This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/323830333a653939303a633030303a3a2f33352d3335203d3e203532323738.roa
File:                     323830333a653939303a633030303a3a2f33352d3335203d3e203532323738.roa (raw, json)
Hash identifier:          ro0Xad9FHZef5jCFNDBEcvbEumW+B1x0bSgzsQ1CKmM=
Subject key identifier:   47:7A:86:54:1E:88:BD:75:6F:D1:19:80:C0:6F:28:46:9F:76:03:C2
Certificate issuer:       /CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
Certificate serial:       76CF1F5E9F5C6864FDB88C7FD9E3796339B82227
Authority key identifier: E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/323830333a653939303a633030303a3a2f33352d3335203d3e203532323738.roa
Signing time:             Fri 23 Jan 2026 23:27:10 +0000
ROA not before:           Fri 23 Jan 2026 23:22:10 +0000
ROA not after:            Fri 22 Jan 2027 23:27:10 +0000
asID:                     52278
IP address blocks:        2803:e990:c000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 00:47:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:cf:1f:5e:9f:5c:68:64:fd:b8:8c:7f:d9:e3:79:63:39:b8:22:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
        Validity
            Not Before: Jan 23 23:22:10 2026 GMT
            Not After : Jan 22 23:27:10 2027 GMT
        Subject: CN=477A86541E88BD756FD11980C06F28469F7603C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f5:30:b9:fd:d6:fa:0c:bd:14:4b:de:70:f1:
                    e9:87:9d:b1:b9:24:b7:d7:2f:15:56:dd:1e:1d:e4:
                    3b:0f:2b:3a:34:98:3d:8a:08:cb:7e:32:f0:a2:5a:
                    70:2b:45:28:39:46:fc:81:a7:be:77:18:40:2f:f7:
                    84:8e:9b:b8:33:46:a5:f1:75:47:3a:d9:30:9d:1d:
                    4f:d6:93:1a:2f:d8:38:ee:6d:40:8b:01:89:e0:59:
                    5b:24:5c:6f:0a:76:47:61:24:50:1e:52:25:13:ef:
                    96:f2:4c:30:a5:c6:fb:a0:49:03:67:d3:bf:f8:78:
                    81:30:2a:26:76:fd:c5:d7:4f:25:f2:26:72:5b:9a:
                    44:84:94:5d:1a:d6:82:36:50:42:36:f4:01:e9:7c:
                    c0:66:cb:aa:bf:a1:07:7c:bc:98:9a:5e:52:eb:9e:
                    e5:73:08:ab:16:9d:fd:fd:23:3e:b1:f1:13:bb:72:
                    2a:a2:9d:c1:94:77:03:1c:65:b8:7a:2e:95:a0:40:
                    ee:54:52:a8:e5:1e:d8:32:f5:55:1e:9f:7d:db:71:
                    c2:a3:f3:91:94:49:d3:59:aa:ff:15:0d:90:87:8c:
                    6f:b9:f3:49:ec:23:09:60:e6:89:4a:72:71:2a:15:
                    34:ba:c3:63:4a:e5:76:12:a4:30:a0:72:d1:cf:11:
                    31:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:7A:86:54:1E:88:BD:75:6F:D1:19:80:C0:6F:28:46:9F:76:03:C2
            X509v3 Authority Key Identifier:
                keyid:E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/323830333a653939303a633030303a3a2f33352d3335203d3e203532323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e990:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         7e:d8:d0:3e:1d:c6:f7:48:16:53:10:2f:11:d8:e8:c5:ee:80:
         c9:19:dd:40:9f:57:c7:f5:56:2f:7f:36:cf:38:3f:40:76:2b:
         78:61:1e:93:d0:5b:14:cf:da:39:b8:86:7b:80:46:93:4b:87:
         d2:f9:bd:2b:ce:be:c2:8d:b2:31:d2:dc:0a:d3:76:58:c9:41:
         74:ed:ee:1a:d2:c7:1d:3c:c9:da:cc:99:9f:76:d6:a4:1a:97:
         ef:d1:a8:89:e1:23:fc:ee:91:f7:bf:f7:71:a3:d1:c5:7c:96:
         e9:03:70:61:97:7f:2b:79:01:e3:0d:b7:b7:db:16:74:f8:19:
         8c:70:f3:c1:ad:e6:36:30:dc:16:05:37:be:49:96:00:ed:38:
         c9:ce:27:91:dd:e8:21:88:99:f4:6d:4d:4c:e0:94:49:26:23:
         1f:a9:e7:55:4e:28:d8:bb:b3:98:5b:56:b5:21:64:7f:97:b7:
         8e:2d:40:b3:30:f2:79:9b:73:f8:14:6e:b4:98:57:90:5e:36:
         45:8b:eb:89:92:64:2d:68:62:0d:04:f6:cb:51:df:9f:02:68:
         4c:8f:b8:93:c1:dd:d2:7b:b5:42:b3:d8:df:da:bd:fa:d4:14:
         0a:91:43:1a:50:a5:ba:76:3d:b2:2e:de:4a:e8:de:1c:2e:15:
         93:36:58:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:41 2026 by rpki-client