This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D2347CF04CD5F902AED1B8C3B72F7BA62FF27D689128DFE4380B7725C8FD5C83/0/323830333a636638303a3a2f33322d3438203d3e20323635373034.roa
File:                     323830333a636638303a3a2f33322d3438203d3e20323635373034.roa (raw, json)
Hash identifier:          rWtFhkYxw3vPnbbB4aWX45ZftzMNzzgLlkQFrP9BFSY=
Subject key identifier:   9A:FA:81:81:80:5D:D5:F0:45:53:D0:57:13:FA:C0:3D:8F:63:06:64
Certificate issuer:       /CN=79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C
Certificate serial:       2847BF6112CE7B738BE67422039514816E8ED43C
Authority key identifier: 79:FC:E3:F0:0B:88:97:AB:D1:F0:4D:76:7E:FA:87:8B:E2:AF:0B:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D2347CF04CD5F902AED1B8C3B72F7BA62FF27D689128DFE4380B7725C8FD5C83/0/323830333a636638303a3a2f33322d3438203d3e20323635373034.roa
Signing time:             Tue 06 Jan 2026 20:51:28 +0000
ROA not before:           Tue 06 Jan 2026 20:46:28 +0000
ROA not after:            Tue 05 Jan 2027 20:51:28 +0000
asID:                     265704
IP address blocks:        2803:cf80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D2347CF04CD5F902AED1B8C3B72F7BA62FF27D689128DFE4380B7725C8FD5C83/0/79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D2347CF04CD5F902AED1B8C3B72F7BA62FF27D689128DFE4380B7725C8FD5C83/0/79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:47:bf:61:12:ce:7b:73:8b:e6:74:22:03:95:14:81:6e:8e:d4:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C
        Validity
            Not Before: Jan  6 20:46:28 2026 GMT
            Not After : Jan  5 20:51:28 2027 GMT
        Subject: CN=9AFA8181805DD5F04553D05713FAC03D8F630664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:25:cf:01:01:5b:1c:ba:b1:0a:17:44:eb:19:
                    29:da:c7:a5:b8:9c:73:90:a1:9a:2a:f3:ac:28:21:
                    a3:4d:a0:cc:22:98:bc:df:b5:a1:28:cc:1d:82:76:
                    d5:b0:08:fe:00:24:03:5f:26:0c:1d:11:c3:47:67:
                    47:81:2b:19:06:b7:bc:be:c7:7c:23:aa:b0:ed:69:
                    9d:b2:f3:0a:36:25:f8:b8:bb:36:f6:1e:b7:72:f6:
                    40:da:6b:e2:d1:f3:cd:15:a1:17:ec:22:64:d3:ac:
                    7f:69:61:6c:52:8a:7d:9d:f9:1c:84:24:15:58:6e:
                    09:35:70:b3:a0:cd:86:a3:ed:3a:92:28:6f:83:26:
                    df:34:28:86:42:f5:8b:cd:9a:f3:e5:dd:a9:f1:09:
                    6b:5a:ff:57:b9:99:ce:c5:2c:86:d6:29:40:1f:e8:
                    68:fa:b3:5e:2d:ed:0a:74:81:26:48:77:7a:b5:52:
                    70:85:c0:60:dd:9d:c3:77:fa:d9:cd:f8:db:c4:34:
                    b0:23:5c:c8:1d:98:10:61:08:a1:20:21:f0:59:26:
                    2e:4d:c5:9d:e0:24:29:a3:6a:7e:9d:27:eb:7b:36:
                    88:fa:30:87:18:29:bf:f4:f1:9d:d2:9d:39:08:12:
                    85:fa:ab:24:1b:10:39:2b:70:1a:32:88:13:41:c7:
                    61:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:FA:81:81:80:5D:D5:F0:45:53:D0:57:13:FA:C0:3D:8F:63:06:64
            X509v3 Authority Key Identifier:
                keyid:79:FC:E3:F0:0B:88:97:AB:D1:F0:4D:76:7E:FA:87:8B:E2:AF:0B:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D2347CF04CD5F902AED1B8C3B72F7BA62FF27D689128DFE4380B7725C8FD5C83/0/79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D2347CF04CD5F902AED1B8C3B72F7BA62FF27D689128DFE4380B7725C8FD5C83/0/323830333a636638303a3a2f33322d3438203d3e20323635373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf80::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:43:e4:69:58:79:e8:4f:05:d0:d1:05:47:9d:e5:ba:1d:8e:
         15:80:66:82:46:82:14:2e:80:ea:ec:b2:72:19:af:9a:8f:4a:
         1a:7f:5d:f2:38:c4:36:a1:0e:e9:eb:3b:c8:d8:7b:17:77:15:
         10:dd:c0:fa:97:52:f5:0c:01:c0:df:62:4c:d8:54:45:65:8f:
         3b:86:01:ac:2d:e9:1e:98:70:8c:3c:8d:4c:e7:66:6d:f9:8f:
         e8:50:94:02:76:0d:d8:ed:c8:01:8c:be:96:f0:ac:a2:66:d1:
         33:11:f6:0e:95:05:65:e0:8d:33:64:6a:80:ce:25:82:9e:35:
         3d:0c:92:2c:0e:15:00:be:37:82:29:85:a0:2b:8d:73:85:c5:
         9d:fd:74:58:65:70:ae:2e:f4:c1:66:0d:87:09:6b:d6:5f:cd:
         6e:13:2c:f0:d9:27:01:cb:4a:bb:1e:da:a4:ca:31:85:45:61:
         29:ce:36:0a:09:ad:e4:b1:7b:02:e8:73:17:a0:e1:e3:16:51:
         15:b6:f5:4f:b5:3e:46:be:c2:55:9a:ac:38:fe:1b:a7:ac:c9:
         43:93:c7:90:53:2f:b2:08:27:87:fa:b2:68:92:77:93:cb:60:
         9a:78:5e:af:2f:49:20:7d:9f:95:00:ec:d7:bc:3b:b4:39:05:
         e9:9e:f9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 20:00:04 2026 by rpki-client