This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8EA824899D127ECE8DC2A263184EDB84102E0B78994033B04ABC5B3590A878D7/0/323830333a376664303a3a2f33322d3332203d3e20323734323637.roa
File:                     323830333a376664303a3a2f33322d3332203d3e20323734323637.roa (raw, json)
Hash identifier:          NUlUvY+evZcar5le1bVVQaQ+PpGh5tmzoE8pLkG8z3I=
Subject key identifier:   6C:88:13:62:C3:79:5D:38:8E:59:DE:04:06:32:4B:33:14:C2:8F:95
Certificate issuer:       /CN=1CB025B39863578DD58913190CAE124E8D58CAF4
Certificate serial:       408A2209EDF8BEEAEBFBDAF3E71BD280992A710D
Authority key identifier: 1C:B0:25:B3:98:63:57:8D:D5:89:13:19:0C:AE:12:4E:8D:58:CA:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CB025B39863578DD58913190CAE124E8D58CAF4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8EA824899D127ECE8DC2A263184EDB84102E0B78994033B04ABC5B3590A878D7/0/323830333a376664303a3a2f33322d3332203d3e20323734323637.roa
Signing time:             Fri 05 Dec 2025 14:05:00 +0000
ROA not before:           Fri 05 Dec 2025 14:00:00 +0000
ROA not after:            Fri 04 Dec 2026 14:05:00 +0000
asID:                     274267
IP address blocks:        2803:7fd0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8EA824899D127ECE8DC2A263184EDB84102E0B78994033B04ABC5B3590A878D7/0/1CB025B39863578DD58913190CAE124E8D58CAF4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8EA824899D127ECE8DC2A263184EDB84102E0B78994033B04ABC5B3590A878D7/0/1CB025B39863578DD58913190CAE124E8D58CAF4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CB025B39863578DD58913190CAE124E8D58CAF4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 17:57:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:8a:22:09:ed:f8:be:ea:eb:fb:da:f3:e7:1b:d2:80:99:2a:71:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CB025B39863578DD58913190CAE124E8D58CAF4
        Validity
            Not Before: Dec  5 14:00:00 2025 GMT
            Not After : Dec  4 14:05:00 2026 GMT
        Subject: CN=6C881362C3795D388E59DE0406324B3314C28F95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8c:7d:6e:a1:8b:0e:9d:c1:20:2e:19:1f:1b:
                    13:a7:0e:23:47:f7:4a:a3:da:65:20:98:a5:85:03:
                    61:3c:ab:c7:e5:df:5d:4c:8b:ed:93:0f:13:19:a3:
                    95:f2:d2:1c:8e:bf:f7:07:8d:b9:19:69:7b:01:04:
                    97:86:25:eb:d1:6d:8e:1d:06:6d:37:7c:b0:67:fb:
                    07:2e:6c:74:92:50:02:62:6e:bc:c0:90:cf:f3:ef:
                    f7:77:09:f8:0c:f4:a1:0e:1b:74:8d:f5:31:a4:a7:
                    21:9e:a3:2b:25:d4:1a:9b:1f:22:2a:24:65:7d:3d:
                    8b:15:9d:ff:d5:f5:3d:ea:23:c3:55:36:ea:c9:5a:
                    6e:d3:f2:aa:fb:db:88:24:9c:c8:14:64:4c:e2:f2:
                    14:d0:24:ba:ee:3b:36:60:cb:90:d9:80:95:08:3a:
                    2a:dd:76:36:f9:3d:e9:bc:4c:4a:b3:43:d0:b3:4d:
                    fa:9a:c9:72:2c:21:06:3f:33:02:72:ed:b2:ed:e1:
                    de:8e:7e:15:88:4b:95:05:d6:3c:e7:84:b6:c8:af:
                    1b:23:13:e1:e2:c4:38:43:93:f9:eb:d9:f2:9e:38:
                    72:13:72:0f:19:8c:02:a1:ce:74:3e:1c:6a:81:3a:
                    3f:41:78:06:bf:b2:da:47:b6:f6:7b:25:6a:2e:02:
                    b9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:88:13:62:C3:79:5D:38:8E:59:DE:04:06:32:4B:33:14:C2:8F:95
            X509v3 Authority Key Identifier:
                keyid:1C:B0:25:B3:98:63:57:8D:D5:89:13:19:0C:AE:12:4E:8D:58:CA:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8EA824899D127ECE8DC2A263184EDB84102E0B78994033B04ABC5B3590A878D7/0/1CB025B39863578DD58913190CAE124E8D58CAF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CB025B39863578DD58913190CAE124E8D58CAF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8EA824899D127ECE8DC2A263184EDB84102E0B78994033B04ABC5B3590A878D7/0/323830333a376664303a3a2f33322d3332203d3e20323734323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7fd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         af:fa:26:68:60:67:a6:cf:65:1f:95:d6:6e:82:fc:0d:c9:a5:
         c9:3b:d3:21:55:b5:36:e2:7b:bc:62:a8:c5:89:a1:68:9c:25:
         95:bd:e8:11:c1:c7:5b:96:ac:95:c7:aa:95:33:b9:b8:3e:2e:
         cb:88:45:d8:89:dc:82:2d:1d:8c:5f:bd:2e:f1:fd:d6:32:2e:
         5d:dd:b8:2b:bb:62:33:25:bb:20:91:30:94:4c:dd:d8:19:e1:
         ff:08:78:60:d4:21:d1:cb:17:74:bd:95:fc:ad:b5:15:c0:a4:
         cb:96:e4:92:7f:33:5c:6b:b6:bd:de:7e:dc:a1:bc:cf:68:49:
         4f:8f:41:f4:a4:c8:1b:39:de:3e:18:50:23:3e:26:63:cb:1f:
         c9:f9:7d:67:0c:a5:4a:1b:c4:7f:8c:c3:8a:44:48:f2:23:b4:
         6e:2f:4d:be:b4:28:ed:3f:3d:0d:d5:67:d4:e2:e7:e7:1d:b6:
         a5:37:f2:0d:60:c0:bc:9b:ed:12:e3:9a:22:ad:80:ee:c1:4e:
         71:72:02:94:74:f0:1e:4d:ff:50:da:0e:76:f3:b5:5f:52:3a:
         b1:4d:22:a4:6b:8e:03:8b:3c:31:84:9c:29:08:44:6d:ba:3f:
         ca:a1:93:d7:99:f6:d8:2e:26:cb:73:cd:77:2a:df:8f:fb:ad:
         b9:75:18:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 22:46:08 2025 by rpki-client