This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3343A908EDE93E105CBF53349033070201D8E830DE5C1FB7DADE644F49D1897F/0/323830333a323865303a3a2f33322d3438203d3e20323639383732.roa
File:                     323830333a323865303a3a2f33322d3438203d3e20323639383732.roa (raw, json)
Hash identifier:          UwLglbvO/dCShv+LwiPm8kzQm+yqVtMpJY9hBh5U/BE=
Subject key identifier:   1E:8D:36:2C:94:18:0D:0C:9A:4F:44:E2:3D:52:3A:93:3B:3C:19:60
Certificate issuer:       /CN=D30B668CCFD504504370BC862A490DCA5B1FADDC
Certificate serial:       28D9252CAF6DBC5D313731B8A360DC716EDF1AA1
Authority key identifier: D3:0B:66:8C:CF:D5:04:50:43:70:BC:86:2A:49:0D:CA:5B:1F:AD:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D30B668CCFD504504370BC862A490DCA5B1FADDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3343A908EDE93E105CBF53349033070201D8E830DE5C1FB7DADE644F49D1897F/0/323830333a323865303a3a2f33322d3438203d3e20323639383732.roa
Signing time:             Tue 06 Jan 2026 20:53:51 +0000
ROA not before:           Tue 06 Jan 2026 20:48:51 +0000
ROA not after:            Tue 05 Jan 2027 20:53:51 +0000
asID:                     269872
IP address blocks:        2803:28e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3343A908EDE93E105CBF53349033070201D8E830DE5C1FB7DADE644F49D1897F/0/D30B668CCFD504504370BC862A490DCA5B1FADDC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3343A908EDE93E105CBF53349033070201D8E830DE5C1FB7DADE644F49D1897F/0/D30B668CCFD504504370BC862A490DCA5B1FADDC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D30B668CCFD504504370BC862A490DCA5B1FADDC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 06:07:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:d9:25:2c:af:6d:bc:5d:31:37:31:b8:a3:60:dc:71:6e:df:1a:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D30B668CCFD504504370BC862A490DCA5B1FADDC
        Validity
            Not Before: Jan  6 20:48:51 2026 GMT
            Not After : Jan  5 20:53:51 2027 GMT
        Subject: CN=1E8D362C94180D0C9A4F44E23D523A933B3C1960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9b:77:94:11:b1:a5:69:b5:71:62:c4:0d:bf:
                    0d:13:25:b8:0b:1c:07:07:ff:79:3a:73:8c:62:5c:
                    4e:1f:4c:5c:ea:92:77:9f:58:4f:8a:a5:2a:84:77:
                    e8:46:a8:a8:2a:60:40:df:bb:bc:a0:67:7e:01:cf:
                    65:ce:24:6d:0d:78:8d:c3:1f:00:9f:e2:82:32:98:
                    ab:42:ea:f9:c2:41:4f:ff:4d:db:e5:0a:a3:0a:59:
                    6c:12:a9:b0:dd:1d:85:2c:19:d7:ba:66:5c:83:9b:
                    3b:ff:e7:9b:55:51:8a:05:95:94:41:53:06:0e:dd:
                    05:51:7c:4b:b9:82:09:4e:3d:01:bd:98:57:62:63:
                    24:1f:13:08:d6:3d:e8:33:1e:e7:7d:32:e5:f9:ee:
                    e3:49:18:21:65:24:5d:c1:a4:86:b8:a9:39:bd:7d:
                    d5:aa:b2:74:db:9e:bd:00:74:e9:30:ee:57:ab:5c:
                    c5:18:21:be:e9:0c:e9:6e:a0:c0:1f:69:46:64:2a:
                    36:16:8a:2f:d2:22:62:6e:bc:29:ae:ea:be:40:e4:
                    1b:87:5d:7d:ec:86:b8:17:6a:85:84:d5:e6:c7:4e:
                    0f:41:01:56:67:4a:63:ac:bb:10:19:70:f4:89:1b:
                    8a:e8:79:9f:8c:04:d6:72:ef:2b:10:ad:94:07:ca:
                    47:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:8D:36:2C:94:18:0D:0C:9A:4F:44:E2:3D:52:3A:93:3B:3C:19:60
            X509v3 Authority Key Identifier:
                keyid:D3:0B:66:8C:CF:D5:04:50:43:70:BC:86:2A:49:0D:CA:5B:1F:AD:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3343A908EDE93E105CBF53349033070201D8E830DE5C1FB7DADE644F49D1897F/0/D30B668CCFD504504370BC862A490DCA5B1FADDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D30B668CCFD504504370BC862A490DCA5B1FADDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3343A908EDE93E105CBF53349033070201D8E830DE5C1FB7DADE644F49D1897F/0/323830333a323865303a3a2f33322d3438203d3e20323639383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:28e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:ec:11:d4:a6:65:b7:6e:d1:13:f3:d5:50:c4:fb:0d:4c:0a:
         1f:bb:12:18:79:a9:5f:4d:92:4a:09:e2:7a:42:02:4f:41:9c:
         34:99:6f:d0:c4:67:46:48:b5:81:7e:5d:86:f6:db:0f:3e:53:
         2b:b7:05:6c:4c:e0:3d:81:d0:a1:5b:ae:a8:22:96:53:96:83:
         aa:5b:02:fb:1f:c9:a8:2c:66:c5:fc:74:63:c8:e9:a2:8e:dd:
         50:1e:5b:34:ce:ad:e3:72:42:89:3d:75:c7:56:e2:aa:ce:d0:
         b5:2a:11:42:a6:4b:ed:6c:f1:00:6b:8d:b8:99:09:2b:98:c0:
         dd:92:d6:3f:46:ae:b2:fa:67:06:3c:44:fb:18:37:79:4b:2a:
         cc:96:18:b9:a4:ce:dc:81:2d:aa:be:11:c0:f6:45:2d:b1:b8:
         f6:a0:1b:e9:ca:98:af:ed:0f:ab:d6:62:a7:b8:79:51:78:e4:
         12:c9:02:76:2f:85:a2:ab:5f:ca:58:f0:a9:1f:f5:2e:ef:af:
         b7:12:f9:1d:3d:39:f3:4e:bd:3a:3a:36:72:06:33:28:ec:3e:
         e9:23:86:62:ff:05:56:83:45:ba:2b:7a:51:6f:21:07:ef:dd:
         c3:64:51:d9:5b:e5:2f:7a:20:c7:e8:5a:03:e2:b5:25:c2:3a:
         9c:92:09:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:40:02 2026 by rpki-client