This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/88D2FC1F0B8527B79264CD3CDDC10726CB30A399160BB4044AD90BD66E10B91D/0/323830333a3931303a3a2f33322d3332203d3e20323633313730.roa
File:                     323830333a3931303a3a2f33322d3332203d3e20323633313730.roa (raw, json)
Hash identifier:          Kh97HmF1GTxbVMNw04Rf2BKHgwLud3zQAJIRH7BgjRA=
Subject key identifier:   FD:04:82:09:E2:2F:72:90:71:B2:31:64:E3:CC:DB:D0:59:27:61:FE
Certificate issuer:       /CN=4C07ED76182959652B8E9E133053015F589BFC7F
Certificate serial:       285AB1F2B05593FB153CE0F3C972638EF99134A9
Authority key identifier: 4C:07:ED:76:18:29:59:65:2B:8E:9E:13:30:53:01:5F:58:9B:FC:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C07ED76182959652B8E9E133053015F589BFC7F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/88D2FC1F0B8527B79264CD3CDDC10726CB30A399160BB4044AD90BD66E10B91D/0/323830333a3931303a3a2f33322d3332203d3e20323633313730.roa
Signing time:             Tue 09 Dec 2025 16:54:23 +0000
ROA not before:           Tue 09 Dec 2025 16:49:23 +0000
ROA not after:            Tue 08 Dec 2026 16:54:23 +0000
asID:                     263170
IP address blocks:        2803:910::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/88D2FC1F0B8527B79264CD3CDDC10726CB30A399160BB4044AD90BD66E10B91D/0/4C07ED76182959652B8E9E133053015F589BFC7F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/88D2FC1F0B8527B79264CD3CDDC10726CB30A399160BB4044AD90BD66E10B91D/0/4C07ED76182959652B8E9E133053015F589BFC7F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C07ED76182959652B8E9E133053015F589BFC7F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 26 Dec 2025 07:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:5a:b1:f2:b0:55:93:fb:15:3c:e0:f3:c9:72:63:8e:f9:91:34:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C07ED76182959652B8E9E133053015F589BFC7F
        Validity
            Not Before: Dec  9 16:49:23 2025 GMT
            Not After : Dec  8 16:54:23 2026 GMT
        Subject: CN=FD048209E22F729071B23164E3CCDBD0592761FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:80:07:b5:ae:5e:bd:51:ac:0e:ed:cb:5c:39:
                    f4:d2:86:68:38:3d:48:fc:3b:e7:f5:75:0d:64:81:
                    2a:17:58:41:0e:cf:9c:a6:ab:1e:02:6c:46:59:5a:
                    13:cb:cf:02:3e:c7:c0:67:0d:eb:62:28:f2:f2:6a:
                    92:ac:c9:11:bd:d7:2e:58:d5:be:6e:cb:6e:73:d5:
                    8d:c3:91:59:d0:3c:e2:e6:71:9b:42:7f:da:5b:64:
                    40:fb:ec:1c:70:35:c8:15:00:f0:24:36:8f:38:54:
                    9d:63:af:fc:08:99:f3:d2:04:e3:01:fb:11:50:94:
                    b5:7c:60:ae:c9:35:82:dc:28:d0:7e:2a:1a:4f:90:
                    3b:e1:f8:c8:96:91:d3:21:37:0f:f5:0d:b1:46:ea:
                    03:04:cd:2e:58:9e:64:ec:1c:7e:7b:ce:c7:07:d6:
                    c5:73:84:c0:0e:60:4f:36:b6:ea:19:2b:e8:78:5a:
                    63:c3:12:43:3f:1a:dc:9a:66:d8:29:65:91:72:b7:
                    89:28:12:82:c6:b0:60:d4:ac:e1:d3:73:28:3d:82:
                    d5:b2:57:c1:51:08:f8:f9:39:8d:e7:3c:33:20:50:
                    c1:34:32:f9:c3:e8:92:d2:9e:2a:e5:82:b3:f5:39:
                    85:65:01:b7:09:6e:e5:c8:42:a7:b5:d1:6e:e4:c0:
                    8f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:04:82:09:E2:2F:72:90:71:B2:31:64:E3:CC:DB:D0:59:27:61:FE
            X509v3 Authority Key Identifier:
