This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/323830333a636131303a3a2f33322d3438203d3e20323731393137.roa
File:                     323830333a636131303a3a2f33322d3438203d3e20323731393137.roa (raw, json)
Hash identifier:          /u0I6+jum3yIlYQh5MRWvqBOENNbi5CSAh4yDPzLvSs=
Subject key identifier:   F5:2C:9D:94:6A:F3:99:6A:E0:F9:5B:E4:62:52:F7:5C:36:03:52:B4
Certificate issuer:       /CN=1A90820403E94C622A991DBEB877EB7197198430
Certificate serial:       729377FE4C3151CA5FFA41E03F648B60927DEA9E
Authority key identifier: 1A:90:82:04:03:E9:4C:62:2A:99:1D:BE:B8:77:EB:71:97:19:84:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A90820403E94C622A991DBEB877EB7197198430.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/323830333a636131303a3a2f33322d3438203d3e20323731393137.roa
Signing time:             Tue 09 Dec 2025 21:15:00 +0000
ROA not before:           Tue 09 Dec 2025 21:10:00 +0000
ROA not after:            Tue 08 Dec 2026 21:15:00 +0000
asID:                     271917
IP address blocks:        2803:ca10::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/1A90820403E94C622A991DBEB877EB7197198430.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/1A90820403E94C622A991DBEB877EB7197198430.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A90820403E94C622A991DBEB877EB7197198430.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 09:36:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:93:77:fe:4c:31:51:ca:5f:fa:41:e0:3f:64:8b:60:92:7d:ea:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A90820403E94C622A991DBEB877EB7197198430
        Validity
            Not Before: Dec  9 21:10:00 2025 GMT
            Not After : Dec  8 21:15:00 2026 GMT
        Subject: CN=F52C9D946AF3996AE0F95BE46252F75C360352B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2b:8a:a3:74:4b:80:ba:9b:2f:23:2c:7e:6c:
                    fa:77:a5:15:2e:50:a9:c5:56:01:eb:1c:c1:e2:7d:
                    0a:ed:3a:59:ef:80:c2:98:39:34:d5:f0:54:5a:1b:
                    e5:9f:9a:5e:84:7a:cd:be:9b:34:24:f5:19:be:77:
                    f3:bf:6d:f9:b9:9b:8f:bd:07:63:0c:7f:a4:b0:07:
                    17:60:4e:5e:b7:37:77:a6:15:0a:87:13:71:b4:cb:
                    7d:10:6e:cf:f9:b4:9a:71:cb:b5:6a:d8:30:6b:fb:
                    b4:32:2a:95:70:4c:93:45:a1:fa:6d:ef:df:3f:dd:
                    62:75:19:73:de:5f:c2:1a:24:ee:2c:15:55:4b:f7:
                    91:b2:41:e4:20:5a:b8:c3:91:04:df:7c:8f:03:64:
                    e4:0e:f8:c2:2d:40:5b:00:4b:22:1a:e4:ff:c5:55:
                    8a:6f:ff:50:a4:e8:e6:12:12:a6:9f:23:21:ff:e9:
                    0a:f9:4c:7b:22:ae:56:c7:19:3e:9d:98:16:07:48:
                    05:db:86:b7:fe:05:be:88:96:d3:1c:18:38:06:75:
                    56:31:b9:df:7d:44:a3:c5:96:44:a3:f3:01:e4:af:
                    59:a4:54:b4:c0:56:ef:6e:e0:d6:c3:cf:02:7d:b6:
                    46:58:1c:36:d5:e0:b5:8b:ed:0d:36:24:ed:ca:eb:
                    04:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:2C:9D:94:6A:F3:99:6A:E0:F9:5B:E4:62:52:F7:5C:36:03:52:B4
            X509v3 Authority Key Identifier:
                keyid:1A:90:82:04:03:E9:4C:62:2A:99:1D:BE:B8:77:EB:71:97:19:84:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/1A90820403E94C622A991DBEB877EB7197198430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A90820403E94C622A991DBEB877EB7197198430.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/323830333a636131303a3a2f33322d3438203d3e20323731393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ca10::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:54:d4:88:44:5a:70:86:81:43:76:9e:77:6a:be:b1:9c:9a:
         92:1c:6a:02:76:3d:ed:0c:8e:54:f1:ba:ec:d2:21:fe:1e:0f:
         02:ad:4e:46:51:2a:c4:e6:9a:a5:73:ec:f3:c8:7d:78:6f:b7:
         1c:75:6f:00:29:0f:c0:c4:9c:7c:77:24:51:c5:11:66:d3:ee:
         32:57:0b:db:67:ca:27:c3:0f:d1:cf:4a:e3:53:cd:71:05:54:
         80:c9:97:e8:fe:3a:60:e5:23:34:b1:99:89:34:76:22:6d:e0:
         fe:53:80:d0:53:6d:16:2a:f5:63:25:3f:90:6d:6f:c6:14:25:
         a0:dd:81:c5:fc:54:87:ad:ea:35:1c:a5:ba:c3:9b:fe:68:a3:
         f3:b8:15:c3:58:23:97:a5:1a:bf:94:a7:44:af:c7:fe:2a:01:
         94:1e:e6:65:e2:57:b3:3e:e7:81:b3:67:ad:7f:6b:0c:cd:84:
         37:c1:52:d9:39:12:1a:d2:7a:dc:54:62:ba:64:76:a2:4d:cd:
         b0:57:8f:5f:9f:22:a9:6a:49:d1:59:a9:6d:e6:fa:f4:07:1f:
         8e:73:8b:7e:95:32:8a:e2:12:d0:2e:ef:c8:f1:8d:af:42:a2:
         9d:a0:3f:41:00:69:7f:eb:0b:f5:7b:b7:ed:35:69:7e:1a:13:
         77:ca:15:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 09:13:46 2025 by rpki-client