This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/323830333a653939303a3a2f33352d3335203d3e203532323738.roa
File:                     323830333a653939303a3a2f33352d3335203d3e203532323738.roa (raw, json)
Hash identifier:          Jwz7OJARjdU5+NwCeJv3Y8pui2QuvXxemqojJoum6AA=
Subject key identifier:   18:61:67:1D:F8:E3:A7:FD:37:79:1A:68:1D:01:69:BF:E0:05:03:5D
Certificate issuer:       /CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
Certificate serial:       3FE8DCFBDA155481B2024FE1316093042128DCDE
Authority key identifier: E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/323830333a653939303a3a2f33352d3335203d3e203532323738.roa
Signing time:             Fri 23 Jan 2026 23:27:12 +0000
ROA not before:           Fri 23 Jan 2026 23:22:12 +0000
ROA not after:            Fri 22 Jan 2027 23:27:12 +0000
asID:                     52278
IP address blocks:        2803:e990::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 00:47:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:e8:dc:fb:da:15:54:81:b2:02:4f:e1:31:60:93:04:21:28:dc:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
        Validity
            Not Before: Jan 23 23:22:12 2026 GMT
            Not After : Jan 22 23:27:12 2027 GMT
        Subject: CN=1861671DF8E3A7FD37791A681D0169BFE005035D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:21:23:43:01:0e:b7:e1:7e:f0:13:64:92:75:
                    bc:ed:72:f3:cc:4c:93:5f:ab:7d:82:4f:03:11:e8:
                    df:92:b4:e6:1e:1d:b2:22:d4:2a:7a:18:ab:36:3c:
                    bb:53:56:22:fd:b2:bd:07:8a:0b:da:10:5e:eb:91:
                    b5:ff:7d:9f:2b:fd:dc:78:c1:61:f3:64:1e:12:b1:
                    40:6e:08:de:2c:6a:ac:6d:a9:a3:bd:e6:c6:d1:3e:
                    3f:76:ca:0b:7e:10:cf:7f:a1:96:7e:e0:7e:f3:8e:
                    b8:a0:64:27:27:c1:b4:2f:db:c2:b0:ae:51:0f:31:
                    25:94:ea:74:34:6d:2c:0f:56:e8:de:80:cd:91:c6:
                    a9:ab:cb:6c:53:82:4b:85:3e:40:f4:90:ad:d1:63:
                    54:f7:a8:88:3a:df:bc:8c:66:37:b8:46:5e:60:56:
                    03:2a:30:e4:d3:23:95:f0:ba:de:99:fa:f3:b8:93:
                    0a:c2:dc:53:a8:24:98:24:1c:e7:a9:6b:d6:ae:5e:
                    38:5e:36:45:30:a3:1b:01:e4:e5:37:90:b7:b7:09:
                    7c:30:17:a3:9d:cd:5a:13:93:c5:c0:8e:8d:95:e3:
                    d8:12:08:eb:12:cd:b9:ba:52:e4:c5:93:52:01:28:
                    cd:8f:73:65:90:a0:d7:7d:f3:59:ea:6e:bd:99:14:
                    37:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:61:67:1D:F8:E3:A7:FD:37:79:1A:68:1D:01:69:BF:E0:05:03:5D
            X509v3 Authority Key Identifier:
                keyid:E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/323830333a653939303a3a2f33352d3335203d3e203532323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e990::/35

    Signature Algorithm: sha256WithRSAEncryption
         3d:61:01:f9:04:69:99:65:0a:9c:b9:96:14:1b:2a:e5:ca:dd:
         e1:74:b7:f0:20:d2:ec:77:a2:a0:19:34:27:33:80:9c:47:f7:
         e1:54:a9:f5:9c:43:7a:30:3d:73:1c:3b:95:cc:72:4f:ba:d2:
         aa:e9:8b:28:8b:70:ef:da:94:43:47:6d:e5:5a:77:a1:38:f3:
         19:e9:25:29:47:f7:3f:e7:c3:7f:12:be:90:19:bf:d5:95:6c:
         74:08:c0:15:77:fe:67:83:de:86:b6:c0:f0:0a:c1:80:dd:43:
         00:76:ea:6e:71:0b:a2:67:f6:42:2d:92:d6:a4:21:e6:8e:be:
         77:5a:b1:f2:00:82:78:4c:d6:29:fe:29:37:87:ca:7a:35:17:
         32:85:a4:f2:19:8a:31:88:93:42:bd:ad:db:91:a0:0e:b8:3f:
         1d:3b:92:36:9a:97:2f:c6:8e:44:85:ff:b9:3f:8d:e6:eb:59:
         f3:42:78:00:b0:da:92:d0:9a:be:ed:f2:8c:4a:54:2b:cb:3b:
         dc:77:77:67:95:7d:dc:22:05:cf:8b:48:61:0e:d3:c1:f0:54:
         e2:2c:cc:7f:bd:06:3f:80:b2:fe:82:28:9b:3c:df:f8:c2:b3:
         16:a6:26:49:92:bc:24:44:f1:46:98:a6:c1:59:8b:fc:ec:de:
         27:ba:fe:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:17:23 2026 by rpki-client