This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a3730303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a3730303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          Fh9EhW0nsWvYgosNuZmHb1mQuTXK038Q0XlFPPyFLp4=
Subject key identifier:   AB:0C:D2:A2:87:A2:E2:D4:16:6B:C9:C9:31:93:1F:CD:D5:F1:52:D9
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       1C1E1E81FDAFD75CDE6DA38D84B87EDBF2BF99F5
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a3730303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 06 Jan 2026 20:49:06 +0000
ROA not before:           Tue 06 Jan 2026 20:44:06 +0000
ROA not after:            Tue 05 Jan 2027 20:49:06 +0000
asID:                     273072
IP address blocks:        2803:cf90:700::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:1e:1e:81:fd:af:d7:5c:de:6d:a3:8d:84:b8:7e:db:f2:bf:99:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Jan  6 20:44:06 2026 GMT
            Not After : Jan  5 20:49:06 2027 GMT
        Subject: CN=AB0CD2A287A2E2D4166BC9C931931FCDD5F152D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a7:c7:89:28:bc:a0:3a:26:3c:2a:38:c8:a7:
                    98:bc:d0:e6:30:49:31:18:b7:48:4e:43:3b:bc:03:
                    41:a0:c1:5c:36:06:70:eb:36:c7:64:da:7b:5f:62:
                    a2:0e:ce:46:73:88:07:ed:33:6c:63:e3:c8:27:53:
                    bc:02:ac:f4:2a:f2:4b:c4:4c:e3:56:95:cc:e3:8e:
                    98:d5:7f:53:bf:b8:14:91:c7:d0:a2:9f:63:0d:51:
                    b0:b6:ac:9a:b3:d7:97:a2:35:2e:b6:c7:01:47:d6:
                    15:0f:94:0c:44:65:ab:22:a2:f2:aa:26:96:1c:d6:
                    9c:6d:34:a0:24:4c:c8:9f:28:09:ef:19:7c:6d:07:
                    f8:cd:ce:d7:53:4b:ee:01:a4:4f:94:55:28:ea:86:
                    cb:e3:1f:98:06:8b:e5:39:b5:3e:6d:15:a5:43:7d:
                    7d:b9:03:cf:f4:c9:34:08:fa:64:fb:4c:11:bb:a1:
                    37:a7:84:92:97:4b:f3:03:34:97:bc:f9:4b:ec:6b:
                    1b:19:95:c9:07:04:31:66:c8:f5:d5:17:2f:64:16:
                    16:c0:a1:4e:13:f8:d8:2f:9c:c8:9f:73:20:06:03:
                    f9:4b:8b:59:54:4b:47:fe:ed:d3:1f:09:ce:05:e0:
                    dd:e9:5a:3d:c4:1c:2e:b7:82:5b:3b:b2:0c:ce:09:
                    79:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:0C:D2:A2:87:A2:E2:D4:16:6B:C9:C9:31:93:1F:CD:D5:F1:52:D9
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a3730303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         57:b8:ee:1d:48:05:2e:f1:b9:d4:5f:2a:14:d3:6b:2c:d5:58:
         34:ec:0d:3c:4d:a2:3e:08:a5:f3:ac:b5:4d:81:44:44:15:7b:
         55:6c:1a:c0:a8:01:c5:e5:b5:c5:a6:33:a8:c2:ae:7f:e4:98:
         31:da:3e:7a:a2:11:76:92:d2:50:54:65:63:3d:2b:fb:d2:de:
         b0:f4:1f:98:9e:49:7b:b9:3d:fc:80:1d:03:5a:b3:06:ce:46:
         ae:76:5f:f1:e4:71:5e:0e:77:6c:ab:cc:79:8b:fd:38:5b:90:
         e3:b3:fa:54:76:f2:c6:b2:bc:dc:05:d9:4a:b0:8a:4f:e7:79:
         8c:83:87:8d:a4:3f:1b:5b:b6:7a:7b:1c:4a:4e:e0:ea:6e:93:
         fc:35:3a:a8:80:56:25:6a:44:1b:83:96:8d:7d:91:5d:65:28:
         df:e2:c5:80:b0:73:11:d3:96:8b:98:63:06:3e:46:dc:65:50:
         00:8b:07:6b:b3:ee:ce:3f:b2:b3:c7:97:1b:d6:c5:17:9f:75:
         38:c4:b1:d4:a0:28:d9:37:c7:3c:2f:23:25:ac:cc:64:0b:4f:
         dd:0a:f6:0d:35:a7:c1:b0:08:3a:66:5b:a7:5e:47:c3:90:ef:
         fd:8d:bb:e5:8e:e1:0d:9d:c2:f1:e6:cd:74:8c:33:0c:72:18:
         9e:ac:c2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 16:23:34 2026 by rpki-client