This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a6430303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a6430303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          GuZzNBb8lgUALJnlUDAjxv5chHpvwtAlIs72snp0HLY=
Subject key identifier:   B9:D9:B7:9F:1F:98:47:43:C8:97:18:BE:C5:52:CB:66:9B:A7:EF:EB
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       7BE445A904DAA45D383543F87977C2BE731366D9
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a6430303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 06 Jan 2026 20:49:06 +0000
ROA not before:           Tue 06 Jan 2026 20:44:06 +0000
ROA not after:            Tue 05 Jan 2027 20:49:06 +0000
asID:                     273072
IP address blocks:        2803:cf90:d00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:e4:45:a9:04:da:a4:5d:38:35:43:f8:79:77:c2:be:73:13:66:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Jan  6 20:44:06 2026 GMT
            Not After : Jan  5 20:49:06 2027 GMT
        Subject: CN=B9D9B79F1F984743C89718BEC552CB669BA7EFEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:05:fd:c0:ce:f4:4a:55:ca:a2:96:e1:b2:8d:
                    84:8c:ae:3d:2f:43:fb:1e:0f:93:08:1e:55:d4:3c:
                    cd:5d:50:5e:85:80:04:67:57:91:49:63:56:e8:71:
                    55:86:0e:8d:c1:91:9d:c9:81:31:7d:8f:21:7d:33:
                    d1:44:f9:f2:7f:06:2e:4d:70:ff:c3:ca:0a:e2:ba:
                    e8:13:8e:cf:04:2d:20:d2:37:e2:92:11:af:6b:c1:
                    a8:bd:a4:db:13:38:eb:61:1d:79:37:ba:5a:0a:ec:
                    ff:05:04:da:de:30:3e:27:aa:a5:0d:36:22:3b:78:
                    9a:52:26:48:bc:b7:da:18:8a:3e:da:4c:39:14:e8:
                    e3:49:38:9e:5a:0d:94:98:29:3d:85:e7:14:84:e7:
                    79:e9:09:c9:68:8e:03:f1:91:44:8a:16:dd:bb:81:
                    7b:98:4f:3b:12:0d:22:57:93:6b:0c:d2:74:95:48:
                    6b:3d:75:75:0d:b5:72:a6:f7:0a:41:bc:0e:cc:7e:
                    3c:62:34:1a:22:55:b6:de:c3:34:29:6e:dd:fe:5d:
                    8e:80:0f:17:77:9f:86:99:4b:0d:0a:45:f2:53:2f:
                    e9:b0:03:e7:bb:fd:6d:4a:22:30:93:d6:f0:89:01:
                    8f:29:b0:fa:c1:e9:6b:77:e5:b0:c8:3f:ab:a6:1e:
                    c2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D9:B7:9F:1F:98:47:43:C8:97:18:BE:C5:52:CB:66:9B:A7:EF:EB
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a6430303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         78:8e:93:34:e6:cb:67:01:0f:c6:9b:9e:95:eb:5a:f8:41:00:
         8f:d7:a4:44:72:62:e1:65:5b:cf:a4:53:49:b1:f6:c7:ee:eb:
         d3:af:13:37:86:a6:e1:17:0f:9e:92:49:e3:15:93:60:86:fe:
         f6:a4:7e:42:dc:a4:74:ab:ef:0e:8d:9e:0f:93:03:a2:fb:00:
         2f:39:78:2a:ee:f7:39:af:49:e1:ba:1a:ba:65:69:da:6c:ff:
         9a:7e:57:09:c9:1d:d1:21:ea:d0:43:da:07:c1:3b:e4:67:98:
         89:7f:cd:0e:f3:79:71:f7:ef:99:3d:d7:c5:56:c5:00:3a:19:
         41:d4:90:d5:f5:50:85:24:bd:26:2a:e3:ce:e7:5b:38:0c:8f:
         79:41:32:98:21:6f:86:e0:88:e9:2d:de:f0:e9:56:bb:01:de:
         13:f0:24:77:dd:2b:a8:43:7b:9b:98:c1:8e:6c:e6:51:4d:37:
         b3:9d:32:fc:ca:81:b6:70:e7:61:ae:ae:54:5f:66:67:24:e2:
         b0:26:d8:80:22:3f:ec:89:cc:81:e1:1e:fc:8b:c1:3a:8e:78:
         52:2c:1b:96:ce:ff:3c:42:67:5b:a4:69:83:59:a3:80:f3:7d:
         62:a1:91:f5:c8:f0:74:36:d6:7d:21:45:ea:a6:c4:65:e8:8d:
         0f:1d:da:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 16:22:07 2026 by rpki-client