This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7229EBE6570AB714CCF106E3BFAFEACD4A76A21E811421FEB023EA34E4447263/0/323830333a333263303a3a2f33322d3332203d3e20323731393731.roa
File:                     323830333a333263303a3a2f33322d3332203d3e20323731393731.roa (raw, json)
Hash identifier:          luA3+Z1N6ZRMxgQ6nlcfzvatEl1uDOZtsexA0yvbXQo=
Subject key identifier:   8E:DB:1F:3A:F4:09:0D:7A:EE:C9:33:9A:45:3A:F6:1C:62:E5:6F:2A
Certificate issuer:       /CN=4F85099AE59F61C2363111166B9BC2E8D5203C8F
Certificate serial:       0BA2A308034177ABFE5EA477FDE545B7F7EE2EE5
Authority key identifier: 4F:85:09:9A:E5:9F:61:C2:36:31:11:16:6B:9B:C2:E8:D5:20:3C:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F85099AE59F61C2363111166B9BC2E8D5203C8F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7229EBE6570AB714CCF106E3BFAFEACD4A76A21E811421FEB023EA34E4447263/0/323830333a333263303a3a2f33322d3332203d3e20323731393731.roa
Signing time:             Tue 06 Jan 2026 20:49:49 +0000
ROA not before:           Tue 06 Jan 2026 20:44:49 +0000
ROA not after:            Tue 05 Jan 2027 20:49:49 +0000
asID:                     271971
IP address blocks:        2803:32c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7229EBE6570AB714CCF106E3BFAFEACD4A76A21E811421FEB023EA34E4447263/0/4F85099AE59F61C2363111166B9BC2E8D5203C8F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7229EBE6570AB714CCF106E3BFAFEACD4A76A21E811421FEB023EA34E4447263/0/4F85099AE59F61C2363111166B9BC2E8D5203C8F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F85099AE59F61C2363111166B9BC2E8D5203C8F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:a2:a3:08:03:41:77:ab:fe:5e:a4:77:fd:e5:45:b7:f7:ee:2e:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F85099AE59F61C2363111166B9BC2E8D5203C8F
        Validity
            Not Before: Jan  6 20:44:49 2026 GMT
            Not After : Jan  5 20:49:49 2027 GMT
        Subject: CN=8EDB1F3AF4090D7AEEC9339A453AF61C62E56F2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:03:45:8e:d1:08:16:aa:b6:1d:28:f9:b4:3b:
                    ad:3e:ca:98:5d:ca:64:62:f2:cc:0f:4c:e3:41:42:
                    d1:62:98:c0:3d:3e:44:c6:db:41:b8:53:2a:2c:33:
                    b8:2a:e8:b5:e7:07:5b:d9:4b:51:8c:af:ec:92:35:
                    6c:a7:0e:76:8c:9c:a7:b6:7a:24:de:6a:96:a9:46:
                    df:05:5b:9d:d4:06:b3:e4:f3:a3:ac:c4:13:f8:ee:
                    80:91:12:af:9a:12:8d:96:4a:ef:2e:e7:0b:5e:24:
                    0c:3e:82:8c:03:99:c6:3f:f2:88:16:ff:a4:15:b7:
                    c8:75:1d:eb:5e:7a:ae:fd:05:56:80:04:5b:ea:f2:
                    0f:97:e5:b5:dd:c2:9c:8d:15:37:ce:ce:79:f4:ef:
                    e2:98:d4:7c:59:e4:8e:c8:dd:31:0d:94:76:0f:62:
                    5b:12:b8:bc:0c:19:00:9f:4f:94:57:bc:a2:b3:38:
                    43:75:4b:19:21:0f:48:2b:68:71:37:07:16:de:78:
                    e3:f3:97:cc:bb:8a:7d:c9:ee:78:46:f5:3e:a9:3d:
                    71:37:0b:31:bd:fd:8e:71:c4:43:82:a2:c2:7f:2a:
                    7c:99:df:35:74:ce:48:54:2c:a2:19:73:ea:47:52:
                    55:6b:64:15:d3:4f:2f:d9:a9:0a:57:c4:8a:c4:9c:
                    75:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:DB:1F:3A:F4:09:0D:7A:EE:C9:33:9A:45:3A:F6:1C:62:E5:6F:2A
            X509v3 Authority Key Identifier:
                keyid:4F:85:09:9A:E5:9F:61:C2:36:31:11:16:6B:9B:C2:E8:D5:20:3C:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7229EBE6570AB714CCF106E3BFAFEACD4A76A21E811421FEB023EA34E4447263/0/4F85099AE59F61C2363111166B9BC2E8D5203C8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F85099AE59F61C2363111166B9BC2E8D5203C8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7229EBE6570AB714CCF106E3BFAFEACD4A76A21E811421FEB023EA34E4447263/0/323830333a333263303a3a2f33322d3332203d3e20323731393731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:32c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:4b:2d:4f:0f:be:e7:81:16:3b:30:26:c7:62:54:24:4f:a0:
         9d:e6:7d:80:ba:88:f5:d2:63:12:30:37:f4:e4:82:4e:11:c7:
         d4:25:0c:2e:ef:aa:b1:44:44:a9:62:0a:12:bd:3a:84:0b:3e:
         38:58:f8:c1:fe:5e:83:a5:ee:da:90:1d:25:0e:ff:10:f8:c1:
         12:72:81:95:bd:d6:40:c9:41:18:f8:cd:1a:b1:73:f7:fb:9b:
         a3:d0:54:a7:5f:ae:fc:b1:09:b8:77:4c:9a:8b:84:c1:1d:54:
         4c:34:f6:fe:d2:7a:2a:cf:0d:0c:49:5e:ed:b6:c0:0d:e6:f0:
         8f:70:f2:f5:a2:86:98:20:66:39:41:39:a2:c0:1b:c1:78:c7:
         fd:c3:83:20:be:7a:b9:0b:65:5c:98:9e:33:5b:98:91:1d:8b:
         fc:c5:c9:d0:06:01:ae:43:36:e7:59:d7:e7:6f:53:4b:b3:08:
         df:a8:47:d6:6f:ab:23:4f:bb:59:27:fe:50:fb:02:bf:59:dd:
         36:a2:ca:c8:31:99:04:f9:df:0d:04:b1:df:3a:20:48:80:52:
         07:d1:74:03:d4:2c:7a:8f:09:5e:5c:db:26:dd:e0:46:11:76:
         27:bd:39:e3:0f:61:f4:da:8f:70:f4:96:0d:4b:2b:f0:c6:13:
         1b:e9:b4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:29:40 2026 by rpki-client