This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a3430303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a3430303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          lOOgccvFHe7xAa1dsrEBMowpVO9SpXXlDOaC1BJPCVw=
Subject key identifier:   8A:8A:D4:09:49:55:20:38:B5:0C:75:FA:AC:12:CE:3F:3D:13:8F:04
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       70B9BC24570E02978A469FB17ACC66E4827B0AE9
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a3430303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 06 Jan 2026 20:49:10 +0000
ROA not before:           Tue 06 Jan 2026 20:44:10 +0000
ROA not after:            Tue 05 Jan 2027 20:49:10 +0000
asID:                     273072
IP address blocks:        2803:cf90:400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:b9:bc:24:57:0e:02:97:8a:46:9f:b1:7a:cc:66:e4:82:7b:0a:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Jan  6 20:44:10 2026 GMT
            Not After : Jan  5 20:49:10 2027 GMT
        Subject: CN=8A8AD40949552038B50C75FAAC12CE3F3D138F04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:34:77:b9:43:85:e7:5f:12:a7:98:84:db:4b:
                    15:30:39:59:c6:22:70:b7:13:90:2f:ae:2c:f6:91:
                    35:de:56:58:47:0b:1a:ad:a9:08:71:18:45:2b:64:
                    f0:fd:3b:af:56:9a:ed:fb:04:17:37:b2:e4:7b:e0:
                    5d:51:2c:09:75:64:bf:25:36:30:b3:fa:e7:d6:13:
                    e2:d0:c2:f8:cb:45:cf:74:26:4c:b3:73:de:06:28:
                    ee:2f:a8:b1:e1:c9:a7:8c:db:35:2e:08:f3:f6:34:
                    76:49:74:6f:07:4a:4c:09:93:99:99:ef:de:19:e6:
                    e5:0e:77:e6:f6:b6:53:bf:fc:8e:5f:24:b3:54:dd:
                    e7:93:3c:bc:12:8c:a8:ab:bf:cd:fb:8f:a8:f7:95:
                    47:55:ce:c7:0d:51:88:27:5e:12:c3:55:de:59:97:
                    6d:ae:09:d6:38:10:89:65:64:e7:ec:b6:ea:56:fe:
                    be:6f:61:c6:51:17:88:36:dc:a7:f7:6e:09:bc:ea:
                    73:e9:56:49:59:00:92:a7:47:39:a6:d6:cb:d1:8a:
                    ae:a9:29:cc:af:0e:a3:68:73:5a:ae:e5:7e:76:ec:
                    88:a2:b0:f7:d2:60:d7:62:99:58:ce:ea:dd:db:2a:
                    4c:36:ac:2b:cc:73:e1:8f:3d:42:9e:2f:32:99:fd:
                    8e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:8A:D4:09:49:55:20:38:B5:0C:75:FA:AC:12:CE:3F:3D:13:8F:04
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a3430303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         6a:44:dd:ad:cc:79:1c:57:8b:11:52:3a:38:94:2a:d7:7c:da:
         53:87:a0:ab:b2:ad:fa:c2:5c:b4:f5:0d:4f:72:66:f9:03:35:
         8d:a1:49:6e:4f:c2:34:13:81:45:c9:ad:23:32:a2:f6:0a:22:
         dd:52:32:55:ae:12:79:11:58:59:cc:40:23:d6:12:be:aa:60:
         7e:33:ed:b8:af:cb:7c:ef:fe:30:e1:67:8c:27:cd:61:2e:f4:
         7a:dd:d5:2e:4b:1c:13:3a:3a:b7:33:fb:bf:7e:82:ed:d9:92:
         9a:c5:5f:6c:d1:20:e0:e6:88:98:be:a7:e2:84:fe:1d:79:0c:
         ba:0f:4f:f5:0a:8f:57:e7:b1:db:09:c8:83:79:29:c8:b2:85:
         2b:65:aa:e1:96:1a:7d:a7:09:8d:cd:de:a5:81:c8:38:0c:76:
         f9:b9:5d:4b:1e:d7:86:e8:d7:66:16:fc:a3:b2:89:f0:2d:d1:
         9b:84:e9:6b:c7:98:5c:36:a4:61:a2:42:bb:19:4b:e9:40:24:
         bb:09:e7:46:0b:2e:0a:25:c8:c7:ef:53:79:3b:d7:57:ed:6a:
         51:c7:70:98:d6:72:d4:31:fa:27:4c:df:44:3e:fa:39:c1:10:
         79:c9:e3:c0:67:82:52:26:3c:9f:47:6b:e7:22:e3:c4:fd:c1:
         90:5f:06:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 16:22:07 2026 by rpki-client