This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B305B50C3C45F59BD2BD635A7A773BF770A1FA7F3DBF5CC0903892285BC2AD1C/0/323830333a666134303a3a2f33322d3438203d3e203237393033.roa
File:                     323830333a666134303a3a2f33322d3438203d3e203237393033.roa (raw, json)
Hash identifier:          o09ukMnvw3ZLd6hkpouJPv7+rX9SxtznlzaGZIbJTms=
Subject key identifier:   B7:27:D0:28:8B:66:53:BC:0A:9E:27:F0:13:A7:F3:1E:B5:08:16:67
Certificate issuer:       /CN=3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB
Certificate serial:       48191F51ADFDAD8527247C36847A8E8AE8109D7F
Authority key identifier: 3A:82:50:F8:B4:61:7B:7D:F9:7D:5F:42:0D:32:F9:DF:DD:EE:82:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B305B50C3C45F59BD2BD635A7A773BF770A1FA7F3DBF5CC0903892285BC2AD1C/0/323830333a666134303a3a2f33322d3438203d3e203237393033.roa
Signing time:             Tue 06 Jan 2026 19:17:46 +0000
ROA not before:           Tue 06 Jan 2026 19:12:46 +0000
ROA not after:            Tue 05 Jan 2027 19:17:46 +0000
asID:                     27903
IP address blocks:        2803:fa40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B305B50C3C45F59BD2BD635A7A773BF770A1FA7F3DBF5CC0903892285BC2AD1C/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B305B50C3C45F59BD2BD635A7A773BF770A1FA7F3DBF5CC0903892285BC2AD1C/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 15:21:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:19:1f:51:ad:fd:ad:85:27:24:7c:36:84:7a:8e:8a:e8:10:9d:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB
        Validity
            Not Before: Jan  6 19:12:46 2026 GMT
            Not After : Jan  5 19:17:46 2027 GMT
        Subject: CN=B727D0288B6653BC0A9E27F013A7F31EB5081667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bf:cf:a0:f4:2a:6b:da:dc:d7:03:4b:aa:41:
                    57:a0:41:8f:9f:01:89:db:c6:2a:9a:83:86:d9:96:
                    87:72:8b:4f:98:be:7e:b4:a5:45:f3:52:84:1a:cb:
                    9f:e5:c0:ed:ee:06:8d:4d:db:da:f2:22:f5:10:f2:
                    8d:a6:bb:06:87:21:12:d7:bd:f0:5e:26:7a:9e:7f:
                    61:9f:bf:d5:ac:82:8d:4e:a3:17:17:5f:e1:9e:7f:
                    8e:b0:d5:0c:6c:bc:3b:93:2e:d9:4e:10:c9:f4:3f:
                    3d:ea:9c:bd:7f:5c:b4:82:84:af:82:c1:32:2a:74:
                    b0:b9:0f:0c:bf:da:58:d8:27:08:a9:28:f8:70:ca:
                    75:7b:40:5f:c3:ba:84:51:b5:64:f5:75:81:d1:5f:
                    a6:3e:24:9e:5c:97:9f:de:98:e0:32:a7:20:e6:56:
                    8b:7e:70:0a:c0:a8:67:36:46:ae:15:bc:ca:33:47:
                    4f:05:0a:8e:1a:38:b3:b4:40:77:28:2f:5a:34:ad:
                    6c:0e:00:21:bd:16:97:f2:26:4e:26:43:d4:1e:71:
                    7e:5a:5f:14:dd:43:72:e4:da:06:d5:41:c8:11:d3:
                    d6:92:4a:f7:16:8f:c4:14:55:3f:4e:1c:82:ed:79:
                    9e:62:d3:18:e9:ad:fc:cb:c1:0f:de:16:ea:34:0e:
                    47:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:27:D0:28:8B:66:53:BC:0A:9E:27:F0:13:A7:F3:1E:B5:08:16:67
            X509v3 Authority Key Identifier:
                keyid:3A:82:50:F8:B4:61:7B:7D:F9:7D:5F:42:0D:32:F9:DF:DD:EE:82:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B305B50C3C45F59BD2BD635A7A773BF770A1FA7F3DBF5CC0903892285BC2AD1C/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B305B50C3C45F59BD2BD635A7A773BF770A1FA7F3DBF5CC0903892285BC2AD1C/0/323830333a666134303a3a2f33322d3438203d3e203237393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fa40::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:08:b6:b1:f3:e3:b2:b9:03:94:55:c9:13:01:19:d1:e9:f5:
         7f:64:81:0d:e3:2c:31:e9:54:32:c4:dd:ae:3c:a7:7d:a3:6b:
         ca:7b:6b:3b:60:99:8d:44:32:20:56:89:9d:b1:a8:7c:0d:1c:
         04:8f:55:fd:25:36:b1:62:5b:78:08:54:82:3e:a3:ef:c7:a9:
         33:06:bc:32:5b:e3:fe:42:b1:a7:b8:26:a8:c0:0e:14:e5:69:
         10:43:43:25:71:cf:8c:12:44:1e:a3:cd:03:cf:2c:57:0d:86:
         d2:9e:e1:73:bc:0e:30:2c:67:86:b0:86:48:94:bd:97:aa:da:
         2f:db:e2:fd:6f:ac:f7:ec:73:f4:88:fd:be:be:55:49:11:15:
         65:e0:43:a1:0c:7a:b8:2c:33:2d:4b:23:c2:89:3c:fb:28:f0:
         e6:81:0e:64:e4:65:73:58:71:14:66:c3:9a:5e:38:1b:fd:2d:
         5c:e1:9a:e7:b4:24:f7:59:44:e7:e5:82:a5:61:a6:64:01:41:
         c0:ff:15:22:92:09:9b:39:c3:b6:82:43:1f:5e:ee:71:6d:2d:
         68:8d:8a:4a:fd:ad:9b:6a:5b:ac:f3:57:63:5f:08:6f:a1:08:
         fe:b5:3d:32:da:34:b1:3b:b1:a3:5e:fe:36:5a:99:1f:d3:e1:
         53:68:34:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 09:26:13 2026 by rpki-client