This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/90539462A4A1B3951607066D516B6BDF2F465E83FC3D92F209D6B0804F266E92/0/323830333a393634303a3a2f33322d3438203d3e20323634363035.roa
File:                     323830333a393634303a3a2f33322d3438203d3e20323634363035.roa (raw, json)
Hash identifier:          L+av3Oc+Za7gI11pKGkxKYN7Y2BPg8X/skuE912myPY=
Subject key identifier:   24:D4:05:78:68:0E:64:7B:BC:B0:31:A9:D8:4A:BC:05:42:07:DF:07
Certificate issuer:       /CN=7F98F25356605E50F1B1C800B6E7128E7B3123E6
Certificate serial:       388995E57C9839C6809AB6C039B4C0CBC9735345
Authority key identifier: 7F:98:F2:53:56:60:5E:50:F1:B1:C8:00:B6:E7:12:8E:7B:31:23:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F98F25356605E50F1B1C800B6E7128E7B3123E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/90539462A4A1B3951607066D516B6BDF2F465E83FC3D92F209D6B0804F266E92/0/323830333a393634303a3a2f33322d3438203d3e20323634363035.roa
Signing time:             Tue 06 Jan 2026 19:41:21 +0000
ROA not before:           Tue 06 Jan 2026 19:36:21 +0000
ROA not after:            Tue 05 Jan 2027 19:41:21 +0000
asID:                     264605
IP address blocks:        2803:9640::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/90539462A4A1B3951607066D516B6BDF2F465E83FC3D92F209D6B0804F266E92/0/7F98F25356605E50F1B1C800B6E7128E7B3123E6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/90539462A4A1B3951607066D516B6BDF2F465E83FC3D92F209D6B0804F266E92/0/7F98F25356605E50F1B1C800B6E7128E7B3123E6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F98F25356605E50F1B1C800B6E7128E7B3123E6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:89:95:e5:7c:98:39:c6:80:9a:b6:c0:39:b4:c0:cb:c9:73:53:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F98F25356605E50F1B1C800B6E7128E7B3123E6
        Validity
            Not Before: Jan  6 19:36:21 2026 GMT
            Not After : Jan  5 19:41:21 2027 GMT
        Subject: CN=24D40578680E647BBCB031A9D84ABC054207DF07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:68:78:ee:4f:a1:61:8c:ac:9a:e2:3e:29:e1:
                    c7:04:47:d0:10:d6:21:7c:5c:56:d9:de:21:93:fe:
                    eb:2c:fe:24:a5:90:b9:2f:90:a8:24:d2:f9:72:c0:
                    92:9e:47:ae:16:2c:84:76:f8:6b:17:14:52:2e:28:
                    c1:d2:d9:24:31:06:ed:b7:11:14:50:2b:69:3f:c9:
                    57:ec:55:f1:41:02:27:c1:da:5f:07:6d:b8:6f:22:
                    ec:90:ad:0b:4b:2f:06:ef:1e:4e:3c:e2:3a:c6:31:
                    0d:1a:f1:1c:62:56:f9:85:4c:9c:1f:c4:12:17:03:
                    0c:93:a8:b5:2b:06:44:90:fe:20:42:9e:ec:08:f5:
                    c1:f2:6e:7c:2d:2f:72:8c:09:a5:f9:fe:f1:a5:28:
                    ef:a2:bf:86:0e:b7:ec:d3:c4:7c:b8:68:ff:5e:9f:
                    d8:93:d9:f2:da:a6:9f:0c:cd:ee:f7:84:cd:56:21:
                    18:54:f6:75:f6:50:8a:63:3f:8f:ed:f0:4b:d9:da:
                    51:7e:44:b7:7d:1f:8d:e5:90:b1:46:4c:de:37:70:
                    31:62:b5:35:25:36:44:ca:dd:ec:5c:f5:29:4b:e3:
                    d4:01:e4:c9:22:53:21:ed:5b:83:57:8c:d6:9d:76:
                    fd:65:60:a5:09:8d:24:f8:eb:a1:77:10:ea:4e:ad:
                    20:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D4:05:78:68:0E:64:7B:BC:B0:31:A9:D8:4A:BC:05:42:07:DF:07
            X509v3 Authority Key Identifier:
                keyid:7F:98:F2:53:56:60:5E:50:F1:B1:C8:00:B6:E7:12:8E:7B:31:23:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/90539462A4A1B3951607066D516B6BDF2F465E83FC3D92F209D6B0804F266E92/0/7F98F25356605E50F1B1C800B6E7128E7B3123E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F98F25356605E50F1B1C800B6E7128E7B3123E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/90539462A4A1B3951607066D516B6BDF2F465E83FC3D92F209D6B0804F266E92/0/323830333a393634303a3a2f33322d3438203d3e20323634363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9640::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:62:4f:b4:07:b7:82:53:5d:a8:eb:19:16:8a:01:34:3d:da:
         b1:f7:6a:f7:f1:ca:9d:96:00:ee:e4:a1:14:d7:a6:d2:5b:c6:
         d0:83:8d:2c:5d:29:06:02:55:d3:5d:8a:1f:79:38:b8:9c:6d:
         a3:d7:17:26:95:f1:ce:dd:d8:94:7e:3e:ae:bf:66:af:8f:95:
         c5:b5:8e:04:46:5c:34:a8:9f:36:db:8d:94:ad:ce:65:43:2e:
         11:63:4e:a0:6b:6f:c4:94:c2:d7:a7:06:47:eb:2d:a7:2c:00:
         36:9e:04:21:3d:ff:91:bf:ea:3b:6f:76:41:b2:94:7b:5d:a4:
         0b:7f:9f:2e:53:56:a6:5b:69:33:4e:cc:03:71:72:0c:1d:a9:
         44:3b:00:29:c3:94:2f:a9:78:4f:1b:1f:df:00:f5:93:c4:5c:
         e9:d0:a6:4a:bc:f6:56:db:16:ae:bc:d0:43:79:8f:4d:8d:cf:
         de:d7:de:6f:bf:9c:2a:e1:4f:2b:6a:7e:4d:4f:ef:56:db:83:
         f5:15:b4:eb:85:11:1f:79:e5:77:87:53:2c:df:d5:ad:6b:b5:
         30:c6:ed:ab:50:0a:b3:35:8d:19:8a:69:13:7d:cd:b0:1a:8f:
         72:7f:1a:22:e5:92:54:b2:a0:9f:a4:f4:b7:dc:85:05:c9:fc:
         56:22:8b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:22:33 2026 by rpki-client