This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/88FC259121C09E8EF38DB6D98C5A497802B8EE063FD0D8DA8F4BFE5D5BDF3B06/0/323830333a666439303a3a2f33322d3332203d3e20323733303130.roa
File:                     323830333a666439303a3a2f33322d3332203d3e20323733303130.roa (raw, json)
Hash identifier:          +rWHEe8u4t2JCvZTD0S1xiTwQMLQHEabmaNf1UhEsLs=
Subject key identifier:   CB:7C:90:C2:53:A5:12:F9:6C:73:61:49:03:63:21:61:DF:AA:C5:C0
Certificate issuer:       /CN=B4AF992F6DE8F2766A3F257F997B9295CCAE5649
Certificate serial:       033B9277BBCE993A0AB7150BCE6E24609EADA139
Authority key identifier: B4:AF:99:2F:6D:E8:F2:76:6A:3F:25:7F:99:7B:92:95:CC:AE:56:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4AF992F6DE8F2766A3F257F997B9295CCAE5649.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/88FC259121C09E8EF38DB6D98C5A497802B8EE063FD0D8DA8F4BFE5D5BDF3B06/0/323830333a666439303a3a2f33322d3332203d3e20323733303130.roa
Signing time:             Tue 06 Jan 2026 19:39:36 +0000
ROA not before:           Tue 06 Jan 2026 19:34:36 +0000
ROA not after:            Tue 05 Jan 2027 19:39:36 +0000
asID:                     273010
IP address blocks:        2803:fd90::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/88FC259121C09E8EF38DB6D98C5A497802B8EE063FD0D8DA8F4BFE5D5BDF3B06/0/B4AF992F6DE8F2766A3F257F997B9295CCAE5649.crl
                          rsync://repository.lacnic.net/rpki/lacnic/88FC259121C09E8EF38DB6D98C5A497802B8EE063FD0D8DA8F4BFE5D5BDF3B06/0/B4AF992F6DE8F2766A3F257F997B9295CCAE5649.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4AF992F6DE8F2766A3F257F997B9295CCAE5649.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 06:08:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:3b:92:77:bb:ce:99:3a:0a:b7:15:0b:ce:6e:24:60:9e:ad:a1:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4AF992F6DE8F2766A3F257F997B9295CCAE5649
        Validity
            Not Before: Jan  6 19:34:36 2026 GMT
            Not After : Jan  5 19:39:36 2027 GMT
        Subject: CN=CB7C90C253A512F96C73614903632161DFAAC5C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:91:69:64:5f:5d:5c:5b:3c:82:22:2d:de:10:
                    90:35:56:f3:02:21:97:08:16:56:ec:45:6c:cd:93:
                    7d:84:6a:44:59:7e:29:ac:fa:2f:d2:de:21:c1:0b:
                    c8:bc:1f:13:dc:ef:91:e1:02:9b:ad:68:9b:af:5d:
                    e0:31:6a:01:00:09:61:87:8b:e2:b4:42:da:27:11:
                    93:47:53:d2:28:e3:47:58:be:49:37:43:ca:a7:a0:
                    35:7e:b1:77:9d:fc:70:b6:a8:f0:91:37:f2:20:ad:
                    32:30:cd:9a:0e:b0:28:2c:51:83:c3:ab:65:1d:4f:
                    0c:0b:26:7f:e6:59:08:80:ce:47:9e:14:c7:01:b3:
                    0b:10:64:50:9e:33:7d:66:b3:cc:b5:81:18:0b:44:
                    83:3e:df:6c:5f:ad:c1:d8:9a:91:6d:3b:ea:1a:d6:
                    13:14:c5:8b:12:b3:55:7e:89:31:17:2a:8f:11:a4:
                    df:3b:2b:75:1a:16:3a:89:ae:ca:bc:01:8d:32:99:
                    cd:a1:cf:ca:ef:75:61:4b:74:3b:20:40:20:61:0e:
                    da:20:3d:23:e4:9d:5f:f3:e0:f2:92:92:19:e4:19:
                    41:2c:aa:b8:7c:38:43:42:b8:94:6b:cb:5e:e5:0e:
                    77:bf:67:76:1e:01:e8:18:8a:92:e8:b8:ee:ee:0b:
                    16:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:7C:90:C2:53:A5:12:F9:6C:73:61:49:03:63:21:61:DF:AA:C5:C0
            X509v3 Authority Key Identifier:
                keyid:B4:AF:99:2F:6D:E8:F2:76:6A:3F:25:7F:99:7B:92:95:CC:AE:56:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/88FC259121C09E8EF38DB6D98C5A497802B8EE063FD0D8DA8F4BFE5D5BDF3B06/0/B4AF992F6DE8F2766A3F257F997B9295CCAE5649.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4AF992F6DE8F2766A3F257F997B9295CCAE5649.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/88FC259121C09E8EF38DB6D98C5A497802B8EE063FD0D8DA8F4BFE5D5BDF3B06/0/323830333a666439303a3a2f33322d3332203d3e20323733303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fd90::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:17:cb:80:65:bc:6e:14:cc:18:f5:22:10:92:76:de:b0:38:
         e2:51:2a:ae:55:64:45:9d:33:1d:fe:76:fc:b0:37:ab:cc:8d:
         1d:6e:b9:0b:b5:31:90:93:57:f0:28:58:ae:e8:a5:47:40:75:
         7c:3e:1c:74:63:9b:79:7c:44:dc:67:9d:c5:41:f5:fe:33:b3:
         52:df:4b:45:0f:1f:77:f8:05:5f:c9:76:e6:ac:ae:30:57:97:
         08:33:a7:ad:1f:0f:22:3a:08:61:50:e1:13:c5:87:1c:87:b0:
         72:18:8b:07:30:9c:40:95:de:0c:3d:de:b3:02:f4:3f:c2:ce:
         30:5a:26:ae:99:60:a6:0c:55:38:df:65:3d:c2:cf:12:52:3a:
         62:b5:fd:28:dc:5b:6f:32:b1:e1:46:08:3a:e4:e0:58:05:ac:
         1a:29:39:44:e4:52:df:3b:88:9d:cb:c2:b2:65:e2:4b:0a:60:
         e6:66:7b:15:d9:54:db:0f:e8:2f:47:01:7b:7d:19:07:44:da:
         1e:1b:08:bf:b3:bc:65:f4:e8:7a:d6:73:b8:76:11:ce:97:81:
         ae:ea:85:14:d6:ad:e2:d2:11:ed:d0:fa:e9:a1:c4:55:12:c3:
         67:cf:33:c7:b1:28:0c:e2:0c:7f:39:ac:93:ff:e2:37:f7:6b:
         23:e3:7e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 20:44:38 2026 by rpki-client