This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/323830333a383463303a3a2f33322d3332203d3e20323632313931.roa
File:                     323830333a383463303a3a2f33322d3332203d3e20323632313931.roa (raw, json)
Hash identifier:          MLWvGMCja6FsdH+l/eUGpXEm/7SQgmy1i7Ooy9CXL+A=
Subject key identifier:   DE:FB:F3:DC:AB:E9:A1:8F:C1:40:81:FF:0B:E3:25:86:AF:5D:82:1F
Certificate issuer:       /CN=0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76
Certificate serial:       7BFF3AFB6109019171E0FC0E6361BA3E4FB56665
Authority key identifier: 0C:C5:AA:4B:ED:EA:9A:83:BD:E8:82:2A:77:47:21:10:B7:A5:7C:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/323830333a383463303a3a2f33322d3332203d3e20323632313931.roa
Signing time:             Tue 06 Jan 2026 19:22:48 +0000
ROA not before:           Tue 06 Jan 2026 19:17:48 +0000
ROA not after:            Tue 05 Jan 2027 19:22:48 +0000
asID:                     262191
IP address blocks:        2803:84c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.crl
                          rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 20:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:ff:3a:fb:61:09:01:91:71:e0:fc:0e:63:61:ba:3e:4f:b5:66:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76
        Validity
            Not Before: Jan  6 19:17:48 2026 GMT
            Not After : Jan  5 19:22:48 2027 GMT
        Subject: CN=DEFBF3DCABE9A18FC14081FF0BE32586AF5D821F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5b:f6:8e:fc:4f:08:03:0d:f1:2e:06:92:95:
                    e0:84:c3:78:64:7d:f3:ce:55:aa:cf:ea:e6:ca:15:
                    e4:f0:0a:87:82:df:ce:c0:d4:64:b1:06:da:0a:c3:
                    a3:e9:b2:a0:ec:c8:fd:19:52:e7:46:5c:fa:15:bb:
                    ea:8a:e9:c9:b3:4b:7d:e7:73:fe:a8:db:24:13:3a:
                    89:b7:f6:3b:3d:f4:b2:e2:33:1d:1e:60:ac:46:7c:
                    05:a7:2a:d9:60:0e:b9:51:84:2d:08:40:44:69:80:
                    f7:90:2c:2b:e3:0b:4c:f9:00:08:41:1a:d3:a0:26:
                    ea:a8:32:9a:13:f4:8d:5e:f5:38:21:cf:00:f9:04:
                    50:30:c1:47:dd:aa:b6:dd:66:93:5c:ac:4f:9a:51:
                    82:0a:8c:8e:3c:2f:c9:1f:03:6c:b3:25:50:b6:b4:
                    d5:48:13:3a:97:c2:1f:db:f5:5a:f7:4a:cd:54:07:
                    98:a7:b3:16:eb:03:08:56:c3:bf:c0:01:56:f6:51:
                    d7:7d:c5:d5:0d:f9:04:c8:fe:7a:7b:ae:8a:05:08:
                    06:6a:54:83:bb:f2:e8:62:dc:11:23:b1:6e:39:e0:
                    aa:c9:3c:14:d7:7c:5c:0f:d4:8c:38:06:08:9d:a8:
                    d4:be:65:c8:85:4a:46:a8:69:31:e8:d0:c4:e6:f6:
                    19:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:FB:F3:DC:AB:E9:A1:8F:C1:40:81:FF:0B:E3:25:86:AF:5D:82:1F
            X509v3 Authority Key Identifier:
                keyid:0C:C5:AA:4B:ED:EA:9A:83:BD:E8:82:2A:77:47:21:10:B7:A5:7C:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/323830333a383463303a3a2f33322d3332203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:84c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:2d:fc:00:2d:c0:41:7d:bf:0e:25:55:90:5f:cc:3f:57:9c:
         05:f5:0d:d5:19:ad:20:59:90:46:a8:a3:18:1d:7a:30:d3:fa:
         3a:f8:f3:0c:14:81:b7:e2:4e:86:8d:3f:0a:ef:f3:ff:25:fd:
         c6:2b:63:3a:2b:16:37:84:dd:7c:5f:22:38:6a:00:fb:00:6b:
         99:7a:50:6b:f6:da:ba:c6:44:da:22:33:32:5d:2b:82:94:17:
         27:6a:cb:0a:da:97:d6:14:ab:a5:21:5e:d4:8b:e2:be:f4:44:
         36:ff:57:28:c9:84:ef:19:18:28:61:d1:77:4c:bd:f8:b8:cf:
         8e:38:a0:24:8a:01:60:72:70:33:ff:57:6f:10:6b:e5:b8:5c:
         19:71:86:5c:e5:04:ce:92:90:91:37:c7:f5:71:77:bb:92:c9:
         5b:5b:6c:43:1e:2b:59:a1:94:bd:42:a1:2e:e6:88:20:aa:42:
         d3:d9:f7:ff:03:14:20:38:e2:6b:09:f7:60:17:ce:56:cd:3f:
         00:c6:cf:ef:e3:0d:7b:d4:f4:24:84:02:9a:28:e7:c1:b7:5e:
         f8:0d:55:36:d3:a5:a2:c3:1e:ce:ba:17:b1:f0:29:54:7a:ad:
         09:45:b2:6c:67:14:b0:88:10:8a:e8:13:37:3b:e6:a6:74:0b:
         a0:a9:f6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:17:56 2026 by rpki-client