This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B77382DDADECADABC84153EA4D4F9C48D8F3561DD125E0CCE6E43D5950A8E34/0/323830333a343732303a3a2f33322d3438203d3e203532333431.roa
File:                     323830333a343732303a3a2f33322d3438203d3e203532333431.roa (raw, json)
Hash identifier:          6NO+V5J1+fqsZ9W/4JPJMzvmi82z3ufg6kYS99aCt3o=
Subject key identifier:   04:7A:73:5B:ED:FF:59:A0:5A:3D:EC:95:A7:6E:AE:0C:38:9D:56:7B
Certificate issuer:       /CN=31F3439B94DD2FA758654AE121FAFA811BA0BC06
Certificate serial:       5FF3B41AF5E0FA609214DAE59936D69F35522A48
Authority key identifier: 31:F3:43:9B:94:DD:2F:A7:58:65:4A:E1:21:FA:FA:81:1B:A0:BC:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/31F3439B94DD2FA758654AE121FAFA811BA0BC06.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B77382DDADECADABC84153EA4D4F9C48D8F3561DD125E0CCE6E43D5950A8E34/0/323830333a343732303a3a2f33322d3438203d3e203532333431.roa
Signing time:             Tue 06 Jan 2026 19:17:05 +0000
ROA not before:           Tue 06 Jan 2026 19:12:05 +0000
ROA not after:            Tue 05 Jan 2027 19:17:05 +0000
asID:                     52341
IP address blocks:        2803:4720::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B77382DDADECADABC84153EA4D4F9C48D8F3561DD125E0CCE6E43D5950A8E34/0/31F3439B94DD2FA758654AE121FAFA811BA0BC06.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B77382DDADECADABC84153EA4D4F9C48D8F3561DD125E0CCE6E43D5950A8E34/0/31F3439B94DD2FA758654AE121FAFA811BA0BC06.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/31F3439B94DD2FA758654AE121FAFA811BA0BC06.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:f3:b4:1a:f5:e0:fa:60:92:14:da:e5:99:36:d6:9f:35:52:2a:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31F3439B94DD2FA758654AE121FAFA811BA0BC06
        Validity
            Not Before: Jan  6 19:12:05 2026 GMT
            Not After : Jan  5 19:17:05 2027 GMT
        Subject: CN=047A735BEDFF59A05A3DEC95A76EAE0C389D567B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:93:5c:73:8a:6e:77:40:15:9a:dd:85:7f:29:
                    4d:d0:0a:60:4d:d0:64:6e:1c:cf:dd:03:63:9e:9f:
                    5a:28:be:66:96:2d:12:18:30:ea:af:2e:d4:44:d0:
                    b0:ea:f8:e7:9a:90:30:6a:35:c6:13:51:3d:21:77:
                    4a:c8:7e:16:93:e6:93:47:d9:73:16:a5:f9:9d:2b:
                    40:a6:73:1b:fc:bf:7a:35:be:90:58:a8:bc:69:76:
                    37:6d:5d:32:33:54:61:b0:e3:3a:13:8a:64:ff:25:
                    6b:b8:18:d6:e0:aa:e4:47:18:11:c2:5c:bf:7b:c3:
                    b0:d2:4d:72:92:cd:9a:05:a4:20:e0:e1:f5:60:f7:
                    f8:17:e5:43:f2:6a:cf:0c:f0:cf:70:10:e6:38:70:
                    e8:10:90:76:5d:ad:c1:82:1e:45:79:e6:e4:60:8f:
                    83:72:67:9b:90:5c:62:45:ed:ee:f9:c0:01:cb:d3:
                    89:23:62:b8:52:6c:f3:b0:5c:23:d5:c9:d6:1b:82:
                    89:fc:3d:09:24:1a:5d:9c:ca:a9:06:57:d5:43:5a:
                    70:91:8f:12:e4:b5:4f:17:5c:7a:7c:fe:dd:77:f1:
                    a8:01:e7:c2:5e:71:f3:f4:1b:3b:1c:66:10:30:1d:
                    95:3f:f2:23:3c:91:b3:ee:8e:c8:c3:12:40:81:2f:
                    b8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:7A:73:5B:ED:FF:59:A0:5A:3D:EC:95:A7:6E:AE:0C:38:9D:56:7B
            X509v3 Authority Key Identifier:
                keyid:31:F3:43:9B:94:DD:2F:A7:58:65:4A:E1:21:FA:FA:81:1B:A0:BC:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B77382DDADECADABC84153EA4D4F9C48D8F3561DD125E0CCE6E43D5950A8E34/0/31F3439B94DD2FA758654AE121FAFA811BA0BC06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/31F3439B94DD2FA758654AE121FAFA811BA0BC06.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B77382DDADECADABC84153EA4D4F9C48D8F3561DD125E0CCE6E43D5950A8E34/0/323830333a343732303a3a2f33322d3438203d3e203532333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4720::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:53:25:5f:83:f2:a3:83:37:60:95:4e:bd:a1:f8:ec:f9:36:
         86:13:ee:02:66:d3:36:e9:6d:96:8b:7b:5e:2e:c9:fb:61:1d:
         53:17:31:72:5b:08:7a:fe:3b:93:07:26:3a:e4:2e:38:3d:7f:
         f3:0b:b9:11:b3:0f:75:9c:f9:ad:d8:27:c3:ef:47:72:b5:c1:
         a0:16:3c:e0:df:da:b3:5e:22:8d:08:e4:4f:ac:e0:a0:90:b1:
         91:29:f3:d6:99:2a:87:8e:6c:08:e4:f5:e6:07:7d:88:48:65:
         80:43:ff:4a:cb:ce:4a:ea:ae:bf:80:c2:16:2f:94:14:a4:83:
         a2:17:ed:55:3a:f0:33:47:30:8d:f8:e5:ae:e7:e4:f5:39:dd:
         fa:59:b7:d7:c8:26:44:3e:0e:56:87:25:50:42:de:79:98:97:
         fa:7f:61:4b:e4:3b:74:ed:15:d3:24:57:bb:67:07:5f:b1:01:
         84:3e:57:c9:16:25:cc:9c:4d:c0:65:4e:92:85:01:51:4c:e0:
         89:19:9c:e9:86:14:7b:23:c2:99:11:e2:67:fb:0d:6f:38:c4:
         bd:2c:49:dc:62:ec:d1:1a:db:4a:17:35:15:b0:ec:c6:46:f8:
         c1:22:ce:54:99:51:df:a9:8a:23:38:3b:61:9d:da:7f:e4:ea:
         95:96:6a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:26:23 2026 by rpki-client