This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/351728997EC8E90EA53EF8C1947E96A975D6DE7230979B08D355AF00546EC403/0/323830333a316663303a3a2f33322d3332203d3e20323635373831.roa
File:                     323830333a316663303a3a2f33322d3332203d3e20323635373831.roa (raw, json)
Hash identifier:          Ici2plGz4sJFOFi/LBnlao1He/e2X3A0uzKKtKN7jJA=
Subject key identifier:   40:EB:52:1C:07:DA:75:B6:FB:15:0C:7B:87:F0:33:74:0A:5D:C2:86
Certificate issuer:       /CN=F92A4B4B7B311696F9CC9738CD385CA63607178E
Certificate serial:       249B0EFFD8A94F85C4C176FB82A6040B0D94692B
Authority key identifier: F9:2A:4B:4B:7B:31:16:96:F9:CC:97:38:CD:38:5C:A6:36:07:17:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F92A4B4B7B311696F9CC9738CD385CA63607178E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/351728997EC8E90EA53EF8C1947E96A975D6DE7230979B08D355AF00546EC403/0/323830333a316663303a3a2f33322d3332203d3e20323635373831.roa
Signing time:             Tue 06 Jan 2026 19:16:55 +0000
ROA not before:           Tue 06 Jan 2026 19:11:55 +0000
ROA not after:            Tue 05 Jan 2027 19:16:55 +0000
asID:                     265781
IP address blocks:        2803:1fc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/351728997EC8E90EA53EF8C1947E96A975D6DE7230979B08D355AF00546EC403/0/F92A4B4B7B311696F9CC9738CD385CA63607178E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/351728997EC8E90EA53EF8C1947E96A975D6DE7230979B08D355AF00546EC403/0/F92A4B4B7B311696F9CC9738CD385CA63607178E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F92A4B4B7B311696F9CC9738CD385CA63607178E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Jan 2026 00:15:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:9b:0e:ff:d8:a9:4f:85:c4:c1:76:fb:82:a6:04:0b:0d:94:69:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F92A4B4B7B311696F9CC9738CD385CA63607178E
        Validity
            Not Before: Jan  6 19:11:55 2026 GMT
            Not After : Jan  5 19:16:55 2027 GMT
        Subject: CN=40EB521C07DA75B6FB150C7B87F033740A5DC286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:dc:39:79:08:c6:fc:75:f5:2e:b0:cb:94:a3:
                    fd:2c:a9:70:d8:05:93:cc:d9:81:36:7b:20:c8:65:
                    2f:27:87:3c:54:14:0a:00:64:ba:9f:09:f4:25:09:
                    67:7c:da:54:a9:fe:19:95:66:c0:ef:f0:f9:2d:66:
                    74:25:c6:58:1d:4f:1b:83:cb:42:3c:40:4c:65:d1:
                    a2:ac:50:08:f9:2c:1f:e9:64:e5:07:71:02:7c:df:
                    42:6b:35:c6:c1:d0:96:09:06:54:69:e3:39:7a:9d:
                    9a:49:88:ba:f5:ea:6a:f5:bc:b7:ca:e0:80:0c:cf:
                    fa:a8:04:01:91:e3:55:29:a8:50:da:29:51:f1:ea:
                    69:9f:90:00:b3:d0:15:99:8a:db:5c:9f:69:e4:cd:
                    ee:de:eb:fd:16:70:ac:af:96:ff:5e:92:45:69:8a:
                    80:45:cf:ae:da:36:68:19:31:47:86:9a:28:b1:32:
                    b7:5d:67:01:84:14:b7:07:f9:c7:ed:98:53:cf:6f:
                    19:ed:9c:49:d2:75:f1:8f:11:38:d4:61:38:02:5f:
                    d7:39:76:0b:c7:82:92:ee:5e:2c:ec:34:f6:42:a1:
                    73:6b:4c:32:26:78:17:1f:4b:b7:07:77:1a:a0:c6:
                    55:20:ef:8d:78:13:04:a7:ee:97:1c:5b:a2:a7:c7:
                    00:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:EB:52:1C:07:DA:75:B6:FB:15:0C:7B:87:F0:33:74:0A:5D:C2:86
            X509v3 Authority Key Identifier:
                keyid:F9:2A:4B:4B:7B:31:16:96:F9:CC:97:38:CD:38:5C:A6:36:07:17:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/351728997EC8E90EA53EF8C1947E96A975D6DE7230979B08D355AF00546EC403/0/F92A4B4B7B311696F9CC9738CD385CA63607178E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F92A4B4B7B311696F9CC9738CD385CA63607178E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/351728997EC8E90EA53EF8C1947E96A975D6DE7230979B08D355AF00546EC403/0/323830333a316663303a3a2f33322d3332203d3e20323635373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1fc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:20:35:90:fd:7e:bd:f8:5a:cf:e6:8a:c6:04:09:aa:ff:07:
         34:e2:56:87:c0:b2:a0:af:64:ab:70:47:45:50:5f:5b:32:29:
         3f:31:08:4a:00:76:da:d3:87:1c:aa:18:5d:fb:1f:a2:74:ae:
         35:91:e6:5a:56:06:b2:04:29:b9:e6:61:4f:7e:21:60:98:87:
         cd:c1:d5:8f:70:2f:90:27:cf:12:84:44:ce:50:61:af:6b:5e:
         20:d3:e5:99:63:4f:58:a0:f3:6d:bf:75:d9:6e:da:08:5c:93:
         6e:5e:88:b9:19:0d:ac:53:cc:13:45:81:0d:db:a9:c5:b6:f8:
         a4:77:ae:76:2b:36:4b:43:88:67:5b:82:8e:6c:02:99:62:09:
         3b:e2:b0:a7:f0:0e:97:c6:85:92:6d:e5:72:25:7a:47:93:5a:
         f1:86:23:0b:36:5f:83:cd:39:66:59:9b:c0:11:f2:1b:21:af:
         b3:bf:e4:57:ed:fb:69:f9:36:f7:8a:da:88:30:47:7b:19:7b:
         71:3b:9c:b8:6d:4d:85:97:67:2f:20:62:42:b3:17:2f:51:5c:
         b9:01:6c:78:a8:a6:32:46:cf:2f:75:ff:c8:91:d9:75:dc:ff:
         38:12:15:f0:31:33:1d:e4:55:04:04:a7:a2:d5:1a:89:28:f6:
         80:a8:fd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 13:31:28 2026 by rpki-client