This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8CE48E13328675773DB0D93CA1D27FD6A257CBDF87E5B248571C8DAFF601E374/0/323830333a383936303a32303a3a2f34382d3438203d3e20323639373336.roa
File:                     323830333a383936303a32303a3a2f34382d3438203d3e20323639373336.roa (raw, json)
Hash identifier:          0Hs4PZ9tJ3e3fqoV5T9pQ/q8cQcLvpf8dnThkkVWfpg=
Subject key identifier:   40:24:0B:F5:A9:A4:D1:72:B9:2F:F6:FE:6E:C8:5D:B1:37:7F:01:15
Certificate issuer:       /CN=FCB083EE5CFFAFB10962A859AA22652832710154
Certificate serial:       66CBCE1FCEAD092159922D305BF9C96479DD7931
Authority key identifier: FC:B0:83:EE:5C:FF:AF:B1:09:62:A8:59:AA:22:65:28:32:71:01:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FCB083EE5CFFAFB10962A859AA22652832710154.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8CE48E13328675773DB0D93CA1D27FD6A257CBDF87E5B248571C8DAFF601E374/0/323830333a383936303a32303a3a2f34382d3438203d3e20323639373336.roa
Signing time:             Tue 06 Jan 2026 20:50:23 +0000
ROA not before:           Tue 06 Jan 2026 20:45:23 +0000
ROA not after:            Tue 05 Jan 2027 20:50:23 +0000
asID:                     269736
IP address blocks:        2803:8960:20::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8CE48E13328675773DB0D93CA1D27FD6A257CBDF87E5B248571C8DAFF601E374/0/FCB083EE5CFFAFB10962A859AA22652832710154.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8CE48E13328675773DB0D93CA1D27FD6A257CBDF87E5B248571C8DAFF601E374/0/FCB083EE5CFFAFB10962A859AA22652832710154.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FCB083EE5CFFAFB10962A859AA22652832710154.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 09:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:cb:ce:1f:ce:ad:09:21:59:92:2d:30:5b:f9:c9:64:79:dd:79:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCB083EE5CFFAFB10962A859AA22652832710154
        Validity
            Not Before: Jan  6 20:45:23 2026 GMT
            Not After : Jan  5 20:50:23 2027 GMT
        Subject: CN=40240BF5A9A4D172B92FF6FE6EC85DB1377F0115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d4:e9:8f:37:03:b3:34:aa:0a:16:88:e0:b0:
                    b7:95:40:91:33:c7:f1:46:9c:7b:26:8b:de:e3:62:
                    aa:ff:0b:87:6a:11:81:95:99:a0:d3:8d:d4:6a:50:
                    a5:d8:2f:09:7e:18:56:56:83:60:f6:7f:3a:f6:11:
                    12:3a:cc:fa:13:17:f6:cd:99:c2:6b:ef:1f:ef:34:
                    13:0f:af:44:dc:18:d5:cd:2d:52:c8:ff:81:c1:f9:
                    50:de:79:a8:73:a4:76:09:ff:f6:f1:4d:f2:6e:81:
                    65:bf:ac:dc:c8:bd:8c:83:a1:5d:d3:b9:44:d4:1c:
                    47:90:3c:a4:77:f7:aa:ba:07:e1:e8:dd:87:cf:03:
                    f7:7f:62:8f:76:01:ce:ee:91:91:09:31:36:49:07:
                    a9:1d:d9:26:18:c2:d0:f6:05:e2:fe:cb:39:5a:fd:
                    d8:7c:4b:db:42:9a:46:eb:96:06:62:af:1c:dc:24:
                    aa:0b:a2:4d:1a:59:13:d7:27:da:9f:0d:b4:71:8a:
                    31:c9:ea:32:33:59:b6:4f:74:ca:f4:7d:fe:6f:75:
                    8d:96:13:b5:57:80:d3:70:e0:df:31:74:a1:23:7e:
                    3f:25:d7:68:44:1b:a2:3f:71:9e:47:5a:53:cc:c1:
                    f8:6d:51:56:ba:8c:32:7a:86:6f:34:85:2e:29:c6:
                    70:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:24:0B:F5:A9:A4:D1:72:B9:2F:F6:FE:6E:C8:5D:B1:37:7F:01:15
            X509v3 Authority Key Identifier:
                keyid:FC:B0:83:EE:5C:FF:AF:B1:09:62:A8:59:AA:22:65:28:32:71:01:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8CE48E13328675773DB0D93CA1D27FD6A257CBDF87E5B248571C8DAFF601E374/0/FCB083EE5CFFAFB10962A859AA22652832710154.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FCB083EE5CFFAFB10962A859AA22652832710154.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8CE48E13328675773DB0D93CA1D27FD6A257CBDF87E5B248571C8DAFF601E374/0/323830333a383936303a32303a3a2f34382d3438203d3e20323639373336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8960:20::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:2d:85:ec:5e:f5:e2:0b:8e:75:98:c6:c0:4d:c8:f6:c5:d8:
         79:2a:21:56:25:99:f9:3b:9b:01:1b:3b:f2:42:1a:4b:46:85:
         fd:cf:c3:33:3e:cd:89:d1:29:f8:67:e5:e0:d2:4c:3d:c8:a3:
         05:e0:4c:9e:d8:15:d5:9c:34:27:67:cf:58:32:fd:c4:2b:1d:
         ba:81:f2:94:74:f0:3a:f4:27:87:b2:98:69:df:85:40:e5:4f:
         56:6e:ee:7c:ab:a9:26:fb:84:85:11:38:aa:11:54:7e:5e:f2:
         58:84:15:c6:2c:5c:8c:d2:c6:2c:22:a1:e1:c7:8d:6e:24:98:
         32:44:d5:46:a3:3b:cb:c4:2a:7f:0f:96:3f:5d:0b:4a:84:94:
         ca:91:86:ae:57:03:53:fd:1c:34:23:60:3c:2a:a5:db:08:28:
         60:d7:2a:7d:8d:47:82:b0:bb:13:9d:ce:c1:85:a2:f0:19:20:
         ce:72:60:f2:44:bc:5f:91:7f:3f:fd:dc:76:52:ab:7b:8d:7c:
         f0:26:61:ad:f2:01:41:4f:2c:87:28:bf:5d:20:ff:01:4c:dc:
         7c:38:fb:58:f0:02:e6:14:db:cd:8a:1c:c7:8a:2a:85:ce:cc:
         6d:77:ab:54:40:9b:86:fb:1a:59:5d:7f:ab:92:43:a2:6b:2f:
         48:f8:f2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 03:09:25 2026 by rpki-client