This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/323830333a336630303a3a2f33322d3332203d3e203238303838.roa
File:                     323830333a336630303a3a2f33322d3332203d3e203238303838.roa (raw, json)
Hash identifier:          Y5Vv57EnznPLiCaia5EHAPTZJ4wI3AzYE6qcaz4Zhak=
Subject key identifier:   9E:2A:6C:3B:49:4E:FA:FD:1C:AA:D3:05:F4:EA:BD:1D:FE:06:01:F5
Certificate issuer:       /CN=2ED42DFF196F3F11B82464DE1FB7DDD1793DD227
Certificate serial:       116076BAE2CAB78273E3EDD70EAA7D0FE2F91A0E
Authority key identifier: 2E:D4:2D:FF:19:6F:3F:11:B8:24:64:DE:1F:B7:DD:D1:79:3D:D2:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/323830333a336630303a3a2f33322d3332203d3e203238303838.roa
Signing time:             Tue 06 Jan 2026 19:25:05 +0000
ROA not before:           Tue 06 Jan 2026 19:20:05 +0000
ROA not after:            Tue 05 Jan 2027 19:25:05 +0000
asID:                     28088
IP address blocks:        2803:3f00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 15:09:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:60:76:ba:e2:ca:b7:82:73:e3:ed:d7:0e:aa:7d:0f:e2:f9:1a:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ED42DFF196F3F11B82464DE1FB7DDD1793DD227
        Validity
            Not Before: Jan  6 19:20:05 2026 GMT
            Not After : Jan  5 19:25:05 2027 GMT
        Subject: CN=9E2A6C3B494EFAFD1CAAD305F4EABD1DFE0601F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6e:95:41:61:f8:04:22:70:6e:e3:32:95:e6:
                    c0:3f:92:f0:d8:38:48:ae:d2:88:5b:a3:18:48:b8:
                    97:a3:bc:70:e5:5d:79:2f:99:13:92:12:95:bb:45:
                    50:6a:5d:70:7d:72:9e:a5:01:ae:db:5d:8b:98:d9:
                    37:d7:9e:ef:fa:0a:91:2a:4d:2a:4a:2d:d2:40:ea:
                    1e:3b:44:14:c0:a9:bf:a0:35:99:15:ed:54:e7:da:
                    af:a2:66:4e:2a:5a:80:f2:3f:1f:1d:cc:ef:80:bf:
                    64:46:da:eb:8e:ca:39:9d:49:c0:fb:1c:cd:15:84:
                    55:80:50:27:5b:a1:5e:26:63:95:1f:5f:74:8a:76:
                    93:30:b1:f6:1d:44:09:b4:a8:a3:fc:fd:d9:41:55:
                    48:a1:52:5e:7e:b3:5e:60:7f:77:90:91:90:f5:b2:
                    06:28:b9:76:bd:da:63:e5:30:b6:f5:96:f3:be:0a:
                    7d:5c:91:6b:4d:e8:70:63:10:c4:b3:0a:2b:cc:6a:
                    7c:7e:28:95:28:1f:22:08:be:04:84:bd:65:37:42:
                    42:a9:d7:c4:ce:a7:85:25:c8:a7:a7:1c:29:db:82:
                    96:7b:9d:9c:0f:fd:e0:30:af:57:e0:96:99:e1:b7:
                    00:47:93:60:5d:ed:02:5b:73:08:62:a1:cf:07:20:
                    53:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:2A:6C:3B:49:4E:FA:FD:1C:AA:D3:05:F4:EA:BD:1D:FE:06:01:F5
            X509v3 Authority Key Identifier:
                keyid:2E:D4:2D:FF:19:6F:3F:11:B8:24:64:DE:1F:B7:DD:D1:79:3D:D2:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/323830333a336630303a3a2f33322d3332203d3e203238303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:29:0b:6d:31:88:10:0d:a8:55:13:3c:52:89:ec:f8:16:39:
         de:ea:92:68:b2:70:a4:58:a0:c2:7d:c2:83:17:e4:f1:b3:45:
         32:c4:e5:8a:47:3b:05:d4:c2:fc:63:2b:36:8a:53:69:ca:fd:
         35:ea:fc:aa:f3:ef:a1:96:5d:a8:0a:d2:6e:07:09:45:de:04:
         3e:b6:e2:8e:48:f6:38:c5:9f:02:87:7d:fd:cf:6d:c4:3e:36:
         a5:7a:f4:27:94:5b:a5:86:78:19:07:7b:eb:6d:b9:46:cf:81:
         85:b5:a4:29:96:61:3e:da:7e:9f:57:ec:35:50:a8:f5:1d:50:
         d3:13:ac:e1:ab:78:cd:49:c0:ef:cc:79:a0:57:60:aa:c8:80:
         90:18:f5:46:84:6b:14:8e:c7:6a:bb:7c:a3:36:c8:58:27:82:
         06:cc:02:5d:dc:49:59:8f:1f:f1:7b:6e:cb:4d:02:e3:06:2c:
         de:0b:61:80:c2:66:18:45:8f:7e:99:94:8a:03:fd:52:c8:db:
         7a:b5:6c:a5:2b:e3:e8:f3:a9:da:5f:f2:01:bf:bf:3f:66:fd:
         9f:59:0f:65:3c:a8:f2:a6:e8:12:f7:46:9d:53:bf:16:e8:bb:
         c8:d1:5d:54:8c:9a:65:80:6d:25:28:90:18:40:5f:a6:af:e8:
         a1:81:40:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 09:29:11 2026 by rpki-client