This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          15ydgmb9Ufg1hEyCbvIcDkgbM7hhW7kO247+xgCMIT8=
Subject key identifier:   67:CC:FD:69:71:A5:F1:72:21:32:15:26:EB:0C:D4:D4:60:EF:1D:39
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       241116E92F81699C7CE000CC31970A6F84947AC1
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 06 Jan 2026 20:49:08 +0000
ROA not before:           Tue 06 Jan 2026 20:44:08 +0000
ROA not after:            Tue 05 Jan 2027 20:49:08 +0000
asID:                     273072
IP address blocks:        2803:cf90::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:11:16:e9:2f:81:69:9c:7c:e0:00:cc:31:97:0a:6f:84:94:7a:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Jan  6 20:44:08 2026 GMT
            Not After : Jan  5 20:49:08 2027 GMT
        Subject: CN=67CCFD6971A5F17221321526EB0CD4D460EF1D39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:52:2a:91:bc:43:93:35:e4:34:87:f3:8d:2f:
                    18:54:8f:cb:d8:32:9c:76:80:37:cd:9e:da:64:aa:
                    55:ba:ad:90:15:e3:09:43:80:3b:a3:3d:5e:36:80:
                    41:a4:49:d6:34:2b:25:59:de:85:a6:95:c4:a7:d1:
                    e5:de:51:72:90:b0:c0:c7:96:00:49:7b:04:5e:1e:
                    fe:3e:5c:4c:0a:ea:2c:f2:8c:14:2d:af:72:79:71:
                    20:91:69:35:91:df:31:5d:55:fc:b0:8b:50:de:b7:
                    a5:2c:d3:b6:d1:53:f9:9c:88:7b:95:5e:dc:d3:35:
                    49:a8:84:7b:0d:58:12:c1:4f:3e:25:bf:ed:a9:70:
                    b6:10:88:ae:1c:d8:4d:63:6e:24:b8:48:2d:bc:26:
                    2f:ba:a2:46:e2:d6:4a:2b:c7:e4:46:c0:bc:86:a3:
                    03:fe:25:25:20:5e:e9:37:1e:76:bd:41:83:0d:3a:
                    66:93:0a:f7:ef:56:0b:d5:b5:ed:92:4f:24:83:d0:
                    27:02:75:4a:8a:2b:72:60:a2:62:eb:6b:85:ed:32:
                    fd:15:39:f9:77:a3:a5:5d:e5:76:bc:e6:9d:fa:20:
                    e6:59:89:ee:b5:e1:36:e3:9d:86:65:c1:82:92:14:
                    d7:1c:34:bd:66:8c:8c:04:46:8e:72:b4:2c:c1:89:
                    d3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:CC:FD:69:71:A5:F1:72:21:32:15:26:EB:0C:D4:D4:60:EF:1D:39
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90::/40

    Signature Algorithm: sha256WithRSAEncryption
         a5:9b:8e:ee:83:51:03:e9:65:45:9e:1a:86:c8:43:2c:7c:95:
         99:c4:7e:d5:c9:6b:08:f5:08:4a:fc:79:5b:05:73:42:ba:3b:
         c5:76:28:74:67:98:ea:ad:dc:43:10:00:30:f2:3e:90:28:5b:
         de:74:2c:da:60:80:b7:5b:b7:e1:f9:dc:22:a3:08:c8:66:c5:
         4c:c8:2e:3a:1c:07:3f:ed:cb:65:bf:a7:4b:03:d6:bc:a0:54:
         77:48:eb:c7:e4:77:ce:64:87:f7:68:b3:85:fb:3b:2a:85:da:
         dc:61:b9:f6:ac:3e:1a:40:ac:1c:bf:2b:fe:34:6e:df:d3:96:
         e0:c6:30:8c:67:96:cd:1b:20:3a:7b:64:18:64:64:15:18:47:
         7e:77:20:d4:c3:7d:18:96:a4:5e:52:80:91:98:c4:7e:c5:21:
         55:42:40:e9:86:9a:9a:b8:07:6f:17:2f:6d:4e:a6:5b:01:4e:
         a9:98:a2:7e:59:14:77:f0:ef:e0:de:3c:17:67:89:80:73:4e:
         60:0b:ce:0e:b7:74:f3:45:eb:12:64:3b:ab:20:fe:92:d1:d0:
         3c:78:93:60:6b:09:77:10:92:56:5f:56:9b:00:42:92:16:60:
         5f:d2:73:70:05:b3:7d:19:b7:0c:a8:64:ad:14:be:b8:53:13:
         1c:9d:62:3c
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUJBEW6S+BaZx84ADMMZcKb4SUesEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND
NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MDhaFw0yNzAxMDUyMDQ5MDhaMDMxMTAvBgNV
BAMTKDY3Q0NGRDY5NzFBNUYxNzIyMTMyMTUyNkVCMENENEQ0NjBFRjFEMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/UiqRvEOTNeQ0h/ONLxhUj8vY
Mpx2gDfNntpkqlW6rZAV4wlDgDujPV42gEGkSdY0KyVZ3oWmlcSn0eXeUXKQsMDH
lgBJewReHv4+XEwK6izyjBQtr3J5cSCRaTWR3zFdVfywi1Det6Us07bRU/mciHuV
XtzTNUmohHsNWBLBTz4lv+2pcLYQiK4c2E1jbiS4SC28Ji+6okbi1korx+RGwLyG
owP+JSUgXuk3Hna9QYMNOmaTCvfvVgvVte2STySD0CcCdUqKK3JgomLra4XtMv0V
Ofl3o6Vd5Xa85p36IOZZie614TbjnYZlwYKSFNccNL1mjIwERo5ytCzBidPRAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUZ8z9aXGl8XIhMhUm6wzU1GDvHTkwHwYDVR0j
BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx
QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG
RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3
NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw
MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhM2Ey
ZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzczMzMwMzczMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgDz5AA
MA0GCSqGSIb3DQEBCwUAA4IBAQClm47ug1ED6WVFnhqGyEMsfJWZxH7VyWsI9QhK
/HlbBXNCujvFdih0Z5jqrdxDEAAw8j6QKFvedCzaYIC3W7fh+dwiowjIZsVMyC46
HAc/7ctlv6dLA9a8oFR3SOvH5HfOZIf3aLOF+zsqhdrcYbn2rD4aQKwcvyv+NG7f
05bgxjCMZ5bNGyA6e2QYZGQVGEd+dyDUw30YlqReUoCRmMR+xSFVQkDphpqauAdv
Fy9tTqZbAU6pmKJ+WRR38O/g3jwXZ4mAc05gC84Ot3TzResSZDurIP6S0dA8eJNg
awl3EJJWX1abAEKSFmBf0nNwBbN9GbcMqGStFL64UxMcnWI8
-----END CERTIFICATE-----
Generated at Mon Jan 12 16:21:51 2026 by rpki-client