This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/323830333a323034303a3a2f33322d3332203d3e203238303530.roa
File:                     323830333a323034303a3a2f33322d3332203d3e203238303530.roa (raw, json)
Hash identifier:          mECyDzYF8QuciXha9Jjw7OvcQlcl9s/NY5RWa37sVk0=
Subject key identifier:   AF:5C:D0:70:22:66:6F:61:3A:64:15:0D:4F:85:AF:45:3C:19:5D:A3
Certificate issuer:       /CN=BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B
Certificate serial:       14932E039312652CF293D1459D63D1E5DFC8EBFE
Authority key identifier: BD:5C:8B:3B:9F:5A:D1:E1:22:59:0B:3A:8C:84:9B:67:CE:09:B5:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/323830333a323034303a3a2f33322d3332203d3e203238303530.roa
Signing time:             Tue 06 Jan 2026 19:27:18 +0000
ROA not before:           Tue 06 Jan 2026 19:22:18 +0000
ROA not after:            Tue 05 Jan 2027 19:27:18 +0000
asID:                     28050
IP address blocks:        2803:2040::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 02:19:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:93:2e:03:93:12:65:2c:f2:93:d1:45:9d:63:d1:e5:df:c8:eb:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B
        Validity
            Not Before: Jan  6 19:22:18 2026 GMT
            Not After : Jan  5 19:27:18 2027 GMT
        Subject: CN=AF5CD07022666F613A64150D4F85AF453C195DA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:25:f4:ec:a7:53:83:4a:3c:b2:f5:f7:07:42:
                    30:83:0d:70:89:dd:5b:64:ed:ac:d2:cf:47:d3:55:
                    3c:27:fa:bd:32:8d:1b:87:e3:9f:07:e5:89:cf:be:
                    94:96:74:07:df:99:e5:8d:22:f4:fb:41:7d:4a:63:
                    c6:3d:b8:fe:23:fa:3d:65:4e:48:e5:d7:21:a3:44:
                    4f:4b:7a:20:1d:b0:cf:ef:44:57:f5:8c:9c:47:38:
                    21:06:c7:5b:61:db:b5:00:9e:bc:51:2b:e3:f4:dc:
                    3b:d7:30:ea:92:46:ba:fc:08:7b:5b:7d:ee:9e:d1:
                    72:e0:22:cd:0a:d2:ce:25:7d:cc:c4:45:33:9a:78:
                    d3:c7:97:a4:d9:94:ea:7b:b9:80:4e:1f:36:34:61:
                    98:86:88:4a:e6:c7:75:bd:2e:e7:87:72:59:6b:d5:
                    a6:16:6c:7a:7b:ea:26:17:a3:6a:ba:e8:1a:45:57:
                    ca:16:b4:dc:d0:a8:ab:b6:9d:80:53:f3:e2:31:f4:
                    58:69:80:02:53:3c:85:15:53:45:25:a2:e5:67:1e:
                    1d:ba:87:79:6b:77:7c:58:32:50:5d:08:8e:11:f1:
                    33:17:5a:b4:06:d0:6e:53:a7:ef:0c:5d:c8:02:2b:
                    cf:ec:9b:8c:6a:1b:16:f6:d7:a1:69:60:8b:35:f6:
                    d4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:5C:D0:70:22:66:6F:61:3A:64:15:0D:4F:85:AF:45:3C:19:5D:A3
            X509v3 Authority Key Identifier:
                keyid:BD:5C:8B:3B:9F:5A:D1:E1:22:59:0B:3A:8C:84:9B:67:CE:09:B5:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/323830333a323034303a3a2f33322d3332203d3e203238303530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2040::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:65:b5:ae:37:1a:72:6c:44:fd:d0:4e:39:86:3e:7c:57:96:
         d3:51:e5:35:18:fa:41:e6:71:05:56:9f:0f:03:59:56:d8:35:
         87:0b:36:63:50:b3:36:6e:8a:a4:6a:08:a7:60:2e:1a:0f:ae:
         66:43:be:30:3d:d9:2e:65:c4:f3:5d:66:f4:56:59:eb:21:56:
         8c:d6:0a:92:76:7f:0c:02:82:c5:7b:06:8e:1b:12:cb:02:f2:
         3d:bb:c7:2a:44:ed:b4:dd:05:39:98:42:62:49:c2:c6:06:87:
         3d:d7:91:5c:75:5c:47:d8:b4:b7:5a:04:37:6c:a7:15:fa:13:
         79:1e:a2:aa:72:b9:23:d9:93:0d:19:c6:0f:7f:cb:3f:91:5a:
         1a:5a:79:cb:ae:99:a1:e2:28:16:83:95:01:0f:86:77:ad:17:
         da:90:54:59:cf:25:11:95:5c:c5:64:a8:8b:e3:be:3e:d8:ea:
         7e:4e:b2:1d:6d:c0:cc:12:19:ff:21:dd:64:fe:b0:76:99:76:
         55:df:f7:90:e2:2c:54:66:28:8a:01:11:d7:ef:0c:fb:ef:78:
         82:cb:5e:bd:aa:3a:c8:1d:91:48:18:88:9b:c1:eb:5c:eb:07:
         2b:94:51:f7:80:11:98:df:e6:95:22:3e:e4:f1:b6:df:20:52:
         98:3b:7e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 05:34:28 2026 by rpki-client