This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a3830303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a3830303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          qYZy4VtlnsCRc43Nq30ZDlGYFjwKPPMKdZKM4l3NuII=
Subject key identifier:   23:86:75:60:CA:41:BE:DE:1F:15:A3:B2:22:35:A5:43:2A:3F:EC:07
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       35E1925259496BAEC1D6F9D7A667A534C19D60B1
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a3830303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 06 Jan 2026 20:49:12 +0000
ROA not before:           Tue 06 Jan 2026 20:44:12 +0000
ROA not after:            Tue 05 Jan 2027 20:49:12 +0000
asID:                     273072
IP address blocks:        2803:cf90:800::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:e1:92:52:59:49:6b:ae:c1:d6:f9:d7:a6:67:a5:34:c1:9d:60:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Jan  6 20:44:12 2026 GMT
            Not After : Jan  5 20:49:12 2027 GMT
        Subject: CN=23867560CA41BEDE1F15A3B22235A5432A3FEC07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d3:03:03:14:c9:6a:53:8f:0a:8d:2e:5e:0f:
                    56:93:2d:60:64:64:3b:13:d1:da:3a:ea:be:af:66:
                    6d:d4:a0:3c:94:25:55:68:d2:b9:2e:53:8b:7b:b5:
                    b9:8b:9d:db:83:76:60:26:c3:89:9f:71:2e:7b:dd:
                    14:f3:13:18:25:8a:91:6f:87:41:8c:02:22:49:91:
                    e1:76:5f:c5:a5:62:7e:a1:79:2f:7d:a2:da:c1:64:
                    d3:a1:0b:6a:98:e1:0d:b1:f4:0d:2b:ca:67:ab:e0:
                    2a:4c:ac:2b:e9:57:40:d1:44:18:f7:f0:63:11:7f:
                    48:0d:3a:2b:0a:22:17:d7:e7:7d:41:8f:23:88:e0:
                    74:80:67:89:fa:d9:40:fa:0a:14:a7:75:2a:14:11:
                    6f:e2:98:05:13:98:82:f5:97:5d:26:1f:1e:8a:dd:
                    13:bd:f1:b6:c2:48:e3:fc:fd:9c:54:0a:ca:dd:bc:
                    ab:50:a3:de:7e:be:48:b5:00:43:08:3f:85:1a:cc:
                    21:44:aa:89:13:43:af:8f:22:78:11:4e:f6:0f:8f:
                    e8:37:ec:9e:47:8c:6e:6f:46:3b:76:b5:0d:1c:fe:
                    b2:f8:9c:69:3d:9b:fa:e7:0e:37:02:56:6a:5f:d2:
                    40:cd:75:0e:e2:0a:d7:68:90:3d:91:a8:b2:f1:19:
                    3a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:86:75:60:CA:41:BE:DE:1F:15:A3:B2:22:35:A5:43:2A:3F:EC:07
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a3830303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         b4:c5:40:60:09:7a:1f:b4:9b:29:06:c7:b8:83:71:a3:f2:bf:
         b7:15:81:34:fd:6a:91:84:2c:2d:8a:a5:36:65:82:63:63:ed:
         22:69:4e:af:3b:22:12:90:63:0c:4f:36:55:f6:8d:2c:1e:17:
         e5:26:ca:b8:ee:43:11:53:03:7d:a5:e0:0f:f7:e0:06:c0:8a:
         2c:75:9a:00:58:de:02:76:9d:d8:5d:87:92:2a:9a:72:5c:99:
         e0:d9:4d:86:35:33:67:e7:8d:bc:a3:8e:1a:07:2a:13:b0:c6:
         a0:f1:74:c4:5f:7e:e9:e9:ed:c4:ab:83:67:b4:9c:76:4f:ab:
         8b:b8:ab:33:72:67:e1:f5:0d:ce:2e:90:17:d4:e6:78:1f:64:
         2d:a2:cb:57:e8:df:f7:6c:1a:59:47:df:44:bc:9f:3d:22:73:
         0c:d0:87:38:30:d6:88:cd:58:53:82:63:b4:4d:1c:f0:66:53:
         4a:e6:6b:dc:c3:87:f0:56:2a:6f:f1:ad:79:55:8c:64:72:e4:
         fe:cb:1f:91:00:af:c1:20:22:ac:8f:ac:82:5e:63:75:fc:69:
         6b:25:af:99:45:ee:a2:57:de:b3:40:ec:c4:50:00:98:68:2f:
         1f:f6:49:d3:26:31:03:b3:c7:64:a1:23:43:ec:1d:23:21:89:
         fc:c4:50:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 16:22:06 2026 by rpki-client