This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/323830333a336661303a3a2f33322d3332203d3e20323637373938.roa
File:                     323830333a336661303a3a2f33322d3332203d3e20323637373938.roa (raw, json)
Hash identifier:          m/tJ6xUTjWbi4g5TaA2/hN07hTSHcAky6/ZYhwLPsZ4=
Subject key identifier:   AA:9F:7B:05:C0:BA:7A:A7:4B:D5:EA:50:F8:DA:24:5D:DD:AB:B7:0A
Certificate issuer:       /CN=378C4A178BD1442C656AA12825B69BFF74217F32
Certificate serial:       791ACE3EF1A61D59546FEE9E5346FEF1384B816A
Authority key identifier: 37:8C:4A:17:8B:D1:44:2C:65:6A:A1:28:25:B6:9B:FF:74:21:7F:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/378C4A178BD1442C656AA12825B69BFF74217F32.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/323830333a336661303a3a2f33322d3332203d3e20323637373938.roa
Signing time:             Tue 06 Jan 2026 19:45:55 +0000
ROA not before:           Tue 06 Jan 2026 19:40:55 +0000
ROA not after:            Tue 05 Jan 2027 19:45:55 +0000
asID:                     267798
IP address blocks:        2803:3fa0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/378C4A178BD1442C656AA12825B69BFF74217F32.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/378C4A178BD1442C656AA12825B69BFF74217F32.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/378C4A178BD1442C656AA12825B69BFF74217F32.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 10:18:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:1a:ce:3e:f1:a6:1d:59:54:6f:ee:9e:53:46:fe:f1:38:4b:81:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=378C4A178BD1442C656AA12825B69BFF74217F32
        Validity
            Not Before: Jan  6 19:40:55 2026 GMT
            Not After : Jan  5 19:45:55 2027 GMT
        Subject: CN=AA9F7B05C0BA7AA74BD5EA50F8DA245DDDABB70A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:50:4c:1b:f4:db:cc:8d:e4:ba:de:dd:1a:7c:
                    78:24:f4:5a:ea:2c:0d:b9:0a:0c:d0:ab:18:9f:dc:
                    2f:0c:23:a5:d8:73:1b:5f:18:90:fa:b2:de:bd:f0:
                    f8:d2:31:cf:b8:85:5a:40:94:32:9a:c6:7b:e6:2a:
                    9f:0d:db:a3:5f:ca:d4:48:87:04:58:e1:95:22:4c:
                    7f:ac:fc:37:e2:87:dc:1c:eb:49:a6:7b:9c:8a:35:
                    d5:c7:17:f0:59:b6:1d:d4:c3:f6:f8:6c:30:5c:4a:
                    fd:e8:3e:d4:d7:fc:17:1e:fc:06:1f:e1:af:30:01:
                    73:fe:58:af:73:d5:e1:8e:67:69:fd:6a:79:e2:e1:
                    2f:03:dc:aa:bc:32:45:bd:53:bd:95:25:21:b0:6e:
                    c8:1d:05:c2:31:50:fb:95:ee:2f:96:e7:cc:9d:48:
                    1a:cb:d3:29:f3:c0:12:0d:5f:db:a6:d7:27:25:2e:
                    ee:b7:0f:fa:95:49:c3:3b:cb:67:be:f1:47:e6:0b:
                    45:ce:b9:96:b2:a1:e1:c2:19:8e:c2:a4:a5:26:c4:
                    16:fc:1b:c8:c1:e6:e5:04:ec:f7:40:1b:d7:04:9d:
                    e4:2a:59:b5:3e:75:73:23:a9:99:b1:05:6c:9e:de:
                    fe:ee:0b:d4:52:49:55:4a:1d:2a:be:10:ef:dd:44:
                    d5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:9F:7B:05:C0:BA:7A:A7:4B:D5:EA:50:F8:DA:24:5D:DD:AB:B7:0A
            X509v3 Authority Key Identifier:
                keyid:37:8C:4A:17:8B:D1:44:2C:65:6A:A1:28:25:B6:9B:FF:74:21:7F:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/378C4A178BD1442C656AA12825B69BFF74217F32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/378C4A178BD1442C656AA12825B69BFF74217F32.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/323830333a336661303a3a2f33322d3332203d3e20323637373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3fa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:fc:d2:f8:ed:ba:ca:e3:36:ac:13:81:aa:ac:77:1d:cd:1d:
         ba:c3:9e:18:c4:07:bb:34:e4:55:f9:5a:a7:70:bf:4d:0d:45:
         94:56:ae:3c:34:44:cf:9a:cd:13:49:c4:78:a7:eb:e8:bb:e1:
         33:2f:09:40:d6:3c:72:8c:11:af:21:25:04:df:3f:72:6e:6c:
         3b:d3:5a:78:fd:ed:a5:60:93:ae:fc:60:74:48:42:09:53:99:
         eb:41:69:e0:0d:bd:1b:57:89:c1:fc:7b:bd:59:86:40:20:51:
         16:bc:9b:71:06:57:bb:9c:cf:21:6e:a0:20:15:d9:c0:c6:2e:
         38:6c:9a:38:b5:8b:d5:b5:a2:db:72:23:34:18:de:56:30:e0:
         67:a2:cc:a5:8b:e6:ca:be:ba:51:73:49:67:ef:da:ed:95:3e:
         23:a5:92:8f:c3:ed:d3:48:87:d6:59:b7:5c:92:ca:97:9a:03:
         2c:da:dc:4f:f3:f9:35:a6:0d:f3:d5:d9:ab:49:68:d4:58:b6:
         b3:86:9e:29:91:ea:db:5d:75:ed:b4:f5:5f:d3:c3:61:71:33:
         c5:09:50:e8:61:73:00:03:93:f8:95:16:07:c7:b8:b0:b2:70:
         3b:88:d2:01:7a:33:e7:93:3e:22:6e:67:5b:d4:b0:9d:55:a9:
         81:5e:cf:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 22:49:54 2026 by rpki-client