This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a313a3a2f34382d3438203d3e20323632313832.roa
File:                     323830333a6630303a313a3a2f34382d3438203d3e20323632313832.roa (raw, json)
Hash identifier:          rXjUgoD4lwvH0wZklhVs2MPSj0Rjt6YwhtzFwNHUpDA=
Subject key identifier:   F0:F4:AB:B6:D0:AE:19:10:5C:84:44:97:CF:D9:F9:3E:B2:69:65:98
Certificate issuer:       /CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Certificate serial:       7CE060DA26CA4116A90EE97A558F601E84E62109
Authority key identifier: 3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a313a3a2f34382d3438203d3e20323632313832.roa
Signing time:             Mon 12 Jan 2026 21:00:09 +0000
ROA not before:           Mon 12 Jan 2026 20:55:09 +0000
ROA not after:            Mon 11 Jan 2027 21:00:09 +0000
asID:                     262182
IP address blocks:        2803:f00:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 09:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:e0:60:da:26:ca:41:16:a9:0e:e9:7a:55:8f:60:1e:84:e6:21:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
        Validity
            Not Before: Jan 12 20:55:09 2026 GMT
            Not After : Jan 11 21:00:09 2027 GMT
        Subject: CN=F0F4ABB6D0AE19105C844497CFD9F93EB2696598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:87:94:68:6b:e9:b9:b3:f5:5e:03:e7:43:3e:
                    04:a3:d3:a4:d6:9c:c9:9f:37:1b:d2:3b:ee:bd:9f:
                    c9:63:4e:05:c0:32:5f:0d:79:8e:7e:a4:15:f6:80:
                    5b:2b:77:83:d8:73:c4:ca:da:bd:14:28:ec:be:fa:
                    ba:10:a2:d8:9b:c1:5b:15:8b:85:ce:1a:2d:48:81:
                    11:90:a5:e9:bf:66:1b:47:d9:a0:0e:eb:b5:51:db:
                    51:f7:2e:aa:44:43:d8:50:6b:3e:be:a9:21:4a:67:
                    cc:68:33:dc:98:b8:c0:a3:16:8a:ae:f2:f3:7c:18:
                    d9:d4:58:0b:a8:46:3f:42:a1:9a:c0:be:e7:ca:f8:
                    62:74:b4:b2:f7:d8:d1:6f:ab:72:23:fe:6a:7a:09:
                    b0:44:0c:89:97:e1:d3:7a:b1:07:e8:94:89:7c:80:
                    87:20:fe:7b:c9:c6:84:0e:c3:13:1b:3b:97:7d:ad:
                    ce:ea:c4:66:7d:f9:44:5a:6f:c0:8a:0c:00:7e:cb:
                    16:77:fc:bc:49:ad:11:e5:2f:c8:5b:b9:fb:9e:df:
                    59:98:77:9f:af:1b:fb:11:6f:94:d5:dc:ce:8c:d2:
                    65:4e:53:21:7b:a6:84:24:57:2f:34:42:41:c1:da:
                    19:97:af:5a:d6:22:2c:70:89:78:43:d2:d7:a2:3d:
                    ff:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F4:AB:B6:D0:AE:19:10:5C:84:44:97:CF:D9:F9:3E:B2:69:65:98
            X509v3 Authority Key Identifier:
                keyid:3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a313a3a2f34382d3438203d3e20323632313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f00:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         d9:b0:e3:84:d6:26:48:a3:7d:ad:b7:c3:20:4c:3f:74:54:10:
         60:99:6c:a8:67:db:72:99:8f:31:4d:22:4c:77:1d:63:da:55:
         9e:1c:9f:e2:89:5d:44:41:fe:38:0e:3f:a6:d2:fb:58:5a:bf:
         10:95:9f:a0:cf:03:7f:fb:6b:a0:9b:06:e9:12:be:57:82:94:
         17:fa:73:c5:b5:88:d1:d2:67:97:cf:5f:e1:99:2d:79:8d:58:
         01:e5:75:ae:8e:07:4d:5d:12:5a:cb:20:5a:32:de:b1:81:8e:
         9a:a9:d4:5f:4b:60:2e:23:89:40:62:ed:89:72:0e:37:d4:25:
         c8:c5:0c:d6:97:67:0d:96:4e:71:73:fa:f5:8f:e0:2c:9a:8d:
         ef:fa:2a:59:72:5d:60:cf:4d:95:2d:30:57:93:8d:6e:1f:5a:
         5e:0f:0c:6b:82:70:fe:31:c6:51:ab:2b:54:a2:71:01:3c:ec:
         73:5a:f1:2f:32:fa:79:40:64:61:a5:de:02:3f:59:13:53:a2:
         6e:b4:58:13:50:4a:13:fe:53:1f:08:2f:0f:c3:a2:fb:c0:d5:
         8e:80:d9:25:29:c2:a6:53:57:63:1c:d5:9c:c9:2c:6c:74:fa:
         43:20:8f:b1:ab:62:76:71:70:9a:83:53:95:2f:c1:50:a5:69:
         dd:d0:7a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 03:42:19 2026 by rpki-client