This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F795901C2F5F3693F09B6D80474803E659E531BBB6756D9FBC48A26AA5604BCE/0/323830333a3339303a636363303a3a2f34342d3434203d3e20323733303131.roa
File:                     323830333a3339303a636363303a3a2f34342d3434203d3e20323733303131.roa (raw, json)
Hash identifier:          cTMt0jGSkBmUZSxNHD3OD9RDXFhmts7muWTA/YuXQGo=
Subject key identifier:   18:F6:17:27:A8:B1:33:A4:74:29:97:D2:3C:59:11:F8:15:5B:7F:A3
Certificate issuer:       /CN=845A11C928BFE1E8ED4CA40A68A609BC4386CBE1
Certificate serial:       13156374FED55C8B4F0348BE09E5509AFF7029AD
Authority key identifier: 84:5A:11:C9:28:BF:E1:E8:ED:4C:A4:0A:68:A6:09:BC:43:86:CB:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/845A11C928BFE1E8ED4CA40A68A609BC4386CBE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F795901C2F5F3693F09B6D80474803E659E531BBB6756D9FBC48A26AA5604BCE/0/323830333a3339303a636363303a3a2f34342d3434203d3e20323733303131.roa
Signing time:             Tue 06 Jan 2026 18:57:38 +0000
ROA not before:           Tue 06 Jan 2026 18:52:38 +0000
ROA not after:            Tue 05 Jan 2027 18:57:38 +0000
asID:                     273011
IP address blocks:        2803:390:ccc0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F795901C2F5F3693F09B6D80474803E659E531BBB6756D9FBC48A26AA5604BCE/0/845A11C928BFE1E8ED4CA40A68A609BC4386CBE1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F795901C2F5F3693F09B6D80474803E659E531BBB6756D9FBC48A26AA5604BCE/0/845A11C928BFE1E8ED4CA40A68A609BC4386CBE1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/845A11C928BFE1E8ED4CA40A68A609BC4386CBE1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:15:63:74:fe:d5:5c:8b:4f:03:48:be:09:e5:50:9a:ff:70:29:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845A11C928BFE1E8ED4CA40A68A609BC4386CBE1
        Validity
            Not Before: Jan  6 18:52:38 2026 GMT
            Not After : Jan  5 18:57:38 2027 GMT
        Subject: CN=18F61727A8B133A4742997D23C5911F8155B7FA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:69:32:1e:81:8e:b5:16:dd:d8:18:7c:c7:62:
                    af:20:37:6d:c4:24:22:a6:c9:af:55:9e:7b:d9:7f:
                    46:cf:76:66:9d:90:87:e0:a7:60:44:78:6a:e4:ca:
                    e8:2b:49:bb:da:3f:5a:c1:d8:bf:f2:4d:02:8e:be:
                    36:6b:46:39:9d:f5:9a:04:26:ad:f3:46:36:7b:4c:
                    4e:66:b1:d5:b6:82:00:73:7f:67:52:b7:a7:10:1f:
                    b1:a8:99:37:c9:d5:1c:44:81:81:ea:ce:fa:9e:ed:
                    a4:8a:b3:a6:ac:9c:a7:df:74:36:d0:7f:5f:d5:6b:
                    1d:27:dd:49:1c:eb:82:c2:97:69:75:0b:06:d4:df:
                    d4:f6:47:21:90:f7:ba:87:ee:43:fd:b4:b5:78:9d:
                    ac:7b:b2:bb:24:b8:a4:ee:1b:ae:19:56:88:7e:42:
                    c9:4c:db:cf:c8:49:f2:f1:61:f9:8e:6c:6c:bd:e8:
                    76:2d:de:f0:a4:d3:30:c8:7f:9b:b7:55:f9:38:43:
                    aa:c5:24:0c:7b:54:ae:5d:e4:e5:6e:84:d3:6c:fc:
                    27:26:bf:d0:55:15:b1:98:0f:fa:14:26:b4:83:94:
                    2c:45:37:f6:27:3b:4a:8b:01:19:d6:90:c6:bb:de:
                    5a:ae:73:a6:6a:39:1e:03:45:3d:2b:e1:b9:a8:ff:
                    71:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F6:17:27:A8:B1:33:A4:74:29:97:D2:3C:59:11:F8:15:5B:7F:A3
            X509v3 Authority Key Identifier:
                keyid:84:5A:11:C9:28:BF:E1:E8:ED:4C:A4:0A:68:A6:09:BC:43:86:CB:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F795901C2F5F3693F09B6D80474803E659E531BBB6756D9FBC48A26AA5604BCE/0/845A11C928BFE1E8ED4CA40A68A609BC4386CBE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/845A11C928BFE1E8ED4CA40A68A609BC4386CBE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F795901C2F5F3693F09B6D80474803E659E531BBB6756D9FBC48A26AA5604BCE/0/323830333a3339303a636363303a3a2f34342d3434203d3e20323733303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:390:ccc0::/44

    Signature Algorithm: sha256WithRSAEncryption
         91:c1:71:f2:ec:8d:08:89:41:ce:5f:cd:52:36:86:f5:37:a7:
         c0:10:2c:0f:80:58:02:43:5a:83:b3:a5:1e:09:3d:30:6a:6a:
         a8:83:95:3d:d6:ea:4e:aa:12:76:ee:0f:89:03:15:32:38:bc:
         17:58:51:06:89:98:24:e2:cc:36:e0:61:8c:cc:90:59:7e:4b:
         9f:92:5c:88:47:d3:e3:74:38:1e:54:b1:6b:d9:65:27:4d:bd:
         b0:97:6a:85:a7:9f:f3:7d:38:91:ab:76:0b:df:75:9e:1b:54:
         9b:35:82:0e:ae:7f:48:27:e8:2c:04:ab:34:d7:e2:32:29:b4:
         60:f6:a2:25:d4:9c:06:07:2a:c0:84:0e:2c:aa:0f:de:a4:61:
         8d:e2:76:dc:7f:f1:98:74:bf:a5:2f:d8:48:01:91:9f:5b:97:
         e9:1d:11:63:eb:58:45:f8:cb:6a:57:2d:96:5c:c7:d0:5e:ce:
         8b:c9:0e:df:06:f2:2e:fa:ba:ae:7f:ef:81:71:ef:22:0a:a3:
         12:f3:32:30:96:0e:7b:5f:47:10:61:8b:69:70:2f:eb:4f:ef:
         26:e9:4e:82:a3:59:e4:4e:cf:c7:07:1f:b9:db:5a:d0:f8:05:
         62:7b:8b:7d:66:9d:c3:6d:b8:09:52:5c:ff:8b:4a:42:46:d3:
         98:8c:02:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:07:46 2026 by rpki-client