This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/82150554D3A869C55931CC28700E735BE38C5BC505EF6428680F571CC07E3C00/0/323830333a333839303a3a2f33322d3438203d3e20323732383039.roa
File:                     323830333a333839303a3a2f33322d3438203d3e20323732383039.roa (raw, json)
Hash identifier:          2QlxjD+Q2YrgP1SIge92BufKvPAmjvSSWczvAHJlfyc=
Subject key identifier:   AA:21:C5:3D:07:8D:D6:62:97:C2:36:7D:41:F3:94:7F:EB:4C:FA:C9
Certificate issuer:       /CN=7611AC1988DA893F2DA7552DA8EA8121DAED841D
Certificate serial:       211F8E34BB5E9E908A808716160E279DAD792C08
Authority key identifier: 76:11:AC:19:88:DA:89:3F:2D:A7:55:2D:A8:EA:81:21:DA:ED:84:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7611AC1988DA893F2DA7552DA8EA8121DAED841D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/82150554D3A869C55931CC28700E735BE38C5BC505EF6428680F571CC07E3C00/0/323830333a333839303a3a2f33322d3438203d3e20323732383039.roa
Signing time:             Tue 06 Jan 2026 19:38:02 +0000
ROA not before:           Tue 06 Jan 2026 19:33:02 +0000
ROA not after:            Tue 05 Jan 2027 19:38:02 +0000
asID:                     272809
IP address blocks:        2803:3890::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/82150554D3A869C55931CC28700E735BE38C5BC505EF6428680F571CC07E3C00/0/7611AC1988DA893F2DA7552DA8EA8121DAED841D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/82150554D3A869C55931CC28700E735BE38C5BC505EF6428680F571CC07E3C00/0/7611AC1988DA893F2DA7552DA8EA8121DAED841D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7611AC1988DA893F2DA7552DA8EA8121DAED841D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Jan 2026 01:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:1f:8e:34:bb:5e:9e:90:8a:80:87:16:16:0e:27:9d:ad:79:2c:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7611AC1988DA893F2DA7552DA8EA8121DAED841D
        Validity
            Not Before: Jan  6 19:33:02 2026 GMT
            Not After : Jan  5 19:38:02 2027 GMT
        Subject: CN=AA21C53D078DD66297C2367D41F3947FEB4CFAC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b9:8b:a1:ff:fe:fa:fe:2e:cf:b7:18:e0:6e:
                    46:92:6b:1b:d5:a5:b6:d2:35:4b:18:02:22:c5:82:
                    89:72:35:37:67:6b:ff:90:3a:bd:c7:18:f8:65:e3:
                    03:c3:61:0a:96:9a:36:e9:63:ff:39:3b:68:6b:60:
                    1a:87:27:8a:00:54:09:79:d2:3e:2e:73:2b:88:20:
                    66:a4:7f:74:b4:9e:19:b0:9a:32:4e:8b:59:3d:21:
                    52:39:7a:4f:6e:9e:27:38:73:5f:9c:99:ac:ab:60:
                    4b:1e:58:5b:76:d1:2c:89:da:3f:28:f1:2d:82:c7:
                    7e:ee:1f:53:2f:f2:97:a2:38:b1:b0:a9:19:61:0a:
                    7a:0c:b8:93:f1:db:82:15:23:79:dc:ff:d1:c3:23:
                    2e:54:63:ca:bc:2d:c0:5e:5e:b8:e6:ff:66:34:3a:
                    c5:76:6d:c8:78:09:d7:5c:93:aa:2f:c4:53:5e:8f:
                    e9:c9:05:48:9a:2f:33:f8:a8:ef:f2:6a:06:b1:96:
                    a2:3a:ff:0c:a3:67:de:05:d6:ff:df:30:4c:c9:37:
                    35:ce:0a:02:e5:92:4d:ad:58:f3:6c:f5:90:76:58:
                    70:4b:da:f6:41:95:95:28:c2:37:8d:3f:5a:5e:ab:
                    70:09:ff:0c:66:85:35:76:c2:c5:fd:e5:e8:58:5c:
                    75:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:21:C5:3D:07:8D:D6:62:97:C2:36:7D:41:F3:94:7F:EB:4C:FA:C9
            X509v3 Authority Key Identifier:
                keyid:76:11:AC:19:88:DA:89:3F:2D:A7:55:2D:A8:EA:81:21:DA:ED:84:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/82150554D3A869C55931CC28700E735BE38C5BC505EF6428680F571CC07E3C00/0/7611AC1988DA893F2DA7552DA8EA8121DAED841D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7611AC1988DA893F2DA7552DA8EA8121DAED841D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/82150554D3A869C55931CC28700E735BE38C5BC505EF6428680F571CC07E3C00/0/323830333a333839303a3a2f33322d3438203d3e20323732383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3890::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:73:14:ba:ce:68:08:43:71:90:8a:f3:45:ce:73:77:8e:fd:
         02:b2:9f:a3:42:ba:94:42:25:00:62:d4:94:58:3c:6d:89:23:
         62:06:55:ab:74:07:2d:eb:22:51:e2:6d:f1:90:6a:8d:9f:d6:
         ce:7e:1a:53:3d:ba:eb:cb:cf:08:af:52:60:d7:f6:40:05:e8:
         4f:54:4b:e1:65:82:57:c8:76:b1:d7:8f:d1:75:4f:f4:ba:d6:
         42:d9:3f:82:e5:18:1d:d5:cb:6a:ea:59:34:4b:ea:35:6e:48:
         c6:1d:49:47:b0:82:d8:77:87:60:aa:6c:1a:50:74:57:b3:64:
         f2:12:fe:c7:98:06:c3:10:1c:17:79:62:27:11:f5:73:6d:20:
         78:8a:01:e2:dd:57:8f:15:7a:52:ad:c9:61:ca:ae:68:15:11:
         3c:c6:45:5e:bf:d3:ef:e1:3d:db:c7:fd:6c:34:63:db:96:76:
         04:51:57:fa:15:5e:01:c9:22:37:32:1a:31:3b:d9:66:f8:d3:
         74:7f:fe:5c:f9:cc:3d:c1:da:04:8e:04:39:33:78:73:cc:7f:
         35:e9:c4:74:f3:f2:0e:64:f1:18:f6:f6:7b:bc:2f:1a:fc:bc:
         28:34:2e:8d:8d:ec:1f:ee:15:52:ad:cd:c2:f7:b3:cf:73:a1:
         fe:6d:cf:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 07:53:08 2026 by rpki-client