This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/158D38E5B007C81774C2460D5BC0D1DBA2AEBA65B1E1E677F91CA1C3BAB823F3/0/323830333a636239303a3a2f33322d3438203d3e20323733303334.roa
File:                     323830333a636239303a3a2f33322d3438203d3e20323733303334.roa (raw, json)
Hash identifier:          AiuU235zNY//bUvv+1F7HMWDP8UjQsjOGWKx5hVqOBU=
Subject key identifier:   75:45:5D:74:E5:AD:13:81:7B:CD:B4:EB:60:98:0A:78:32:98:57:C1
Certificate issuer:       /CN=6E2A75D39AF39C1BE840ED6A81CC769A82A0D472
Certificate serial:       42DBE6FA1D091C4BB4A3C4FFEFFE7819D36073F5
Authority key identifier: 6E:2A:75:D3:9A:F3:9C:1B:E8:40:ED:6A:81:CC:76:9A:82:A0:D4:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6E2A75D39AF39C1BE840ED6A81CC769A82A0D472.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/158D38E5B007C81774C2460D5BC0D1DBA2AEBA65B1E1E677F91CA1C3BAB823F3/0/323830333a636239303a3a2f33322d3438203d3e20323733303334.roa
Signing time:             Tue 06 Jan 2026 19:04:09 +0000
ROA not before:           Tue 06 Jan 2026 18:59:09 +0000
ROA not after:            Tue 05 Jan 2027 19:04:09 +0000
asID:                     273034
IP address blocks:        2803:cb90::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/158D38E5B007C81774C2460D5BC0D1DBA2AEBA65B1E1E677F91CA1C3BAB823F3/0/6E2A75D39AF39C1BE840ED6A81CC769A82A0D472.crl
                          rsync://repository.lacnic.net/rpki/lacnic/158D38E5B007C81774C2460D5BC0D1DBA2AEBA65B1E1E677F91CA1C3BAB823F3/0/6E2A75D39AF39C1BE840ED6A81CC769A82A0D472.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6E2A75D39AF39C1BE840ED6A81CC769A82A0D472.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Jan 2026 11:04:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:db:e6:fa:1d:09:1c:4b:b4:a3:c4:ff:ef:fe:78:19:d3:60:73:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E2A75D39AF39C1BE840ED6A81CC769A82A0D472
        Validity
            Not Before: Jan  6 18:59:09 2026 GMT
            Not After : Jan  5 19:04:09 2027 GMT
        Subject: CN=75455D74E5AD13817BCDB4EB60980A78329857C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:5c:06:69:cf:04:9f:e4:07:f4:09:59:b5:b6:
                    9c:3e:20:ee:e5:3f:38:b0:ce:21:16:e4:61:c5:99:
                    fe:54:6f:97:fb:09:5e:a4:b3:34:cf:a7:6b:fd:d7:
                    47:38:eb:d3:ca:0e:de:25:1f:51:f6:f2:d5:8a:27:
                    4e:43:12:12:cf:b5:0a:bf:86:3d:0b:b0:59:52:73:
                    8b:25:64:a7:30:14:0e:21:aa:36:b7:63:f8:3a:91:
                    55:85:c4:27:bb:aa:18:0c:a1:84:4b:69:de:2e:7f:
                    18:22:7e:b3:a0:e8:68:9b:ca:62:33:29:24:2b:f9:
                    ac:14:b2:5b:99:33:2d:98:1f:68:de:f5:e3:2f:d5:
                    c9:09:3b:21:5b:9e:4e:45:f3:ca:6e:50:b0:b5:26:
                    33:4d:de:13:b8:7d:0c:57:48:c2:3e:c8:72:24:2f:
                    22:1e:9d:b5:db:49:54:66:1e:87:1b:5f:68:b8:89:
                    6c:47:a8:ec:da:c3:71:03:9c:78:4d:16:d9:ed:02:
                    fc:ba:b9:11:1a:79:13:66:09:16:40:bb:08:77:77:
                    86:7e:e7:6a:53:78:89:ea:0b:bc:00:e6:34:e9:c5:
                    b2:dd:5a:05:a0:97:55:68:2d:3b:8e:00:f3:d5:f8:
                    ba:aa:b9:ad:f6:8c:0b:1b:a1:93:b2:3f:d7:0c:56:
                    9e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:45:5D:74:E5:AD:13:81:7B:CD:B4:EB:60:98:0A:78:32:98:57:C1
            X509v3 Authority Key Identifier:
                keyid:6E:2A:75:D3:9A:F3:9C:1B:E8:40:ED:6A:81:CC:76:9A:82:A0:D4:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/158D38E5B007C81774C2460D5BC0D1DBA2AEBA65B1E1E677F91CA1C3BAB823F3/0/6E2A75D39AF39C1BE840ED6A81CC769A82A0D472.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6E2A75D39AF39C1BE840ED6A81CC769A82A0D472.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/158D38E5B007C81774C2460D5BC0D1DBA2AEBA65B1E1E677F91CA1C3BAB823F3/0/323830333a636239303a3a2f33322d3438203d3e20323733303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cb90::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:bc:c0:06:5b:48:5a:e9:18:7e:5a:fb:8a:97:e2:31:e9:70:
         00:76:ec:ea:12:ed:c0:de:00:e6:cc:2e:08:9b:d2:9c:50:41:
         b8:52:dc:32:76:6e:c9:67:de:77:c1:b2:13:d0:f1:18:4e:2d:
         48:1f:55:c6:10:c2:45:35:63:f3:aa:7d:09:18:6b:cd:ef:27:
         9c:d0:4e:1d:e7:87:1b:ae:02:d5:bc:81:c4:39:f5:9b:7d:55:
         53:45:cf:16:33:cb:34:21:05:ee:35:9f:cf:72:fd:81:50:2f:
         a5:bd:6f:9b:7b:d2:23:7f:03:ec:24:91:ab:92:13:f3:92:22:
         da:1b:3c:28:87:44:d2:02:06:e6:e9:cf:bf:b6:32:12:82:fd:
         14:2a:9d:d8:ae:3d:e6:04:b6:94:e4:02:ef:3f:12:ab:fb:13:
         c2:6a:38:a4:e1:17:8e:94:1c:1d:92:33:5f:22:88:b5:64:7c:
         06:85:dc:e0:30:6e:ec:4d:74:91:13:84:0f:b8:fa:8b:f0:7e:
         48:35:36:b9:0a:a9:37:4e:56:20:6f:64:b6:64:d0:fb:a6:23:
         00:bf:92:74:92:17:9b:90:eb:3d:46:49:06:ce:13:eb:91:5f:
         4c:3a:9f:85:51:e8:fa:74:2a:0a:8d:ec:52:77:45:33:b5:a8:
         fd:1b:07:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 07:38:08 2026 by rpki-client