This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2ED4809B3D036758B98A0CED5B96A2C0FEB0C82429A076B3380A3206EB7C8DBD/0/323830333a326265303a3a2f33322d3438203d3e20323730303833.roa
File:                     323830333a326265303a3a2f33322d3438203d3e20323730303833.roa (raw, json)
Hash identifier:          pWTkUJkkwEyUnzSZPCdBtD6A/VoSRUEI5keMMcE/XGY=
Subject key identifier:   D3:40:19:3E:95:FB:6B:C1:A0:39:44:39:84:38:F5:7C:30:6D:C8:23
Certificate issuer:       /CN=80C810ED88D5F93C94792378CA0CC223E6DB869F
Certificate serial:       1930BC1E963F3D9E5BBF01B7E2E3D5463F54FDDE
Authority key identifier: 80:C8:10:ED:88:D5:F9:3C:94:79:23:78:CA:0C:C2:23:E6:DB:86:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80C810ED88D5F93C94792378CA0CC223E6DB869F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2ED4809B3D036758B98A0CED5B96A2C0FEB0C82429A076B3380A3206EB7C8DBD/0/323830333a326265303a3a2f33322d3438203d3e20323730303833.roa
Signing time:             Tue 06 Jan 2026 19:02:34 +0000
ROA not before:           Tue 06 Jan 2026 18:57:34 +0000
ROA not after:            Tue 05 Jan 2027 19:02:34 +0000
asID:                     270083
IP address blocks:        2803:2be0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2ED4809B3D036758B98A0CED5B96A2C0FEB0C82429A076B3380A3206EB7C8DBD/0/80C810ED88D5F93C94792378CA0CC223E6DB869F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2ED4809B3D036758B98A0CED5B96A2C0FEB0C82429A076B3380A3206EB7C8DBD/0/80C810ED88D5F93C94792378CA0CC223E6DB869F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80C810ED88D5F93C94792378CA0CC223E6DB869F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 13:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:30:bc:1e:96:3f:3d:9e:5b:bf:01:b7:e2:e3:d5:46:3f:54:fd:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80C810ED88D5F93C94792378CA0CC223E6DB869F
        Validity
            Not Before: Jan  6 18:57:34 2026 GMT
            Not After : Jan  5 19:02:34 2027 GMT
        Subject: CN=D340193E95FB6BC1A03944398438F57C306DC823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:53:33:96:72:20:d1:ce:ed:d0:0e:92:6f:36:
                    14:cd:70:b8:fc:e8:0f:ab:cd:9f:e4:f9:07:4b:2b:
                    49:07:e0:c4:44:34:ee:64:f9:f1:23:bc:a0:1c:f6:
                    12:01:42:22:b6:7f:de:68:ac:d6:f7:6d:a5:84:f9:
                    a1:25:fd:9f:cd:b9:d1:08:37:09:15:ca:38:d4:07:
                    58:27:de:f3:0b:d0:e8:c9:68:68:f1:62:23:64:23:
                    8a:e6:cb:af:ae:90:ca:cd:53:54:41:22:66:2d:45:
                    38:0f:26:2a:eb:8e:0f:e1:d6:c4:ec:48:fe:be:58:
                    6f:29:cd:ac:7e:4c:6e:db:7c:18:a3:fd:81:a2:eb:
                    0f:ed:ec:ff:28:9e:53:b1:ea:00:82:bb:68:73:8e:
                    3d:ad:42:f9:f2:0c:79:1a:85:79:ca:04:dc:6a:3e:
                    01:ef:5c:59:4b:c9:4e:70:99:88:86:2e:a3:7a:25:
                    62:23:2c:0a:99:b1:cd:01:65:45:68:cc:20:9c:a6:
                    24:8b:6d:8a:0f:10:e6:33:04:3d:fa:36:ee:82:be:
                    99:7d:3b:e6:c8:84:b8:d6:aa:8a:91:54:19:f1:1c:
                    d6:81:76:16:56:57:58:97:5d:5a:8f:27:ed:f6:e7:
                    18:f6:a3:51:69:a9:40:99:d6:ad:0d:89:65:cd:f3:
                    41:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:40:19:3E:95:FB:6B:C1:A0:39:44:39:84:38:F5:7C:30:6D:C8:23
            X509v3 Authority Key Identifier:
