This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/323830333a626265303a3530303a3a2f34302d3430203d3e20323730303838.roa
File:                     323830333a626265303a3530303a3a2f34302d3430203d3e20323730303838.roa (raw, json)
Hash identifier:          YGfJu23/kLk2ThsNVDgKxj/gYmjg5TJD89Io+ZPpgNw=
Subject key identifier:   09:AC:51:95:A3:F3:3D:A7:63:C1:49:27:8D:15:89:4E:A3:34:A0:29
Certificate issuer:       /CN=08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D
Certificate serial:       0F7FC62921A9559D1C7A8CBAE7A6F9CFD81C956B
Authority key identifier: 08:AA:2E:4D:3C:7C:DF:96:26:D3:31:AC:D3:8D:17:19:F3:D4:A7:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/323830333a626265303a3530303a3a2f34302d3430203d3e20323730303838.roa
Signing time:             Wed 31 Dec 2025 15:56:53 +0000
ROA not before:           Wed 31 Dec 2025 15:51:53 +0000
ROA not after:            Wed 30 Dec 2026 15:56:53 +0000
asID:                     270088
IP address blocks:        2803:bbe0:500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 20:47:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:7f:c6:29:21:a9:55:9d:1c:7a:8c:ba:e7:a6:f9:cf:d8:1c:95:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D
        Validity
            Not Before: Dec 31 15:51:53 2025 GMT
            Not After : Dec 30 15:56:53 2026 GMT
        Subject: CN=09AC5195A3F33DA763C149278D15894EA334A029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:84:2e:3b:36:10:04:68:b8:59:bd:74:b5:62:
                    ce:6d:27:49:bb:cc:d2:fe:da:c3:a2:81:eb:82:9a:
                    d3:61:38:9d:2f:2b:2c:a4:50:3e:b8:1b:07:fd:c0:
                    52:f7:93:2d:f6:36:79:b9:21:7d:39:a6:41:b4:b7:
                    de:7e:34:47:da:96:ed:06:8e:fc:d5:8a:30:ce:46:
                    62:bc:db:49:a8:00:f7:88:f1:33:a9:1d:90:11:ac:
                    5b:90:47:7d:9a:9f:59:24:f3:85:1c:76:83:25:00:
                    44:9c:b7:bc:b2:5b:a6:a9:2c:b8:a5:e1:5c:2a:ae:
                    b0:4b:00:8d:97:6b:c6:dd:b7:c5:38:6b:6d:ca:cc:
                    84:bd:0e:63:5a:af:01:67:ef:f8:34:3d:12:75:fb:
                    c7:88:23:d4:34:b4:a9:a3:74:28:f5:aa:77:4d:6b:
                    5a:16:15:9b:d5:c0:86:f8:be:85:b5:a7:60:da:2c:
                    08:4e:73:c2:f6:c7:89:cf:cc:b4:53:74:70:23:18:
                    95:c9:dd:df:ea:12:40:9b:3c:08:b0:17:a2:bd:2a:
                    ae:9b:e5:29:7a:b1:1b:27:f8:af:b2:3d:22:19:0d:
                    e9:28:2a:77:6a:cf:32:4d:97:67:46:71:b5:19:e2:
                    48:db:12:d4:e3:e5:7d:f4:4c:3d:65:c1:39:6e:45:
                    cb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:AC:51:95:A3:F3:3D:A7:63:C1:49:27:8D:15:89:4E:A3:34:A0:29
            X509v3 Authority Key Identifier:
                keyid:08:AA:2E:4D:3C:7C:DF:96:26:D3:31:AC:D3:8D:17:19:F3:D4:A7:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/323830333a626265303a3530303a3a2f34302d3430203d3e20323730303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bbe0:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         6b:7c:69:8b:46:22:95:a9:18:64:cb:70:22:38:c2:6f:00:a3:
         a8:80:4e:7c:13:2e:c8:62:4e:6d:e0:28:f0:e6:b9:cd:cd:41:
         ae:37:3c:9a:6f:55:4a:10:0c:3e:dd:e2:da:74:90:5e:07:c9:
         1d:75:99:aa:7e:a7:69:ec:6e:c7:92:cc:eb:e0:45:60:96:3e:
         c4:9c:dc:c4:06:8b:63:74:28:7d:37:1f:33:17:07:b5:63:ec:
         1a:74:0f:a3:50:66:a3:5a:07:38:43:1a:00:90:27:67:1a:e4:
         ff:b7:6c:89:d4:5b:b4:b9:c4:48:88:1e:7e:b3:96:a2:30:27:
         73:40:5c:f2:a3:f2:d2:32:06:f5:ff:f2:48:2f:fe:a9:5e:57:
         1f:92:72:44:3a:3f:35:be:b8:7a:53:55:ec:fd:dc:14:c4:22:
         ff:c6:54:43:72:4f:24:ee:d8:61:c5:76:df:25:db:a1:8e:6a:
         7c:8a:11:7d:df:38:9a:65:ed:f9:8e:5e:f9:83:e6:ac:8f:b9:
         9a:ce:a9:a2:f1:6d:5b:0e:71:38:40:f5:3b:58:bb:0d:2a:b6:
         90:a5:c4:30:76:d1:cf:17:e5:bd:2e:1b:5c:eb:7e:c5:d3:72:
         aa:33:92:a9:2b:0c:f6:ee:6b:8b:13:be:09:3e:71:ec:8a:a3:
         5b:19:80:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:57:48 2026 by rpki-client