This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/323830333a626265303a3730303a3a2f34302d3430203d3e20323730303838.roa
File:                     323830333a626265303a3730303a3a2f34302d3430203d3e20323730303838.roa (raw, json)
Hash identifier:          x1am2VOJZ9ttw4Xk6wSGyt7ifft9lr+pXAP5+A8KVWw=
Subject key identifier:   9D:01:A1:44:14:65:52:AA:91:1C:9B:E0:30:47:C5:30:38:B5:A0:2C
Certificate issuer:       /CN=08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D
Certificate serial:       0CDF1ADA37F973D387F22D0CDEAE2FD039B84BFA
Authority key identifier: 08:AA:2E:4D:3C:7C:DF:96:26:D3:31:AC:D3:8D:17:19:F3:D4:A7:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/323830333a626265303a3730303a3a2f34302d3430203d3e20323730303838.roa
Signing time:             Wed 31 Dec 2025 15:56:54 +0000
ROA not before:           Wed 31 Dec 2025 15:51:54 +0000
ROA not after:            Wed 30 Dec 2026 15:56:54 +0000
asID:                     270088
IP address blocks:        2803:bbe0:700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 20:47:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:df:1a:da:37:f9:73:d3:87:f2:2d:0c:de:ae:2f:d0:39:b8:4b:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D
        Validity
            Not Before: Dec 31 15:51:54 2025 GMT
            Not After : Dec 30 15:56:54 2026 GMT
        Subject: CN=9D01A144146552AA911C9BE03047C53038B5A02C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:df:1a:5e:44:60:2f:76:63:e6:16:e7:f1:ab:
                    4e:0d:3b:0e:f1:6d:a8:d0:10:d4:44:ea:6d:f3:b5:
                    5a:b7:ae:54:91:fa:0c:73:79:c6:81:b7:5b:0c:40:
                    bf:9e:87:07:a5:b7:60:8f:1c:e0:77:55:16:a1:10:
                    d0:df:11:8c:e7:4a:fd:89:26:28:b5:f5:d1:01:47:
                    8f:72:be:e4:96:48:ad:16:3c:53:17:f6:c5:1b:57:
                    d5:f0:7a:d7:19:e1:68:d8:89:97:a1:e4:8e:6d:dd:
                    47:44:14:dd:90:51:f4:79:fb:55:1e:93:6f:fb:3f:
                    d8:df:57:4a:70:98:a9:ae:2a:8f:b3:8e:5b:09:6d:
                    fe:d9:7a:c1:59:f5:ec:35:25:8b:2d:64:f3:a7:dd:
                    50:e9:64:57:3e:c6:dc:4f:04:5e:a9:6a:b3:a4:a0:
                    47:50:02:75:9e:50:82:98:e6:a7:c5:e4:b7:df:f2:
                    53:18:0c:0b:35:ea:94:18:ec:6d:3e:a6:af:42:20:
                    f7:27:fc:31:8d:80:b4:64:c2:97:86:01:1e:4a:8c:
                    7d:d2:8d:af:25:04:f0:2d:5d:1c:b6:7b:33:48:0d:
                    34:6d:34:08:05:91:b5:31:7e:5c:3e:e8:9a:e6:66:
                    4f:e1:b2:7b:57:16:8e:ca:12:20:d6:c6:0a:9d:f1:
                    74:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:01:A1:44:14:65:52:AA:91:1C:9B:E0:30:47:C5:30:38:B5:A0:2C
            X509v3 Authority Key Identifier:
                keyid:08:AA:2E:4D:3C:7C:DF:96:26:D3:31:AC:D3:8D:17:19:F3:D4:A7:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/323830333a626265303a3730303a3a2f34302d3430203d3e20323730303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bbe0:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         7d:ee:92:f8:5f:0d:3c:2f:a3:9c:f6:44:fc:c6:7b:97:5e:64:
         f8:ab:dd:3f:53:89:6d:29:ab:91:33:80:61:94:8a:e2:23:5d:
         a4:bb:95:ec:88:53:de:08:d9:8d:6a:75:01:e4:b6:7e:7a:43:
         a0:20:4a:ec:83:80:53:e2:7a:ea:96:26:a4:dd:e4:da:4b:04:
         ad:34:2c:92:db:b9:a5:77:58:8d:32:39:49:bf:5b:b0:f5:51:
         aa:6a:28:9a:ea:df:9e:e4:49:fb:d9:8d:df:d2:ba:d2:a5:fc:
         d9:83:18:a8:df:a0:e7:e3:46:93:ed:82:1e:1e:b9:96:b4:73:
         54:cc:aa:c1:25:a0:f7:3b:21:b4:ea:51:ca:c8:f5:2c:6e:63:
         2a:15:3c:dd:aa:69:e4:34:b1:3a:ae:b8:d0:bc:f5:50:c9:b9:
         95:38:73:de:d0:13:b2:af:4c:14:2f:11:21:79:1e:51:18:6e:
         a3:cf:11:7c:35:9e:97:6c:6b:61:55:2f:49:cb:cc:23:fd:83:
         f1:53:87:8d:1d:a5:9b:e9:bd:8c:21:50:42:4a:43:a8:8c:a7:
         6d:c0:71:db:a5:8a:15:75:f9:ca:9a:20:93:40:ae:54:71:34:
         29:e9:f4:02:7c:7e:4b:53:05:23:12:71:ff:9f:05:b1:a6:81:
         9a:24:ab:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:31 2026 by rpki-client