This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/323830333a316134303a3a2f33322d3438203d3e20323633383233.roa
File:                     323830333a316134303a3a2f33322d3438203d3e20323633383233.roa (raw, json)
Hash identifier:          KbCN5XD5Z6VqkNtpLSXr/eBQKYc+zUAKU7sREyoSwYM=
Subject key identifier:   B6:90:73:ED:BB:CC:C1:BF:CC:9F:09:A4:A0:77:DF:78:AA:E0:50:BC
Certificate issuer:       /CN=EC9BF39239F9E02820862BA3BD32A4211F3ED4DC
Certificate serial:       18B062C49C008B8869901F356C001B2FD6764066
Authority key identifier: EC:9B:F3:92:39:F9:E0:28:20:86:2B:A3:BD:32:A4:21:1F:3E:D4:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/323830333a316134303a3a2f33322d3438203d3e20323633383233.roa
Signing time:             Tue 06 Jan 2026 19:22:15 +0000
ROA not before:           Tue 06 Jan 2026 19:17:15 +0000
ROA not after:            Tue 05 Jan 2027 19:22:15 +0000
asID:                     263823
IP address blocks:        2803:1a40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 01:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:b0:62:c4:9c:00:8b:88:69:90:1f:35:6c:00:1b:2f:d6:76:40:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC9BF39239F9E02820862BA3BD32A4211F3ED4DC
        Validity
            Not Before: Jan  6 19:17:15 2026 GMT
            Not After : Jan  5 19:22:15 2027 GMT
        Subject: CN=B69073EDBBCCC1BFCC9F09A4A077DF78AAE050BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:78:8b:f3:c4:b2:45:a2:bb:1f:80:3f:13:d9:
                    6b:1d:24:22:ec:27:8a:55:64:0c:22:40:bf:af:ed:
                    90:70:fb:e6:15:6d:36:d5:a9:08:44:be:b6:fe:3f:
                    4c:05:4d:45:b8:ac:5d:5f:60:2c:39:44:5d:dd:0f:
                    16:48:e5:3e:13:d8:c4:57:e4:ed:a7:b9:5e:0f:35:
                    23:07:67:7a:3d:1a:78:8e:8a:63:7b:d2:fd:f5:3d:
                    e3:ac:67:1d:d4:e8:4e:f1:a4:65:48:f4:17:8b:83:
                    7c:9b:08:ed:a1:7e:99:78:40:22:28:38:cf:cd:c6:
                    24:e3:fa:0f:e6:59:7b:e5:e9:78:af:61:02:58:ee:
                    5b:11:11:85:88:72:39:29:55:48:e8:3e:11:95:cc:
                    75:b0:88:5f:75:36:16:fc:35:51:66:ab:c2:c8:23:
                    2f:39:e5:7b:e8:46:13:73:13:5c:84:b6:80:d9:ad:
                    85:5b:62:31:33:96:6c:7e:2f:82:51:73:3d:12:71:
                    38:d7:66:23:0a:54:3f:66:8c:13:b4:73:0c:e5:d6:
                    45:30:c7:fe:e0:86:94:6c:c6:87:6c:53:08:e5:f6:
                    80:fd:1d:ed:43:ab:0d:28:4a:a1:5c:97:9a:56:85:
                    6d:a0:0d:18:9a:50:b8:b0:57:0f:a2:29:01:8d:b1:
                    7c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:90:73:ED:BB:CC:C1:BF:CC:9F:09:A4:A0:77:DF:78:AA:E0:50:BC
            X509v3 Authority Key Identifier:
                keyid:EC:9B:F3:92:39:F9:E0:28:20:86:2B:A3:BD:32:A4:21:1F:3E:D4:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/323830333a316134303a3a2f33322d3438203d3e20323633383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:fb:fb:83:a8:28:a1:0d:48:d4:68:30:ff:74:0b:2c:34:6c:
         d1:0d:fd:a0:a3:a6:19:8a:e1:cc:32:77:a6:af:16:1b:45:57:
         30:7b:ef:18:fb:07:b7:73:a9:68:ac:9c:c3:90:3e:98:b2:98:
         44:fa:2d:ce:b6:7e:a5:42:bd:93:3b:bf:fa:d3:70:7b:b3:33:
         c0:78:8b:64:fb:0e:5b:44:42:29:98:f0:fc:d6:bc:3c:bf:e1:
         e2:1c:78:16:14:9f:25:c6:a7:22:b5:14:07:05:2f:2f:6b:ab:
         37:18:e9:48:12:0b:40:4f:f1:31:27:d8:09:57:7a:bb:99:73:
         07:6c:f8:ac:31:b3:52:8a:ff:f5:5a:a1:df:39:82:f9:94:2b:
         98:a8:f7:e7:79:99:0c:91:d0:a6:a2:c4:47:02:08:f6:9c:db:
         fb:c3:bc:43:64:7c:39:de:d1:30:84:7e:33:9e:8e:be:18:82:
         d6:90:4a:3b:d9:85:3e:64:2a:74:ae:5c:68:b4:9e:cb:51:94:
         95:da:32:5f:21:b1:5e:69:f8:d0:d3:95:c3:b2:8e:2f:4b:8b:
         7e:78:74:c7:84:47:a4:81:41:c2:e3:2a:0b:08:ee:bb:cb:c3:
         6e:64:72:fe:71:f6:20:c3:00:9a:33:e0:70:44:3f:e7:5c:01:
         5c:0a:d0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 17:34:52 2026 by rpki-client