This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B6B23E958EA87B8EC36E5ED1B86D10E0113F67B0F375C95CCC5470EE3D12022/0/323830333a616130303a3a2f33322d3332203d3e203237363539.roa
File:                     323830333a616130303a3a2f33322d3332203d3e203237363539.roa (raw, json)
Hash identifier:          LMsW2dIqEp7nYLR5dyumcS2jZuDJK1XMeFsBS39KG7g=
Subject key identifier:   83:ED:6A:03:D3:9A:0F:71:08:95:B8:66:91:CB:BC:46:BB:23:56:B6
Certificate issuer:       /CN=8D2583CCB91894057397D5D0034AC586BBE52555
Certificate serial:       283ADE253BBDD0E9E61E6F69B78DBED061C194CE
Authority key identifier: 8D:25:83:CC:B9:18:94:05:73:97:D5:D0:03:4A:C5:86:BB:E5:25:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D2583CCB91894057397D5D0034AC586BBE52555.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B6B23E958EA87B8EC36E5ED1B86D10E0113F67B0F375C95CCC5470EE3D12022/0/323830333a616130303a3a2f33322d3332203d3e203237363539.roa
Signing time:             Tue 06 Jan 2026 19:16:29 +0000
ROA not before:           Tue 06 Jan 2026 19:11:29 +0000
ROA not after:            Tue 05 Jan 2027 19:16:29 +0000
asID:                     27659
IP address blocks:        2803:aa00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B6B23E958EA87B8EC36E5ED1B86D10E0113F67B0F375C95CCC5470EE3D12022/0/8D2583CCB91894057397D5D0034AC586BBE52555.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B6B23E958EA87B8EC36E5ED1B86D10E0113F67B0F375C95CCC5470EE3D12022/0/8D2583CCB91894057397D5D0034AC586BBE52555.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D2583CCB91894057397D5D0034AC586BBE52555.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 12:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:3a:de:25:3b:bd:d0:e9:e6:1e:6f:69:b7:8d:be:d0:61:c1:94:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D2583CCB91894057397D5D0034AC586BBE52555
        Validity
            Not Before: Jan  6 19:11:29 2026 GMT
            Not After : Jan  5 19:16:29 2027 GMT
        Subject: CN=83ED6A03D39A0F710895B86691CBBC46BB2356B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:71:6c:7d:63:a6:fc:56:e3:1b:0e:59:f8:11:
                    5c:d1:9f:bf:66:47:35:13:fa:2b:60:4f:8e:b8:a2:
                    97:dd:ab:0c:85:a5:85:46:75:c0:5c:1d:7f:f3:2c:
                    2b:87:a7:4b:57:39:d5:2a:91:af:67:00:ec:68:2b:
                    b7:16:6b:64:04:9c:8b:45:c5:77:59:6e:04:25:4b:
                    3b:fd:f3:32:21:ad:4f:25:f1:4a:80:f8:16:bd:22:
                    99:6d:89:94:5c:ff:10:d6:dc:32:90:0b:b5:7c:61:
                    4b:54:03:98:87:74:98:b0:da:7d:af:58:7b:22:7b:
                    64:74:0f:6c:92:9d:b9:93:6b:69:d4:e5:fa:04:dc:
                    ab:51:56:52:76:50:1e:3d:22:7a:d0:a8:66:ef:ca:
                    71:2a:84:e8:c0:42:62:ad:13:05:46:cb:3a:0f:96:
                    ca:8b:05:02:96:9b:e3:be:4b:1a:71:3b:c0:f0:1f:
                    b5:55:3f:0b:74:3f:15:4c:00:ef:06:73:ce:d1:54:
                    7b:45:c0:23:db:d8:65:fe:52:c9:95:ac:24:62:ab:
                    e0:fc:6b:d6:c8:95:b4:ff:92:78:07:f8:b9:02:59:
                    c7:d8:cd:7a:f4:02:5f:6e:e8:c8:15:d2:a4:52:ca:
                    b2:53:a5:ad:8d:ac:93:45:aa:d2:0a:47:9a:58:9b:
                    c8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:ED:6A:03:D3:9A:0F:71:08:95:B8:66:91:CB:BC:46:BB:23:56:B6
            X509v3 Authority Key Identifier:
                keyid:8D:25:83:CC:B9:18:94:05:73:97:D5:D0:03:4A:C5:86:BB:E5:25:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B6B23E958EA87B8EC36E5ED1B86D10E0113F67B0F375C95CCC5470EE3D12022/0/8D2583CCB91894057397D5D0034AC586BBE52555.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D2583CCB91894057397D5D0034AC586BBE52555.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B6B23E958EA87B8EC36E5ED1B86D10E0113F67B0F375C95CCC5470EE3D12022/0/323830333a616130303a3a2f33322d3332203d3e203237363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:aa00::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:1d:15:bd:1a:ba:fe:b6:a2:7a:cb:81:a2:be:57:6c:97:b1:
         59:6f:ef:f9:a1:25:c8:3b:0d:97:88:2e:5a:4d:a3:6b:09:28:
         90:26:b5:96:a2:c9:58:5b:a3:67:ae:02:6c:bd:fb:df:5b:6b:
         a8:68:ab:92:cb:5e:8d:46:0c:20:26:97:60:34:82:a9:ce:a5:
         8b:28:73:12:15:b7:aa:ac:a6:64:2e:28:08:54:2d:a5:fa:52:
         00:f2:dd:0d:bc:1b:64:b1:92:da:e6:36:e2:60:cc:9a:7e:4c:
         a8:bb:90:be:01:da:95:1b:31:dd:f3:e3:d6:1f:05:be:b9:0e:
         c8:a9:62:f5:b7:69:1b:94:4d:8f:b6:ad:de:ec:27:72:ec:3a:
         04:ad:ab:d5:17:74:a1:00:3f:af:ab:cb:99:21:1e:d1:ae:50:
         36:23:57:4f:46:5a:a9:a9:b8:96:c3:0b:98:6f:72:2d:ab:7c:
         33:bf:c4:8f:2b:98:7f:2e:f9:39:44:fd:40:11:1b:a1:45:df:
         32:49:c5:7c:75:ef:52:45:da:03:97:ec:74:0f:21:5d:c0:51:
         f1:87:24:1b:d2:0f:b3:10:76:ae:a1:2a:e2:d4:ab:fb:89:64:
         1e:ba:4d:81:40:94:1b:ec:67:11:d1:5d:d4:3a:dc:94:a9:48:
         30:de:a7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 07:04:01 2026 by rpki-client