This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7EC50570DFFB79A94532146FA82AC2F2A43B7E5FC50D906E0AE291D09FE5A720/0/323830333a363439303a3a2f33322d3438203d3e20323732383139.roa
File:                     323830333a363439303a3a2f33322d3438203d3e20323732383139.roa (raw, json)
Hash identifier:          Mfr2jG2dd5gWkHInGwaMoinalYxpaUjnvDwMxb1fWug=
Subject key identifier:   11:C3:57:7A:96:83:F3:81:5B:75:4B:90:B6:DF:2A:8A:F5:AC:DA:2F
Certificate issuer:       /CN=88FA5A78FA0791DB64DB452ED6DE08F7A93F04EA
Certificate serial:       03D74594D9533D007923346FB63DB88BD458114D
Authority key identifier: 88:FA:5A:78:FA:07:91:DB:64:DB:45:2E:D6:DE:08:F7:A9:3F:04:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88FA5A78FA0791DB64DB452ED6DE08F7A93F04EA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7EC50570DFFB79A94532146FA82AC2F2A43B7E5FC50D906E0AE291D09FE5A720/0/323830333a363439303a3a2f33322d3438203d3e20323732383139.roa
Signing time:             Tue 06 Jan 2026 19:44:50 +0000
ROA not before:           Tue 06 Jan 2026 19:39:50 +0000
ROA not after:            Tue 05 Jan 2027 19:44:50 +0000
asID:                     272819
IP address blocks:        2803:6490::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7EC50570DFFB79A94532146FA82AC2F2A43B7E5FC50D906E0AE291D09FE5A720/0/88FA5A78FA0791DB64DB452ED6DE08F7A93F04EA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7EC50570DFFB79A94532146FA82AC2F2A43B7E5FC50D906E0AE291D09FE5A720/0/88FA5A78FA0791DB64DB452ED6DE08F7A93F04EA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88FA5A78FA0791DB64DB452ED6DE08F7A93F04EA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 06:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:d7:45:94:d9:53:3d:00:79:23:34:6f:b6:3d:b8:8b:d4:58:11:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88FA5A78FA0791DB64DB452ED6DE08F7A93F04EA
        Validity
            Not Before: Jan  6 19:39:50 2026 GMT
            Not After : Jan  5 19:44:50 2027 GMT
        Subject: CN=11C3577A9683F3815B754B90B6DF2A8AF5ACDA2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e4:59:0c:ed:e5:db:2c:02:15:eb:0f:c9:f2:
                    7d:e5:a8:3f:ca:cf:81:ae:4c:04:f1:17:ea:fa:38:
                    a2:52:9d:27:4d:9a:8b:bb:f6:fe:85:b8:b6:e1:b3:
                    49:0e:c9:51:6e:e6:73:ba:a7:70:43:2c:a0:96:e8:
                    20:04:dc:ec:da:d6:1a:40:13:ea:7a:6a:de:57:b1:
                    c1:7a:29:be:3a:21:ca:94:89:61:d1:ce:db:04:28:
                    e8:de:cb:c0:a9:a3:a6:d2:80:21:d3:d4:0f:ad:2a:
                    ec:69:d2:a2:3c:ae:d4:0a:15:be:59:df:22:1b:59:
                    85:f2:db:86:50:a6:84:87:6f:4f:b4:36:b6:22:89:
                    83:1c:da:f0:a0:63:74:2f:0a:59:ee:57:83:07:d1:
                    ee:43:3f:8e:6e:24:36:64:b4:a7:42:48:e8:db:0d:
                    c0:79:a9:10:82:40:3f:f9:be:a5:96:fe:88:c1:34:
                    aa:bc:ed:a8:75:97:3b:78:3f:62:12:7c:a9:b7:17:
                    e2:64:66:05:96:c6:d6:ee:f8:76:69:b5:f8:5e:71:
                    36:48:32:c7:40:2b:1d:57:53:7a:58:a2:00:c0:ad:
                    cb:49:1d:38:20:3a:69:87:47:d1:3b:99:b2:98:8c:
                    3b:46:fc:92:d8:23:da:28:72:cc:2b:32:cd:b3:0c:
                    4b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C3:57:7A:96:83:F3:81:5B:75:4B:90:B6:DF:2A:8A:F5:AC:DA:2F
            X509v3 Authority Key Identifier:
                keyid:88:FA:5A:78:FA:07:91:DB:64:DB:45:2E:D6:DE:08:F7:A9:3F:04:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7EC50570DFFB79A94532146FA82AC2F2A43B7E5FC50D906E0AE291D09FE5A720/0/88FA5A78FA0791DB64DB452ED6DE08F7A93F04EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88FA5A78FA0791DB64DB452ED6DE08F7A93F04EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7EC50570DFFB79A94532146FA82AC2F2A43B7E5FC50D906E0AE291D09FE5A720/0/323830333a363439303a3a2f33322d3438203d3e20323732383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6490::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:90:b3:eb:2c:a1:9b:25:92:f6:9b:2f:3a:3d:6e:f1:c7:2b:
         5d:11:e2:29:06:d3:63:98:9f:29:22:4a:cc:91:3b:30:84:d0:
         86:ad:b2:86:3d:69:cc:f5:ae:e2:f0:f3:f1:3a:24:82:b7:9c:
         e6:a7:76:a8:df:f4:49:11:3a:d1:0f:22:2d:f0:5c:c8:91:25:
         24:89:37:fb:f1:fb:2d:39:eb:4a:03:ba:de:6e:07:a7:48:8c:
         a6:fb:13:fd:3d:b5:48:6f:0e:ad:51:b8:67:fd:b4:d4:78:a9:
         58:51:0f:9b:23:8e:9b:99:93:a2:58:01:bd:86:e7:40:cb:a9:
         77:f2:64:9b:19:e8:83:12:8d:26:9b:a2:d2:2e:6d:54:bc:20:
         ce:ad:32:b2:f2:85:a0:56:35:2b:42:3b:1a:89:13:01:eb:d9:
         e7:56:10:25:94:ac:aa:86:e8:9a:54:43:02:67:2c:f6:c8:40:
         8e:44:c5:6c:a6:ac:8a:99:97:cd:3a:36:56:62:23:0d:c6:42:
         4c:81:41:a7:b5:26:e5:00:7f:9a:98:bb:40:0e:de:b4:27:f2:
         76:ff:64:c5:71:30:f7:6b:d3:98:88:93:94:35:09:b1:6a:8b:
         bb:0d:23:37:d3:58:ef:85:d1:d2:fa:dc:6d:b5:a2:98:3b:84:
         03:5b:03:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 06:43:45 2026 by rpki-client