This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9A324A5A93450CA01BE80C9CE83E8D8F298F57AADE43D57EF55AEF5C3AE89FD8/0/323830333a663963303a3a2f33322d3332203d3e20323635373038.roa
File:                     323830333a663963303a3a2f33322d3332203d3e20323635373038.roa (raw, json)
Hash identifier:          PbyOjWXsyXc2980cp8ZTsOI0Q5zl1n+RpzjMwTZuCQc=
Subject key identifier:   D7:9D:28:93:1F:17:F4:1A:02:A2:8A:3C:8E:D3:9F:08:24:FB:B3:6D
Certificate issuer:       /CN=749800288DD85BE233671D21F84E85060EC5FBAD
Certificate serial:       5838FDF84771F60958A95C394E3D038D8D77AB33
Authority key identifier: 74:98:00:28:8D:D8:5B:E2:33:67:1D:21:F8:4E:85:06:0E:C5:FB:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/749800288DD85BE233671D21F84E85060EC5FBAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9A324A5A93450CA01BE80C9CE83E8D8F298F57AADE43D57EF55AEF5C3AE89FD8/0/323830333a663963303a3a2f33322d3332203d3e20323635373038.roa
Signing time:             Tue 06 Jan 2026 19:10:10 +0000
ROA not before:           Tue 06 Jan 2026 19:05:10 +0000
ROA not after:            Tue 05 Jan 2027 19:10:10 +0000
asID:                     265708
IP address blocks:        2803:f9c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9A324A5A93450CA01BE80C9CE83E8D8F298F57AADE43D57EF55AEF5C3AE89FD8/0/749800288DD85BE233671D21F84E85060EC5FBAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9A324A5A93450CA01BE80C9CE83E8D8F298F57AADE43D57EF55AEF5C3AE89FD8/0/749800288DD85BE233671D21F84E85060EC5FBAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/749800288DD85BE233671D21F84E85060EC5FBAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 06:09:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:38:fd:f8:47:71:f6:09:58:a9:5c:39:4e:3d:03:8d:8d:77:ab:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749800288DD85BE233671D21F84E85060EC5FBAD
        Validity
            Not Before: Jan  6 19:05:10 2026 GMT
            Not After : Jan  5 19:10:10 2027 GMT
        Subject: CN=D79D28931F17F41A02A28A3C8ED39F0824FBB36D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1e:63:a8:40:0c:68:c3:9a:8d:59:59:21:2a:
                    d5:52:40:37:0f:16:bc:1e:9a:bf:23:ab:29:4e:87:
                    af:42:9c:71:f2:12:ea:f7:89:2a:1e:84:10:6c:e4:
                    fc:00:63:1a:a4:48:4e:25:56:87:85:64:8a:c6:b3:
                    d7:45:14:e4:e6:e1:0d:c1:5e:f1:e3:90:41:ff:15:
                    9e:43:ad:57:6e:e9:f5:db:70:8f:5a:2e:29:68:44:
                    2b:19:5d:2d:a7:5d:18:ef:08:81:86:1c:d0:5a:64:
                    87:da:66:ea:1c:02:eb:a9:0c:21:a2:d6:71:e9:18:
                    a1:26:ae:94:e8:bc:ae:e3:f5:1a:e4:6b:2c:c0:50:
                    22:a2:54:8d:44:85:07:19:1b:6d:89:37:19:15:41:
                    3a:8f:19:d4:ec:82:53:f5:7e:77:76:e5:bd:10:97:
                    56:f6:ce:9b:3c:16:4a:87:5c:f3:8d:05:01:b3:d4:
                    22:44:4a:91:e6:5c:f8:d1:4e:6a:1f:12:6d:5b:b4:
                    de:88:92:a7:48:4a:88:d6:3c:d5:78:2f:13:31:45:
                    17:33:a1:26:c6:70:e4:0c:f0:75:7b:e9:43:5f:96:
                    56:df:b5:e3:eb:d5:0a:11:21:55:30:74:72:ca:a4:
                    3e:ff:bd:ab:c0:19:80:89:04:cf:3b:e4:7c:95:fd:
                    76:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:9D:28:93:1F:17:F4:1A:02:A2:8A:3C:8E:D3:9F:08:24:FB:B3:6D
            X509v3 Authority Key Identifier:
                keyid:74:98:00:28:8D:D8:5B:E2:33:67:1D:21:F8:4E:85:06:0E:C5:FB:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9A324A5A93450CA01BE80C9CE83E8D8F298F57AADE43D57EF55AEF5C3AE89FD8/0/749800288DD85BE233671D21F84E85060EC5FBAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/749800288DD85BE233671D21F84E85060EC5FBAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9A324A5A93450CA01BE80C9CE83E8D8F298F57AADE43D57EF55AEF5C3AE89FD8/0/323830333a663963303a3a2f33322d3332203d3e20323635373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f9c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:69:f9:8e:8b:fc:b4:99:03:ce:b2:83:9a:91:48:1e:6e:b0:
         95:7d:97:88:b7:e1:7d:4c:02:8e:f4:cf:54:28:3b:6c:87:2c:
         3f:0a:d2:83:9b:48:c2:04:cd:8f:00:96:88:cf:3c:97:78:a9:
         eb:c6:19:97:4e:6b:f8:98:d5:7f:3f:13:63:b3:89:3a:ad:06:
         9e:06:84:95:b1:36:b2:de:fc:c4:1f:5a:89:d8:c4:e7:ba:45:
         03:a8:28:b2:ff:ab:6f:ab:61:2d:d4:a8:76:6a:60:e4:99:f9:
         be:d9:74:00:33:e8:c5:e8:45:74:5b:fa:3a:41:47:a4:d3:21:
         1c:90:4b:96:c7:d9:aa:95:8d:0f:d4:ac:27:10:19:20:61:d5:
         8f:54:ce:84:82:7f:43:52:9c:4b:1c:59:17:fd:2e:87:47:b4:
         f9:70:06:6d:5a:a4:32:81:77:8a:f1:e6:5a:21:85:ac:f2:cc:
         8b:b5:22:e7:7e:55:fc:7f:68:70:7f:67:1c:c0:64:f6:1e:e7:
         bf:0d:b7:6f:da:af:33:cc:d4:86:54:f7:2b:b9:01:1c:f8:76:
         69:44:70:06:1f:7b:d9:89:43:08:19:de:a4:5d:1f:57:5e:3d:
         71:70:dd:86:1d:e1:3a:4f:d0:7e:46:8a:61:8d:62:1a:f1:ae:
         63:45:45:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 04:12:45 2026 by rpki-client