This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34B1072922DE72D88DEE32B72F1F299D57F9F01ACCB66CF913C56A3E4E74B66C/0/323830333a366339303a3a2f33322d3438203d3e20323732383437.roa
File:                     323830333a366339303a3a2f33322d3438203d3e20323732383437.roa (raw, json)
Hash identifier:          1vk6YILcubXs0R+iZajILktWDH24FNktM+Hojf6ee00=
Subject key identifier:   16:4E:64:4C:0F:F5:6D:27:BF:84:13:73:57:71:E0:96:27:4A:34:AC
Certificate issuer:       /CN=728EC2E97E75244DF988E24AAD7528C170F06E80
Certificate serial:       07BBA5C7C41337F45C8F73CC2B5376E594814894
Authority key identifier: 72:8E:C2:E9:7E:75:24:4D:F9:88:E2:4A:AD:75:28:C1:70:F0:6E:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/728EC2E97E75244DF988E24AAD7528C170F06E80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34B1072922DE72D88DEE32B72F1F299D57F9F01ACCB66CF913C56A3E4E74B66C/0/323830333a366339303a3a2f33322d3438203d3e20323732383437.roa
Signing time:             Tue 06 Jan 2026 18:57:38 +0000
ROA not before:           Tue 06 Jan 2026 18:52:38 +0000
ROA not after:            Tue 05 Jan 2027 18:57:38 +0000
asID:                     272847
IP address blocks:        2803:6c90::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/34B1072922DE72D88DEE32B72F1F299D57F9F01ACCB66CF913C56A3E4E74B66C/0/728EC2E97E75244DF988E24AAD7528C170F06E80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/34B1072922DE72D88DEE32B72F1F299D57F9F01ACCB66CF913C56A3E4E74B66C/0/728EC2E97E75244DF988E24AAD7528C170F06E80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/728EC2E97E75244DF988E24AAD7528C170F06E80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 21:50:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:bb:a5:c7:c4:13:37:f4:5c:8f:73:cc:2b:53:76:e5:94:81:48:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=728EC2E97E75244DF988E24AAD7528C170F06E80
        Validity
            Not Before: Jan  6 18:52:38 2026 GMT
            Not After : Jan  5 18:57:38 2027 GMT
        Subject: CN=164E644C0FF56D27BF8413735771E096274A34AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:39:f9:3c:a1:13:1a:1e:ce:e4:5b:77:e3:be:
                    f2:fe:3c:03:c8:8b:6f:1e:7e:c9:3c:79:92:b5:d8:
                    b6:f9:5b:cd:5e:0d:72:55:ba:a3:4b:5a:bf:bb:d5:
                    bb:a9:f0:0c:90:54:54:82:6b:a0:4a:8e:43:73:a1:
                    59:db:2a:18:17:cb:d9:9e:e1:47:bb:39:a2:4d:17:
                    f2:e6:45:0d:00:90:fa:71:56:58:91:96:6f:ef:86:
                    98:8e:09:b2:e3:31:d9:e7:a7:55:81:34:59:72:47:
                    9b:70:0a:58:96:27:b2:51:0c:1d:f0:23:b4:62:53:
                    68:c2:14:23:c3:f2:6f:b2:5f:f4:f4:c0:77:a5:b9:
                    ee:59:f8:49:1a:af:8e:18:83:de:7d:74:27:0f:9d:
                    95:11:3d:76:54:59:59:f4:f5:96:39:f8:fa:a6:24:
                    65:b3:a9:24:75:2d:70:de:56:3e:23:40:06:6b:74:
                    16:14:10:09:80:74:07:0c:1a:b7:16:62:58:32:27:
                    75:16:d1:9b:f5:d0:6a:59:df:eb:7c:c3:26:79:2a:
                    58:9b:d4:61:a0:36:d2:0e:8b:b7:04:bb:de:a8:7b:
                    3f:6f:55:a7:f3:99:14:17:95:e2:07:13:8e:48:5c:
                    73:8c:0d:b4:13:65:b5:aa:d8:e7:35:46:57:8d:71:
                    69:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:4E:64:4C:0F:F5:6D:27:BF:84:13:73:57:71:E0:96:27:4A:34:AC
            X509v3 Authority Key Identifier:
                keyid:72:8E:C2:E9:7E:75:24:4D:F9:88:E2:4A:AD:75:28:C1:70:F0:6E:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34B1072922DE72D88DEE32B72F1F299D57F9F01ACCB66CF913C56A3E4E74B66C/0/728EC2E97E75244DF988E24AAD7528C170F06E80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/728EC2E97E75244DF988E24AAD7528C170F06E80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34B1072922DE72D88DEE32B72F1F299D57F9F01ACCB66CF913C56A3E4E74B66C/0/323830333a366339303a3a2f33322d3438203d3e20323732383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6c90::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:43:4e:17:46:22:4e:81:56:33:93:6e:83:f7:6a:0f:b7:23:
         64:10:c6:38:3f:9a:00:bd:09:86:6c:78:d1:b6:e6:fc:99:ff:
         52:39:69:7d:93:de:65:8d:d7:2c:54:41:1c:87:5f:6d:e4:c9:
         7b:54:1c:0d:10:d8:be:51:65:c1:a3:c5:83:cd:7c:ad:e0:6a:
         e7:7a:ba:ec:91:7b:63:34:10:cf:d7:db:28:cf:77:ad:57:86:
         57:e0:e8:0f:82:ea:6f:8b:61:ba:64:da:3c:48:45:b3:a1:8a:
         42:f8:96:bb:33:26:cb:d1:1d:b5:3d:04:b5:48:b6:36:74:b8:
         27:ec:41:90:34:d4:76:df:a7:cd:64:27:68:4e:c8:e7:89:2c:
         40:1b:02:7d:85:d0:88:9d:ad:75:b6:fb:c5:11:20:a6:99:b9:
         e1:42:35:c7:d6:fc:50:9e:99:17:85:f1:47:34:9e:d3:0c:c9:
         86:25:68:d1:d7:af:f5:7e:f3:99:55:0f:59:a6:73:dc:63:2d:
         29:d1:be:46:b7:55:90:e6:dc:d0:51:b2:c7:90:12:32:0c:5e:
         cb:7f:35:8d:f8:6c:a1:a8:3c:1a:de:54:95:4b:8e:a0:76:e8:
         b8:7d:c0:dd:e6:da:4b:db:97:05:6b:2d:d0:93:bd:2b:09:a6:
         ba:bc:df:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 17:03:42 2026 by rpki-client