This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a3330303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a3330303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          bfdIJW752tMHFaP4GPtTrP6dYlE82VA10ACuTIB4RK0=
Subject key identifier:   55:33:F7:25:74:9C:B4:B2:3D:28:83:90:C5:11:61:47:92:55:08:FA
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       73320E9C1DCFB96684CA41D549BB71E96590B349
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a3330303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 06 Jan 2026 20:49:01 +0000
ROA not before:           Tue 06 Jan 2026 20:44:01 +0000
ROA not after:            Tue 05 Jan 2027 20:49:01 +0000
asID:                     273072
IP address blocks:        2803:cf90:300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:32:0e:9c:1d:cf:b9:66:84:ca:41:d5:49:bb:71:e9:65:90:b3:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Jan  6 20:44:01 2026 GMT
            Not After : Jan  5 20:49:01 2027 GMT
        Subject: CN=5533F725749CB4B23D288390C5116147925508FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5c:31:6a:aa:bb:2a:6d:af:46:45:fa:5a:fb:
                    af:75:42:b1:fb:85:40:4b:73:f8:a3:28:c9:35:c3:
                    64:2d:55:ed:36:f2:ed:b3:bc:46:2c:f1:fa:1c:ca:
                    c0:41:2b:3a:c8:14:d0:a6:63:cc:2f:92:ba:dc:c7:
                    d9:9c:cb:39:8a:f3:df:b3:3e:66:55:8b:78:83:0c:
                    94:12:3b:32:3c:1b:aa:c3:3a:43:8d:bf:2a:47:fe:
                    de:54:f7:5a:65:ae:19:46:35:46:15:fc:2a:e0:55:
                    92:2d:99:fc:a0:ea:2a:d3:65:12:50:ac:d5:83:3e:
                    7c:0b:d1:05:28:a8:8d:cd:b6:d1:bd:ae:c5:b6:67:
                    05:10:b3:0c:bd:71:90:2c:d5:f3:b7:62:fd:d4:70:
                    31:34:37:6e:60:78:d9:11:8b:d7:73:11:ff:e1:e9:
                    a2:bd:ad:5e:9e:d0:ce:ed:37:e7:c6:48:04:6c:9f:
                    ff:17:54:e4:4b:4d:87:4e:bd:5b:f6:d2:d3:d3:0c:
                    f3:ad:c8:6b:19:11:04:b8:8a:30:ac:49:04:50:1e:
                    70:d2:50:1f:71:18:77:4d:b8:c7:eb:9e:81:c9:d2:
                    8c:66:63:b1:a6:33:a8:79:e5:6a:7f:08:f3:8a:fe:
                    24:c1:f2:80:d4:8c:17:6a:d0:85:be:9d:df:d6:a4:
                    49:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:33:F7:25:74:9C:B4:B2:3D:28:83:90:C5:11:61:47:92:55:08:FA
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a3330303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         8c:73:ca:c1:d8:5c:f4:aa:43:75:3f:db:28:f1:4a:11:32:8b:
         db:84:5d:a1:43:b9:cd:1a:5e:76:db:c4:1d:db:22:42:4e:9f:
         5e:6c:cb:e7:e6:7a:e4:6e:d7:c0:7c:58:f6:13:3a:a6:0d:77:
         a0:c0:15:0d:24:ee:b9:6e:67:b6:04:8b:67:cb:93:86:5c:f8:
         bc:e7:6a:ff:f6:21:c9:11:7b:58:c0:97:f5:24:b9:78:3e:54:
         9e:a8:d8:d4:d9:4f:48:1b:d7:82:4f:2d:be:b1:2a:18:8b:9d:
         f6:d1:60:70:ab:72:c0:73:8e:6b:09:5f:cb:c5:2d:51:3d:e5:
         09:7b:1a:15:1e:e9:5b:f3:fc:02:af:75:3e:fa:91:7e:b5:e7:
         be:2c:0c:d6:9d:81:db:12:97:7d:e9:5f:bc:c0:b7:77:72:f9:
         90:ae:b3:e8:62:f5:69:64:5f:a6:bf:29:16:c1:66:56:2e:cf:
         7e:47:09:80:a8:8e:2f:9e:34:72:69:e5:c3:53:3c:9e:e5:33:
         e8:8a:6c:26:7c:d7:6c:b6:7b:f3:38:82:26:78:85:e0:aa:b7:
         97:ed:e5:38:4e:b5:27:ff:64:3a:ce:70:24:89:0c:0e:c7:ea:
         2b:69:4d:0b:5d:94:41:a4:7b:81:16:a5:bb:fc:db:d4:b7:7e:
         e9:f7:b3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 16:22:10 2026 by rpki-client