This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F74A068DD9F6E2ED2CB3A58C17CC145377EAD573FC489E94B37A04D4CB43F9F4/0/323830333a653136303a3a2f33322d3332203d3e20323639373331.roa
File:                     323830333a653136303a3a2f33322d3332203d3e20323639373331.roa (raw, json)
Hash identifier:          DEXyyZHCZV5wqxkzIYBFyeq7XygN0vtC7Vc5ez8QmCg=
Subject key identifier:   3B:19:E2:47:D7:19:C3:56:C3:49:19:20:2A:F1:3F:63:96:D0:BE:34
Certificate issuer:       /CN=E4C7EE5584B5FC557011BD69AB6E2D42593B85E7
Certificate serial:       3FA3A8560478AE5B66DE2F76F0A5A307C7828904
Authority key identifier: E4:C7:EE:55:84:B5:FC:55:70:11:BD:69:AB:6E:2D:42:59:3B:85:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4C7EE5584B5FC557011BD69AB6E2D42593B85E7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F74A068DD9F6E2ED2CB3A58C17CC145377EAD573FC489E94B37A04D4CB43F9F4/0/323830333a653136303a3a2f33322d3332203d3e20323639373331.roa
Signing time:             Tue 06 Jan 2026 19:13:52 +0000
ROA not before:           Tue 06 Jan 2026 19:08:52 +0000
ROA not after:            Tue 05 Jan 2027 19:13:52 +0000
asID:                     269731
IP address blocks:        2803:e160::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F74A068DD9F6E2ED2CB3A58C17CC145377EAD573FC489E94B37A04D4CB43F9F4/0/E4C7EE5584B5FC557011BD69AB6E2D42593B85E7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F74A068DD9F6E2ED2CB3A58C17CC145377EAD573FC489E94B37A04D4CB43F9F4/0/E4C7EE5584B5FC557011BD69AB6E2D42593B85E7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4C7EE5584B5FC557011BD69AB6E2D42593B85E7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a3:a8:56:04:78:ae:5b:66:de:2f:76:f0:a5:a3:07:c7:82:89:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4C7EE5584B5FC557011BD69AB6E2D42593B85E7
        Validity
            Not Before: Jan  6 19:08:52 2026 GMT
            Not After : Jan  5 19:13:52 2027 GMT
        Subject: CN=3B19E247D719C356C34919202AF13F6396D0BE34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:93:c0:43:34:45:8e:a6:e2:57:73:84:54:02:
                    b1:0c:4a:49:b5:55:dc:a0:10:3f:16:54:33:63:9f:
                    33:bb:42:75:5c:1c:a6:00:ec:7d:83:c7:1c:0b:4f:
                    f0:79:08:7e:11:93:ad:08:cb:d1:37:a0:6e:89:0c:
                    0a:07:e0:e1:29:9e:48:a5:3f:ab:aa:42:ab:35:60:
                    3a:b8:9a:91:83:93:f2:d8:c7:b6:d8:dd:f8:92:1f:
                    b8:4c:8d:ac:5a:0e:5c:af:61:95:69:0f:1a:4b:3f:
                    4e:79:9c:de:7d:bf:25:aa:85:82:38:aa:41:f4:cc:
                    5d:9a:75:df:9b:79:90:6b:c9:17:2f:54:52:31:c9:
                    fa:3b:da:c3:e8:20:dc:05:b2:0f:6c:f2:14:07:b7:
                    74:ed:08:d2:17:17:24:bf:8d:c5:6c:05:66:f0:17:
                    89:d7:7a:27:b7:d3:8f:c3:6a:6d:de:cd:fa:35:2a:
                    d8:65:52:76:4a:5e:70:ed:35:b5:a6:6e:7b:47:e0:
                    81:2c:63:c7:65:c5:4d:63:05:21:cd:21:3a:2c:b9:
                    7e:be:f1:30:48:e6:bb:17:95:dd:1f:40:ff:de:3b:
                    c3:42:b2:65:22:7c:80:1d:f9:38:b6:d3:b3:d2:9e:
                    f8:ef:61:c2:c8:3d:1d:d8:2c:4d:cb:7a:4b:12:7b:
                    d4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:19:E2:47:D7:19:C3:56:C3:49:19:20:2A:F1:3F:63:96:D0:BE:34
            X509v3 Authority Key Identifier:
                keyid:E4:C7:EE:55:84:B5:FC:55:70:11:BD:69:AB:6E:2D:42:59:3B:85:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F74A068DD9F6E2ED2CB3A58C17CC145377EAD573FC489E94B37A04D4CB43F9F4/0/E4C7EE5584B5FC557011BD69AB6E2D42593B85E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4C7EE5584B5FC557011BD69AB6E2D42593B85E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F74A068DD9F6E2ED2CB3A58C17CC145377EAD573FC489E94B37A04D4CB43F9F4/0/323830333a653136303a3a2f33322d3332203d3e20323639373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e160::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:16:3e:40:3c:37:ce:99:0a:b4:51:a3:cb:85:b3:66:6b:da:
         6b:af:e8:ce:e5:7e:47:55:ba:6e:20:9a:c3:18:2c:fd:f9:16:
         c2:eb:16:89:8d:0d:5c:60:9c:3d:f3:bb:9b:4a:ad:a1:ab:55:
         27:f3:4d:c6:b4:02:eb:e8:eb:69:2e:e9:be:ce:65:bc:c8:49:
         11:ee:ff:42:a7:ad:48:e2:3c:57:fc:6e:05:20:4c:a4:7f:9b:
         f6:26:80:35:43:b1:cf:b7:d0:ce:7f:87:f6:e9:6d:27:c7:36:
         8f:60:c5:71:72:fe:1d:51:87:36:a6:a3:64:c7:f7:a3:fc:0e:
         ca:7a:2c:73:f2:d1:f0:82:ea:2e:42:48:62:96:50:9f:b5:f4:
         8d:a2:5c:58:64:a8:2e:e0:12:f0:e2:61:fa:62:cb:04:89:d6:
         a6:0d:8a:d3:09:e0:90:23:9f:7a:6f:8c:b1:5e:5e:9c:f4:0e:
         c6:98:ae:44:7e:4c:07:07:3f:57:c9:e9:17:b3:b7:d7:7e:f9:
         10:5b:fc:b7:68:74:ad:e1:f5:cf:97:df:e1:8b:fd:0c:62:73:
         9d:72:3e:40:b3:d8:ae:53:57:59:80:c3:12:97:98:49:ce:5a:
         dd:33:24:70:b2:34:e5:c6:d6:45:18:53:80:94:e2:54:d3:d6:
         b7:44:7a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:28:35 2026 by rpki-client