This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3F96CB4CDE56AB24C3225B6CF65D5E42EEA040389832BF960408FE15474F9A59/0/323830333a333131303a3a2f33322d3332203d3e20323731393936.roa
File:                     323830333a333131303a3a2f33322d3332203d3e20323731393936.roa (raw, json)
Hash identifier:          BNS2004XbqlJvjFQJLcrW/xyBi+12UMpz4iqV23UDJ0=
Subject key identifier:   E7:1C:EF:8E:E8:AB:61:B2:93:D6:B5:23:41:16:BA:95:6E:38:CD:0B
Certificate issuer:       /CN=917ECF9FCF80262D23621352984A4B294B9FBCDC
Certificate serial:       78F6E4EC493664475D7A9E6D007EA821B274AEB0
Authority key identifier: 91:7E:CF:9F:CF:80:26:2D:23:62:13:52:98:4A:4B:29:4B:9F:BC:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/917ECF9FCF80262D23621352984A4B294B9FBCDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3F96CB4CDE56AB24C3225B6CF65D5E42EEA040389832BF960408FE15474F9A59/0/323830333a333131303a3a2f33322d3332203d3e20323731393936.roa
Signing time:             Tue 06 Jan 2026 19:27:08 +0000
ROA not before:           Tue 06 Jan 2026 19:22:08 +0000
ROA not after:            Tue 05 Jan 2027 19:27:08 +0000
asID:                     271996
IP address blocks:        2803:3110::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3F96CB4CDE56AB24C3225B6CF65D5E42EEA040389832BF960408FE15474F9A59/0/917ECF9FCF80262D23621352984A4B294B9FBCDC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3F96CB4CDE56AB24C3225B6CF65D5E42EEA040389832BF960408FE15474F9A59/0/917ECF9FCF80262D23621352984A4B294B9FBCDC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/917ECF9FCF80262D23621352984A4B294B9FBCDC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 03:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f6:e4:ec:49:36:64:47:5d:7a:9e:6d:00:7e:a8:21:b2:74:ae:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=917ECF9FCF80262D23621352984A4B294B9FBCDC
        Validity
            Not Before: Jan  6 19:22:08 2026 GMT
            Not After : Jan  5 19:27:08 2027 GMT
        Subject: CN=E71CEF8EE8AB61B293D6B5234116BA956E38CD0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8e:71:70:0c:71:0c:a7:79:11:7b:b4:4b:39:
                    5e:90:55:89:5b:1e:05:18:bb:c3:12:de:88:5b:40:
                    bd:ec:61:74:4a:a2:ae:c1:f6:fa:45:ed:2b:dc:bf:
                    bc:03:60:0a:2a:32:10:a1:a0:52:aa:a3:d6:56:e9:
                    8f:75:15:18:23:b3:60:77:19:08:62:48:9e:11:b8:
                    32:f5:cb:c8:84:89:0e:c2:02:5f:17:66:99:04:84:
                    f6:f8:55:d9:20:99:d3:85:48:b9:48:d1:ba:35:a6:
                    b9:c4:64:14:31:50:c5:17:28:2a:7b:ce:67:97:1a:
                    b4:b6:1d:1e:f6:d4:dd:df:91:5c:20:05:66:d4:7c:
                    b9:79:c8:ce:81:48:78:0f:ea:81:a6:ca:25:25:c0:
                    29:3a:0c:e3:cc:69:18:68:da:e5:50:1e:ab:77:1e:
                    d7:f6:c6:e8:46:86:ed:6f:b1:d3:f8:0f:29:29:cc:
                    ab:ab:20:f4:d5:7c:76:62:5b:93:70:74:72:cd:7f:
                    15:e3:d7:59:3e:02:b3:84:28:bd:43:62:7b:11:77:
                    1e:40:71:d0:0a:cc:d7:43:d4:af:2d:67:a6:0b:74:
                    46:e5:08:5e:6c:73:cc:17:96:b8:42:5e:7e:18:4f:
                    5a:8c:aa:15:7e:48:7a:23:47:51:8d:a8:83:02:80:
                    2e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:1C:EF:8E:E8:AB:61:B2:93:D6:B5:23:41:16:BA:95:6E:38:CD:0B
            X509v3 Authority Key Identifier:
                keyid:91:7E:CF:9F:CF:80:26:2D:23:62:13:52:98:4A:4B:29:4B:9F:BC:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3F96CB4CDE56AB24C3225B6CF65D5E42EEA040389832BF960408FE15474F9A59/0/917ECF9FCF80262D23621352984A4B294B9FBCDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/917ECF9FCF80262D23621352984A4B294B9FBCDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3F96CB4CDE56AB24C3225B6CF65D5E42EEA040389832BF960408FE15474F9A59/0/323830333a333131303a3a2f33322d3332203d3e20323731393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3110::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:bc:44:1b:1f:fc:0b:9f:56:74:3a:92:8b:4f:ae:02:80:4f:
         d7:1a:65:65:3e:9a:c5:3a:15:08:69:02:9a:69:5d:55:28:76:
         96:17:ab:3b:a0:76:18:ef:eb:2c:ae:f2:4c:cf:0d:51:d4:0f:
         52:07:be:5e:ac:bd:49:cf:33:4b:fd:7e:3d:7a:0d:a1:3c:5f:
         6e:77:d4:5d:a9:05:50:b2:54:77:18:3c:5c:18:b1:53:ec:a2:
         5a:20:c8:5d:f7:9f:7c:fc:ec:cb:ed:42:bc:a2:d7:0a:c3:1e:
         54:d6:82:2b:3e:cb:48:72:ba:0d:5e:91:fd:78:1b:a8:0b:ea:
         6e:54:d0:09:c8:68:5c:51:0b:67:02:e0:d2:1e:b9:f2:c7:5a:
         90:ca:fb:69:3f:85:ed:62:29:25:60:ec:21:1b:7d:ea:f8:0e:
         e3:8b:bd:bc:4d:12:42:01:48:49:d2:d7:5b:8a:0d:0a:1b:b4:
         e9:9a:4d:24:05:12:3d:27:2f:8f:40:7a:b3:ed:09:da:a0:14:
         5a:2a:da:2b:bc:39:4c:72:81:f2:2c:aa:80:72:8a:d3:98:cc:
         3b:52:ab:98:9b:44:d0:9f:b3:7e:dd:41:6d:37:e0:58:74:3a:
         99:92:d5:9e:4f:e5:c2:9a:68:cc:92:a9:8b:a0:59:e7:b7:eb:
         1d:b9:c3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 22:51:00 2026 by rpki-client