This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25AB503EE49DE23A1C89E727967062CE4F68E01491D67AEFF5F88822DC8078DA/0/323830333a636130303a3a2f33322d3438203d3e203237373534.roa
File:                     323830333a636130303a3a2f33322d3438203d3e203237373534.roa (raw, json)
Hash identifier:          WKd+7oDUgPbCFcUy0SDhnlHaUgiTrnfbrhr6terj/JM=
Subject key identifier:   3D:B9:7B:93:F8:75:C4:C8:06:1E:9D:8E:FB:92:0D:6A:6D:D1:0C:8E
Certificate issuer:       /CN=7FC6DD33ECB7C4859D71799958161568FB17952A
Certificate serial:       3ACBEC7EAE71C4C61B528F5BAA9B563F62F83A90
Authority key identifier: 7F:C6:DD:33:EC:B7:C4:85:9D:71:79:99:58:16:15:68:FB:17:95:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7FC6DD33ECB7C4859D71799958161568FB17952A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25AB503EE49DE23A1C89E727967062CE4F68E01491D67AEFF5F88822DC8078DA/0/323830333a636130303a3a2f33322d3438203d3e203237373534.roa
Signing time:             Tue 06 Jan 2026 19:07:28 +0000
ROA not before:           Tue 06 Jan 2026 19:02:28 +0000
ROA not after:            Tue 05 Jan 2027 19:07:28 +0000
asID:                     27754
IP address blocks:        2803:ca00::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25AB503EE49DE23A1C89E727967062CE4F68E01491D67AEFF5F88822DC8078DA/0/7FC6DD33ECB7C4859D71799958161568FB17952A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25AB503EE49DE23A1C89E727967062CE4F68E01491D67AEFF5F88822DC8078DA/0/7FC6DD33ECB7C4859D71799958161568FB17952A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7FC6DD33ECB7C4859D71799958161568FB17952A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Jan 2026 13:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:cb:ec:7e:ae:71:c4:c6:1b:52:8f:5b:aa:9b:56:3f:62:f8:3a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FC6DD33ECB7C4859D71799958161568FB17952A
        Validity
            Not Before: Jan  6 19:02:28 2026 GMT
            Not After : Jan  5 19:07:28 2027 GMT
        Subject: CN=3DB97B93F875C4C8061E9D8EFB920D6A6DD10C8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5b:68:d8:a1:59:82:0a:4e:85:db:2e:64:ce:
                    60:64:96:cd:0d:19:d0:72:92:2b:34:88:fa:96:f4:
                    37:f9:da:32:74:6f:b6:71:09:12:70:19:b4:67:e6:
                    72:36:3f:f3:a9:aa:9c:5e:92:c8:d0:c3:8d:94:5f:
                    04:48:0d:8a:7c:96:6e:14:5c:9d:c2:dc:57:04:14:
                    1f:d7:e9:eb:b7:80:20:ae:1a:0c:2d:33:6f:d5:1b:
                    f5:2c:13:72:aa:05:20:e1:89:7d:df:2e:25:b6:5a:
                    84:7c:a7:8b:33:2e:0b:31:95:96:96:a0:ea:14:5e:
                    d1:ae:87:f9:1d:00:4b:cd:d2:68:f3:1c:fc:b5:f2:
                    98:f4:c9:94:92:73:61:e8:96:8a:6c:88:7e:1f:69:
                    6f:3b:5b:35:60:37:2c:c8:e3:0f:a7:eb:2a:b4:3c:
                    eb:9c:31:54:95:b7:43:99:d5:9e:3f:ab:81:a1:39:
                    f2:90:d1:89:ff:ec:f6:3b:33:37:26:33:9e:d6:f6:
                    0d:59:c3:62:03:7e:4f:58:b0:7f:8a:64:eb:b7:5a:
                    b9:7f:f0:60:c4:d3:2a:4c:30:78:26:d4:9d:50:16:
                    f2:d6:63:c4:a3:75:5f:12:10:05:bf:f2:31:fc:10:
                    a4:b3:50:ae:95:68:d5:d6:ea:5e:03:3a:fc:91:af:
                    d1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B9:7B:93:F8:75:C4:C8:06:1E:9D:8E:FB:92:0D:6A:6D:D1:0C:8E
            X509v3 Authority Key Identifier:
                keyid:7F:C6:DD:33:EC:B7:C4:85:9D:71:79:99:58:16:15:68:FB:17:95:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25AB503EE49DE23A1C89E727967062CE4F68E01491D67AEFF5F88822DC8078DA/0/7FC6DD33ECB7C4859D71799958161568FB17952A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7FC6DD33ECB7C4859D71799958161568FB17952A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25AB503EE49DE23A1C89E727967062CE4F68E01491D67AEFF5F88822DC8078DA/0/323830333a636130303a3a2f33322d3438203d3e203237373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ca00::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:be:c1:54:52:1e:02:87:cc:02:ea:ef:bd:23:ac:c2:72:ed:
         22:c6:c2:78:0f:e6:bf:88:65:65:e0:54:f3:88:59:41:72:32:
         eb:4c:dc:82:2b:a0:1c:e2:e8:4e:d8:21:bd:d3:f4:8e:44:81:
         22:df:94:c3:95:44:3a:74:bb:1d:48:c0:31:59:29:07:d2:8d:
         77:e3:eb:2b:43:d1:55:20:19:23:be:a0:3f:f6:a6:0f:fb:48:
         bc:82:97:23:bc:dc:11:74:c7:b0:9d:37:05:9a:d9:e0:e3:7f:
         ac:86:6c:6f:ae:bf:e5:57:82:09:5e:aa:76:e4:ce:d8:88:b6:
         97:ec:09:3f:4b:7b:e3:e9:bd:be:b3:09:f9:79:f5:56:ed:f2:
         25:41:26:39:48:cf:b9:cd:49:77:59:cc:34:d6:5f:a9:4d:52:
         fb:3a:9d:a2:d5:b0:da:df:8d:50:98:e7:cc:9b:7a:62:2d:4e:
         be:f2:ee:4e:10:87:20:6e:4e:78:fa:00:14:ca:cb:2d:55:2d:
         b7:0c:fc:d3:9f:f4:72:98:49:2c:5f:d7:a7:9c:f6:4e:b9:b1:
         d5:fd:32:c3:ae:06:40:0c:78:1d:aa:40:54:48:b3:f7:9d:fc:
         a0:1d:27:dd:3e:42:6b:70:cc:8a:1e:6f:5b:6f:ff:0a:a9:2d:
         f1:7e:c6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 13:36:42 2026 by rpki-client