This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/323830333a653939303a383030303a3a2f33352d3335203d3e203532323738.roa
File:                     323830333a653939303a383030303a3a2f33352d3335203d3e203532323738.roa (raw, json)
Hash identifier:          ImAsJjKlUOIQrdxaV8o9Itbkj3KpwIC5yD1vZwPe3Zs=
Subject key identifier:   CB:86:E1:21:1A:F1:08:C0:F7:D8:05:6D:F0:BC:0A:B8:6C:44:47:9C
Certificate issuer:       /CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
Certificate serial:       46FE2AB5AF59C4AFEB3B27AFA9A17468D22BC52C
Authority key identifier: E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/323830333a653939303a383030303a3a2f33352d3335203d3e203532323738.roa
Signing time:             Fri 23 Jan 2026 23:27:10 +0000
ROA not before:           Fri 23 Jan 2026 23:22:10 +0000
ROA not after:            Fri 22 Jan 2027 23:27:10 +0000
asID:                     52278
IP address blocks:        2803:e990:8000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 00:47:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:fe:2a:b5:af:59:c4:af:eb:3b:27:af:a9:a1:74:68:d2:2b:c5:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
        Validity
            Not Before: Jan 23 23:22:10 2026 GMT
            Not After : Jan 22 23:27:10 2027 GMT
        Subject: CN=CB86E1211AF108C0F7D8056DF0BC0AB86C44479C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d9:d4:47:1d:40:aa:a8:28:62:c2:6b:4e:fe:
                    74:d3:d9:ee:20:82:7c:93:f0:a9:c3:3f:ac:58:e2:
                    32:78:c1:91:a3:28:70:c3:b5:75:1a:19:d9:bb:7f:
                    ee:09:f8:6b:75:b0:fc:cf:ca:cc:e2:8d:be:78:09:
                    f0:ff:e7:bc:47:25:86:bd:32:6c:61:e0:9d:6e:d9:
                    51:1b:b3:45:fd:48:7d:a3:9e:80:3e:01:7d:ec:7c:
                    78:c4:e6:21:2c:aa:fb:e2:de:38:44:64:dc:5d:b6:
                    b8:c0:57:3b:28:2c:a4:61:00:71:33:ad:a3:c0:9a:
                    db:54:ed:71:e1:d1:69:52:dd:7b:1a:cd:b4:ec:00:
                    b9:8e:ab:60:03:93:0c:38:52:1a:35:00:a4:3c:b1:
                    8d:d0:b1:c4:ae:b7:12:49:2f:3a:5f:f6:0b:65:02:
                    76:e8:2e:c4:77:8e:35:79:d2:f6:3b:32:6b:f4:8d:
                    82:34:a6:29:94:9a:12:0a:10:fc:ad:8a:1a:b4:74:
                    61:fc:8f:78:24:60:54:d6:3c:aa:02:cb:71:d9:3c:
                    a9:35:9a:2d:ed:95:0f:7c:52:ce:8f:ac:13:38:f1:
                    28:aa:36:89:9e:96:86:76:43:c0:c0:ba:fc:5d:14:
                    2b:95:c6:0f:82:0e:b5:ec:dd:0b:6a:7c:37:4c:bf:
                    e5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:86:E1:21:1A:F1:08:C0:F7:D8:05:6D:F0:BC:0A:B8:6C:44:47:9C
            X509v3 Authority Key Identifier:
                keyid:E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/323830333a653939303a383030303a3a2f33352d3335203d3e203532323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e990:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         44:03:0f:07:ad:45:50:db:d2:19:11:39:a6:5e:4b:7a:5b:46:
