This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/323830333a653130303a3a2f33322d3336203d3e203237393731.roa
File:                     323830333a653130303a3a2f33322d3336203d3e203237393731.roa (raw, json)
Hash identifier:          ZbEhxSNsjwppazaP25LVzQVWEoh9hTkCZJVeIktYohg=
Subject key identifier:   EC:BA:4F:D3:84:2C:FA:46:62:97:A4:3A:3B:22:2E:F8:A8:EB:BF:27
Certificate issuer:       /CN=186D48B8C1F30720B512B1F62C673FCFD9EDFAEE
Certificate serial:       209258C300860B80282A2CEA1A851FA1E7D76BF4
Authority key identifier: 18:6D:48:B8:C1:F3:07:20:B5:12:B1:F6:2C:67:3F:CF:D9:ED:FA:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/323830333a653130303a3a2f33322d3336203d3e203237393731.roa
Signing time:             Tue 27 Jan 2026 14:00:01 +0000
ROA not before:           Tue 27 Jan 2026 13:55:01 +0000
ROA not after:            Tue 26 Jan 2027 14:00:01 +0000
asID:                     27971
IP address blocks:        2803:e100::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:92:58:c3:00:86:0b:80:28:2a:2c:ea:1a:85:1f:a1:e7:d7:6b:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=186D48B8C1F30720B512B1F62C673FCFD9EDFAEE
        Validity
            Not Before: Jan 27 13:55:01 2026 GMT
            Not After : Jan 26 14:00:01 2027 GMT
        Subject: CN=ECBA4FD3842CFA466297A43A3B222EF8A8EBBF27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:60:fb:ad:c4:95:ca:dd:65:6b:9c:95:83:38:
                    46:08:12:ef:37:78:55:4a:27:4f:d1:74:5a:c9:15:
                    e1:3e:c7:d8:13:ab:1f:a1:42:f7:a9:a4:df:71:23:
                    21:ce:ea:39:c5:c9:55:bb:6e:cb:1a:ff:03:d2:36:
                    02:33:66:79:9c:dd:bc:f2:f8:7f:b3:fa:e3:8e:33:
                    6b:61:5a:5d:34:66:6e:45:fa:76:57:a9:5e:92:e1:
                    46:7c:8a:df:d3:f3:e6:6f:7b:cc:86:f3:2a:a1:ab:
                    46:02:0a:85:c5:91:4a:57:7d:ab:c3:59:c5:7f:89:
                    c7:3a:80:a6:ab:2e:c2:ac:2b:b1:96:69:75:55:77:
                    43:17:b0:d9:b5:aa:bc:2e:1e:df:cf:89:86:39:8f:
                    94:5f:e6:70:08:53:e0:2b:1e:b4:d9:69:0a:ea:c6:
                    c2:cf:55:8f:5d:db:e9:8a:6b:79:61:c7:1e:a3:72:
                    06:3e:9d:b9:20:23:54:3a:69:9f:b8:cd:21:0a:e2:
                    f4:8b:86:13:a6:15:8b:e1:78:bb:b9:8a:4f:3e:a3:
                    67:f3:c9:cb:d4:9a:91:5f:31:d8:3c:1f:84:5f:ee:
                    37:e8:7e:74:2d:25:ce:4d:08:29:9e:03:67:b2:2d:
                    74:26:5a:74:7f:57:ff:ca:21:82:4c:03:a1:6a:a6:
                    70:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:BA:4F:D3:84:2C:FA:46:62:97:A4:3A:3B:22:2E:F8:A8:EB:BF:27
            X509v3 Authority Key Identifier:
                keyid:18:6D:48:B8:C1:F3:07:20:B5:12:B1:F6:2C:67:3F:CF:D9:ED:FA:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/323830333a653130303a3a2f33322d3336203d3e203237393731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e100::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:36:a6:0c:1d:0e:3a:f3:09:e4:14:47:20:03:10:10:52:ff:
         10:b0:e3:03:d7:fe:a6:d7:26:44:68:3c:ca:ac:03:4f:45:aa:
         83:ad:98:95:88:2c:f0:1a:76:db:90:89:63:30:04:cb:69:74:
         be:c3:f0:31:d8:3c:0c:1e:ea:22:52:df:b3:21:79:e2:8b:85:
         3b:f1:80:93:1b:34:9e:a1:78:45:9e:11:0d:c8:06:0d:1c:e8:
         65:0b:aa:33:15:b0:f7:36:99:96:e3:32:e3:94:e1:f6:aa:08:
         64:3d:e9:20:5d:91:29:2f:eb:dc:14:80:16:a4:9a:07:3e:43:
         50:29:d8:99:7b:99:d0:7f:9e:b2:08:e2:6b:8f:a2:f8:86:04:
         56:4f:7c:1d:95:05:40:97:fb:35:5d:1e:b0:25:ed:0f:03:60:
         8a:ff:2a:b9:6e:08:b6:e9:0b:1c:9a:f5:92:16:6b:d6:3e:56:
         29:09:21:a5:71:a6:7d:6b:87:cf:6f:40:91:bc:40:66:6e:6f:
         b1:bd:2a:21:3d:0d:24:c2:23:a8:93:1e:d3:07:e3:25:30:51:
         aa:d8:19:45:dd:92:fb:8a:63:07:98:f8:5f:32:f9:ce:0f:43:
         98:a2:48:b4:b2:97:cf:fb:83:6c:fd:fd:1f:3b:9b:eb:84:7a:
         98:72:81:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:01:18 2026 by rpki-client