This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/88D2FC1F0B8527B79264CD3CDDC10726CB30A399160BB4044AD90BD66E10B91D/0/323830333a3931303a3a2f33322d3332203d3e20323732303039.roa
File:                     323830333a3931303a3a2f33322d3332203d3e20323732303039.roa (raw, json)
Hash identifier:          2yg7keSNkspHeCFTKGrd2p5yrla2oE8GYeVq/7bcvJE=
Subject key identifier:   27:43:E9:17:3D:F3:6D:64:F1:34:FE:72:8B:DA:AB:56:06:56:1C:92
Certificate issuer:       /CN=4C07ED76182959652B8E9E133053015F589BFC7F
Certificate serial:       0A0A27C5529BACAC2871BCA50A14A0BFD8ED87AA
Authority key identifier: 4C:07:ED:76:18:29:59:65:2B:8E:9E:13:30:53:01:5F:58:9B:FC:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C07ED76182959652B8E9E133053015F589BFC7F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/88D2FC1F0B8527B79264CD3CDDC10726CB30A399160BB4044AD90BD66E10B91D/0/323830333a3931303a3a2f33322d3332203d3e20323732303039.roa
Signing time:             Tue 09 Dec 2025 16:54:23 +0000
ROA not before:           Tue 09 Dec 2025 16:49:23 +0000
ROA not after:            Tue 08 Dec 2026 16:54:23 +0000
asID:                     272009
IP address blocks:        2803:910::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/88D2FC1F0B8527B79264CD3CDDC10726CB30A399160BB4044AD90BD66E10B91D/0/4C07ED76182959652B8E9E133053015F589BFC7F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/88D2FC1F0B8527B79264CD3CDDC10726CB30A399160BB4044AD90BD66E10B91D/0/4C07ED76182959652B8E9E133053015F589BFC7F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C07ED76182959652B8E9E133053015F589BFC7F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 26 Dec 2025 07:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:0a:27:c5:52:9b:ac:ac:28:71:bc:a5:0a:14:a0:bf:d8:ed:87:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C07ED76182959652B8E9E133053015F589BFC7F
        Validity
            Not Before: Dec  9 16:49:23 2025 GMT
            Not After : Dec  8 16:54:23 2026 GMT
        Subject: CN=2743E9173DF36D64F134FE728BDAAB5606561C92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:70:cf:50:11:e7:5a:76:eb:a1:0c:94:c7:78:
                    da:30:48:0e:b6:33:00:d4:8c:af:fb:b4:0c:36:a6:
                    e1:78:47:8e:4f:f8:86:0b:43:06:24:f1:b2:e3:b8:
                    36:4a:5f:ae:3f:60:14:85:9c:0d:bf:1b:18:a1:6f:
                    fe:db:60:1a:bb:5c:3b:bb:70:9d:b6:36:58:89:e1:
                    07:aa:a4:26:7e:0a:31:8b:57:b5:e2:84:12:41:b5:
                    27:50:27:53:41:b5:2b:98:c5:ed:1c:f0:be:20:0b:
                    9f:12:47:5d:70:52:da:cb:8e:ff:aa:d6:83:b8:9a:
                    87:18:44:21:91:97:39:85:3c:43:de:29:ab:15:cc:
                    32:a2:94:41:30:46:8e:da:61:56:fc:8f:9c:22:2d:
                    98:e4:a5:93:1e:eb:c0:9f:9a:32:e0:b8:78:0c:b8:
                    a6:ed:40:df:8e:21:1b:83:22:13:ec:29:5c:24:40:
                    92:82:31:ff:bc:18:99:b8:0d:74:09:95:5e:e0:92:
                    b9:22:4a:5e:86:8d:e8:df:39:21:8a:2c:de:57:00:
                    4f:f9:7d:7b:eb:62:21:45:31:64:c1:d2:57:c2:49:
                    86:50:6f:59:9c:c8:e7:ea:a8:7d:93:e2:d4:0a:d1:
                    00:ce:94:78:f0:6e:f0:59:2b:26:b0:da:7d:4c:9e:
                    ae:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:43:E9:17:3D:F3:6D:64:F1:34:FE:72:8B:DA:AB:56:06:56:1C:92
            X509v3 Authority Key Identifier:
                keyid:4C:07:ED:76:18:29:59:65:2B:8E:9E:13:30:53:01:5F:58:9B:FC:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/88D2FC1F0B8527B79264CD3CDDC10726CB30A399160BB4044AD90BD66E10B91D/0/4C07ED76182959652B8E9E133053015F589BFC7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C07ED76182959652B8E9E133053015F589BFC7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/88D2FC1F0B8527B79264CD3CDDC10726CB30A399160BB4044AD90BD66E10B91D/0/323830333a3931303a3a2f33322d3332203d3e20323732303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:910::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:15:cc:78:ab:a5:46:53:a7:de:67:d7:1c:23:66:f7:ad:e3:
         35:9e:14:9a:53:3f:08:2b:6f:28:33:1f:f8:e1:c9:ea:06:48:
         09:43:9a:22:9e:57:d4:b3:21:01:ca:ad:a5:02:db:05:b7:8a:
         43:3b:07:ad:51:ef:bf:49:38:08:1d:63:0b:75:7d:23:83:d6:
         8c:b6:25:66:16:7e:15:16:48:ff:59:bb:46:fb:c5:c9:45:94:
         3b:21:9b:a6:11:f2:77:f5:7a:4a:77:b1:bb:9c:06:14:86:cb:
         67:a9:9e:88:d4:89:77:0c:54:66:e9:83:ff:5b:c6:e8:bb:e3:
         87:8a:46:6a:c0:87:28:0e:0c:36:2d:5a:e2:65:64:be:82:20:
         28:99:0d:06:23:a1:90:f6:20:eb:26:f6:37:5d:9e:c5:ef:e8:
         1c:36:86:b4:d5:3b:b1:7a:4b:74:82:ca:7c:dc:2a:81:ea:df:
         f8:6d:28:f4:ea:47:68:67:33:d8:a8:09:2f:e9:89:24:80:0d:
         11:cc:c5:81:ad:c2:59:d4:b5:96:a3:40:36:42:f9:2b:c3:c6:
         e1:d9:c5:90:99:5a:ed:c2:07:a3:b7:51:47:45:6e:27:28:8a:
         e3:d0:15:4f:39:c7:a0:da:f8:05:3d:6e:3f:16:c1:d3:6b:43:
         11:77:d6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 16:18:00 2025 by rpki-client