This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/323830333a626265303a3330303a3a2f34302d3430203d3e20323730303838.roa
File:                     323830333a626265303a3330303a3a2f34302d3430203d3e20323730303838.roa (raw, json)
Hash identifier:          EhJF7jKGsK95rm6xq4x/IQiN+YmxJ66MdVpX7g/6lVc=
Subject key identifier:   49:DA:2C:BD:EB:A5:53:8A:D6:BF:46:DB:AF:A6:12:BE:A6:70:B3:08
Certificate issuer:       /CN=08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D
Certificate serial:       4B738697E427187BC45B037D7C8C1527404D3121
Authority key identifier: 08:AA:2E:4D:3C:7C:DF:96:26:D3:31:AC:D3:8D:17:19:F3:D4:A7:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/323830333a626265303a3330303a3a2f34302d3430203d3e20323730303838.roa
Signing time:             Wed 31 Dec 2025 15:56:54 +0000
ROA not before:           Wed 31 Dec 2025 15:51:54 +0000
ROA not after:            Wed 30 Dec 2026 15:56:54 +0000
asID:                     270088
IP address blocks:        2803:bbe0:300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 21:27:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:73:86:97:e4:27:18:7b:c4:5b:03:7d:7c:8c:15:27:40:4d:31:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D
        Validity
            Not Before: Dec 31 15:51:54 2025 GMT
            Not After : Dec 30 15:56:54 2026 GMT
        Subject: CN=49DA2CBDEBA5538AD6BF46DBAFA612BEA670B308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:80:8f:f2:33:5f:b4:59:ad:06:b2:a4:2f:b0:
                    93:17:36:9b:70:6b:eb:89:d6:46:f9:5e:68:90:63:
                    6e:bc:8b:4a:b7:96:e4:eb:e4:44:67:56:c5:ea:1d:
                    ac:8a:1f:2b:af:21:8e:40:06:fd:28:c2:82:ce:c8:
                    b3:da:80:ea:f1:0e:5b:05:7c:46:5f:44:fa:fe:da:
                    dc:24:bb:1f:85:90:41:45:ee:0f:e5:0a:46:64:46:
                    59:ec:41:76:d3:c0:40:dc:24:90:c7:20:64:1c:d6:
                    a1:c1:3e:45:54:81:c5:0e:62:a9:5f:c3:2e:f2:35:
                    b7:87:66:7e:c5:55:94:58:c5:08:3f:db:e4:16:58:
                    03:b1:25:d1:4b:e2:d5:12:0a:bd:9f:a8:79:a3:7b:
                    b3:fc:ed:75:a3:9e:59:0c:97:7f:50:4f:66:0d:64:
                    8f:4d:80:8c:69:5b:f7:16:b8:d5:72:f1:b4:6d:5e:
                    fe:0f:2e:5d:9b:ba:85:af:cd:9b:86:2a:f1:3e:7c:
                    00:0c:d4:78:4e:1d:ce:18:6a:d5:76:42:18:43:9c:
                    49:df:42:bb:4f:cd:08:23:77:ea:4f:f6:31:e8:32:
                    23:ad:42:68:a7:fa:a2:86:e3:d3:fb:15:67:92:f5:
                    86:ec:b7:65:08:0d:ca:1b:5d:a2:f6:f7:ce:39:8c:
                    26:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:DA:2C:BD:EB:A5:53:8A:D6:BF:46:DB:AF:A6:12:BE:A6:70:B3:08
            X509v3 Authority Key Identifier:
                keyid:08:AA:2E:4D:3C:7C:DF:96:26:D3:31:AC:D3:8D:17:19:F3:D4:A7:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/323830333a626265303a3330303a3a2f34302d3430203d3e20323730303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bbe0:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         73:37:23:96:87:7a:d7:8f:32:79:4b:49:49:a6:97:fa:9b:c0:
