This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F1BAC3DF81D728FE33F58A60AF7891D1158B48200EB81ADB7503F11FDBAD88D/0/323830333a326631303a3a2f33322d3438203d3e20323732313230.roa
File:                     323830333a326631303a3a2f33322d3438203d3e20323732313230.roa (raw, json)
Hash identifier:          G+swUuOnFun9qv97T3GNgV7ef87pZxFGT+iqi3uL3Ks=
Subject key identifier:   E8:56:E7:F5:1A:06:C0:2A:BF:91:F8:28:44:AD:26:9A:02:97:CF:FB
Certificate issuer:       /CN=908B9094C8B149DC985FB82F0C0A3737EDDA8A40
Certificate serial:       2E25EB1687CA00E5752DFA1868A1AF9000A108C3
Authority key identifier: 90:8B:90:94:C8:B1:49:DC:98:5F:B8:2F:0C:0A:37:37:ED:DA:8A:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/908B9094C8B149DC985FB82F0C0A3737EDDA8A40.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F1BAC3DF81D728FE33F58A60AF7891D1158B48200EB81ADB7503F11FDBAD88D/0/323830333a326631303a3a2f33322d3438203d3e20323732313230.roa
Signing time:             Tue 06 Jan 2026 20:58:03 +0000
ROA not before:           Tue 06 Jan 2026 20:53:03 +0000
ROA not after:            Tue 05 Jan 2027 20:58:03 +0000
asID:                     272120
IP address blocks:        2803:2f10::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7F1BAC3DF81D728FE33F58A60AF7891D1158B48200EB81ADB7503F11FDBAD88D/0/908B9094C8B149DC985FB82F0C0A3737EDDA8A40.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7F1BAC3DF81D728FE33F58A60AF7891D1158B48200EB81ADB7503F11FDBAD88D/0/908B9094C8B149DC985FB82F0C0A3737EDDA8A40.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/908B9094C8B149DC985FB82F0C0A3737EDDA8A40.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 22:26:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:25:eb:16:87:ca:00:e5:75:2d:fa:18:68:a1:af:90:00:a1:08:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908B9094C8B149DC985FB82F0C0A3737EDDA8A40
        Validity
            Not Before: Jan  6 20:53:03 2026 GMT
            Not After : Jan  5 20:58:03 2027 GMT
        Subject: CN=E856E7F51A06C02ABF91F82844AD269A0297CFFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:71:06:fb:26:49:96:8c:78:89:c6:d6:2a:42:
                    34:c4:41:74:8e:b9:35:b6:c6:ca:9e:7e:62:c8:ac:
                    24:06:6d:16:66:d6:01:2f:7e:b4:de:bb:86:58:d9:
                    b1:51:36:c1:cb:59:a8:f8:06:33:57:dd:28:fd:56:
                    29:63:5d:00:f9:11:44:a9:0f:7e:68:5d:27:44:b8:
                    13:7f:54:05:e2:7b:7d:d3:dc:e9:50:26:4f:af:a9:
                    88:71:47:e6:5a:fa:fa:82:b5:dc:97:02:ab:40:17:
                    3f:fb:b9:0c:13:a2:92:bf:33:24:0d:53:a0:e9:2b:
                    ae:8a:e9:96:f0:e7:5b:7e:c2:60:0f:e9:2b:c7:93:
                    0e:53:dc:1f:2c:30:7b:a5:c2:aa:de:e2:5e:d9:71:
                    28:4d:c8:e0:df:21:a1:7e:8b:74:37:ee:0a:b9:a5:
                    7a:af:39:85:36:6e:fd:0b:98:b8:af:93:53:53:cd:
                    eb:5c:37:bf:4b:14:2e:a9:7d:8c:3c:d7:03:9f:1a:
                    4a:12:24:86:d0:54:00:41:78:2f:8d:30:e1:91:a1:
                    0c:09:42:e4:f7:bb:e9:51:52:01:40:41:aa:bc:97:
                    55:38:ff:43:20:28:89:9e:84:9f:2c:4c:7b:ac:81:
                    fd:2b:d2:f0:0c:13:e2:9d:8e:b2:e6:a8:ab:c7:04:
                    5b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:56:E7:F5:1A:06:C0:2A:BF:91:F8:28:44:AD:26:9A:02:97:CF:FB
            X509v3 Authority Key Identifier:
                keyid:90:8B:90:94:C8:B1:49:DC:98:5F:B8:2F:0C:0A:37:37:ED:DA:8A:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F1BAC3DF81D728FE33F58A60AF7891D1158B48200EB81ADB7503F11FDBAD88D/0/908B9094C8B149DC985FB82F0C0A3737EDDA8A40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/908B9094C8B149DC985FB82F0C0A3737EDDA8A40.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F1BAC3DF81D728FE33F58A60AF7891D1158B48200EB81ADB7503F11FDBAD88D/0/323830333a326631303a3a2f33322d3438203d3e20323732313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2f10::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:92:60:1d:2e:2b:bf:47:22:68:08:8d:4b:9b:7d:b2:05:0f:
         0d:a1:ac:0d:19:be:bf:30:40:68:37:9f:36:06:46:44:14:8f:
         dc:61:a6:01:9c:6e:f9:b6:45:0b:76:47:c7:3b:ba:bd:92:29:
         03:fd:15:9d:f1:f2:ca:a9:e2:c3:60:7a:be:06:79:be:93:ae:
         f8:ec:d0:35:e7:92:24:bf:a7:43:48:39:69:e9:da:97:fd:ad:
         94:75:be:44:f5:81:2b:aa:cd:46:ec:9b:4e:88:0e:ac:5b:d7:
         1b:f4:33:8e:a7:79:ae:d3:d0:54:c7:8a:75:3d:c2:e5:74:4e:
         1d:e3:e8:25:8d:51:df:77:f3:da:6e:3e:03:6d:46:cf:a7:a2:
         45:cf:77:d0:96:aa:de:68:db:6e:51:82:97:20:44:e4:13:84:
         22:c5:43:76:82:45:d1:20:ba:47:75:62:b6:e0:7c:ff:a2:ee:
         dd:b1:18:cd:d1:0f:c9:cb:be:ab:01:7d:e9:f7:25:5f:b3:e4:
         15:de:35:84:af:8c:66:4f:65:f8:27:9d:30:0d:3b:05:39:d4:
         91:d6:87:d4:a3:89:f6:fb:a2:27:41:4e:72:45:37:46:b4:89:
         27:f9:d3:e8:4d:b2:e6:34:0f:f7:b7:47:3a:77:9c:4a:3e:06:
         e6:25:ff:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 05:13:23 2026 by rpki-client