                keyid:4C:07:ED:76:18:29:59:65:2B:8E:9E:13:30:53:01:5F:58:9B:FC:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/88D2FC1F0B8527B79264CD3CDDC10726CB30A399160BB4044AD90BD66E10B91D/0/4C07ED76182959652B8E9E133053015F589BFC7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C07ED76182959652B8E9E133053015F589BFC7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/88D2FC1F0B8527B79264CD3CDDC10726CB30A399160BB4044AD90BD66E10B91D/0/323830333a3931303a3a2f33322d3332203d3e20323633313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:910::/32

    Signature Algorithm: sha256WithRSAEncryption
         d6:94:b0:d1:e4:a8:ef:33:2a:de:7d:54:ed:7c:bb:62:c5:eb:
         0b:af:fe:88:8f:e9:d5:b7:45:5e:8e:f4:4e:7b:55:e4:91:8e:
         63:03:bc:80:74:46:cd:9e:56:b2:51:ce:c3:78:25:38:ec:75:
         66:c9:7e:60:89:c7:ab:d0:73:7d:03:59:bc:6c:00:e4:cb:14:
         6b:2c:55:85:c1:b0:86:0c:8f:58:ca:c7:d9:c5:d9:a6:4c:d6:
         b4:bb:aa:e9:21:01:1d:1a:9f:e3:a5:46:6b:1c:15:24:4a:c9:
         ad:9c:c5:32:0f:cb:93:1c:ef:98:19:72:9f:c7:23:31:05:df:
         b3:fd:af:cb:a2:4e:7a:24:59:f5:1b:38:49:97:9b:62:0b:d0:
         56:1f:ba:22:67:64:24:97:1b:30:6a:47:1a:59:4b:f0:fd:38:
         a8:c5:42:28:a0:0b:a8:d5:43:4d:4e:dc:f1:aa:e5:bd:2d:66:
         a5:68:1a:28:f4:bc:f6:ea:aa:50:62:d1:0b:a8:32:f5:a9:04:
         70:2f:59:22:c7:f2:04:12:ff:7e:62:2c:87:2b:7d:51:d7:23:
         4a:17:94:9c:05:cd:a4:d8:9b:00:3a:2b:85:30:cd:8c:ac:8a:
         3d:44:42:fd:af:81:65:42:ce:2e:ac:e2:1d:73:0a:fd:bc:c3:
         e3:8d:ac:a6
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUKFqx8rBVk/sVPODzyXJjjvmRNKkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEMwN0VENzYxODI5NTk2NTJCOEU5RTEzMzA1MzAxNUY1
ODlCRkM3RjAeFw0yNTEyMDkxNjQ5MjNaFw0yNjEyMDgxNjU0MjNaMDMxMTAvBgNV
BAMTKEZEMDQ4MjA5RTIyRjcyOTA3MUIyMzE2NEUzQ0NEQkQwNTkyNzYxRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHgAe1rl69UawO7ctcOfTShmg4
PUj8O+f1dQ1kgSoXWEEOz5ymqx4CbEZZWhPLzwI+x8BnDetiKPLyapKsyRG91y5Y
1b5uy25z1Y3DkVnQPOLmcZtCf9pbZED77BxwNcgVAPAkNo84VJ1jr/wImfPSBOMB
+xFQlLV8YK7JNYLcKNB+KhpPkDvh+MiWkdMhNw/1DbFG6gMEzS5YnmTsHH57zscH
1sVzhMAOYE82tuoZK+h4WmPDEkM/GtyaZtgpZZFyt4koEoLGsGDUrOHTcyg9gtWy
V8FRCPj5OY3nPDMgUME0MvnD6JLSnirlgrP1OYVlAbcJbuXIQqe10W7kwI9fAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQU/QSCCeIvcpBxsjFk48zb0FknYf4wHwYDVR0j
BBgwFoAUTAftdhgpWWUrjp4TMFMBX1ib/H8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84OEQyRkMxRjBCODUyN0I3OTI2NENEM0NEREMxMDcyNkNC
MzBBMzk5MTYwQkI0MDQ0QUQ5MEJENjZFMTBCOTFELzAvNEMwN0VENzYxODI5NTk2
NTJCOEU5RTEzMzA1MzAxNUY1ODlCRkM3Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80QzA3RUQ3NjE4Mjk1OTY1MkI4
RTlFMTMzMDUzMDE1RjU4OUJGQzdGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODhEMkZDMUYwQjg1MjdCNzkyNjRDRDNDRERDMTA3MjZDQjMwQTM5OTE2
MEJCNDA0NEFEOTBCRDY2RTEwQjkxRC8wLzMyMzgzMDMzM2EzOTMxMzAzYTNhMmYz
MzMyMmQzMzMyMjAzZDNlMjAzMjM2MzMzMTM3MzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAwkQMA0G
CSqGSIb3DQEBCwUAA4IBAQDWlLDR5KjvMyrefVTtfLtixesLr/6Ij+nVt0VejvRO
e1XkkY5jA7yAdEbNnlayUc7DeCU47HVmyX5gicer0HN9A1m8bADkyxRrLFWFwbCG
DI9YysfZxdmmTNa0u6rpIQEdGp/jpUZrHBUkSsmtnMUyD8uTHO+YGXKfxyMxBd+z
/a/Lok56JFn1GzhJl5tiC9BWH7oiZ2QklxswakcaWUvw/TioxUIooAuo1UNNTtzx
quW9LWalaBoo9Lz26qpQYtELqDL1qQRwL1kix/IEEv9+YiyHK31R1yNKF5ScBc2k
2JsAOiuFMM2MrIo9REL9r4FlQs4urOIdcwr9vMPjjaym
-----END CERTIFICATE-----
Generated at Sun Dec 21 16:18:00 2025 by rpki-client