This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/323830333a363163303a3a2f33322d3634203d3e20323635363833.roa
File:                     323830333a363163303a3a2f33322d3634203d3e20323635363833.roa (raw, json)
Hash identifier:          QmQHVdEyZNm2qTnEpWW0WwAJ7v9mlSF0RkYWae2+QrU=
Subject key identifier:   F9:6B:F4:EB:3B:D1:44:59:D6:91:CB:EB:D7:A0:C2:D0:96:6D:83:C8
Certificate issuer:       /CN=CD3BE458FB49C7199926F12B0F7938C5DDC67C44
Certificate serial:       549F7C4EA2CB3975B3B416D03DD22492324CD4A2
Authority key identifier: CD:3B:E4:58:FB:49:C7:19:99:26:F1:2B:0F:79:38:C5:DD:C6:7C:44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/323830333a363163303a3a2f33322d3634203d3e20323635363833.roa
Signing time:             Tue 06 Jan 2026 19:44:41 +0000
ROA not before:           Tue 06 Jan 2026 19:39:41 +0000
ROA not after:            Tue 05 Jan 2027 19:44:41 +0000
asID:                     265683
IP address blocks:        2803:61c0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:9f:7c:4e:a2:cb:39:75:b3:b4:16:d0:3d:d2:24:92:32:4c:d4:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD3BE458FB49C7199926F12B0F7938C5DDC67C44
        Validity
            Not Before: Jan  6 19:39:41 2026 GMT
            Not After : Jan  5 19:44:41 2027 GMT
        Subject: CN=F96BF4EB3BD14459D691CBEBD7A0C2D0966D83C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b3:00:87:a9:d8:3b:cc:1d:f7:d0:fc:47:3d:
                    10:fb:5c:30:98:25:fb:18:1c:c0:76:f1:4e:68:b0:
                    3b:8b:21:1a:7e:57:38:ba:28:47:86:30:83:a6:97:
                    96:3d:e1:51:db:d4:82:a6:46:b8:61:08:99:ad:5b:
                    20:92:5e:ad:cb:70:f9:4b:01:4a:03:7a:15:b8:5b:
                    39:5e:a1:20:3c:b2:48:93:bf:26:e8:ea:97:b0:2d:
                    95:a3:9b:5a:26:b9:a7:0a:37:03:5b:b5:5b:c4:2f:
                    c5:ce:9b:11:cf:1a:57:12:69:73:77:64:98:83:2e:
                    12:19:cc:56:82:d2:ab:82:7d:25:f9:4d:61:31:c9:
                    e4:02:29:a9:17:4b:42:15:91:7a:15:03:1e:24:9a:
                    55:1a:ad:7d:09:36:29:3a:dc:cd:1c:8a:d4:33:c9:
                    d3:12:64:b3:88:48:14:36:da:cb:09:75:b4:2e:fd:
                    2a:42:e8:f9:71:d4:43:7e:1b:bd:bd:c3:dd:74:bb:
                    bd:a8:db:b4:cc:4b:cc:42:57:39:14:1d:da:af:70:
                    fb:8d:5b:f1:6b:f1:79:0c:39:de:67:e0:9b:1c:a8:
                    7d:0d:b6:55:04:f2:89:4f:c0:43:fe:aa:ba:6d:d4:
                    37:82:46:7d:b2:3b:de:9e:0f:4a:6e:a7:49:9a:ff:
                    49:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:6B:F4:EB:3B:D1:44:59:D6:91:CB:EB:D7:A0:C2:D0:96:6D:83:C8
            X509v3 Authority Key Identifier:
                keyid:CD:3B:E4:58:FB:49:C7:19:99:26:F1:2B:0F:79:38:C5:DD:C6:7C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/323830333a363163303a3a2f33322d3634203d3e20323635363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:61c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:a5:da:98:ef:74:ff:88:32:d8:02:37:2b:66:39:03:c0:be:
         e7:b6:2f:73:b3:b4:c8:27:46:c8:5c:21:2d:9d:c6:f1:b5:37:
         76:b5:79:e4:08:25:8a:a1:d1:05:89:62:b8:84:c8:99:0a:b1:
         be:c8:f8:9a:96:b0:c4:86:a9:fb:e6:68:37:b8:07:e5:ab:62:
         67:af:88:de:96:d9:3f:82:c8:78:d3:2c:7a:ec:cf:b1:f6:03:
         d7:3d:ea:95:8d:72:4a:fe:a8:35:d5:47:7c:75:16:0a:a0:ba:
         be:94:bb:c7:55:26:e1:3f:3b:5a:36:fd:d1:d6:e0:f2:47:7b:
         53:f5:66:92:0b:7c:0a:f1:f6:4c:c6:4a:84:f7:8f:9f:28:a7:
         d6:7a:1e:5e:29:dc:35:1d:19:f4:83:3c:f4:0e:f6:46:8e:c8:
         ec:8e:54:fa:e5:eb:de:d8:bc:aa:67:bb:2c:4e:a2:c7:0a:5b:
         e4:d4:eb:7c:52:5b:90:03:8f:7f:58:23:fc:b7:a9:30:f1:40:
         69:41:62:af:e7:42:f8:79:1c:1a:9b:9b:6b:b5:2f:07:ad:1f:
         c4:22:d7:64:64:79:c7:13:a9:60:8b:5a:7c:a0:1b:ee:29:6e:
         5f:79:e3:ee:03:a1:e6:16:7b:e2:78:1f:4e:9c:4d:b5:f9:a0:
         87:5b:ce:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:09:10 2026 by rpki-client