                keyid:80:C8:10:ED:88:D5:F9:3C:94:79:23:78:CA:0C:C2:23:E6:DB:86:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2ED4809B3D036758B98A0CED5B96A2C0FEB0C82429A076B3380A3206EB7C8DBD/0/80C810ED88D5F93C94792378CA0CC223E6DB869F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80C810ED88D5F93C94792378CA0CC223E6DB869F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2ED4809B3D036758B98A0CED5B96A2C0FEB0C82429A076B3380A3206EB7C8DBD/0/323830333a326265303a3a2f33322d3438203d3e20323730303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2be0::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:be:f0:84:d8:71:34:05:59:f6:b4:15:5b:aa:77:d6:02:55:
         3e:63:7e:35:2c:57:9c:df:34:47:e5:ea:85:64:6a:25:8b:ec:
         c6:5e:5c:1d:ec:22:6b:1c:f0:74:fd:bd:76:27:2c:f6:d5:84:
         6b:5d:3f:6e:93:f6:25:40:66:30:57:2e:e4:6a:ae:18:26:06:
         cf:3b:29:cf:c7:17:07:97:4a:ab:85:8e:c5:1a:cc:75:54:a7:
         ec:97:04:80:2b:db:bf:13:ee:60:fd:fe:ab:ce:15:4c:d4:69:
         e9:29:45:6f:63:55:f0:af:56:5f:fa:6a:51:d2:7f:c6:52:60:
         b2:6d:51:76:b0:92:d7:2d:39:80:44:01:ce:ae:e7:71:51:ff:
         e6:84:0a:43:1a:8b:9e:4e:f8:d4:40:60:3d:12:c5:57:d1:1a:
         82:ad:c0:6b:ad:70:bf:1d:c3:aa:0a:64:5d:7b:24:0e:4c:fa:
         78:54:64:1c:42:83:74:61:2a:8b:f8:f8:55:cb:b3:31:3f:2d:
         64:45:f4:01:cf:98:3c:62:e1:86:48:e7:c3:2b:bb:44:04:f8:
         b5:e1:cf:f8:a7:dd:03:62:75:c9:ba:99:9a:08:da:95:49:7d:
         ed:16:85:34:ae:85:16:4e:cc:1e:64:32:bd:95:0c:e2:b9:41:
         59:6b:b7:7f
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUGTC8HpY/PZ5bvwG34uPVRj9U/d4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBDODEwRUQ4OEQ1RjkzQzk0NzkyMzc4Q0EwQ0MyMjNF
NkRCODY5RjAeFw0yNjAxMDYxODU3MzRaFw0yNzAxMDUxOTAyMzRaMDMxMTAvBgNV
BAMTKEQzNDAxOTNFOTVGQjZCQzFBMDM5NDQzOTg0MzhGNTdDMzA2REM4MjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwUzOWciDRzu3QDpJvNhTNcLj8
6A+rzZ/k+QdLK0kH4MRENO5k+fEjvKAc9hIBQiK2f95orNb3baWE+aEl/Z/NudEI
NwkVyjjUB1gn3vML0OjJaGjxYiNkI4rmy6+ukMrNU1RBImYtRTgPJirrjg/h1sTs
SP6+WG8pzax+TG7bfBij/YGi6w/t7P8onlOx6gCCu2hzjj2tQvnyDHkahXnKBNxq
PgHvXFlLyU5wmYiGLqN6JWIjLAqZsc0BZUVozCCcpiSLbYoPEOYzBD36Nu6Cvpl9
O+bIhLjWqoqRVBnxHNaBdhZWV1iXXVqPJ+325xj2o1FpqUCZ1q0NiWXN80FnAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU00AZPpX7a8GgOUQ5hDj1fDBtyCMwHwYDVR0j
BBgwFoAUgMgQ7YjV+TyUeSN4ygzCI+bbhp8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRUQ0ODA5QjNEMDM2NzU4Qjk4QTBDRUQ1Qjk2QTJDMEZF
QjBDODI0MjlBMDc2QjMzODBBMzIwNkVCN0M4REJELzAvODBDODEwRUQ4OEQ1Rjkz
Qzk0NzkyMzc4Q0EwQ0MyMjNFNkRCODY5Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MEM4MTBFRDg4RDVGOTNDOTQ3
OTIzNzhDQTBDQzIyM0U2REI4NjlGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkVENDgwOUIzRDAzNjc1OEI5OEEwQ0VENUI5NkEyQzBGRUIwQzgyNDI5
QTA3NkIzMzgwQTMyMDZFQjdDOERCRC8wLzMyMzgzMDMzM2EzMjYyNjUzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMDMwMzgzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDK+Aw
DQYJKoZIhvcNAQELBQADggEBAIm+8ITYcTQFWfa0FVuqd9YCVT5jfjUsV5zfNEfl
6oVkaiWL7MZeXB3sImsc8HT9vXYnLPbVhGtdP26T9iVAZjBXLuRqrhgmBs87Kc/H
FweXSquFjsUazHVUp+yXBIAr278T7mD9/qvOFUzUaekpRW9jVfCvVl/6alHSf8ZS
YLJtUXawktctOYBEAc6u53FR/+aECkMai55O+NRAYD0SxVfRGoKtwGutcL8dw6oK
ZF17JA5M+nhUZBxCg3RhKov4+FXLszE/LWRF9AHPmDxi4YZI58Mru0QE+LXhz/in
3QNidcm6mZoI2pVJfe0WhTSuhRZOzB5kMr2VDOK5QVlrt38=
-----END CERTIFICATE-----
Generated at Fri Jan 23 20:32:10 2026 by rpki-client