This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/849566C79F323F01399D1376D62003D03DEA34B0BD6A2FD5CBA74393F0E9B5D6/0/323830333a353831303a3a2f33322d3438203d3e203237393437.roa
File:                     323830333a353831303a3a2f33322d3438203d3e203237393437.roa (raw, json)
Hash identifier:          HBe++W0kINctahAyUeazeJiOpts0+23F6emltqKr4ho=
Subject key identifier:   17:0E:0A:7E:B3:BA:F4:19:47:94:9C:31:D0:A8:77:17:68:49:43:7B
Certificate issuer:       /CN=13F664EFE791C2FAE7E4B151E394302E508408AF
Certificate serial:       5C5382CC603C04ED13D8328E9518EC480941BCFA
Authority key identifier: 13:F6:64:EF:E7:91:C2:FA:E7:E4:B1:51:E3:94:30:2E:50:84:08:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/13F664EFE791C2FAE7E4B151E394302E508408AF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/849566C79F323F01399D1376D62003D03DEA34B0BD6A2FD5CBA74393F0E9B5D6/0/323830333a353831303a3a2f33322d3438203d3e203237393437.roa
Signing time:             Tue 06 Jan 2026 19:34:46 +0000
ROA not before:           Tue 06 Jan 2026 19:29:46 +0000
ROA not after:            Tue 05 Jan 2027 19:34:46 +0000
asID:                     27947
IP address blocks:        2803:5810::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/849566C79F323F01399D1376D62003D03DEA34B0BD6A2FD5CBA74393F0E9B5D6/0/13F664EFE791C2FAE7E4B151E394302E508408AF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/849566C79F323F01399D1376D62003D03DEA34B0BD6A2FD5CBA74393F0E9B5D6/0/13F664EFE791C2FAE7E4B151E394302E508408AF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/13F664EFE791C2FAE7E4B151E394302E508408AF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 15:56:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:53:82:cc:60:3c:04:ed:13:d8:32:8e:95:18:ec:48:09:41:bc:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13F664EFE791C2FAE7E4B151E394302E508408AF
        Validity
            Not Before: Jan  6 19:29:46 2026 GMT
            Not After : Jan  5 19:34:46 2027 GMT
        Subject: CN=170E0A7EB3BAF41947949C31D0A877176849437B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:43:91:bc:ff:6b:9d:69:b7:bc:c9:c6:fe:fb:
                    ae:fb:68:f6:8a:32:36:b9:ad:a5:8b:c1:82:7a:dd:
                    2f:ae:43:d5:dd:81:9d:30:e0:68:a3:28:d7:2c:07:
                    04:57:64:cf:80:2d:19:38:d7:cb:41:b8:68:87:11:
                    b4:3c:f4:40:de:d1:a6:f8:81:60:c7:8d:aa:1d:3a:
                    0d:b4:51:14:ce:cd:37:28:d9:ba:5f:62:6f:88:b6:
                    34:e8:dd:9f:f9:8a:b2:d1:e2:fa:44:e3:4f:36:5e:
                    0c:0e:99:34:fa:0f:6f:db:7d:10:ba:27:ac:63:82:
                    5a:c0:ec:00:3b:d0:0b:74:6d:e6:83:ec:1e:bd:99:
                    a5:f8:d0:52:a7:ab:0e:ca:1e:c3:08:81:5d:a9:50:
                    28:4c:5b:d7:47:ac:07:a9:58:8c:ed:70:06:46:eb:
                    55:60:66:11:e8:61:74:5d:18:21:ca:2a:f9:80:16:
                    7b:d2:c6:1f:76:74:b0:dc:c4:94:39:d5:93:9d:d7:
                    6b:29:a0:79:9b:ab:f5:94:c1:40:df:89:8b:51:d5:
                    81:e8:dc:5d:ec:32:de:3a:9a:b6:11:20:30:ca:d2:
                    26:0f:8a:51:b0:03:af:00:01:c2:df:96:a6:1e:08:
                    a3:64:90:ca:28:3b:37:b2:c8:23:61:36:25:87:3e:
                    ca:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:0E:0A:7E:B3:BA:F4:19:47:94:9C:31:D0:A8:77:17:68:49:43:7B
            X509v3 Authority Key Identifier:
                keyid:13:F6:64:EF:E7:91:C2:FA:E7:E4:B1:51:E3:94:30:2E:50:84:08:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/849566C79F323F01399D1376D62003D03DEA34B0BD6A2FD5CBA74393F0E9B5D6/0/13F664EFE791C2FAE7E4B151E394302E508408AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/13F664EFE791C2FAE7E4B151E394302E508408AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/849566C79F323F01399D1376D62003D03DEA34B0BD6A2FD5CBA74393F0E9B5D6/0/323830333a353831303a3a2f33322d3438203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5810::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:9f:50:32:4e:9a:01:1f:41:75:4e:47:53:68:42:6b:dd:28:
         d7:80:5c:90:e3:56:1c:e3:91:85:45:fc:96:57:ed:5d:d5:26:
         19:8f:2e:84:05:fd:4a:d6:e5:74:3a:0b:f4:a2:67:d9:1c:a9:
         c0:5a:04:82:5d:fe:e6:90:d5:ea:09:99:ca:44:0e:50:d7:1c:
         8c:b6:b3:ff:0f:02:b7:bf:a8:ed:5f:ad:d8:12:a3:c5:a5:1a:
         d5:74:ff:d6:23:f9:08:d9:eb:ed:79:91:92:84:9b:f8:09:d7:
         70:b4:d5:50:1c:58:3e:97:c9:54:54:67:77:72:20:f3:67:4a:
         f2:c6:9c:ce:ed:6f:54:86:22:86:11:89:19:95:79:0e:5c:bf:
         ab:47:7a:3b:5a:32:88:16:4b:7c:05:39:a3:09:7b:e9:d2:2b:
         97:31:2b:b1:5e:72:e9:df:4e:1b:ce:ed:b2:ab:4b:e9:b3:69:
         73:6c:12:d3:50:d3:f1:9d:8c:16:3a:2a:1b:10:16:5a:5b:ad:
         f5:d3:e2:b9:e0:c3:c5:bb:2b:57:5b:d4:8d:96:d9:94:9c:14:
         34:03:a9:69:e5:5b:e1:bb:75:c1:ce:40:73:85:5d:29:7b:59:
         7c:a0:0b:75:e9:d3:eb:b0:3c:ab:d8:52:ed:64:f5:7e:67:a6:
         dc:1c:b7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 20:40:08 2026 by rpki-client