This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/933AB30FBE5CE44C1A024B5CDB5EE35ED49FE5128A3E8799E94DE435F359CCAB/0/323830333a666132303a3a2f33322d3438203d3e203532333237.roa
File:                     323830333a666132303a3a2f33322d3438203d3e203532333237.roa (raw, json)
Hash identifier:          2vHFJ/bzFmopwQt5qJdzKxCohOQuB7K1ddWfqYFZ2Gk=
Subject key identifier:   D7:DF:D3:34:9B:FD:B9:36:31:5B:6C:B4:76:F0:63:AC:DC:CD:9B:33
Certificate issuer:       /CN=AF4EF7300DCD3572D25AD9FC9E1544193AD7F414
Certificate serial:       0C98566FAE58A14402A6F6E6B07CD5FABD6D20EF
Authority key identifier: AF:4E:F7:30:0D:CD:35:72:D2:5A:D9:FC:9E:15:44:19:3A:D7:F4:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4EF7300DCD3572D25AD9FC9E1544193AD7F414.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/933AB30FBE5CE44C1A024B5CDB5EE35ED49FE5128A3E8799E94DE435F359CCAB/0/323830333a666132303a3a2f33322d3438203d3e203532333237.roa
Signing time:             Tue 06 Jan 2026 19:06:51 +0000
ROA not before:           Tue 06 Jan 2026 19:01:51 +0000
ROA not after:            Tue 05 Jan 2027 19:06:51 +0000
asID:                     52327
IP address blocks:        2803:fa20::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/933AB30FBE5CE44C1A024B5CDB5EE35ED49FE5128A3E8799E94DE435F359CCAB/0/AF4EF7300DCD3572D25AD9FC9E1544193AD7F414.crl
                          rsync://repository.lacnic.net/rpki/lacnic/933AB30FBE5CE44C1A024B5CDB5EE35ED49FE5128A3E8799E94DE435F359CCAB/0/AF4EF7300DCD3572D25AD9FC9E1544193AD7F414.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4EF7300DCD3572D25AD9FC9E1544193AD7F414.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:98:56:6f:ae:58:a1:44:02:a6:f6:e6:b0:7c:d5:fa:bd:6d:20:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF4EF7300DCD3572D25AD9FC9E1544193AD7F414
        Validity
            Not Before: Jan  6 19:01:51 2026 GMT
            Not After : Jan  5 19:06:51 2027 GMT
        Subject: CN=D7DFD3349BFDB936315B6CB476F063ACDCCD9B33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fd:ab:be:1e:2d:ef:cb:8e:76:7b:0d:cd:70:
                    34:81:41:78:5f:9c:c8:0b:7e:9b:3e:fb:c2:3a:62:
                    b7:b4:fc:4c:31:33:98:d8:cf:f1:11:84:d3:4d:2c:
                    71:2e:87:2c:43:79:02:b3:17:88:b0:6d:eb:ef:ad:
                    cd:87:43:a9:a2:09:c2:02:7f:1b:31:31:c2:94:f0:
                    7b:f2:ef:2a:72:4f:27:c1:0d:7b:b9:a6:0c:31:53:
                    b3:5a:93:2a:58:df:7c:bc:28:f6:61:49:6b:2b:10:
                    ce:fd:84:69:f0:56:b7:c7:85:a5:a1:90:0b:ef:e3:
                    57:a3:41:3e:05:41:5b:89:39:65:95:ae:05:37:44:
                    5a:15:d4:57:4e:06:38:7e:1d:78:6a:02:f9:19:8d:
                    ae:e7:22:c1:7c:05:72:47:2d:1c:93:c7:ec:af:9b:
                    01:d1:42:3f:ac:e6:b2:9b:10:b3:b6:be:86:e6:4b:
                    e4:43:38:59:11:06:5a:41:56:7d:f0:14:7b:8f:68:
                    36:ce:fb:56:7f:a4:f8:58:02:f8:87:8b:4d:ae:69:
                    ef:36:ab:77:1c:ff:4d:a9:8a:76:ee:e5:ce:b0:32:
                    dc:a4:2f:50:79:0f:0c:6d:0a:63:01:5b:3e:b7:00:
                    d6:85:b7:94:e8:08:ac:48:b9:6c:6a:7c:05:ab:25:
                    69:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:DF:D3:34:9B:FD:B9:36:31:5B:6C:B4:76:F0:63:AC:DC:CD:9B:33
            X509v3 Authority Key Identifier:
                keyid:AF:4E:F7:30:0D:CD:35:72:D2:5A:D9:FC:9E:15:44:19:3A:D7:F4:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/933AB30FBE5CE44C1A024B5CDB5EE35ED49FE5128A3E8799E94DE435F359CCAB/0/AF4EF7300DCD3572D25AD9FC9E1544193AD7F414.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4EF7300DCD3572D25AD9FC9E1544193AD7F414.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/933AB30FBE5CE44C1A024B5CDB5EE35ED49FE5128A3E8799E94DE435F359CCAB/0/323830333a666132303a3a2f33322d3438203d3e203532333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fa20::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:21:99:6e:06:02:8a:8c:d5:a4:f7:48:c7:e1:57:77:db:0f:
         15:cf:fd:b1:af:09:b9:70:b4:22:8d:b8:ae:2b:38:6d:c1:ce:
         8a:91:00:91:99:8d:69:5a:6c:d7:fd:b3:37:1b:72:d0:4c:59:
         f0:f7:bb:81:13:18:f6:ea:78:49:f0:67:67:5d:7a:66:af:d4:
         69:eb:90:fe:9f:79:5e:a4:72:8b:cc:fc:c9:e1:26:c9:a5:c4:
         04:4d:57:f0:64:c4:61:23:ac:3c:a0:f2:0a:5c:b3:3d:65:cb:
         96:35:d7:60:b5:8b:b3:cb:66:86:3e:1c:11:ae:f3:dd:64:23:
         8b:b2:20:72:1d:38:7a:96:77:15:1f:5f:48:4f:bf:1c:e7:e0:
         54:34:1b:cd:a8:4c:b8:84:7d:91:59:f3:70:cd:da:37:70:4b:
         e5:67:bf:61:a2:1b:1f:53:5f:58:7e:31:71:9f:d9:1d:1c:fd:
         19:8c:50:b8:dd:38:21:51:94:2c:c0:07:3e:38:da:ee:64:78:
         89:32:36:35:34:9b:0e:a1:30:73:64:89:31:dd:07:6d:60:3f:
         58:fd:03:63:e8:0f:36:a4:8a:ba:b1:20:ce:82:6b:41:0d:ab:
         7d:ad:eb:f6:11:04:98:03:e1:26:b7:a8:a6:1e:0e:cd:3b:49:
         80:ba:2d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 15:18:24 2026 by rpki-client