This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/323830333a326665303a3a2f33322d3332203d3e20323731373831.roa
File:                     323830333a326665303a3a2f33322d3332203d3e20323731373831.roa (raw, json)
Hash identifier:          OIjhAvWP0w1Z9Bnw8BzvStQhYN82FtnyTJr6KHLWNyg=
Subject key identifier:   67:4F:AC:FD:8B:24:35:24:AA:6B:7E:C0:B5:F7:53:DC:E0:AF:CF:67
Certificate issuer:       /CN=BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC
Certificate serial:       592646479A1F856EAFC81BAA29E55C226F347890
Authority key identifier: BF:91:FE:0B:71:20:FE:C1:B0:2E:20:F4:EB:88:A4:DD:FA:1B:7F:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/323830333a326665303a3a2f33322d3332203d3e20323731373831.roa
Signing time:             Tue 06 Jan 2026 19:24:05 +0000
ROA not before:           Tue 06 Jan 2026 19:19:05 +0000
ROA not after:            Tue 05 Jan 2027 19:24:05 +0000
asID:                     271781
IP address blocks:        2803:2fe0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Jan 2026 10:02:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:26:46:47:9a:1f:85:6e:af:c8:1b:aa:29:e5:5c:22:6f:34:78:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC
        Validity
            Not Before: Jan  6 19:19:05 2026 GMT
            Not After : Jan  5 19:24:05 2027 GMT
        Subject: CN=674FACFD8B243524AA6B7EC0B5F753DCE0AFCF67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:37:2f:d5:c1:c1:23:d6:20:76:47:ba:14:a6:
                    6d:db:07:25:8b:53:79:3f:8d:d1:54:fb:4e:77:b3:
                    12:51:f8:be:cd:ef:71:4b:95:9a:5e:03:9b:2f:e2:
                    d9:48:07:b0:7c:fd:66:b9:92:ed:dd:9a:13:16:94:
                    ce:77:fc:8b:1d:13:ef:90:de:6b:d8:75:fd:58:5a:
                    9f:97:51:ba:d7:f3:61:e3:11:03:9b:3c:e2:e7:51:
                    0d:df:20:c1:74:9d:ed:1b:07:3c:b5:46:26:75:e8:
                    50:62:52:be:11:0f:c4:7d:9d:0b:b8:56:f5:17:4e:
                    49:91:47:55:39:e6:17:1c:8c:6d:9f:9f:85:fb:75:
                    a9:f5:f3:cf:69:bd:c8:c1:db:36:64:6d:27:5f:70:
                    16:0e:a0:0a:4a:e6:86:5e:ee:d2:b1:f4:1b:08:ac:
                    f3:4e:2d:ba:16:99:c6:3c:bf:c5:dc:e5:e1:5c:0c:
                    ed:75:a2:25:f2:70:a1:31:b2:be:ab:8b:63:d7:db:
                    40:04:de:39:4e:d7:3e:44:54:f6:0f:c7:ad:88:34:
                    df:81:4a:7c:2d:15:5d:eb:01:ef:9c:6c:23:89:11:
                    df:c7:ec:67:61:46:14:91:fd:48:d8:b9:16:2b:9d:
                    e0:00:f6:02:f4:28:bd:53:60:f5:fa:3b:0e:87:4d:
                    95:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:4F:AC:FD:8B:24:35:24:AA:6B:7E:C0:B5:F7:53:DC:E0:AF:CF:67
            X509v3 Authority Key Identifier:
                keyid:BF:91:FE:0B:71:20:FE:C1:B0:2E:20:F4:EB:88:A4:DD:FA:1B:7F:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/323830333a326665303a3a2f33322d3332203d3e20323731373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2fe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:2f:38:3d:51:fc:ff:15:4f:75:40:b3:2a:61:ba:3f:4f:40:
         eb:c3:76:79:6a:06:f0:26:a4:d2:48:42:f7:e1:24:f3:ac:fc:
         8f:5f:01:86:f5:a6:a2:54:b2:d6:fd:fa:69:31:44:6a:29:8e:
         34:df:4d:57:96:e0:76:ec:81:27:28:03:98:16:3b:ae:f3:b4:
         94:2e:a4:62:a1:25:66:9b:9e:e2:29:a5:33:1d:bc:67:5b:4e:
         51:a9:3f:ff:a9:e2:ac:47:69:c8:05:e2:3e:5d:9a:d0:64:16:
         e0:eb:a7:89:8b:12:c1:78:c1:ba:fc:bc:d6:1f:f1:3e:0a:05:
         bb:59:2f:f1:23:94:19:56:34:7f:8a:06:4e:36:49:a1:e6:05:
         da:90:05:52:77:d4:ea:74:d7:10:1e:e5:96:7d:a8:7d:55:b3:
         be:2c:cd:72:78:53:17:cd:24:1e:b7:78:40:c6:86:b5:bc:aa:
         67:f3:db:ee:e6:98:cf:5b:ed:bb:69:ca:c7:9f:23:7f:8d:1a:
         43:50:c1:90:ea:9f:63:ce:d2:d6:dd:cd:30:26:5a:82:88:5b:
         9f:4b:e9:3e:13:c2:07:1c:fd:d6:38:d3:91:ec:37:79:d9:88:
         ba:39:1b:27:bb:ea:44:51:7e:76:b3:01:09:e1:0d:38:45:93:
         43:ff:3f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 03:49:26 2026 by rpki-client