This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/323830333a626265303a3930303a3a2f34302d3430203d3e20323730303838.roa
File:                     323830333a626265303a3930303a3a2f34302d3430203d3e20323730303838.roa (raw, json)
Hash identifier:          VPndbO6Ho9yD4MQN7A+t2wfry4lWiYNRQFsRnfxHT0U=
Subject key identifier:   1F:75:2B:30:65:1F:E3:A2:EE:E9:F1:83:74:52:D5:1D:A3:B7:E4:E7
Certificate issuer:       /CN=08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D
Certificate serial:       2385C0F753E9494947938DA118F67D3404F156BB
Authority key identifier: 08:AA:2E:4D:3C:7C:DF:96:26:D3:31:AC:D3:8D:17:19:F3:D4:A7:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/323830333a626265303a3930303a3a2f34302d3430203d3e20323730303838.roa
Signing time:             Wed 31 Dec 2025 15:56:53 +0000
ROA not before:           Wed 31 Dec 2025 15:51:53 +0000
ROA not after:            Wed 30 Dec 2026 15:56:53 +0000
asID:                     270088
IP address blocks:        2803:bbe0:900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 20:47:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:85:c0:f7:53:e9:49:49:47:93:8d:a1:18:f6:7d:34:04:f1:56:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D
        Validity
            Not Before: Dec 31 15:51:53 2025 GMT
            Not After : Dec 30 15:56:53 2026 GMT
        Subject: CN=1F752B30651FE3A2EEE9F1837452D51DA3B7E4E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ba:8a:7d:9a:82:47:34:91:f7:2e:23:b0:4b:
                    22:96:83:14:8c:ae:ab:50:c4:56:e9:8f:9f:d4:5f:
                    1f:8a:be:7f:62:10:02:45:3b:34:5a:9e:06:63:71:
                    28:2e:9a:15:d8:f4:9a:34:81:16:1f:2b:6b:f1:7d:
                    90:07:ed:c6:6a:97:e6:4b:1d:7f:8d:af:8e:06:d9:
                    41:87:de:a1:5a:7f:14:a6:36:3f:9e:60:93:6c:1d:
                    ba:17:ee:c0:df:56:20:40:0b:b1:61:de:25:b4:f7:
                    f7:95:d7:24:90:34:48:fe:c0:10:95:87:f3:10:19:
                    73:a1:dd:0d:62:3d:d5:a7:36:86:80:31:07:a8:f6:
                    cd:e1:27:db:54:55:d8:90:01:8e:cf:69:7c:d4:3c:
                    4d:1f:8a:95:6d:af:29:88:ac:4a:17:d3:f8:e1:4d:
                    e8:e6:9a:54:15:85:d7:fd:61:51:b9:26:64:46:82:
                    50:e2:37:a7:38:f5:5a:c9:6c:6e:d2:4c:9d:f2:db:
                    e2:d3:ce:ef:45:14:8e:80:90:b2:37:cc:ed:4f:fd:
                    bb:84:e0:2a:67:01:1f:9a:ed:ad:cb:9d:b5:58:22:
                    ec:46:88:8e:c6:56:1e:62:65:d1:dc:f5:8e:58:1b:
                    3b:c5:26:cd:92:8c:dd:3c:40:38:8f:f8:63:df:b9:
                    c8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:75:2B:30:65:1F:E3:A2:EE:E9:F1:83:74:52:D5:1D:A3:B7:E4:E7
            X509v3 Authority Key Identifier:
                keyid:08:AA:2E:4D:3C:7C:DF:96:26:D3:31:AC:D3:8D:17:19:F3:D4:A7:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/323830333a626265303a3930303a3a2f34302d3430203d3e20323730303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bbe0:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         84:c4:fe:58:31:3d:3f:2f:e3:64:01:11:63:3b:f2:c1:68:f9:
         6c:18:21:90:ab:4a:4a:29:bc:f7:59:df:41:b8:a9:36:16:ef:
         6c:30:b7:6c:95:be:ad:7c:1e:37:8b:dd:2d:3b:7e:dd:0b:6a:
         93:88:7d:25:53:2d:06:e8:5a:64:c8:45:82:7f:b4:3a:2a:cc:
         cc:05:cd:d6:b6:26:d0:ab:09:d0:24:ea:ec:cd:ac:9d:4f:1a:
         69:8f:d4:a7:e6:5b:fa:b5:82:db:73:ce:58:22:8b:5a:3e:18:
         41:19:d7:f8:e5:11:45:d1:4e:8d:13:6c:4e:9a:81:c1:e2:3d:
         8d:84:cb:c6:e7:44:11:89:0b:86:c1:ee:78:e3:42:85:b6:ff:
         76:33:3e:96:93:96:e5:42:e5:2c:a6:ca:19:e0:98:41:4b:6e:
         a0:61:8e:6a:eb:ef:66:6c:d4:57:90:9e:5e:f1:6d:66:65:58:
         de:e4:d9:30:c7:1e:09:7f:52:d6:c3:3c:b3:bc:da:2a:39:cd:
         65:71:7b:a4:a4:ac:82:d5:d6:c0:cb:31:84:d2:69:77:b6:b7:
         7e:bc:d3:b3:31:b1:5d:25:e9:d6:6c:7c:d2:e5:9b:44:2f:cd:
         c0:3f:1f:f9:8b:34:d3:80:00:97:d0:3c:8e:63:88:87:ba:a9:
         de:a8:09:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:16:50 2026 by rpki-client