This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/323830333a393134303a3a2f33322d3332203d3e20323634363039.roa
File:                     323830333a393134303a3a2f33322d3332203d3e20323634363039.roa (raw, json)
Hash identifier:          5EVb8UIzAkqb6oXNB0MiMfWnMpZJYMdo7o2yG4fB/B8=
Subject key identifier:   AC:4E:35:FB:10:7D:A3:4A:D4:1D:B6:36:3C:F0:19:28:70:A9:33:DA
Certificate issuer:       /CN=928F2A88614C6122C25510F7A3362CB8F48CEFB3
Certificate serial:       0C86DC7D6DFDB6B42DAEF5BA11A81AA145BFB5AB
Authority key identifier: 92:8F:2A:88:61:4C:61:22:C2:55:10:F7:A3:36:2C:B8:F4:8C:EF:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/323830333a393134303a3a2f33322d3332203d3e20323634363039.roa
Signing time:             Tue 06 Jan 2026 19:47:01 +0000
ROA not before:           Tue 06 Jan 2026 19:42:01 +0000
ROA not after:            Tue 05 Jan 2027 19:47:01 +0000
asID:                     264609
IP address blocks:        2803:9140::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 07:06:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:86:dc:7d:6d:fd:b6:b4:2d:ae:f5:ba:11:a8:1a:a1:45:bf:b5:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928F2A88614C6122C25510F7A3362CB8F48CEFB3
        Validity
            Not Before: Jan  6 19:42:01 2026 GMT
            Not After : Jan  5 19:47:01 2027 GMT
        Subject: CN=AC4E35FB107DA34AD41DB6363CF0192870A933DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a6:62:4f:fd:82:02:29:17:f4:5d:61:ca:94:
                    17:3d:53:02:81:e0:7e:9d:95:3c:5d:ea:2e:a4:91:
                    74:08:2c:b1:02:67:c8:a3:c3:a4:89:31:b1:c1:41:
                    06:42:19:fe:9d:ca:84:9a:59:a7:2e:67:29:bf:9a:
                    a6:46:d6:3e:19:80:4c:94:8d:df:e0:bf:f4:85:8e:
                    a9:05:d1:a9:c2:fa:03:5d:70:12:62:fe:4d:4c:02:
                    9b:4f:2c:24:c2:be:40:e2:03:0f:af:4a:74:be:dd:
                    14:44:20:39:82:2a:3e:ae:13:b9:91:43:72:13:ca:
                    d4:1d:15:55:7e:f0:b5:e4:ce:a7:1f:0d:87:89:8c:
                    3e:78:d8:06:c9:40:f4:52:55:f7:c3:76:7a:64:3a:
                    ba:41:46:eb:58:d9:20:bd:ef:e0:f2:8e:bd:74:9a:
                    2c:25:7b:94:08:25:1a:e1:3c:c1:31:aa:c6:ee:87:
                    7d:6e:90:87:02:34:75:0b:f6:22:2d:ba:86:3c:02:
                    a9:50:64:01:34:9e:8a:1a:51:f7:9c:41:96:9f:3c:
                    44:f7:b2:8a:ee:13:90:f9:69:1f:0e:f2:53:75:cd:
                    5f:f3:e7:6e:74:93:51:a7:66:a9:62:3e:40:00:0b:
                    bc:e6:60:3b:ae:cb:12:5f:20:4b:48:c5:f7:95:ac:
                    de:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:4E:35:FB:10:7D:A3:4A:D4:1D:B6:36:3C:F0:19:28:70:A9:33:DA
            X509v3 Authority Key Identifier:
                keyid:92:8F:2A:88:61:4C:61:22:C2:55:10:F7:A3:36:2C:B8:F4:8C:EF:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/323830333a393134303a3a2f33322d3332203d3e20323634363039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9140::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:02:d2:10:01:18:90:e5:40:87:d7:8b:c4:7c:fc:7d:6c:5a:
         0c:0c:2a:38:b1:1e:13:9a:ff:93:e9:d0:5c:0b:af:c8:86:1b:
         05:a5:ec:56:81:6a:b5:53:b8:08:85:ad:63:bd:fa:30:24:36:
         60:49:71:0f:7d:6c:f8:7c:08:ca:65:d7:84:2b:7d:dc:86:76:
         5b:e9:43:bc:a5:b8:0b:5e:2a:31:f7:10:42:49:59:fb:bd:be:
         72:16:60:8a:27:9f:8c:04:8a:2e:63:1a:4d:9b:6d:0b:0c:26:
         83:cb:55:69:39:6c:90:07:d7:b2:1e:ce:cd:41:0d:80:0a:6c:
         b6:f7:2a:78:7c:f6:77:6f:1c:17:ca:e1:ed:f9:23:4d:b4:32:
         08:8d:cd:31:b2:a1:6b:2d:d4:96:58:4d:b2:a8:7b:0c:4d:59:
         b9:5a:6f:6a:33:60:00:df:f6:c2:1a:1c:e7:40:a4:7b:3f:c6:
         02:f0:85:a0:50:f7:c7:4d:9c:23:31:f5:25:4e:08:bb:6e:80:
         e5:4f:9f:3a:6a:47:d1:7d:d7:7f:34:fd:07:26:f7:c5:91:6b:
         17:8e:06:b3:02:17:ec:f2:7c:0e:2a:0a:4d:78:b4:9f:53:4e:
         40:e4:8e:5a:71:78:6b:ad:6d:16:e0:d8:12:da:70:d8:bb:ec:
         6e:be:a7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 15:18:50 2026 by rpki-client