         0f:0d:73:de:fd:5f:d6:80:81:86:46:ff:77:cf:56:25:ef:e5:
         65:d2:57:82:08:27:e5:84:e7:89:11:46:da:b3:15:19:16:1d:
         1b:4c:99:13:ea:9b:36:83:19:77:80:7e:f4:d7:86:54:95:9f:
         d6:a2:5b:dd:6a:7f:76:bb:c6:a7:d0:5a:da:9a:5e:14:44:d0:
         6e:6f:1a:f9:af:82:28:77:f0:bf:8b:28:6a:ff:65:25:9c:11:
         1b:ef:5d:6a:71:18:83:78:f8:23:ed:c3:04:10:c2:f3:cd:46:
         77:02:ed:1c:e1:e7:52:25:b1:0c:99:0e:7e:70:49:60:1b:1d:
         14:fb:7b:77:a6:f7:62:18:ac:bc:71:00:53:3e:99:4e:fc:d8:
         21:79:04:8e:96:71:fc:e8:de:ca:6e:fe:73:d1:7b:a3:22:3e:
         8c:47:5d:83:22:10:63:1d:21:79:5c:18:c0:3f:18:c0:e5:1b:
         02:6e:63:14:de:4d:4a:2f:04:8d:a8:c5:d4:39:da:be:f2:5c:
         8c:dc:72:c1:b8:7c:48:71:c5:f7:b2:5e:67:52:5a:2a:44:43:
         33:f2:d5:29:36:00:b5:80:9a:5b:68:58:6c:d5:47:98:58:d1:
         c6:90:57:45
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUS3OGl+QnGHvEWwN9fIwVJ0BNMSEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhBQTJFNEQzQzdDREY5NjI2RDMzMUFDRDM4RDE3MTlG
M0Q0QTcyRDAeFw0yNTEyMzExNTUxNTRaFw0yNjEyMzAxNTU2NTRaMDMxMTAvBgNV
BAMTKDQ5REEyQ0JERUJBNTUzOEFENkJGNDZEQkFGQTYxMkJFQTY3MEIzMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvgI/yM1+0Wa0GsqQvsJMXNptw
a+uJ1kb5XmiQY268i0q3luTr5ERnVsXqHayKHyuvIY5ABv0owoLOyLPagOrxDlsF
fEZfRPr+2twkux+FkEFF7g/lCkZkRlnsQXbTwEDcJJDHIGQc1qHBPkVUgcUOYqlf
wy7yNbeHZn7FVZRYxQg/2+QWWAOxJdFL4tUSCr2fqHmje7P87XWjnlkMl39QT2YN
ZI9NgIxpW/cWuNVy8bRtXv4PLl2buoWvzZuGKvE+fAAM1HhOHc4YatV2QhhDnEnf
QrtPzQgjd+pP9jHoMiOtQmin+qKG49P7FWeS9Ybst2UIDcobXaL29845jCbdAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUSdosveulU4rWv0bbr6YSvqZwswgwHwYDVR0j
BBgwFoAUCKouTTx835Ym0zGs040XGfPUpy0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84RDRCQjI0MjFDMjREMTlGMzEyM0IwQzY4MUIwMUFEODJB
OTI5NDE1ODJDOURBQkI5NDkzRTA5N0YzRjJGODkzLzAvMDhBQTJFNEQzQzdDREY5
NjI2RDMzMUFDRDM4RDE3MTlGM0Q0QTcyRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wOEFBMkU0RDNDN0NERjk2MjZE
MzMxQUNEMzhEMTcxOUYzRDRBNzJELmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEQ0QkIyNDIxQzI0RDE5RjMxMjNCMEM2ODFCMDFBRDgyQTkyOTQxNTgy
QzlEQUJCOTQ5M0UwOTdGM0YyRjg5My8wLzMyMzgzMDMzM2E2MjYyNjUzMDNhMzMz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNzMwMzAzODM4LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAO74AMwDQYJKoZIhvcNAQELBQADggEBAHM3I5aHetePMnlLSUmml/qbwA8N
c979X9aAgYZG/3fPViXv5WXSV4IIJ+WE54kRRtqzFRkWHRtMmRPqmzaDGXeAfvTX
hlSVn9aiW91qf3a7xqfQWtqaXhRE0G5vGvmvgih38L+LKGr/ZSWcERvvXWpxGIN4
+CPtwwQQwvPNRncC7Rzh51IlsQyZDn5wSWAbHRT7e3em92IYrLxxAFM+mU782CF5
BI6Wcfzo3spu/nPRe6MiPoxHXYMiEGMdIXlcGMA/GMDlGwJuYxTeTUovBI2oxdQ5
2r7yXIzccsG4fEhxxfeyXmdSWipEQzPy1Sk2ALWAmltoWGzVR5hY0caQV0U=
-----END CERTIFICATE-----
Generated at Mon Jan 12 13:34:20 2026 by rpki-client