This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/323830333a396163303a3a2f33322d3438203d3e20323731383832.roa
File:                     323830333a396163303a3a2f33322d3438203d3e20323731383832.roa (raw, json)
Hash identifier:          BTHQafdBEPDCY/Q+rdg91ZIKAkaUR5QqmUs/7O8aOuQ=
Subject key identifier:   53:06:D5:F7:53:16:8F:45:96:98:09:C0:DD:ED:AD:C8:9F:16:92:22
Certificate issuer:       /CN=089B798E1BD051786195E5F9D02238D550A5EAD7
Certificate serial:       2238CFFD17EA4853AF5AE1C5D5CBBF1B299F6080
Authority key identifier: 08:9B:79:8E:1B:D0:51:78:61:95:E5:F9:D0:22:38:D5:50:A5:EA:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/089B798E1BD051786195E5F9D02238D550A5EAD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/323830333a396163303a3a2f33322d3438203d3e20323731383832.roa
Signing time:             Tue 06 Jan 2026 19:26:53 +0000
ROA not before:           Tue 06 Jan 2026 19:21:53 +0000
ROA not after:            Tue 05 Jan 2027 19:26:53 +0000
asID:                     271882
IP address blocks:        2803:9ac0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/089B798E1BD051786195E5F9D02238D550A5EAD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 23:06:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:38:cf:fd:17:ea:48:53:af:5a:e1:c5:d5:cb:bf:1b:29:9f:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=089B798E1BD051786195E5F9D02238D550A5EAD7
        Validity
            Not Before: Jan  6 19:21:53 2026 GMT
            Not After : Jan  5 19:26:53 2027 GMT
        Subject: CN=5306D5F753168F45969809C0DDEDADC89F169222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d4:22:32:61:50:ca:d8:38:c5:72:d3:e5:3c:
                    f3:d5:c8:e4:a4:f2:0e:40:fe:b1:72:2e:f3:79:29:
                    7a:d5:07:87:0a:5f:37:9d:71:e0:b5:4d:98:12:88:
                    91:59:fe:99:5e:00:06:e6:56:65:10:ca:46:14:be:
                    db:b8:a3:ae:0d:d2:64:eb:1d:60:c0:1d:cd:47:dd:
                    e6:01:90:f2:3d:9f:f4:d4:d6:76:7d:de:00:c1:99:
                    5a:80:86:ef:ea:52:9c:8a:0b:4c:d3:05:33:01:81:
                    d4:c2:e1:6c:7d:9c:cc:4e:94:7d:36:dd:a5:40:05:
                    db:09:c1:a6:88:74:ce:97:3f:92:91:62:f9:21:15:
                    1b:87:87:e1:2d:d7:d3:0f:44:e0:0f:0e:e9:6e:88:
                    d1:3e:ac:6b:4e:00:1a:1e:66:ca:1d:b7:c7:1d:01:
                    ea:38:9b:1a:bd:71:31:9b:13:fc:98:3c:31:9c:44:
                    77:f3:a6:91:a6:cd:43:15:75:45:55:6c:e6:6c:24:
                    14:0e:0b:85:bc:b1:56:f0:48:50:02:f7:30:3d:c0:
                    41:77:44:d0:b8:18:17:df:cc:9f:e2:35:fb:57:08:
                    2d:53:87:b9:07:09:2b:86:51:86:cb:82:76:49:5a:
                    03:12:2d:e5:b7:8e:3b:d8:6b:e2:e9:75:ba:49:3f:
                    f8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:06:D5:F7:53:16:8F:45:96:98:09:C0:DD:ED:AD:C8:9F:16:92:22
            X509v3 Authority Key Identifier:
                keyid:08:9B:79:8E:1B:D0:51:78:61:95:E5:F9:D0:22:38:D5:50:A5:EA:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/089B798E1BD051786195E5F9D02238D550A5EAD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/323830333a396163303a3a2f33322d3438203d3e20323731383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:9f:41:da:50:bc:dc:3d:e1:5f:2f:23:c4:3d:9a:c2:89:9f:
         02:7b:7d:6e:9c:0c:12:55:1a:ca:66:c3:8a:6d:e0:ff:f9:6f:
         22:8b:b8:39:db:c0:92:4a:85:ec:73:bd:55:cf:f5:84:a4:e4:
         24:d6:92:e7:b7:b7:cf:38:96:f5:8d:fd:2b:39:dd:11:65:75:
         9f:21:84:9f:1f:5a:4d:ff:32:ef:19:10:44:37:70:03:5b:57:
         5d:e7:9e:78:01:40:1e:00:55:ca:bf:dc:64:eb:d0:36:75:b1:
         d7:01:8f:81:e3:7d:dc:f0:b3:5b:9d:10:ba:94:a1:09:a2:1b:
         99:a1:a1:5e:5e:43:5a:d3:f7:d9:3b:81:19:71:82:7a:d3:1b:
         54:97:e4:40:d8:84:b8:a9:c0:d1:10:a5:d6:80:b9:3b:ca:f8:
         52:07:e2:6a:d4:a2:f0:b2:ea:be:c1:9a:ca:aa:ff:a5:38:23:
         ca:4c:35:60:d2:d5:e4:7a:bd:13:92:13:f8:82:97:f9:e5:49:
         01:84:a0:d6:ee:f8:77:31:71:30:81:92:5e:74:23:ff:0a:3e:
         ec:25:dc:24:b7:0b:c4:65:8c:8a:14:64:f8:f6:07:8f:12:d5:
         6d:56:c9:01:54:36:b4:89:80:cb:0c:69:9f:87:2a:08:20:ef:
         68:59:af:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:38:03 2026 by rpki-client