This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/323830303a3433303a3a2f33322d3438203d3e203233343837.roa
File:                     323830303a3433303a3a2f33322d3438203d3e203233343837.roa (raw, json)
Hash identifier:          8qn7yuIEaONS/9wstantX2qaLWKLwXj2BL8/OozfZ7c=
Subject key identifier:   B4:00:2C:9F:9F:0B:5B:B7:31:EC:59:A1:A8:98:D2:DE:F0:57:1A:D6
Certificate issuer:       /CN=EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5
Certificate serial:       385091BF61BF9F0406020C8D0B5808D892254642
Authority key identifier: EB:F9:DA:4E:99:FC:BA:97:C1:C5:0D:8C:0A:B5:C3:B9:B9:D6:33:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/323830303a3433303a3a2f33322d3438203d3e203233343837.roa
Signing time:             Tue 06 Jan 2026 19:21:53 +0000
ROA not before:           Tue 06 Jan 2026 19:16:53 +0000
ROA not after:            Tue 05 Jan 2027 19:21:53 +0000
asID:                     23487
IP address blocks:        2800:430::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 01:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:50:91:bf:61:bf:9f:04:06:02:0c:8d:0b:58:08:d8:92:25:46:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5
        Validity
            Not Before: Jan  6 19:16:53 2026 GMT
            Not After : Jan  5 19:21:53 2027 GMT
        Subject: CN=B4002C9F9F0B5BB731EC59A1A898D2DEF0571AD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:58:4c:d3:fb:02:fc:d3:78:d2:7f:6f:be:1d:
                    01:ec:36:bd:dd:93:fa:68:77:1a:65:62:45:30:ec:
                    f3:4b:e3:82:ac:83:37:78:23:79:28:ff:ff:55:8c:
                    7c:b4:c6:6f:c7:c0:93:e2:aa:92:69:a2:c6:b4:ba:
                    bc:cc:fc:f8:ff:d4:d8:7e:d9:1d:ce:6a:0f:08:10:
                    2b:b6:1c:31:09:55:56:b8:26:7a:84:1e:6f:f4:82:
                    7f:74:09:1f:da:68:99:24:ad:01:9a:cd:33:76:07:
                    bf:ef:7b:b7:ed:3b:3d:02:86:a3:01:be:f6:af:af:
                    15:d8:71:dd:b1:52:af:f5:2c:0f:76:70:04:fb:6b:
                    c9:89:96:ae:f8:4e:0b:50:53:3d:e8:28:87:e3:08:
                    68:bd:8b:aa:e7:f6:18:9c:9c:12:ca:1c:a6:91:19:
                    df:c8:19:ad:85:9a:52:7e:84:ff:12:fd:14:97:38:
                    08:09:ed:0c:0e:da:bf:c3:93:03:ea:43:01:d2:12:
                    4a:40:54:9c:ba:b3:22:4d:f9:22:dc:1a:aa:e8:1f:
                    66:e4:2e:8b:db:92:8b:dc:de:b9:22:f8:ec:91:40:
                    a1:82:47:57:2a:a5:d1:7e:13:05:3a:b7:be:a0:88:
                    74:a5:08:9e:ae:4f:cf:0a:35:6d:a9:30:ee:ae:11:
                    f2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:00:2C:9F:9F:0B:5B:B7:31:EC:59:A1:A8:98:D2:DE:F0:57:1A:D6
            X509v3 Authority Key Identifier:
                keyid:EB:F9:DA:4E:99:FC:BA:97:C1:C5:0D:8C:0A:B5:C3:B9:B9:D6:33:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/323830303a3433303a3a2f33322d3438203d3e203233343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:430::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:8c:76:05:ca:fb:a7:6f:70:57:d8:af:fe:aa:ca:89:e6:4c:
         c9:65:e8:84:ee:13:8b:0d:46:30:92:df:12:07:bd:fe:0c:37:
         5a:6e:a0:76:6a:93:6b:e2:98:f9:60:ba:fa:11:3c:cf:a6:60:
         e1:33:50:cf:5b:c9:dc:51:96:95:09:0b:34:af:e9:c8:10:f7:
         ba:81:fb:c1:5e:71:c4:9d:14:37:7f:e6:26:c1:12:2d:d7:8d:
         c6:87:1f:c0:8c:49:93:2d:65:9c:b0:d3:e2:db:18:a7:c9:11:
         a2:93:92:a2:37:2d:ff:c6:87:a1:3f:8e:13:48:58:b4:de:0c:
         d5:0a:5b:d9:56:82:70:bb:6e:2d:c9:54:9a:ac:54:f4:4c:d5:
         7b:3b:df:98:17:82:93:a5:f2:81:5f:33:5a:3d:e8:02:23:ac:
         1a:cf:a4:02:63:85:04:2b:d5:d7:09:61:97:14:a1:d8:8e:1a:
         e2:fe:9a:6d:66:17:58:c0:27:db:a9:0a:60:cc:1b:9b:89:dd:
         12:0f:51:7d:e2:94:ba:74:8d:e7:a1:46:b0:89:f4:69:66:e0:
         59:d4:e3:a0:e5:71:a7:6e:99:a9:3f:84:f6:36:e2:d9:fd:4b:
         9a:5c:0e:91:73:2b:0c:a6:8d:b5:9f:24:7c:7c:5f:3a:e2:88:
         0e:ee:29:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 02:22:24 2026 by rpki-client