This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62F46EBD9FA041CDC9BFA837335CDF7CE880D9370C4B4B973CEDBEC521B1F998/0/323830333a616639303a3a2f33322d3634203d3e20323733303735.roa
File:                     323830333a616639303a3a2f33322d3634203d3e20323733303735.roa (raw, json)
Hash identifier:          ayInt7uqQMoACww1oseMMd/vfzct9Ab7jha9Rq7TXas=
Subject key identifier:   64:D6:C4:FE:F4:FE:28:F1:0A:87:38:8D:EA:31:D6:11:71:8A:20:DA
Certificate issuer:       /CN=907E38C1CD68D8C46F9016C31EC81B032A2351CD
Certificate serial:       1069F12962C79812D42771A45574679AC1F783C8
Authority key identifier: 90:7E:38:C1:CD:68:D8:C4:6F:90:16:C3:1E:C8:1B:03:2A:23:51:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/907E38C1CD68D8C46F9016C31EC81B032A2351CD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62F46EBD9FA041CDC9BFA837335CDF7CE880D9370C4B4B973CEDBEC521B1F998/0/323830333a616639303a3a2f33322d3634203d3e20323733303735.roa
Signing time:             Tue 06 Jan 2026 19:41:55 +0000
ROA not before:           Tue 06 Jan 2026 19:36:55 +0000
ROA not after:            Tue 05 Jan 2027 19:41:55 +0000
asID:                     273075
IP address blocks:        2803:af90::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62F46EBD9FA041CDC9BFA837335CDF7CE880D9370C4B4B973CEDBEC521B1F998/0/907E38C1CD68D8C46F9016C31EC81B032A2351CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62F46EBD9FA041CDC9BFA837335CDF7CE880D9370C4B4B973CEDBEC521B1F998/0/907E38C1CD68D8C46F9016C31EC81B032A2351CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/907E38C1CD68D8C46F9016C31EC81B032A2351CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 22:33:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:69:f1:29:62:c7:98:12:d4:27:71:a4:55:74:67:9a:c1:f7:83:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=907E38C1CD68D8C46F9016C31EC81B032A2351CD
        Validity
            Not Before: Jan  6 19:36:55 2026 GMT
            Not After : Jan  5 19:41:55 2027 GMT
        Subject: CN=64D6C4FEF4FE28F10A87388DEA31D611718A20DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:0a:34:ca:3a:01:fd:1c:6c:5f:d2:5d:1a:f1:
                    dc:a0:17:73:dd:42:be:27:56:ff:51:e8:9a:24:54:
                    d8:06:f0:9e:08:76:f0:0b:c3:0d:01:c1:25:c7:80:
                    d6:e8:3b:66:50:5d:f8:d5:da:93:95:b9:24:7d:fd:
                    25:12:c8:e4:7c:e5:bf:cf:51:52:6d:2a:ca:4b:a0:
                    d0:24:37:39:c5:c5:fb:0d:65:04:e6:df:29:db:3c:
                    c3:ec:00:e7:3f:36:72:70:90:56:3a:ef:11:90:db:
                    df:c7:14:e3:50:1a:39:6c:62:6e:6f:7f:5f:4d:43:
                    91:19:0d:fa:77:81:24:ef:56:9f:3a:ef:71:07:59:
                    47:2b:cd:74:71:2b:3c:71:b0:f7:d8:56:d3:75:2a:
                    bc:91:91:89:2c:e0:b3:67:e2:61:4d:ce:ec:69:54:
                    01:55:5a:6d:e9:88:1c:36:55:a4:61:b3:ea:9b:8b:
                    9d:63:68:66:a1:b7:c7:89:17:ce:f3:47:a8:c6:ba:
                    02:3e:bc:ed:9e:a5:6a:75:6c:57:fb:83:ba:53:6f:
                    21:82:fd:5b:e6:b5:85:d3:d7:52:ec:24:d6:0a:0b:
                    97:99:b6:a0:8a:a9:12:13:3f:eb:47:c1:2e:0c:84:
                    82:94:6f:5b:94:88:c6:84:be:4c:ab:38:a8:36:cc:
                    a9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D6:C4:FE:F4:FE:28:F1:0A:87:38:8D:EA:31:D6:11:71:8A:20:DA
            X509v3 Authority Key Identifier:
                keyid:90:7E:38:C1:CD:68:D8:C4:6F:90:16:C3:1E:C8:1B:03:2A:23:51:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62F46EBD9FA041CDC9BFA837335CDF7CE880D9370C4B4B973CEDBEC521B1F998/0/907E38C1CD68D8C46F9016C31EC81B032A2351CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/907E38C1CD68D8C46F9016C31EC81B032A2351CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62F46EBD9FA041CDC9BFA837335CDF7CE880D9370C4B4B973CEDBEC521B1F998/0/323830333a616639303a3a2f33322d3634203d3e20323733303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:af90::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:6b:5e:a3:fb:98:2b:11:a1:6c:3d:0c:4d:1c:db:b9:41:c5:
         7f:79:cb:a3:23:99:81:51:0d:44:75:cc:92:7d:c5:9d:37:b8:
         55:83:4f:aa:d5:41:dc:50:25:1c:80:92:9d:e4:49:bd:c1:93:
         d1:6d:44:42:21:7c:6f:f7:3b:d3:b4:45:ab:8c:34:8e:34:25:
         d5:01:98:ac:83:72:d4:de:8f:56:09:0a:8f:4f:63:96:38:78:
         b7:e8:a5:d1:c3:0d:d6:64:c5:98:c7:1a:9f:60:e1:3d:88:0b:
         1b:b6:8a:0b:30:82:6d:e5:28:1c:33:9b:f5:88:20:9f:4e:8d:
         db:e5:76:20:6d:01:d6:01:d1:97:e2:ea:ee:1b:e3:2e:05:a2:
         44:21:ce:df:44:1d:1b:22:58:9a:6d:ae:fd:56:0f:8c:9e:e3:
         4c:56:95:e8:65:1d:3c:a9:0a:11:6b:1b:74:78:96:31:74:0f:
         6c:10:e8:45:76:a1:8b:94:27:33:cd:5a:d9:bb:23:da:eb:00:
         ed:cd:fa:3b:a5:4d:a3:67:b3:65:8f:af:b4:19:f5:91:13:78:
         4e:43:38:b1:c8:03:38:6e:cb:3e:0f:85:1c:de:63:3a:3c:d2:
         ab:a3:99:f1:d9:44:a3:7b:d3:7b:6d:61:ee:c8:b2:9b:c3:7a:
         b2:a9:2a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 06:43:10 2026 by rpki-client