This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F65352287F31C0C6D7842B307D391E2F5915984CCCED23341816373425D0F3D7/0/323830333a3732303a3a2f33322d3438203d3e203532333137.roa
File:                     323830333a3732303a3a2f33322d3438203d3e203532333137.roa (raw, json)
Hash identifier:          HCNNobjlr+UrAFqmzD9CaACDK0hDAYwpldcW67UvOgM=
Subject key identifier:   B9:EA:BE:94:7B:84:55:E3:57:B8:E0:59:9C:BE:FC:D4:E5:E2:4D:DB
Certificate issuer:       /CN=0FBC927625F02776A16169AB038AD9EB0A4689E3
Certificate serial:       011A10C705C50A1B3AD4ABA9999E5F52A0FB87A3
Authority key identifier: 0F:BC:92:76:25:F0:27:76:A1:61:69:AB:03:8A:D9:EB:0A:46:89:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FBC927625F02776A16169AB038AD9EB0A4689E3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F65352287F31C0C6D7842B307D391E2F5915984CCCED23341816373425D0F3D7/0/323830333a3732303a3a2f33322d3438203d3e203532333137.roa
Signing time:             Tue 06 Jan 2026 19:16:17 +0000
ROA not before:           Tue 06 Jan 2026 19:11:17 +0000
ROA not after:            Tue 05 Jan 2027 19:16:17 +0000
asID:                     52317
IP address blocks:        2803:720::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F65352287F31C0C6D7842B307D391E2F5915984CCCED23341816373425D0F3D7/0/0FBC927625F02776A16169AB038AD9EB0A4689E3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F65352287F31C0C6D7842B307D391E2F5915984CCCED23341816373425D0F3D7/0/0FBC927625F02776A16169AB038AD9EB0A4689E3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FBC927625F02776A16169AB038AD9EB0A4689E3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 10:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:1a:10:c7:05:c5:0a:1b:3a:d4:ab:a9:99:9e:5f:52:a0:fb:87:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FBC927625F02776A16169AB038AD9EB0A4689E3
        Validity
            Not Before: Jan  6 19:11:17 2026 GMT
            Not After : Jan  5 19:16:17 2027 GMT
        Subject: CN=B9EABE947B8455E357B8E0599CBEFCD4E5E24DDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:09:b3:76:a0:63:32:da:c3:53:78:97:b3:f6:
                    a2:bc:eb:36:33:ff:1d:0e:5c:8e:d2:92:44:40:8b:
                    1d:2f:db:4e:6b:72:24:02:dc:d6:1b:5b:c3:36:2a:
                    92:33:79:72:6c:6d:1f:43:ae:a8:cb:9c:ac:44:d9:
                    88:07:b5:e2:13:08:fb:c2:ee:14:30:2f:00:8e:2c:
                    88:9e:e6:8f:66:06:8e:79:52:da:81:27:79:22:eb:
                    3d:18:94:44:0c:f3:f5:79:4d:d9:98:97:77:29:93:
                    be:64:3a:05:86:b9:0d:38:c2:3d:d1:01:db:90:ce:
                    54:56:35:e3:b5:58:1d:8d:7d:cc:4c:ff:4e:d5:52:
                    80:35:39:a8:a8:cc:da:ff:91:f2:ec:94:c8:5e:47:
                    50:55:d7:e3:47:5f:60:d5:fd:22:e4:e6:18:a1:e4:
                    2c:10:14:9b:56:ae:23:40:38:69:dc:45:45:21:ca:
                    22:4b:1b:04:2c:c4:30:a5:9a:b7:f6:17:79:a7:39:
                    bb:6b:7b:67:22:21:87:31:78:36:44:e1:33:be:ff:
                    f7:ed:79:07:f7:6c:87:59:79:6d:b0:f8:32:95:ce:
                    43:35:5a:9e:c1:78:0c:55:5f:19:df:3d:77:78:ca:
                    62:15:29:79:86:a0:22:a6:98:3d:a9:24:99:a5:49:
                    61:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:EA:BE:94:7B:84:55:E3:57:B8:E0:59:9C:BE:FC:D4:E5:E2:4D:DB
            X509v3 Authority Key Identifier:
                keyid:0F:BC:92:76:25:F0:27:76:A1:61:69:AB:03:8A:D9:EB:0A:46:89:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F65352287F31C0C6D7842B307D391E2F5915984CCCED23341816373425D0F3D7/0/0FBC927625F02776A16169AB038AD9EB0A4689E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FBC927625F02776A16169AB038AD9EB0A4689E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F65352287F31C0C6D7842B307D391E2F5915984CCCED23341816373425D0F3D7/0/323830333a3732303a3a2f33322d3438203d3e203532333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:720::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:d0:72:eb:f9:bf:1c:eb:d0:3e:be:aa:6a:f7:9c:02:e8:ce:
         ea:50:60:30:d1:ad:14:55:8b:66:20:a2:cf:e0:ae:2d:84:d1:
         cf:10:a2:4b:43:6e:f9:a8:fe:30:8e:57:8a:1c:d7:45:d9:d0:
         40:b1:c0:76:7a:c6:27:65:41:68:ee:f8:c8:61:bb:1a:a5:68:
         80:c1:80:98:95:bb:b1:af:5d:ca:a9:65:75:96:33:89:aa:93:
         63:65:20:e5:90:16:f3:95:04:4e:4b:35:fd:8c:21:0b:5c:89:
         f6:6d:6c:a7:79:1a:79:97:65:11:a9:d3:2d:86:07:c7:4d:16:
         c9:09:79:c2:af:be:1c:9a:60:e6:19:7a:f1:9e:6d:1c:ed:35:
         45:55:5d:fc:76:5b:d9:22:d3:63:22:79:7b:d6:9c:f0:ff:a1:
         f2:a1:c0:27:72:d6:04:df:26:3d:a8:25:c6:58:b7:21:d3:d2:
         9f:5d:bb:92:1b:8f:6d:b9:2f:98:bc:3c:23:22:a7:bf:47:3f:
         33:6a:16:70:e5:ff:9c:49:3e:a9:80:71:0f:6c:3f:0d:5a:db:
         8c:b5:f2:24:26:5a:43:3c:21:58:2e:5f:88:80:08:2d:76:4b:
         ca:78:11:56:46:03:48:fa:66:7a:96:ad:8f:b0:84:0d:63:19:
         a8:e6:b0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 07:15:45 2026 by rpki-client