This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F2AE803B2E5ADDE0FBD5BDD9CF7A3B230FD08E468371BD9732FBA007E33759E/0/323830333a663731303a3a2f33322d3332203d3e20323732313131.roa
File:                     323830333a663731303a3a2f33322d3332203d3e20323732313131.roa (raw, json)
Hash identifier:          4DAzCF9Xv9QFjpgyMx6tRl/38Pl6wy4OaXISEItmkdM=
Subject key identifier:   73:12:B9:E4:F3:4A:CE:EE:5C:C7:C8:28:21:70:C4:4C:0B:66:DD:1B
Certificate issuer:       /CN=2F047A301A97B60EF7E1DECA548BF9056B229795
Certificate serial:       2CD16EB67A88424229773EE53D9358A4233850A8
Authority key identifier: 2F:04:7A:30:1A:97:B6:0E:F7:E1:DE:CA:54:8B:F9:05:6B:22:97:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F047A301A97B60EF7E1DECA548BF9056B229795.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F2AE803B2E5ADDE0FBD5BDD9CF7A3B230FD08E468371BD9732FBA007E33759E/0/323830333a663731303a3a2f33322d3332203d3e20323732313131.roa
Signing time:             Tue 06 Jan 2026 19:08:13 +0000
ROA not before:           Tue 06 Jan 2026 19:03:13 +0000
ROA not after:            Tue 05 Jan 2027 19:08:13 +0000
asID:                     272111
IP address blocks:        2803:f710::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8F2AE803B2E5ADDE0FBD5BDD9CF7A3B230FD08E468371BD9732FBA007E33759E/0/2F047A301A97B60EF7E1DECA548BF9056B229795.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8F2AE803B2E5ADDE0FBD5BDD9CF7A3B230FD08E468371BD9732FBA007E33759E/0/2F047A301A97B60EF7E1DECA548BF9056B229795.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F047A301A97B60EF7E1DECA548BF9056B229795.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 20:59:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:d1:6e:b6:7a:88:42:42:29:77:3e:e5:3d:93:58:a4:23:38:50:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F047A301A97B60EF7E1DECA548BF9056B229795
        Validity
            Not Before: Jan  6 19:03:13 2026 GMT
            Not After : Jan  5 19:08:13 2027 GMT
        Subject: CN=7312B9E4F34ACEEE5CC7C8282170C44C0B66DD1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1f:15:26:38:db:0e:e7:9f:82:60:92:69:c5:
                    9a:f2:2d:f1:aa:70:5b:0f:a3:3f:ff:fe:cf:05:3d:
                    85:a7:8f:0c:20:80:fe:0d:20:93:28:4f:12:2b:b9:
                    ad:2e:56:c5:3a:85:d7:1f:a7:41:82:da:75:76:6c:
                    ba:f6:9a:39:b8:44:9e:96:82:97:b3:be:3a:64:29:
                    a3:9c:27:5d:0b:6d:a4:c9:3d:c1:e2:a0:3b:05:9b:
                    38:67:15:d1:3b:0e:a5:30:9e:1b:f1:01:11:79:6f:
                    25:87:01:12:12:a7:07:21:ee:06:2c:d9:82:71:a4:
                    9b:3d:06:11:d9:15:a0:b3:55:83:81:09:c3:58:22:
                    66:a4:20:f6:c9:1c:ef:03:70:e2:1a:69:db:0a:a1:
                    27:da:a1:4a:d1:47:10:52:3e:9a:41:a8:0f:08:6f:
                    96:40:b9:32:81:94:fa:e6:a0:74:da:85:6a:43:11:
                    70:23:76:cc:16:2e:50:a1:a7:d5:25:65:a5:0a:1c:
                    a2:ea:fe:32:ac:ae:c1:7d:ac:cd:d3:1b:33:99:da:
                    79:96:2a:13:aa:af:b6:cb:e6:9b:6e:07:37:c7:b0:
                    fc:da:09:73:2c:42:ac:7a:b8:71:47:6f:72:09:5f:
                    43:6a:ed:60:98:29:bc:58:c4:04:6c:b8:29:87:06:
                    0e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:12:B9:E4:F3:4A:CE:EE:5C:C7:C8:28:21:70:C4:4C:0B:66:DD:1B
            X509v3 Authority Key Identifier:
                keyid:2F:04:7A:30:1A:97:B6:0E:F7:E1:DE:CA:54:8B:F9:05:6B:22:97:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F2AE803B2E5ADDE0FBD5BDD9CF7A3B230FD08E468371BD9732FBA007E33759E/0/2F047A301A97B60EF7E1DECA548BF9056B229795.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F047A301A97B60EF7E1DECA548BF9056B229795.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F2AE803B2E5ADDE0FBD5BDD9CF7A3B230FD08E468371BD9732FBA007E33759E/0/323830333a663731303a3a2f33322d3332203d3e20323732313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f710::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:5f:76:66:8b:d9:34:5c:fb:9f:4d:65:1a:83:9a:17:24:d4:
         8e:49:8c:91:a2:b1:23:ef:8c:14:1e:2c:3e:32:76:f7:09:5e:
         f8:e1:e1:c2:32:40:cc:b2:a0:32:b9:eb:db:f3:d5:5b:21:bd:
         0e:5d:24:8b:9d:b2:15:11:26:f6:fc:36:d2:1e:76:0c:03:dd:
         29:89:85:c6:51:66:2b:22:97:af:f6:a5:13:5a:fe:e1:54:47:
         0f:1f:c2:80:92:fa:48:61:a9:8e:e9:6c:8c:d5:b5:7a:af:e3:
         d5:ab:50:b9:0f:c9:56:b6:bf:f5:98:77:25:48:77:45:7d:c5:
         c7:e1:ca:3a:02:49:ed:60:83:e8:d1:38:fc:ba:7d:6b:78:1a:
         58:47:a0:38:37:e3:18:86:11:5e:9e:48:87:37:41:c0:ca:bb:
         06:b8:66:4c:b5:63:c6:5a:8e:79:6c:5c:2b:81:8f:06:30:a4:
         8d:e8:d8:94:e4:72:12:89:cf:35:dd:92:6c:95:79:bb:ad:fa:
         ca:2c:82:c7:4d:f3:00:cd:fc:ee:26:43:c5:29:d5:b2:89:c3:
         df:a8:ba:ed:af:5f:a8:84:a2:69:96:8b:93:fd:5e:2a:03:95:
         b8:81:2b:09:50:2b:52:fe:5f:5e:ca:23:32:56:ad:67:a4:d4:
         81:59:40:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 22:50:32 2026 by rpki-client