This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87AA68C33550678A823BCF7932FF399C4C42BAF033431B99C44EE6F24E2A67E6/0/323830333a343639303a3a2f33322d3438203d3e20323732383930.roa
File:                     323830333a343639303a3a2f33322d3438203d3e20323732383930.roa (raw, json)
Hash identifier:          tbIZY02PuOCkKdtHSVf1ttjXeB8krWAgetBlIU6oo/g=
Subject key identifier:   44:12:F8:28:90:3A:46:D8:7A:57:00:9C:91:8F:E6:DF:AF:CD:9A:85
Certificate issuer:       /CN=84FDCF40130E9D686F7A3657DA80EA0B09868A48
Certificate serial:       4964D20AC80AC28D76C60505F39E4D9402438D54
Authority key identifier: 84:FD:CF:40:13:0E:9D:68:6F:7A:36:57:DA:80:EA:0B:09:86:8A:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84FDCF40130E9D686F7A3657DA80EA0B09868A48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/87AA68C33550678A823BCF7932FF399C4C42BAF033431B99C44EE6F24E2A67E6/0/323830333a343639303a3a2f33322d3438203d3e20323732383930.roa
Signing time:             Tue 06 Jan 2026 19:46:03 +0000
ROA not before:           Tue 06 Jan 2026 19:41:03 +0000
ROA not after:            Tue 05 Jan 2027 19:46:03 +0000
asID:                     272890
IP address blocks:        2803:4690::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/87AA68C33550678A823BCF7932FF399C4C42BAF033431B99C44EE6F24E2A67E6/0/84FDCF40130E9D686F7A3657DA80EA0B09868A48.crl
                          rsync://repository.lacnic.net/rpki/lacnic/87AA68C33550678A823BCF7932FF399C4C42BAF033431B99C44EE6F24E2A67E6/0/84FDCF40130E9D686F7A3657DA80EA0B09868A48.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84FDCF40130E9D686F7A3657DA80EA0B09868A48.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:64:d2:0a:c8:0a:c2:8d:76:c6:05:05:f3:9e:4d:94:02:43:8d:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84FDCF40130E9D686F7A3657DA80EA0B09868A48
        Validity
            Not Before: Jan  6 19:41:03 2026 GMT
            Not After : Jan  5 19:46:03 2027 GMT
        Subject: CN=4412F828903A46D87A57009C918FE6DFAFCD9A85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:64:2c:b0:b4:d8:69:5b:2c:51:23:d1:24:b6:
                    54:91:3a:5e:d0:9f:27:6e:d9:3a:32:0c:98:76:4e:
                    d0:d1:00:50:d5:e7:41:07:a7:7f:b7:6c:7f:08:c1:
                    54:dc:ac:49:8a:2b:64:86:11:64:19:cd:7a:86:91:
                    3c:e2:ab:4c:99:ec:54:79:f3:44:83:25:4f:0c:02:
                    d3:49:85:32:91:fe:29:cc:05:67:4d:02:d9:48:24:
                    ab:41:4a:de:0a:e0:b1:9c:31:e1:68:a4:cb:ae:69:
                    59:fe:ef:05:24:49:6a:5f:29:eb:45:00:e5:4f:fb:
                    c0:ce:55:d2:ee:ac:d4:56:03:55:c0:ed:20:7e:8c:
                    4a:c8:c1:45:86:e7:1e:6d:cb:4b:18:f9:0b:69:4c:
                    8e:fb:d9:22:27:44:67:ac:94:de:c1:4c:3e:10:79:
                    37:ab:53:3d:91:16:be:f5:36:d2:13:9a:bf:88:8f:
                    dc:9b:a8:15:37:c0:7e:8c:21:89:b2:17:d2:ed:4f:
                    20:5f:1f:3d:57:05:e0:b9:3f:4f:93:44:cf:8d:41:
                    b2:db:e3:68:17:58:79:82:a2:c0:78:26:59:90:1c:
                    93:8f:8d:cb:da:fc:e4:32:eb:1d:41:52:68:2d:96:
                    dc:a8:4f:a9:e5:b5:1e:84:fd:28:b5:dc:a6:cc:7a:
                    50:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:12:F8:28:90:3A:46:D8:7A:57:00:9C:91:8F:E6:DF:AF:CD:9A:85
            X509v3 Authority Key Identifier:
                keyid:84:FD:CF:40:13:0E:9D:68:6F:7A:36:57:DA:80:EA:0B:09:86:8A:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/87AA68C33550678A823BCF7932FF399C4C42BAF033431B99C44EE6F24E2A67E6/0/84FDCF40130E9D686F7A3657DA80EA0B09868A48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84FDCF40130E9D686F7A3657DA80EA0B09868A48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87AA68C33550678A823BCF7932FF399C4C42BAF033431B99C44EE6F24E2A67E6/0/323830333a343639303a3a2f33322d3438203d3e20323732383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4690::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:18:6e:6a:07:9e:b8:9a:2b:51:1c:af:8e:e0:6a:34:97:70:
         ac:82:a4:85:9f:05:18:6e:92:62:21:8c:06:5c:d5:ee:bb:2c:
         81:ad:12:31:0e:6e:06:41:77:40:52:55:29:e8:73:24:86:7c:
         eb:7a:2f:45:37:8a:a8:f5:33:e6:c9:e3:63:36:80:13:f7:11:
         b9:44:58:79:9e:8b:34:47:48:84:09:df:4b:08:1b:b6:1e:eb:
         17:c8:39:15:ed:e6:61:c8:18:3a:63:24:10:9c:96:9c:be:aa:
         01:10:7a:79:0f:0e:f0:6a:f1:d6:0d:d0:2b:79:ae:72:67:44:
         fc:13:0d:54:c6:6a:b7:c7:e3:42:c2:2d:0b:ee:5d:68:37:d2:
         62:10:e9:0d:f8:5d:4c:94:1d:a9:40:00:9b:94:3f:1e:b5:50:
         68:b9:72:d7:88:6d:61:bb:35:2e:71:15:11:52:f9:e0:6a:e9:
         73:ec:29:ce:d0:00:40:bf:e0:bb:c7:1f:fa:45:08:56:67:ab:
         56:0d:f2:f2:06:55:69:f3:08:95:7e:35:6f:73:02:23:59:13:
         a1:a4:20:81:da:8f:14:ff:b7:54:1b:e8:73:93:b3:ec:08:5a:
         93:a3:9b:cd:d7:c1:93:40:c6:59:ab:5d:d7:ed:88:56:82:ae:
         1c:87:58:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 04:12:55 2026 by rpki-client