This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/323830333a626265303a6630303a3a2f34302d3430203d3e20323730303838.roa
File:                     323830333a626265303a6630303a3a2f34302d3430203d3e20323730303838.roa (raw, json)
Hash identifier:          AkAcsLyKZ6LW+X7Dhd8/HZ7RsNJvZesUbjzXEFr28eA=
Subject key identifier:   A5:AA:EB:E5:55:19:6C:B2:16:05:4B:A4:80:34:88:2B:3F:26:29:B0
Certificate issuer:       /CN=08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D
Certificate serial:       341374B1938016C4371C3DD777288151CACEC8C9
Authority key identifier: 08:AA:2E:4D:3C:7C:DF:96:26:D3:31:AC:D3:8D:17:19:F3:D4:A7:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/323830333a626265303a6630303a3a2f34302d3430203d3e20323730303838.roa
Signing time:             Wed 31 Dec 2025 15:56:53 +0000
ROA not before:           Wed 31 Dec 2025 15:51:53 +0000
ROA not after:            Wed 30 Dec 2026 15:56:53 +0000
asID:                     270088
IP address blocks:        2803:bbe0:f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 20:47:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:13:74:b1:93:80:16:c4:37:1c:3d:d7:77:28:81:51:ca:ce:c8:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D
        Validity
            Not Before: Dec 31 15:51:53 2025 GMT
            Not After : Dec 30 15:56:53 2026 GMT
        Subject: CN=A5AAEBE555196CB216054BA48034882B3F2629B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9f:68:5e:3c:83:21:7f:eb:5a:7a:a1:d4:b2:
                    22:c3:23:82:88:ff:d8:a1:5a:3f:d1:f9:fa:54:9f:
                    68:86:33:e0:00:8d:a5:19:bd:76:23:46:ea:87:b3:
                    c5:94:16:3c:a7:e9:6e:a7:21:5a:3d:9c:79:40:f8:
                    27:3d:f2:10:78:6b:25:7e:da:ed:5c:3e:cb:e2:16:
                    da:bf:65:c2:97:af:e8:d7:10:14:2d:b7:b9:a2:cd:
                    2a:bb:2e:4e:87:7b:2b:ad:38:8f:69:2b:26:89:36:
                    e2:12:4a:27:11:13:f7:04:af:3b:5e:f8:65:af:a9:
                    84:d0:03:35:5e:5c:d7:d5:79:1e:8f:68:90:a2:c1:
                    24:91:d9:99:e4:a0:a3:7e:e8:4e:a8:55:7c:5e:e4:
                    bd:d6:4e:ef:60:73:1c:f0:b5:20:3a:fc:78:23:3a:
                    2c:77:85:ed:f1:63:43:fe:06:a7:33:a7:5d:5b:3f:
                    5c:63:e3:ac:8b:59:50:e8:77:de:14:f1:a8:15:db:
                    d4:1f:91:53:79:d6:38:c6:17:27:47:37:0c:b6:34:
                    f3:61:e5:7a:00:29:0e:7c:5b:1d:e3:60:a9:8f:04:
                    27:52:62:86:f3:fc:54:81:b1:01:f1:41:19:07:46:
                    b7:8f:65:08:f0:fb:81:b2:d0:84:e5:e9:98:ea:8c:
                    00:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:AA:EB:E5:55:19:6C:B2:16:05:4B:A4:80:34:88:2B:3F:26:29:B0
            X509v3 Authority Key Identifier:
                keyid:08:AA:2E:4D:3C:7C:DF:96:26:D3:31:AC:D3:8D:17:19:F3:D4:A7:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/323830333a626265303a6630303a3a2f34302d3430203d3e20323730303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bbe0:f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         7e:a2:32:cc:93:43:5e:6b:cf:ed:e7:72:07:b0:31:a4:74:71:
         86:0a:e8:e3:8d:2f:a2:4d:13:4c:2a:bf:52:51:1b:7f:6a:ad:
         f7:3f:80:2e:e2:e4:fe:11:b1:9b:9d:28:c3:5d:0f:38:26:96:
         81:37:12:4f:53:45:c7:85:fa:84:e1:c2:4b:8d:46:e8:2a:94:
         c3:27:c6:d4:f1:88:95:b2:43:67:cc:60:3b:8c:02:6f:ca:01:
         29:5f:91:fd:49:0b:46:a3:6a:cf:ef:1c:ad:96:20:70:f0:3b:
         39:6d:87:d8:fb:05:b4:6f:0e:4d:81:d3:89:28:34:75:b8:d7:
         db:df:d6:a4:a3:77:5c:00:8b:2a:f6:8a:6b:50:b4:68:fc:f7:
         31:f3:9b:9f:98:52:ae:07:57:66:14:94:e1:d8:85:44:d3:95:
         a4:8c:b6:43:0b:19:96:fe:ac:e3:4f:6e:cd:25:0f:e2:68:cd:
         cb:00:e8:35:f0:1b:7a:2b:61:3c:44:6d:e0:38:1c:85:36:43:
         ad:5b:c4:ac:3c:1f:b4:1f:f5:d5:3d:b2:c8:6a:d5:4f:0e:95:
         70:26:ad:0e:91:96:80:a4:de:87:55:80:0c:36:2e:cf:6f:b3:
         20:4f:44:d2:ec:02:64:66:b0:f8:32:b6:57:69:dd:af:91:9a:
         ca:65:05:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:16:48 2026 by rpki-client