This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B4E3744F24E907740AFF85CE9457F3FA8E3BF32359D4255C9B5FE81ED74EC44/0/323830333a346134303a3a2f33322d3433203d3e20323634363831.roa
File:                     323830333a346134303a3a2f33322d3433203d3e20323634363831.roa (raw, json)
Hash identifier:          B189/lZn3YJfLUoSBmLUB6dX+Asm2N5mDEJZoQquppc=
Subject key identifier:   1B:C5:9D:F8:D2:84:2F:55:85:1E:90:10:87:AB:CB:AA:9D:AB:D9:6E
Certificate issuer:       /CN=68FDDBE1BF749D2FC48F59317C6389C8186C4613
Certificate serial:       7779B19A6F82A58ECE1699F3645CAEF057215FFE
Authority key identifier: 68:FD:DB:E1:BF:74:9D:2F:C4:8F:59:31:7C:63:89:C8:18:6C:46:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68FDDBE1BF749D2FC48F59317C6389C8186C4613.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B4E3744F24E907740AFF85CE9457F3FA8E3BF32359D4255C9B5FE81ED74EC44/0/323830333a346134303a3a2f33322d3433203d3e20323634363831.roa
Signing time:             Tue 30 Dec 2025 19:25:00 +0000
ROA not before:           Tue 30 Dec 2025 19:20:00 +0000
ROA not after:            Tue 29 Dec 2026 19:25:00 +0000
asID:                     264681
IP address blocks:        2803:4a40::/32 maxlen: 43
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B4E3744F24E907740AFF85CE9457F3FA8E3BF32359D4255C9B5FE81ED74EC44/0/68FDDBE1BF749D2FC48F59317C6389C8186C4613.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B4E3744F24E907740AFF85CE9457F3FA8E3BF32359D4255C9B5FE81ED74EC44/0/68FDDBE1BF749D2FC48F59317C6389C8186C4613.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68FDDBE1BF749D2FC48F59317C6389C8186C4613.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 08 Jan 2026 01:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:79:b1:9a:6f:82:a5:8e:ce:16:99:f3:64:5c:ae:f0:57:21:5f:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68FDDBE1BF749D2FC48F59317C6389C8186C4613
        Validity
            Not Before: Dec 30 19:20:00 2025 GMT
            Not After : Dec 29 19:25:00 2026 GMT
        Subject: CN=1BC59DF8D2842F55851E901087ABCBAA9DABD96E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:38:6b:95:ff:46:a5:4d:b0:31:50:eb:95:93:
                    f2:0e:5d:37:57:72:65:fc:87:fd:b7:5d:a2:10:c0:
                    b6:44:78:40:99:09:73:4f:36:63:c0:e2:c6:55:2b:
                    27:70:95:15:a7:c3:03:08:e5:b3:62:81:76:b6:04:
                    d6:5d:b9:05:68:9e:e0:67:63:a6:0b:07:e8:df:f4:
                    9d:2c:79:d4:4f:00:50:33:cd:36:92:78:c4:81:04:
                    a7:bc:4a:cd:65:e4:04:e3:2c:ae:d9:e6:b4:c2:31:
                    5f:b4:92:3e:07:73:36:14:31:76:a7:f2:60:6f:7e:
                    86:56:58:15:4b:ed:ce:e4:2f:00:2c:ac:b4:4b:bb:
                    ef:ea:90:24:22:89:06:96:5f:72:97:33:56:59:86:
                    62:66:08:20:e5:70:f7:75:10:f0:fa:dc:b8:5a:fb:
                    bf:40:43:ee:97:82:13:70:d2:86:76:56:3d:35:e6:
                    f4:0c:df:d5:97:ad:20:4d:0b:17:f7:bf:0f:0d:51:
                    ae:3b:06:79:c5:a0:96:eb:1f:5d:54:54:c3:73:bf:
                    5a:fa:8d:80:27:d8:84:75:0f:c2:44:79:04:ff:7a:
                    e2:2d:e6:bb:74:ec:de:ac:9d:ae:ac:f4:db:89:71:
                    a6:b9:39:63:77:b5:dd:38:ae:0e:87:87:74:9e:2c:
                    75:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C5:9D:F8:D2:84:2F:55:85:1E:90:10:87:AB:CB:AA:9D:AB:D9:6E
            X509v3 Authority Key Identifier:
                keyid:68:FD:DB:E1:BF:74:9D:2F:C4:8F:59:31:7C:63:89:C8:18:6C:46:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B4E3744F24E907740AFF85CE9457F3FA8E3BF32359D4255C9B5FE81ED74EC44/0/68FDDBE1BF749D2FC48F59317C6389C8186C4613.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68FDDBE1BF749D2FC48F59317C6389C8186C4613.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B4E3744F24E907740AFF85CE9457F3FA8E3BF32359D4255C9B5FE81ED74EC44/0/323830333a346134303a3a2f33322d3433203d3e20323634363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:f4:9f:6c:00:6c:d1:fa:fe:9c:0b:43:d6:7e:f8:01:99:e7:
         e5:55:58:ad:c2:9b:74:46:23:90:8f:a1:3f:40:ea:52:ae:b1:
         c8:3c:85:49:09:aa:9c:c0:b7:8a:84:79:4f:9c:b8:ce:0b:74:
         df:92:e4:5c:08:c7:e4:90:9c:02:da:df:ce:c0:72:1b:eb:23:
         52:0b:a3:07:2e:76:8e:d7:f1:53:e7:7a:a4:51:a1:9c:ae:75:
         53:1c:ee:8d:ea:5b:54:45:ac:ac:06:52:41:a0:90:de:eb:9d:
         42:f1:ee:b9:89:e7:3a:d0:a9:de:53:37:fa:37:79:bd:67:90:
         ca:e7:e0:ae:05:15:a7:c0:ff:79:78:22:ed:f9:65:08:a5:91:
         65:f7:ce:c9:1c:3c:6d:6f:cb:e7:9a:70:47:de:02:4d:1b:05:
         f4:f8:46:87:5e:4f:6c:12:ec:c1:bc:58:04:92:99:64:32:8e:
         b3:0a:18:aa:8d:d0:24:b2:7f:c4:c2:65:02:18:2f:11:5a:39:
         d8:8c:2e:65:e7:65:64:e6:a9:0c:55:ad:f2:d5:75:0a:af:0f:
         46:97:ed:ab:22:fa:22:54:be:4a:7a:9e:8e:a4:6f:b6:cb:eb:
         85:fd:6a:49:e6:f6:98:ec:50:a3:85:38:ca:2f:29:ae:f0:22:
         4c:3d:7f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 3 15:19:08 2026 by rpki-client