X509v3 Authority Key Identifier:
                keyid:AA:01:66:8E:71:E9:3F:C5:19:32:98:8C:83:51:C9:14:0C:55:7F:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F1B33EAEEA3E2FBA5F7585A16F9654D02308347819CDA65A2EC88DF9611307D5/0/AA01668E71E93FC51932988C8351C9140C557FEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA01668E71E93FC51932988C8351C9140C557FEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F1B33EAEEA3E2FBA5F7585A16F9654D02308347819CDA65A2EC88DF9611307D5/0/323830333a323638303a3a2f33322d3332203d3e203631343432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2680::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:55:d9:9d:bf:50:6b:6d:7e:62:83:21:d5:35:f9:19:af:88:
         4e:91:25:f3:2f:e7:96:e2:51:cf:21:00:1a:01:4f:61:3d:30:
         cb:87:ec:bd:21:7b:61:45:5d:4e:92:1d:d3:aa:9e:27:a9:94:
         49:85:94:ad:b3:9a:6e:4b:0f:d1:5d:a2:5b:dd:87:03:b6:6f:
         33:78:20:ba:94:2a:38:dc:30:33:b2:ef:a8:3c:27:3a:20:1b:
         5b:26:32:9c:c0:5d:75:65:04:64:7d:8c:02:5a:c8:11:6f:0d:
         44:64:1f:ec:92:fc:65:af:42:03:6a:ef:ef:71:ef:2c:ee:64:
         0c:46:5c:cf:eb:7b:ca:c9:7e:71:64:86:42:1e:60:7e:ad:e5:
         9b:0b:6b:27:06:e8:60:29:e7:64:fa:c3:7e:45:ff:25:c8:ca:
         58:9b:dd:5e:5e:ba:74:4d:99:83:5b:32:e2:78:e1:1a:a8:30:
         5f:00:c4:d3:de:73:01:ff:46:7f:ba:b8:71:7f:fb:53:37:3d:
         6c:ef:ed:e1:ba:74:08:1f:34:84:81:df:df:03:f5:4f:fe:e5:
         d1:9a:38:34:fc:19:e1:87:f4:42:eb:83:3c:d0:25:7d:ed:70:
         95:2d:5b:ef:33:5f:9c:a7:66:4e:e2:d3:d5:55:07:4b:cd:f8:
         ee:74:68:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:58:37 2026 by rpki-client