This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/323830333a643838303a3a2f33322d3332203d3e203237393038.roa
File:                     323830333a643838303a3a2f33322d3332203d3e203237393038.roa (raw, json)
Hash identifier:          jJpg1batYRqfpXmsbQRnx+A363T9d2FeeCzDmuaZyGs=
Subject key identifier:   93:2D:EB:9F:C3:B3:A5:4D:05:9E:EB:29:6D:3B:65:DD:F6:72:CF:BD
Certificate issuer:       /CN=965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D
Certificate serial:       78E64FB1D9070B7136C4191BD35007D59F41D6E5
Authority key identifier: 96:5E:FA:19:AA:4B:DB:3B:6D:33:BA:E5:47:4D:F8:C1:3A:2E:EB:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/323830333a643838303a3a2f33322d3332203d3e203237393038.roa
Signing time:             Wed 14 Jan 2026 23:25:00 +0000
ROA not before:           Wed 14 Jan 2026 23:20:00 +0000
ROA not after:            Wed 13 Jan 2027 23:25:00 +0000
asID:                     27908
IP address blocks:        2803:d880::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 23 Jan 2026 14:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:e6:4f:b1:d9:07:0b:71:36:c4:19:1b:d3:50:07:d5:9f:41:d6:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D
        Validity
            Not Before: Jan 14 23:20:00 2026 GMT
            Not After : Jan 13 23:25:00 2027 GMT
        Subject: CN=932DEB9FC3B3A54D059EEB296D3B65DDF672CFBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f3:d9:db:b4:05:ce:0d:50:3d:c6:2c:f6:94:
                    b5:0f:21:5e:9e:5c:fd:18:27:f7:15:42:91:f0:8d:
                    d4:0c:43:d0:ac:31:c8:90:13:ad:2f:5b:76:59:df:
                    d2:4a:a9:a9:ea:e3:3e:39:ed:b0:bf:7a:91:25:95:
                    2c:3d:d2:80:a0:ee:ea:6c:8a:e7:56:5a:32:73:0f:
                    d7:40:89:d7:af:80:06:dc:96:49:68:18:b4:0a:97:
                    c0:60:b8:93:62:87:2c:0a:b4:3a:6f:79:27:33:2a:
                    32:f0:6d:b9:ae:cb:66:00:c8:15:75:80:f3:23:2b:
                    f1:bd:dc:b1:8a:fa:6d:ee:6f:cc:6d:40:db:35:c4:
                    3f:ab:b4:19:ed:a4:97:95:91:7e:89:33:d0:9a:ea:
                    5c:6c:ae:78:b2:f5:5e:59:15:b6:ad:f4:63:ce:ba:
                    e2:4e:45:7d:0a:83:67:b2:e2:04:d6:34:2c:38:17:
                    12:f9:05:12:73:3f:04:e9:ef:9e:64:53:41:62:f7:
                    68:17:33:e2:6c:04:43:32:84:cf:e4:aa:81:24:38:
                    85:8c:db:5b:c7:39:4b:7f:59:36:db:15:d0:fd:54:
                    26:48:e7:3b:77:cc:42:f9:14:2e:cc:56:4d:ee:3b:
                    a4:98:d1:a2:e6:a9:ed:d8:fa:66:81:c3:99:2b:16:
                    f2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:2D:EB:9F:C3:B3:A5:4D:05:9E:EB:29:6D:3B:65:DD:F6:72:CF:BD
            X509v3 Authority Key Identifier:
                keyid:96:5E:FA:19:AA:4B:DB:3B:6D:33:BA:E5:47:4D:F8:C1:3A:2E:EB:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/323830333a643838303a3a2f33322d3332203d3e203237393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d880::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:9a:47:29:43:8b:be:ee:07:14:f8:21:d0:8f:5d:30:eb:88:
         79:6d:68:65:35:26:91:8a:9b:4b:94:66:5d:c5:82:5c:7d:21:
         6c:96:88:ed:b4:6b:70:ba:bf:1b:7d:3d:a8:5e:a3:43:ad:a9:
         05:3f:97:36:ee:61:00:e2:92:d6:1b:d5:06:88:75:3b:e3:c5:
         98:4d:f2:ea:b0:52:64:1c:03:e5:bf:7e:27:14:21:09:06:c7:
         0d:85:1b:a8:4f:94:fb:4d:dd:80:0a:21:21:b0:8e:f8:fa:8c:
         76:eb:45:a7:38:d9:f9:14:95:0f:75:14:3a:cf:39:c1:7c:d3:
         ac:1c:d1:36:6d:ae:fb:c4:a0:df:50:01:fb:48:6f:6b:d8:6a:
         da:16:ef:0c:b7:a5:f1:2e:55:19:77:ef:dd:83:d2:bd:34:38:
         b4:4a:c2:55:1e:bb:b0:60:77:78:84:96:31:ab:1e:50:8e:f1:
         ba:75:96:e2:8c:f9:9e:e2:b1:83:da:25:a7:26:23:c5:4b:e3:
         12:41:45:bb:e9:20:47:a7:c6:b6:34:2c:3d:dd:cf:9d:32:38:
         65:3e:4a:65:0c:24:ea:29:31:ba:5a:a5:6d:cd:37:e3:32:f5:
         b9:4c:20:f8:f4:1d:37:2d:0e:89:26:8c:92:69:b5:6d:89:4a:
         38:a9:5e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 14:48:45 2026 by rpki-client