This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9FBE2537717648BE4584E0F63E98CB75116E7872F1ED3854D24B7DEDEA94B5CE/0/323830333a363834303a3a2f33322d3438203d3e20323633373638.roa
File:                     323830333a363834303a3a2f33322d3438203d3e20323633373638.roa (raw, json)
Hash identifier:          3mI9uJuDgCiK2Nj5pG+8xqeY0sbcCmuvm9hL1PQHUNE=
Subject key identifier:   60:98:DC:4A:3F:05:37:AF:DA:49:EA:54:87:47:8F:02:7D:3E:1D:8D
Certificate issuer:       /CN=EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231
Certificate serial:       40DA46F058EAA8DDFA51BF804B89ED6EC5F15B3A
Authority key identifier: EF:3F:FE:AA:A0:9A:4C:FC:C6:35:E4:8A:4C:FC:06:59:BC:BA:42:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9FBE2537717648BE4584E0F63E98CB75116E7872F1ED3854D24B7DEDEA94B5CE/0/323830333a363834303a3a2f33322d3438203d3e20323633373638.roa
Signing time:             Tue 06 Jan 2026 19:19:27 +0000
ROA not before:           Tue 06 Jan 2026 19:14:27 +0000
ROA not after:            Tue 05 Jan 2027 19:19:27 +0000
asID:                     263768
IP address blocks:        2803:6840::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9FBE2537717648BE4584E0F63E98CB75116E7872F1ED3854D24B7DEDEA94B5CE/0/EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9FBE2537717648BE4584E0F63E98CB75116E7872F1ED3854D24B7DEDEA94B5CE/0/EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 07:42:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:da:46:f0:58:ea:a8:dd:fa:51:bf:80:4b:89:ed:6e:c5:f1:5b:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231
        Validity
            Not Before: Jan  6 19:14:27 2026 GMT
            Not After : Jan  5 19:19:27 2027 GMT
        Subject: CN=6098DC4A3F0537AFDA49EA5487478F027D3E1D8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c2:24:62:59:3a:0e:11:74:28:6c:71:11:2c:
                    15:87:04:29:6d:0f:7c:6c:6e:75:08:1c:4b:1e:dd:
                    3a:7c:0d:b8:dd:ba:b1:0c:2c:b5:a2:69:9f:b1:97:
                    b3:2c:a2:49:3b:2f:d0:da:4b:4c:4a:34:1a:1d:5b:
                    c0:94:eb:b2:2c:36:7d:61:b7:8b:a2:d6:96:94:7c:
                    87:3f:f1:c2:76:b4:ce:e6:e4:f7:88:a5:29:43:ce:
                    36:e3:45:ef:7d:b2:2d:52:8c:a7:58:f6:36:63:f0:
                    6e:fa:d1:73:1e:24:64:57:cc:e9:f0:d0:9c:4a:ba:
                    36:e5:e0:fd:55:34:6a:db:5c:d4:92:18:bb:c0:cf:
                    fe:9d:44:d2:72:77:b5:da:61:f1:e3:7b:d8:96:bb:
                    77:6f:75:72:89:1d:02:fd:af:f0:52:ef:d4:69:89:
                    6e:a2:a2:8c:5f:8a:b0:48:d2:43:9b:87:a2:67:cb:
                    67:f9:d7:ce:8d:0c:b0:0e:16:60:41:26:af:51:4d:
                    c8:df:43:a2:d5:e0:0d:f1:a3:2a:c9:dd:ce:e3:c5:
                    41:95:fe:9f:7a:90:eb:21:5d:63:c4:d2:fb:0a:90:
                    d0:ea:a8:41:24:f1:29:d6:07:63:29:a0:b3:a8:cc:
                    32:13:7d:fc:dd:5e:be:94:85:4a:29:9b:d4:9d:97:
                    97:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:98:DC:4A:3F:05:37:AF:DA:49:EA:54:87:47:8F:02:7D:3E:1D:8D
            X509v3 Authority Key Identifier:
                keyid:EF:3F:FE:AA:A0:9A:4C:FC:C6:35:E4:8A:4C:FC:06:59:BC:BA:42:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9FBE2537717648BE4584E0F63E98CB75116E7872F1ED3854D24B7DEDEA94B5CE/0/EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9FBE2537717648BE4584E0F63E98CB75116E7872F1ED3854D24B7DEDEA94B5CE/0/323830333a363834303a3a2f33322d3438203d3e20323633373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6840::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:69:df:bb:14:52:60:0b:4b:52:ed:94:e1:65:73:29:c7:70:
         fc:17:88:13:fd:55:01:2b:6b:aa:74:c6:c9:81:2c:c0:18:db:
         ca:98:14:23:4b:19:09:b1:67:23:03:32:10:39:cd:3b:af:1d:
         a2:65:b9:4b:c8:80:51:3e:8b:61:ea:40:69:3e:57:6d:2d:6f:
         54:96:73:d7:31:2a:b9:c3:67:7c:19:de:04:7b:80:0c:37:80:
         35:49:52:2b:88:a3:a8:7f:22:f1:d7:41:62:c0:cf:df:1c:62:
         73:67:a0:55:34:27:36:e3:b9:88:8d:5f:5e:15:f1:70:e3:08:
         26:58:95:37:70:ad:71:f5:f0:91:2b:7b:94:a2:9d:12:c1:62:
         18:f3:fe:04:70:f6:29:84:73:32:5e:07:05:3c:47:27:27:a8:
         27:ac:91:b9:f2:6d:61:3d:54:76:cc:0d:3a:60:94:6f:c3:9b:
         c9:fc:c2:62:72:fa:79:55:1e:23:e8:c4:72:59:dd:e1:89:d0:
         2d:55:71:6f:03:9f:3a:9c:25:d3:12:b5:c6:6b:07:0b:93:77:
         c5:2d:16:7d:77:99:27:65:10:2e:94:f8:31:5f:80:6d:12:08:
         cb:a7:db:8b:e5:f5:46:0b:90:8a:33:03:ed:48:38:a8:e1:9e:
         c9:30:33:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 05:36:05 2026 by rpki-client