         73:a8:81:20:af:8b:0c:90:c5:71:7d:12:56:94:15:6a:bd:0b:
         06:2d:a2:ed:e9:a5:3c:2a:36:50:76:a8:dd:07:54:05:10:c9:
         9f:fe:04:b5:82:43:da:9f:e2:ac:97:dd:94:f8:91:2d:d5:57:
         c9:2f:c4:5f:15:cd:86:92:ee:89:d7:fa:92:d2:01:a0:48:49:
         3d:55:0c:78:d8:77:0d:32:f4:e1:91:55:b9:30:45:04:c1:c5:
         e0:a0:47:d8:fc:b5:94:6b:ec:8e:fa:78:11:ef:cd:d1:73:02:
         d9:ff:42:80:e9:3b:ca:fa:a1:dc:5e:df:f5:68:0e:61:a3:75:
         f9:af:51:3e:24:28:bd:f5:cf:60:16:93:88:99:2e:8e:25:15:
         e7:40:02:dd:03:5b:22:5f:ec:7e:ce:19:70:e1:1d:46:ad:65:
         0d:8f:a2:24:54:52:d2:8d:17:6f:78:42:86:2c:1b:60:75:d6:
         98:79:56:08:72:06:16:ae:dc:82:65:df:d2:ea:07:26:6f:cb:
         b9:de:aa:4c:04:09:90:d4:b6:b3:1e:62:82:54:bc:8f:b0:9e:
         18:06:ed:dd:29:27:74:49:a6:63:75:74:1a:1e:d6:b5:d8:0b:
         cd:00:99:89
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIURv4qta9ZxK/rOyevqaF0aNIrxSwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTI4RkU2NkUxRERGODdBMzVCRTA5REU3RUFERTk2QTlF
RTZDMDc0MjAeFw0yNjAxMjMyMzIyMTBaFw0yNzAxMjIyMzI3MTBaMDMxMTAvBgNV
BAMTKENCODZFMTIxMUFGMTA4QzBGN0Q4MDU2REYwQkMwQUI4NkM0NDQ3OUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv2dRHHUCqqChiwmtO/nTT2e4g
gnyT8KnDP6xY4jJ4wZGjKHDDtXUaGdm7f+4J+Gt1sPzPyszijb54CfD/57xHJYa9
Mmxh4J1u2VEbs0X9SH2jnoA+AX3sfHjE5iEsqvvi3jhEZNxdtrjAVzsoLKRhAHEz
raPAmttU7XHh0WlS3XsazbTsALmOq2ADkww4Uho1AKQ8sY3QscSutxJJLzpf9gtl
AnboLsR3jjV50vY7Mmv0jYI0pimUmhIKEPytihq0dGH8j3gkYFTWPKoCy3HZPKk1
mi3tlQ98Us6PrBM48SiqNomeloZ2Q8DAuvxdFCuVxg+CDrXs3QtqfDdMv+VNAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUy4bhIRrxCMD32AVt8LwKuGxER5wwHwYDVR0j
BBgwFoAU4o/mbh3fh6Nb4J3n6t6Wqe5sB0IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRjNCQzREQTU2QTRDOTM5RjQyMTEwMjNGNDUzODZCRUI1
RkM0MjA2OTRBREJCOTI0NzMzQjg3RTI3OTczNzI2LzAvRTI4RkU2NkUxRERGODdB
MzVCRTA5REU3RUFERTk2QTlFRTZDMDc0Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMjhGRTY2RTFEREY4N0EzNUJF
MDlERTdFQURFOTZBOUVFNkMwNzQyLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0YzQkM0REE1NkE0QzkzOUY0MjExMDIzRjQ1Mzg2QkVCNUZDNDIwNjk0
QURCQjkyNDczM0I4N0UyNzk3MzcyNi8wLzMyMzgzMDMzM2E2NTM5MzkzMDNhMzgz
MDMwMzAzYTNhMmYzMzM1MmQzMzM1MjAzZDNlMjAzNTMyMzIzNzM4LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYFKAPpkIAwDQYJKoZIhvcNAQELBQADggEBAEQDDwetRVDb0hkROaZeS3pbRnOo
gSCviwyQxXF9ElaUFWq9CwYtou3ppTwqNlB2qN0HVAUQyZ/+BLWCQ9qf4qyX3ZT4
kS3VV8kvxF8VzYaS7onX+pLSAaBIST1VDHjYdw0y9OGRVbkwRQTBxeCgR9j8tZRr
7I76eBHvzdFzAtn/QoDpO8r6odxe3/VoDmGjdfmvUT4kKL31z2AWk4iZLo4lFedA
At0DWyJf7H7OGXDhHUatZQ2PoiRUUtKNF294QoYsG2B11ph5VghyBhau3IJl39Lq
ByZvy7neqkwECZDUtrMeYoJUvI+wnhgG7d0pJ3RJpmN1dBoe1rXYC80AmYk=
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:38 2026 by rpki-client