This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CC67CAEC9CDECF49D684D2A10B699CF84558AE2AB4137391E5CCB10A67E77496/0/323830333a623731303a3a2f33322d3332203d3e20323732313039.roa
File:                     323830333a623731303a3a2f33322d3332203d3e20323732313039.roa (raw, json)
Hash identifier:          VjNp3/kJ2r4VNFRPgtwarEOJzx0W/1lmfj/pQVYO+r8=
Subject key identifier:   85:86:B7:27:60:FC:8D:7E:99:EA:40:24:1F:01:04:09:34:A7:1C:58
Certificate issuer:       /CN=3F67CA9F0E1FE0F0383EBFEB013EDC080861E94A
Certificate serial:       5AF40EAD3B0A3506E082EF4A01C6175073DC9ACF
Authority key identifier: 3F:67:CA:9F:0E:1F:E0:F0:38:3E:BF:EB:01:3E:DC:08:08:61:E9:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F67CA9F0E1FE0F0383EBFEB013EDC080861E94A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CC67CAEC9CDECF49D684D2A10B699CF84558AE2AB4137391E5CCB10A67E77496/0/323830333a623731303a3a2f33322d3332203d3e20323732313039.roa
Signing time:             Tue 06 Jan 2026 20:57:37 +0000
ROA not before:           Tue 06 Jan 2026 20:52:37 +0000
ROA not after:            Tue 05 Jan 2027 20:57:37 +0000
asID:                     272109
IP address blocks:        2803:b710::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CC67CAEC9CDECF49D684D2A10B699CF84558AE2AB4137391E5CCB10A67E77496/0/3F67CA9F0E1FE0F0383EBFEB013EDC080861E94A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CC67CAEC9CDECF49D684D2A10B699CF84558AE2AB4137391E5CCB10A67E77496/0/3F67CA9F0E1FE0F0383EBFEB013EDC080861E94A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F67CA9F0E1FE0F0383EBFEB013EDC080861E94A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:f4:0e:ad:3b:0a:35:06:e0:82:ef:4a:01:c6:17:50:73:dc:9a:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F67CA9F0E1FE0F0383EBFEB013EDC080861E94A
        Validity
            Not Before: Jan  6 20:52:37 2026 GMT
            Not After : Jan  5 20:57:37 2027 GMT
        Subject: CN=8586B72760FC8D7E99EA40241F01040934A71C58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e3:ab:b1:8d:b0:68:98:8b:d1:9b:df:f9:df:
                    85:7c:d4:37:d0:51:cd:ff:cb:6e:f6:6a:3d:f9:3b:
                    68:1d:49:6a:8a:e0:5d:78:87:8a:e8:24:b1:fc:65:
                    ed:8e:91:09:bc:65:e2:55:9d:69:d4:a9:eb:18:ad:
                    0e:bf:eb:3e:4b:26:d3:35:f9:2a:21:85:ef:32:a1:
                    50:12:d2:df:ba:1b:82:71:dc:27:4e:6a:db:79:4c:
                    43:4e:d2:e5:59:74:da:bb:ca:27:b2:61:c4:5a:d7:
                    1b:6d:08:fa:cd:11:70:17:3d:b1:43:15:07:c5:ad:
                    99:2f:bd:ed:05:96:26:86:33:83:8d:67:93:1a:93:
                    f9:cf:6a:8d:80:9a:0e:96:9c:55:b0:9b:61:a7:51:
                    07:cc:33:68:cc:2b:87:61:aa:ea:da:08:17:a5:5f:
                    ae:a4:97:18:a5:b1:f6:28:de:5f:c5:cf:38:bc:5d:
                    8d:72:72:3f:7b:64:a5:9c:dd:04:47:2b:d9:56:c7:
                    19:87:7a:13:e3:1f:b1:06:1d:88:13:a8:49:98:a0:
                    cd:4d:27:e6:6f:71:8b:63:99:98:b0:da:9b:7a:c6:
                    76:32:90:53:81:ef:75:fa:66:47:e2:e6:1d:03:72:
                    d6:ac:4a:79:4d:50:ae:c6:6e:81:3e:7e:b5:8e:b1:
                    f8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:86:B7:27:60:FC:8D:7E:99:EA:40:24:1F:01:04:09:34:A7:1C:58
            X509v3 Authority Key Identifier:
                keyid:3F:67:CA:9F:0E:1F:E0:F0:38:3E:BF:EB:01:3E:DC:08:08:61:E9:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CC67CAEC9CDECF49D684D2A10B699CF84558AE2AB4137391E5CCB10A67E77496/0/3F67CA9F0E1FE0F0383EBFEB013EDC080861E94A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F67CA9F0E1FE0F0383EBFEB013EDC080861E94A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CC67CAEC9CDECF49D684D2A10B699CF84558AE2AB4137391E5CCB10A67E77496/0/323830333a623731303a3a2f33322d3332203d3e20323732313039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b710::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:f0:ec:e8:db:67:6b:65:ae:70:f5:44:ed:85:c8:de:a8:af:
         64:b2:6e:dd:c8:f2:bb:aa:8f:de:b7:91:f4:3b:0c:bc:72:4d:
         6c:5a:f5:f3:ec:63:20:49:ba:dc:e2:17:c1:32:62:11:9c:19:
         02:09:a9:92:b7:ec:de:f9:a9:dc:86:87:b0:aa:91:a2:b6:12:
         e6:35:69:32:7e:97:1f:c8:06:e9:5a:35:b5:f0:c7:b5:d5:58:
         e8:f8:7a:f9:a0:1a:a9:25:c6:35:2f:ef:12:77:ef:54:1d:64:
         c7:70:26:c9:b2:e5:e3:47:cf:32:c4:a1:66:43:fa:b3:9f:a9:
         8e:6e:3a:a0:24:59:b9:59:b8:b8:9d:8d:c2:fc:4c:e5:99:6e:
         41:d3:90:c6:46:4b:f8:bd:45:7c:36:61:68:3d:eb:fc:a7:39:
         0e:cb:bd:80:b5:ee:9d:ae:9e:c5:0d:b7:43:4d:2d:75:2e:d4:
         7c:c3:78:33:f7:8e:78:ec:cd:09:34:9f:99:cf:46:f9:68:da:
         cb:9a:0d:4c:d9:ef:61:4b:0f:ed:44:25:66:77:fe:8d:34:e9:
         ac:c4:f2:63:03:9e:38:01:76:de:06:91:53:51:9c:bd:a7:93:
         a8:96:a7:4d:e4:85:48:ca:ad:c2:38:04:72:a7:31:3e:53:58:
         dc:e9:0c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 06:01:36 2026 by rpki-client