This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8975A8E22939ACA11DB669FC4BC2E59589BDE902E3FFFE35918663C47C82D07F/0/323830333a396538303a3a2f33322d3438203d3e20323730303635.roa
File:                     323830333a396538303a3a2f33322d3438203d3e20323730303635.roa (raw, json)
Hash identifier:          ZP8JYd87rf5YGFqOupdzna0HpbYHmDGd6Fe93yV9RFM=
Subject key identifier:   D0:86:29:37:A4:A3:D8:DD:6E:54:5D:F3:76:1F:D4:70:73:5F:5A:A4
Certificate issuer:       /CN=0279384C8430F0388D9E8E777F0896ADCD6029E8
Certificate serial:       41F22D88B506936653C43C3DAD7D016C96D3DF73
Authority key identifier: 02:79:38:4C:84:30:F0:38:8D:9E:8E:77:7F:08:96:AD:CD:60:29:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0279384C8430F0388D9E8E777F0896ADCD6029E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8975A8E22939ACA11DB669FC4BC2E59589BDE902E3FFFE35918663C47C82D07F/0/323830333a396538303a3a2f33322d3438203d3e20323730303635.roa
Signing time:             Tue 06 Jan 2026 20:57:00 +0000
ROA not before:           Tue 06 Jan 2026 20:52:00 +0000
ROA not after:            Tue 05 Jan 2027 20:57:00 +0000
asID:                     270065
IP address blocks:        2803:9e80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8975A8E22939ACA11DB669FC4BC2E59589BDE902E3FFFE35918663C47C82D07F/0/0279384C8430F0388D9E8E777F0896ADCD6029E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8975A8E22939ACA11DB669FC4BC2E59589BDE902E3FFFE35918663C47C82D07F/0/0279384C8430F0388D9E8E777F0896ADCD6029E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0279384C8430F0388D9E8E777F0896ADCD6029E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 14:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f2:2d:88:b5:06:93:66:53:c4:3c:3d:ad:7d:01:6c:96:d3:df:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0279384C8430F0388D9E8E777F0896ADCD6029E8
        Validity
            Not Before: Jan  6 20:52:00 2026 GMT
            Not After : Jan  5 20:57:00 2027 GMT
        Subject: CN=D0862937A4A3D8DD6E545DF3761FD470735F5AA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:44:3f:05:10:75:8f:ca:6b:f0:d6:77:71:29:
                    bf:8e:f4:dd:aa:9f:ef:c5:31:75:99:d1:fc:d8:82:
                    cf:a4:38:54:d0:9f:54:f9:49:c8:29:45:a2:f9:19:
                    d5:65:62:51:b1:fa:59:c1:eb:02:a0:98:e2:9e:06:
                    09:cf:10:ef:7f:83:fd:92:59:97:98:1b:6d:96:45:
                    80:76:d9:23:0f:ea:58:e4:e9:b8:74:80:ce:8f:c6:
                    d8:38:be:1e:af:01:8a:27:ae:ea:a5:16:b6:ce:17:
                    ea:87:c9:36:88:4a:75:44:e1:db:d1:2b:d9:51:7d:
                    70:fd:6b:13:4c:ca:5d:04:dd:79:61:de:56:de:41:
                    d8:22:b6:37:f2:28:10:1b:42:e3:cf:1a:c3:5c:d7:
                    91:35:7d:bf:3e:61:3c:ae:91:55:07:0a:85:c1:78:
                    b8:a2:83:10:51:fb:67:c9:0b:63:dc:d2:8b:76:09:
                    10:d9:9d:a2:15:8c:1a:de:92:db:dc:c6:13:af:31:
                    3c:9f:ec:79:cb:92:f2:12:44:c6:16:04:87:fa:cf:
                    8f:69:d2:c1:df:b7:7b:80:d0:2b:da:5f:23:c2:92:
                    f6:6f:c2:1a:61:bd:9e:3c:a5:a3:6a:ae:91:53:95:
                    ac:3d:8f:a9:de:05:66:d7:47:57:9e:a4:66:37:65:
                    44:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:86:29:37:A4:A3:D8:DD:6E:54:5D:F3:76:1F:D4:70:73:5F:5A:A4
            X509v3 Authority Key Identifier:
                keyid:02:79:38:4C:84:30:F0:38:8D:9E:8E:77:7F:08:96:AD:CD:60:29:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8975A8E22939ACA11DB669FC4BC2E59589BDE902E3FFFE35918663C47C82D07F/0/0279384C8430F0388D9E8E777F0896ADCD6029E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0279384C8430F0388D9E8E777F0896ADCD6029E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8975A8E22939ACA11DB669FC4BC2E59589BDE902E3FFFE35918663C47C82D07F/0/323830333a396538303a3a2f33322d3438203d3e20323730303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9e80::/32

    Signature Algorithm: sha256WithRSAEncryption
         af:4d:cc:77:c5:f2:6d:cb:72:2c:21:69:71:a2:78:4a:54:da:
         c7:e5:66:ec:d6:c9:51:5f:1c:ad:00:3d:e2:89:8c:94:59:01:
         e3:d0:5e:1c:95:c4:cb:a3:58:30:a9:bd:f4:84:88:90:6c:a0:
         29:6d:35:eb:d7:17:da:b6:d4:9e:04:c2:b2:ae:80:4c:ae:44:
         ea:d6:7c:2c:26:58:e8:c8:8d:05:27:0d:92:25:b3:0a:81:df:
         ea:f0:e5:97:42:ce:66:6f:67:4a:b9:29:08:64:e6:4a:72:9f:
         59:0f:9b:68:f1:2b:b3:d8:dc:a6:06:b6:1e:c1:2d:65:54:55:
         88:66:fc:04:97:9a:ab:43:e7:dc:08:85:e1:eb:15:21:f4:03:
         8f:3c:1d:ab:9a:ad:e3:9c:3b:83:e2:91:d3:57:20:76:a3:97:
         23:ff:02:79:59:3b:fb:87:8b:a9:74:5c:a9:49:4c:0e:36:7a:
         16:16:b0:14:e8:b9:44:18:7b:e5:b2:40:43:36:58:6d:40:97:
         e2:69:ae:a4:f1:04:b5:63:8b:bc:6f:ce:9c:32:62:7d:31:e3:
         95:98:e8:f3:65:35:c4:52:d7:a9:b7:5f:8c:38:16:9b:cd:0a:
         bb:75:90:36:19:0d:ad:bb:a9:2d:17:f8:8f:c4:5c:79:68:cb:
         97:e7:42:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:26:04 2026 by rpki-client