This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a6630303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a6630303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          XICrXbbKtwHuPS605DAoh8kNNizQiltCZlWXhxgea54=
Subject key identifier:   5F:60:2D:10:38:F1:2C:B4:9F:3A:E3:1E:35:75:C7:BE:B9:5D:AE:63
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       322249665C7093C4CED886DAFB0CF378A5BF1F9C
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a6630303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 06 Jan 2026 20:49:18 +0000
ROA not before:           Tue 06 Jan 2026 20:44:18 +0000
ROA not after:            Tue 05 Jan 2027 20:49:18 +0000
asID:                     273072
IP address blocks:        2803:cf90:f00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:22:49:66:5c:70:93:c4:ce:d8:86:da:fb:0c:f3:78:a5:bf:1f:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Jan  6 20:44:18 2026 GMT
            Not After : Jan  5 20:49:18 2027 GMT
        Subject: CN=5F602D1038F12CB49F3AE31E3575C7BEB95DAE63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9c:9c:93:e2:43:fb:d9:28:d2:cc:31:ec:cb:
                    ea:31:c5:a0:49:bb:34:33:13:3b:6c:ea:85:a3:69:
                    14:2b:27:9d:72:9d:7d:2f:7a:8b:f6:75:e9:a9:05:
                    82:c3:60:d2:2c:1a:4e:ed:c0:ec:2f:85:61:27:89:
                    d3:a7:a0:84:38:86:f7:26:53:f6:6e:57:19:9d:b1:
                    e8:1f:0b:30:f0:b3:4d:97:48:32:9c:ed:b8:a2:e8:
                    02:ae:44:50:a6:10:c8:e0:0b:ba:1d:1c:a3:62:f7:
                    22:8f:43:84:49:28:1c:1a:fc:f0:6d:97:dd:b4:97:
                    f6:27:bb:52:d0:0b:9f:2c:29:55:64:44:c0:b6:b7:
                    c8:52:46:d7:86:61:ae:f3:6b:39:21:ba:7a:e2:24:
                    ae:b4:18:e0:95:f9:33:a7:c9:bf:f3:27:da:f4:43:
                    e2:e5:3a:4a:20:6b:9a:e0:82:38:a5:8a:8c:e9:e7:
                    c1:63:81:d6:51:e9:81:9d:65:65:f7:29:a1:9c:63:
                    cb:70:cc:79:f0:c8:cd:b9:42:65:53:03:a0:15:9a:
                    e7:33:3e:5f:6b:a1:dd:07:21:12:4b:34:f0:45:ee:
                    03:f9:a8:c3:28:ea:87:59:d6:cb:7f:ef:ec:ec:8f:
                    7d:aa:fd:0f:1f:01:67:d2:84:a7:e4:51:30:f5:f9:
                    14:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:60:2D:10:38:F1:2C:B4:9F:3A:E3:1E:35:75:C7:BE:B9:5D:AE:63
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a6630303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         1b:36:22:0a:a1:de:27:7b:66:56:67:de:dd:14:a9:50:54:70:
         7f:70:9f:c9:b2:08:5b:ea:d5:8d:71:97:96:42:aa:fe:da:21:
         a4:f5:f3:a7:e3:34:8c:ac:b1:c1:f2:f8:e0:7b:67:36:f5:85:
         4a:20:29:13:6c:29:e3:ba:3e:69:77:61:bc:dc:e8:af:aa:3a:
         42:2e:57:5e:73:92:f6:12:07:6f:09:a1:9f:98:83:5c:27:b5:
         dd:3e:70:46:98:7a:ba:87:6b:9b:44:d6:77:88:d0:87:0e:17:
         28:66:52:8a:ef:9d:89:24:c8:a8:d3:00:b4:8a:a9:2d:75:a9:
         00:65:77:70:dc:93:d1:d9:10:a3:45:70:4e:df:eb:4a:65:56:
         f8:91:bf:00:39:2f:8c:22:28:61:3e:78:4a:7a:0c:30:9b:19:
         26:af:a5:2c:c1:54:04:bb:39:ab:df:6e:ac:ea:a1:b9:7e:ec:
         ff:73:3b:d6:84:15:75:86:97:be:7a:be:93:0c:31:93:5c:e0:
         fe:37:83:9c:14:03:41:54:81:7e:90:fb:1b:7c:72:28:56:20:
         bd:65:fb:f8:c9:6c:b8:99:08:15:3c:b4:16:59:51:21:34:e7:
         13:7c:4d:f3:00:04:fc:59:ab:d8:bd:b4:22:d9:bc:72:04:27:
         3a:f2:61:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 16:23:10 2026 by rpki-client