This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8CE48E13328675773DB0D93CA1D27FD6A257CBDF87E5B248571C8DAFF601E374/0/323830333a383936303a3130343a3a2f34382d3438203d3e20323639373336.roa
File:                     323830333a383936303a3130343a3a2f34382d3438203d3e20323639373336.roa (raw, json)
Hash identifier:          evvU1fWxXaDWQIqQxMpxziDe9AyVMiMqVtuahSM2UFo=
Subject key identifier:   7A:CC:42:AB:C2:41:69:EB:C0:B0:E1:E8:BD:C3:33:1B:DF:51:52:07
Certificate issuer:       /CN=FCB083EE5CFFAFB10962A859AA22652832710154
Certificate serial:       220E7DC4FB0353E47746465FD65E909995017755
Authority key identifier: FC:B0:83:EE:5C:FF:AF:B1:09:62:A8:59:AA:22:65:28:32:71:01:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FCB083EE5CFFAFB10962A859AA22652832710154.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8CE48E13328675773DB0D93CA1D27FD6A257CBDF87E5B248571C8DAFF601E374/0/323830333a383936303a3130343a3a2f34382d3438203d3e20323639373336.roa
Signing time:             Tue 06 Jan 2026 20:50:23 +0000
ROA not before:           Tue 06 Jan 2026 20:45:23 +0000
ROA not after:            Tue 05 Jan 2027 20:50:23 +0000
asID:                     269736
IP address blocks:        2803:8960:104::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8CE48E13328675773DB0D93CA1D27FD6A257CBDF87E5B248571C8DAFF601E374/0/FCB083EE5CFFAFB10962A859AA22652832710154.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8CE48E13328675773DB0D93CA1D27FD6A257CBDF87E5B248571C8DAFF601E374/0/FCB083EE5CFFAFB10962A859AA22652832710154.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FCB083EE5CFFAFB10962A859AA22652832710154.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:0e:7d:c4:fb:03:53:e4:77:46:46:5f:d6:5e:90:99:95:01:77:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCB083EE5CFFAFB10962A859AA22652832710154
        Validity
            Not Before: Jan  6 20:45:23 2026 GMT
            Not After : Jan  5 20:50:23 2027 GMT
        Subject: CN=7ACC42ABC24169EBC0B0E1E8BDC3331BDF515207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0d:f4:45:cf:1a:01:22:48:a9:99:a9:04:09:
                    9b:d2:dc:0b:b2:b4:57:52:cb:88:0b:70:1f:5b:89:
                    9d:0a:0d:8c:d8:b6:5b:c9:fe:2b:b9:9b:17:28:62:
                    55:de:a3:ff:33:0c:92:0f:e9:3d:91:b2:18:73:91:
                    fd:5c:6a:c0:20:92:80:bf:ca:b1:6a:e8:74:03:05:
                    3d:15:37:61:06:48:fc:95:5d:04:12:5f:42:a9:b2:
                    aa:a8:f9:d6:cc:6b:03:14:fb:aa:e6:1d:78:3d:30:
                    79:52:03:85:ac:ff:c0:ce:32:c4:bd:4f:8d:44:a6:
                    46:8b:9b:b4:ba:d0:6b:28:ec:15:ef:22:0c:c3:d8:
                    10:8d:18:72:f5:46:a6:d0:97:64:88:ee:bd:95:ce:
                    0a:76:0f:de:22:2a:8b:bc:57:e0:7e:1a:ec:e3:cf:
                    fe:6e:22:49:aa:ce:1c:eb:d5:a9:0b:ba:23:b6:03:
                    0c:bd:7b:f4:57:0f:1b:5d:dc:84:1b:d0:5d:d3:61:
                    75:af:50:73:56:66:61:85:f4:4e:c5:12:fa:cd:28:
                    3e:ed:6e:a9:de:0b:0f:d4:90:03:ec:5b:4b:53:d4:
                    a3:10:68:3a:7c:d2:88:36:d7:a2:51:f6:44:13:72:
                    b7:8a:48:68:38:d8:a4:6f:1e:77:ac:2d:3f:70:8f:
                    e7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:CC:42:AB:C2:41:69:EB:C0:B0:E1:E8:BD:C3:33:1B:DF:51:52:07
            X509v3 Authority Key Identifier:
                keyid:FC:B0:83:EE:5C:FF:AF:B1:09:62:A8:59:AA:22:65:28:32:71:01:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8CE48E13328675773DB0D93CA1D27FD6A257CBDF87E5B248571C8DAFF601E374/0/FCB083EE5CFFAFB10962A859AA22652832710154.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FCB083EE5CFFAFB10962A859AA22652832710154.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8CE48E13328675773DB0D93CA1D27FD6A257CBDF87E5B248571C8DAFF601E374/0/323830333a383936303a3130343a3a2f34382d3438203d3e20323639373336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8960:104::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:40:79:a7:93:a2:24:93:e2:80:1e:75:22:6a:7e:0b:25:f2:
         d7:f7:e4:a5:27:69:89:8c:81:61:1d:16:00:fb:56:91:c1:34:
         32:2d:5d:cc:b1:97:76:05:19:27:4c:11:48:33:a2:37:fa:df:
         58:24:d7:71:1a:7f:e8:0d:cd:11:ca:9d:6d:ce:7f:3b:42:fb:
         85:f9:27:c2:38:2c:32:7f:6a:bb:bf:c0:a6:5b:f6:33:e7:b4:
         1a:6d:4f:bf:3b:86:a4:1f:f8:a3:1e:15:8d:bb:00:a1:03:20:
         05:0e:8c:ec:b7:75:c5:e4:dd:73:8b:e1:39:15:c9:06:b6:bc:
         d3:69:50:8b:76:7e:48:52:4f:ac:cc:65:24:99:f4:21:99:01:
         4d:6b:f7:45:72:72:e8:2b:7d:42:03:91:ca:aa:56:a9:e7:fb:
         cd:79:06:62:2c:fc:2d:7e:13:dc:6b:18:d6:f4:3b:99:7b:c0:
         81:7a:a9:f3:0b:5b:d5:0b:32:0a:24:0d:6c:d2:84:d4:8e:b1:
         3c:c5:89:bb:a2:ef:49:0d:a2:79:65:83:1b:40:de:20:f5:79:
         53:71:b9:9e:7d:43:3c:20:74:36:45:eb:60:c2:fe:e0:5f:3c:
         a2:e3:4c:ef:7c:1f:a1:aa:27:0e:7e:f2:df:a1:54:df:55:d4:
         69:ec:de:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:30:18 2026 by rpki-client