This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/323830333a326632303a3a2f33322d3634203d3e20323636373639.roa
File:                     323830333a326632303a3a2f33322d3634203d3e20323636373639.roa (raw, json)
Hash identifier:          F+GmaIggaFUcGGcq9OSLcPL3QlSOIHLfcLaCmdWUNno=
Subject key identifier:   CD:17:53:E2:B7:47:D6:5A:60:70:34:68:E6:CF:16:22:46:8E:C4:94
Certificate issuer:       /CN=1F892BE2BF480CEC044B44BE95FB21F16BB4734C
Certificate serial:       3E22D5B01CC848A8CC332F7FF2F009002BAB96AB
Authority key identifier: 1F:89:2B:E2:BF:48:0C:EC:04:4B:44:BE:95:FB:21:F1:6B:B4:73:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/323830333a326632303a3a2f33322d3634203d3e20323636373639.roa
Signing time:             Tue 06 Jan 2026 19:21:30 +0000
ROA not before:           Tue 06 Jan 2026 19:16:30 +0000
ROA not after:            Tue 05 Jan 2027 19:21:30 +0000
asID:                     266769
IP address blocks:        2803:2f20::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 06:29:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:22:d5:b0:1c:c8:48:a8:cc:33:2f:7f:f2:f0:09:00:2b:ab:96:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F892BE2BF480CEC044B44BE95FB21F16BB4734C
        Validity
            Not Before: Jan  6 19:16:30 2026 GMT
            Not After : Jan  5 19:21:30 2027 GMT
        Subject: CN=CD1753E2B747D65A60703468E6CF1622468EC494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6e:80:4b:aa:ab:b0:c1:8e:df:e4:aa:58:58:
                    e1:26:65:9d:d0:18:17:c1:41:b0:bf:22:13:27:99:
                    1e:f6:0b:bf:d2:4d:55:a8:75:e6:5c:85:4c:6f:17:
                    f1:4a:94:eb:c8:f8:42:1e:1f:e5:2a:b8:c3:39:4c:
                    c1:c6:d0:bb:ac:bf:6d:c9:cf:40:62:c7:1a:68:02:
                    9a:c8:95:7d:05:fa:a5:6f:aa:b4:34:db:d9:1e:fa:
                    8f:d9:7c:39:49:e4:ee:6d:3d:66:90:9a:ea:21:eb:
                    11:58:43:62:4b:91:e6:37:d8:92:8c:ba:6b:23:17:
                    3a:b8:cd:5a:ed:62:3f:68:a7:28:2a:fb:5d:b7:12:
                    13:bc:f7:7e:9d:a9:b8:2b:f2:9e:bb:8a:c8:d9:32:
                    6b:da:f5:52:23:db:2a:5d:38:35:ba:e5:74:fc:7d:
                    27:1d:30:d7:7d:ec:69:2e:27:d9:e5:1e:60:22:a2:
                    a0:83:dd:1a:71:dc:f5:14:99:7f:49:43:4e:35:99:
                    5e:26:aa:29:23:91:56:ba:e6:f2:21:97:5e:00:fd:
                    62:b2:59:7f:79:56:4d:3c:f0:0c:5e:08:0e:62:55:
                    e9:2b:8b:4d:ca:8e:66:99:4b:77:62:62:b5:13:6a:
                    92:e0:70:22:2e:03:35:f6:33:43:f6:49:84:26:de:
                    a3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:17:53:E2:B7:47:D6:5A:60:70:34:68:E6:CF:16:22:46:8E:C4:94
            X509v3 Authority Key Identifier:
                keyid:1F:89:2B:E2:BF:48:0C:EC:04:4B:44:BE:95:FB:21:F1:6B:B4:73:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/323830333a326632303a3a2f33322d3634203d3e20323636373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2f20::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:fa:91:f6:5c:28:5e:a6:2f:44:0f:79:6d:4b:58:2b:e5:95:
         f2:78:8d:53:1d:32:0d:89:ef:a6:c6:79:01:f0:66:16:a8:6f:
         08:3f:c2:a0:c9:50:31:74:fa:33:8a:09:95:87:33:bf:80:fe:
         c2:44:fc:ec:91:91:b1:00:82:26:45:bf:bb:b7:10:7e:d7:43:
         d9:3c:9a:cd:e6:d2:0a:25:b5:ad:ba:c2:3b:f1:cd:08:a1:35:
         07:73:81:da:ee:c8:4e:e5:43:8e:28:55:43:a7:c4:3c:0e:53:
         ac:7a:68:58:48:e9:f3:bd:95:85:2a:72:19:62:f1:a6:5e:9b:
         1d:27:53:90:3f:0e:76:ca:9a:a1:b1:48:90:7b:52:31:54:3f:
         ef:9b:02:c5:d5:8d:ca:31:01:5e:09:f6:3d:0a:23:89:52:f9:
         dc:43:10:c1:b4:3a:3b:e4:7a:21:4a:d1:cb:cf:6f:3e:77:af:
         8b:09:1e:e7:c7:66:30:9c:34:48:2b:e6:10:b5:cb:ff:0e:4a:
         cf:c0:75:9a:e2:0a:ce:13:18:88:20:e7:03:ce:cc:4e:df:1d:
         3a:17:17:7b:8f:38:93:18:e0:38:7b:66:65:c3:52:13:15:ec:
         69:13:d3:54:cf:56:b6:a1:41:8c:fa:8e:11:40:00:cd:5d:cb:
         32:5e:95:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:18 2026 by rpki-client