This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8D6F35AF303AB4E57B8441B217295BE92CF56ADA4F5F96D96A22B53693E1E5A/0/323830333a313031303a3a2f33322d3332203d3e20323733303830.roa
File:                     323830333a313031303a3a2f33322d3332203d3e20323733303830.roa (raw, json)
Hash identifier:          eJV4QaaNurWgEwiUfiHzQg06V/lxU/bDDsb/OW0MTmE=
Subject key identifier:   03:8A:7A:16:7D:BB:DB:C8:C7:72:EE:AD:58:41:2D:62:41:F7:C8:D7
Certificate issuer:       /CN=F68FBD9C74CC60A7AB5E2FEB7F222447D1D1F234
Certificate serial:       0D92BD8B47C8ED7A7B0B4AC25D95BC75029C2FF9
Authority key identifier: F6:8F:BD:9C:74:CC:60:A7:AB:5E:2F:EB:7F:22:24:47:D1:D1:F2:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F68FBD9C74CC60A7AB5E2FEB7F222447D1D1F234.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C8D6F35AF303AB4E57B8441B217295BE92CF56ADA4F5F96D96A22B53693E1E5A/0/323830333a313031303a3a2f33322d3332203d3e20323733303830.roa
Signing time:             Tue 06 Jan 2026 20:55:22 +0000
ROA not before:           Tue 06 Jan 2026 20:50:22 +0000
ROA not after:            Tue 05 Jan 2027 20:55:22 +0000
asID:                     273080
IP address blocks:        2803:1010::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C8D6F35AF303AB4E57B8441B217295BE92CF56ADA4F5F96D96A22B53693E1E5A/0/F68FBD9C74CC60A7AB5E2FEB7F222447D1D1F234.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C8D6F35AF303AB4E57B8441B217295BE92CF56ADA4F5F96D96A22B53693E1E5A/0/F68FBD9C74CC60A7AB5E2FEB7F222447D1D1F234.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F68FBD9C74CC60A7AB5E2FEB7F222447D1D1F234.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 14:18:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:92:bd:8b:47:c8:ed:7a:7b:0b:4a:c2:5d:95:bc:75:02:9c:2f:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F68FBD9C74CC60A7AB5E2FEB7F222447D1D1F234
        Validity
            Not Before: Jan  6 20:50:22 2026 GMT
            Not After : Jan  5 20:55:22 2027 GMT
        Subject: CN=038A7A167DBBDBC8C772EEAD58412D6241F7C8D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7c:9c:5f:3c:b7:c5:68:9a:7a:81:b6:84:8e:
                    52:1e:1a:85:74:09:f5:e3:77:92:cb:02:b2:ca:32:
                    5a:10:45:5f:07:59:f6:a6:14:42:74:e4:83:59:1f:
                    ae:ac:e6:0d:06:18:c7:b8:be:88:4d:0f:5e:f0:94:
                    dd:36:a3:34:9e:e2:fb:c2:e8:26:7c:b4:54:30:4e:
                    c0:d6:fa:3c:ac:6f:d3:73:b3:de:60:a4:0f:b0:e0:
                    75:cb:75:ee:8f:51:01:c2:d1:c9:80:29:1e:91:2e:
                    db:ef:c4:e8:d5:63:29:e0:db:87:28:f5:3a:4f:38:
                    02:1d:a8:28:0d:32:0f:68:f5:45:3d:30:bc:40:50:
                    42:32:ed:7b:7f:b1:91:b2:f6:f1:4b:ca:03:45:4a:
                    70:51:83:20:9a:0b:96:28:0b:f5:44:e1:0c:40:a6:
                    63:b7:ff:10:96:5b:b0:2e:d8:a1:67:f6:7d:da:6a:
                    ee:2c:12:d7:73:b2:5d:21:ae:5f:6c:02:8e:1e:c3:
                    11:45:64:ae:1a:fc:ee:0e:8d:55:15:7e:e5:30:1b:
                    c3:71:53:66:dc:31:27:35:0a:6e:09:fb:81:80:43:
                    69:b0:cc:21:86:d0:2a:9d:59:a7:ae:7c:3a:fd:6d:
                    e5:81:a3:c6:5b:58:cf:23:e0:f1:70:eb:03:9d:08:
                    e3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8A:7A:16:7D:BB:DB:C8:C7:72:EE:AD:58:41:2D:62:41:F7:C8:D7
            X509v3 Authority Key Identifier:
                keyid:F6:8F:BD:9C:74:CC:60:A7:AB:5E:2F:EB:7F:22:24:47:D1:D1:F2:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C8D6F35AF303AB4E57B8441B217295BE92CF56ADA4F5F96D96A22B53693E1E5A/0/F68FBD9C74CC60A7AB5E2FEB7F222447D1D1F234.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F68FBD9C74CC60A7AB5E2FEB7F222447D1D1F234.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8D6F35AF303AB4E57B8441B217295BE92CF56ADA4F5F96D96A22B53693E1E5A/0/323830333a313031303a3a2f33322d3332203d3e20323733303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1010::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:a3:7f:b1:d5:29:82:c8:68:e0:f5:e4:42:df:39:0d:e2:01:
         c9:fa:f2:cc:32:b0:a5:71:24:c9:91:83:9c:ac:da:54:a8:9a:
         85:3a:88:aa:5b:50:6a:75:16:6c:2e:66:ce:e5:42:28:6a:ff:
         35:47:6a:61:2e:6d:e1:cd:15:ee:8b:67:96:69:da:a2:9e:c8:
         97:4b:c0:cb:5a:62:e8:41:83:a9:19:08:f6:8e:68:f9:4d:e5:
         4a:11:b6:0a:71:d5:89:4b:db:a5:b1:55:2d:e4:8b:61:ac:95:
         c5:c7:ef:7c:32:d4:07:93:7d:c2:df:e4:4d:67:99:98:1f:0b:
         7e:c7:ec:4f:db:0d:4f:c0:08:9f:1b:71:a0:79:20:aa:b2:56:
         77:8d:55:59:f1:07:02:fc:e4:44:a1:5d:e4:de:ad:45:1c:44:
         30:ad:1e:af:9d:bd:19:ea:38:1a:e3:da:da:f3:e9:e2:9a:76:
         64:c8:2d:17:dd:b2:1f:79:99:7a:f8:ef:0a:51:e9:4e:11:53:
         82:48:af:0b:d5:9a:d7:a7:1f:ac:53:2f:95:10:b5:0c:d0:91:
         54:77:19:fa:83:a2:1f:a2:71:08:dd:1b:45:e2:97:6f:44:5b:
         78:f9:e2:44:94:34:5f:48:5f:eb:c7:9b:8b:42:21:0a:e9:13:
         01:25:bd:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 11:07:23 2026 by rpki-client