This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8845FD2F70326969EBF4B2A372A240B5C13FB4949337A5F5DDBB41CBBD731B04/0/323830333a333530303a3a2f33322d3438203d3e203532343332.roa
File:                     323830333a333530303a3a2f33322d3438203d3e203532343332.roa (raw, json)
Hash identifier:          u/WaqONOhOrv3ohm8M+mbpOF0NsLR3vJUWB1waCIFjI=
Subject key identifier:   16:FB:7E:73:B3:97:38:AA:07:A7:6D:7F:06:03:8A:F1:2C:D0:AB:CE
Certificate issuer:       /CN=C403FA78404641A71D95DA750617F0EEF3DD464B
Certificate serial:       3CB254DCAE3CAF852F938CF8C78157FA773024C7
Authority key identifier: C4:03:FA:78:40:46:41:A7:1D:95:DA:75:06:17:F0:EE:F3:DD:46:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C403FA78404641A71D95DA750617F0EEF3DD464B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8845FD2F70326969EBF4B2A372A240B5C13FB4949337A5F5DDBB41CBBD731B04/0/323830333a333530303a3a2f33322d3438203d3e203532343332.roa
Signing time:             Tue 06 Jan 2026 19:45:29 +0000
ROA not before:           Tue 06 Jan 2026 19:40:29 +0000
ROA not after:            Tue 05 Jan 2027 19:45:29 +0000
asID:                     52432
IP address blocks:        2803:3500::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8845FD2F70326969EBF4B2A372A240B5C13FB4949337A5F5DDBB41CBBD731B04/0/C403FA78404641A71D95DA750617F0EEF3DD464B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8845FD2F70326969EBF4B2A372A240B5C13FB4949337A5F5DDBB41CBBD731B04/0/C403FA78404641A71D95DA750617F0EEF3DD464B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C403FA78404641A71D95DA750617F0EEF3DD464B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 12:43:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:b2:54:dc:ae:3c:af:85:2f:93:8c:f8:c7:81:57:fa:77:30:24:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C403FA78404641A71D95DA750617F0EEF3DD464B
        Validity
            Not Before: Jan  6 19:40:29 2026 GMT
            Not After : Jan  5 19:45:29 2027 GMT
        Subject: CN=16FB7E73B39738AA07A76D7F06038AF12CD0ABCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:92:ca:14:05:0d:cc:b0:25:26:05:dc:7a:0a:
                    07:4d:4a:cf:5e:77:0c:25:4b:1d:78:59:d3:6a:1a:
                    19:da:56:e7:ed:f4:68:03:3b:4d:ad:b7:39:f8:97:
                    1e:11:cd:20:7a:96:cc:84:7b:1a:3d:db:f1:23:3d:
                    54:95:3b:2a:09:b4:e3:38:50:29:01:b3:87:d2:47:
                    66:78:87:67:55:87:26:55:96:41:25:3d:16:44:e9:
                    1a:e0:c7:88:08:bb:d2:3e:8b:b3:15:8a:96:c8:27:
                    9b:cd:60:0c:d3:70:0b:89:f0:6c:c1:df:cd:af:e4:
                    b7:f1:93:62:d6:a5:db:a0:7c:4c:98:c7:a8:72:7a:
                    61:b9:ba:2c:9d:d6:bb:45:95:b9:fe:b1:ce:af:ea:
                    84:da:4c:96:18:ba:67:f2:bb:8a:5d:8b:fc:63:2d:
                    53:2f:6a:78:da:b6:0b:8b:b9:28:23:0c:c6:f7:40:
                    25:5b:a3:db:54:2c:5c:24:ce:99:80:28:91:83:1e:
                    5e:dc:21:0b:3c:f7:4a:5a:37:85:cf:8e:34:41:73:
                    95:11:51:df:6e:34:d4:85:3a:6a:1d:1c:75:54:84:
                    64:81:e7:3d:56:70:36:82:bb:28:3a:56:40:aa:0c:
                    7a:50:a5:a9:ac:75:1b:42:c2:61:0c:ae:48:4b:46:
                    f8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:FB:7E:73:B3:97:38:AA:07:A7:6D:7F:06:03:8A:F1:2C:D0:AB:CE
            X509v3 Authority Key Identifier:
                keyid:C4:03:FA:78:40:46:41:A7:1D:95:DA:75:06:17:F0:EE:F3:DD:46:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8845FD2F70326969EBF4B2A372A240B5C13FB4949337A5F5DDBB41CBBD731B04/0/C403FA78404641A71D95DA750617F0EEF3DD464B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C403FA78404641A71D95DA750617F0EEF3DD464B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8845FD2F70326969EBF4B2A372A240B5C13FB4949337A5F5DDBB41CBBD731B04/0/323830333a333530303a3a2f33322d3438203d3e203532343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3500::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:0f:cf:f9:03:2e:58:e8:83:d6:3b:7b:ea:4a:45:f0:e9:3b:
         30:57:10:4e:47:ec:9f:2b:a4:e8:8f:17:f6:57:85:91:13:d0:
         8b:a6:12:71:c5:8b:cb:cb:02:7d:86:9a:4c:7c:d7:f0:3b:c1:
         81:23:40:fe:4e:17:63:63:ee:16:da:82:8d:de:75:a2:92:5f:
         53:d0:5d:6a:52:1b:76:a2:97:d4:ef:6e:5c:fe:e8:ac:6b:e2:
         36:69:a2:3e:22:41:e4:04:a2:fe:0d:fe:61:39:cd:c2:23:a7:
         d1:8b:9d:01:63:ee:fc:65:11:cf:03:1e:ad:0a:08:67:e1:45:
         c9:17:3a:c4:28:d1:fa:46:c3:85:ef:a7:52:d1:63:47:e3:e3:
         21:9c:11:3e:02:4e:29:8c:b6:3c:d7:ff:35:c6:2a:b7:23:d4:
         31:b2:18:bb:53:7f:7b:33:a2:3d:9a:23:7f:eb:1c:9b:55:ef:
         fd:5f:df:91:19:ec:57:c5:a8:d3:ff:ba:ed:94:8f:0f:53:66:
         ed:f5:40:44:d7:86:ab:b6:51:13:d2:5d:a8:73:16:8e:0e:56:
         6b:26:8f:55:60:86:4a:2d:42:45:89:50:d9:c9:bc:5a:c1:ee:
         56:1a:33:84:66:de:0f:4b:7d:09:5f:6b:6d:4b:5a:c6:59:c8:
         e2:da:9a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:52 2026 by rpki-client