This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BD745DE6CB24955B38D4AA5346D9346A926A70CA065752E75BED13470A5F487/0/323830333a313630303a3a2f33322d3332203d3e203532333839.roa
File:                     323830333a313630303a3a2f33322d3332203d3e203532333839.roa (raw, json)
Hash identifier:          iadxd/BOANSFgPqG25FmZERiYAfozT+Rr9CusXSZmbQ=
Subject key identifier:   A8:0B:4F:A8:D4:07:BB:A3:38:AE:7D:07:D4:5F:5C:25:0A:F9:A4:CB
Certificate issuer:       /CN=C2D0E7D1A59D2B829AF1B262949F4B94C6CEF0D8
Certificate serial:       076C4D7636B6A05692A1BF8B9772E0E88D3303E9
Authority key identifier: C2:D0:E7:D1:A5:9D:2B:82:9A:F1:B2:62:94:9F:4B:94:C6:CE:F0:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2D0E7D1A59D2B829AF1B262949F4B94C6CEF0D8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BD745DE6CB24955B38D4AA5346D9346A926A70CA065752E75BED13470A5F487/0/323830333a313630303a3a2f33322d3332203d3e203532333839.roa
Signing time:             Tue 06 Jan 2026 19:08:56 +0000
ROA not before:           Tue 06 Jan 2026 19:03:56 +0000
ROA not after:            Tue 05 Jan 2027 19:08:56 +0000
asID:                     52389
IP address blocks:        2803:1600::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BD745DE6CB24955B38D4AA5346D9346A926A70CA065752E75BED13470A5F487/0/C2D0E7D1A59D2B829AF1B262949F4B94C6CEF0D8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BD745DE6CB24955B38D4AA5346D9346A926A70CA065752E75BED13470A5F487/0/C2D0E7D1A59D2B829AF1B262949F4B94C6CEF0D8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2D0E7D1A59D2B829AF1B262949F4B94C6CEF0D8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 12:28:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:6c:4d:76:36:b6:a0:56:92:a1:bf:8b:97:72:e0:e8:8d:33:03:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2D0E7D1A59D2B829AF1B262949F4B94C6CEF0D8
        Validity
            Not Before: Jan  6 19:03:56 2026 GMT
            Not After : Jan  5 19:08:56 2027 GMT
        Subject: CN=A80B4FA8D407BBA338AE7D07D45F5C250AF9A4CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:86:68:5b:80:7a:a8:25:b6:e7:fc:03:79:ca:
                    92:ef:aa:9a:73:fe:d5:3c:4f:76:72:d9:2d:fe:fa:
                    5c:bc:13:d2:f4:23:d3:3e:b6:60:50:d0:38:ea:9b:
                    52:97:52:79:c3:69:3c:fd:1e:11:b5:a7:6a:63:f0:
                    5b:4d:e1:2c:59:c5:9c:d6:0a:01:d3:ad:8b:16:26:
                    90:8c:91:74:7a:4b:69:08:2a:5b:2f:ef:8d:88:99:
                    ec:ff:65:12:9e:32:73:70:03:d3:bc:18:22:6e:12:
                    b1:13:b5:48:3a:a5:da:75:64:89:f8:c0:79:98:97:
                    a1:05:04:41:71:31:61:c4:d6:88:40:94:86:f6:ac:
                    34:4a:34:db:20:68:98:cf:81:02:24:ba:e5:22:58:
                    39:ec:4c:b5:ba:31:78:d2:e1:39:43:ca:d5:11:81:
                    ef:70:f6:65:71:f7:16:87:a9:a5:55:c0:fb:39:6b:
                    f2:a9:2d:68:77:8b:44:6c:2d:65:91:5e:0a:c1:13:
                    4b:8c:79:b0:16:84:35:69:e5:22:19:d3:19:5f:56:
                    f4:f4:d2:ea:f8:7b:9e:bf:56:90:32:22:a6:0b:21:
                    40:cb:68:bf:ad:f9:0e:1b:19:db:8a:a3:12:12:fb:
                    fb:e0:0a:84:d5:f8:ab:e9:b0:bb:87:60:f0:12:20:
                    aa:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:0B:4F:A8:D4:07:BB:A3:38:AE:7D:07:D4:5F:5C:25:0A:F9:A4:CB
            X509v3 Authority Key Identifier:
                keyid:C2:D0:E7:D1:A5:9D:2B:82:9A:F1:B2:62:94:9F:4B:94:C6:CE:F0:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BD745DE6CB24955B38D4AA5346D9346A926A70CA065752E75BED13470A5F487/0/C2D0E7D1A59D2B829AF1B262949F4B94C6CEF0D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2D0E7D1A59D2B829AF1B262949F4B94C6CEF0D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BD745DE6CB24955B38D4AA5346D9346A926A70CA065752E75BED13470A5F487/0/323830333a313630303a3a2f33322d3332203d3e203532333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1600::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:8e:ca:de:1d:93:06:6b:ce:35:16:b5:17:ec:4c:92:0e:48:
         c3:58:9c:98:92:fd:2f:11:ae:86:27:2b:03:34:f3:b2:ad:12:
         6b:6f:e3:a9:9e:11:99:1d:12:0e:c5:f5:e2:06:f2:ce:b8:2c:
         e9:50:45:ae:98:3a:f0:13:5a:34:a3:cd:db:f2:ca:a4:e1:60:
         93:b0:14:d9:25:be:77:1f:2a:6e:3f:29:6a:fc:2e:df:f0:95:
         39:22:bb:5b:14:ca:15:ac:37:95:54:e9:9e:48:bd:d2:7e:83:
         b2:b9:f6:9c:2c:2a:f5:8f:8a:d0:70:80:06:a1:bb:48:8b:0d:
         b3:95:e1:e4:c5:ac:00:f3:c8:a8:e6:8d:5e:d0:4f:51:e0:b3:
         1e:86:89:72:26:83:55:49:d1:94:7b:f4:24:47:93:e5:0d:c4:
         21:66:07:57:7d:3f:c3:f3:61:dc:33:1f:1a:1f:4c:34:66:8e:
         83:05:94:ed:6e:44:0b:1d:6f:76:1c:3a:f9:f9:e0:72:34:dc:
         fc:2b:4d:41:52:21:97:b7:d9:9c:4c:ab:af:6d:d5:87:07:21:
         00:d8:f6:2f:93:d0:58:3a:a8:15:f8:30:98:d9:e6:23:15:b8:
         a0:ff:f3:e2:9c:3c:9b:83:27:dc:af:cb:d7:9a:b0:d1:2d:83:
         96:55:62:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 07:50:10 2026 by rpki-client