This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/939692FCBA2CBFEC64CB9594463B43E1D89DE4C453690BA02D1AFF801AB84162/0/323830333a383864303a3a2f33322d3438203d3e20323733393833.roa
File:                     323830333a383864303a3a2f33322d3438203d3e20323733393833.roa (raw, json)
Hash identifier:          i3yuyNxwG21gmioeLUJbH1d/+G2L824kUBnYepuNlrY=
Subject key identifier:   12:4A:04:5F:26:6E:DC:89:A2:0E:0D:B3:85:D7:23:C0:60:CE:79:DD
Certificate issuer:       /CN=D13DA981D2AB4A09FB017D899B24125D3FD57AF2
Certificate serial:       33C0DBBFB4BAAD2C23E645B055C378399064CF08
Authority key identifier: D1:3D:A9:81:D2:AB:4A:09:FB:01:7D:89:9B:24:12:5D:3F:D5:7A:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D13DA981D2AB4A09FB017D899B24125D3FD57AF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/939692FCBA2CBFEC64CB9594463B43E1D89DE4C453690BA02D1AFF801AB84162/0/323830333a383864303a3a2f33322d3438203d3e20323733393833.roa
Signing time:             Thu 27 Nov 2025 16:53:42 +0000
ROA not before:           Thu 27 Nov 2025 16:48:42 +0000
ROA not after:            Thu 26 Nov 2026 16:53:42 +0000
asID:                     273983
IP address blocks:        2803:88d0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/939692FCBA2CBFEC64CB9594463B43E1D89DE4C453690BA02D1AFF801AB84162/0/D13DA981D2AB4A09FB017D899B24125D3FD57AF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/939692FCBA2CBFEC64CB9594463B43E1D89DE4C453690BA02D1AFF801AB84162/0/D13DA981D2AB4A09FB017D899B24125D3FD57AF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D13DA981D2AB4A09FB017D899B24125D3FD57AF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 21:34:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:c0:db:bf:b4:ba:ad:2c:23:e6:45:b0:55:c3:78:39:90:64:cf:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D13DA981D2AB4A09FB017D899B24125D3FD57AF2
        Validity
            Not Before: Nov 27 16:48:42 2025 GMT
            Not After : Nov 26 16:53:42 2026 GMT
        Subject: CN=124A045F266EDC89A20E0DB385D723C060CE79DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7b:13:a9:ff:50:a1:f5:49:b6:7b:10:0c:24:
                    5c:0e:4f:a7:71:c5:aa:b4:89:1e:51:87:98:d9:d3:
                    3b:1b:4b:ea:85:0e:39:00:41:4c:92:12:df:b7:a9:
                    f9:85:94:ff:7f:e0:ad:f5:a7:22:ea:26:81:ac:2c:
                    a5:bf:cd:6a:b6:27:42:4a:cd:1c:2b:62:37:43:ec:
                    96:e5:47:78:68:ae:55:3d:5a:40:86:24:5f:dc:0f:
                    d2:84:f9:1b:13:00:fb:e0:02:7d:fb:1d:41:cb:38:
                    f3:1d:20:fb:17:13:6d:59:00:d7:a2:81:40:8c:ca:
                    12:6d:af:0b:5a:24:53:4b:2a:61:99:c1:11:99:60:
                    cd:c9:53:f4:49:3c:27:1b:ac:6c:40:1e:e3:b6:cc:
                    43:d4:41:b0:bd:91:49:42:44:e1:94:9c:95:fa:e4:
                    28:26:29:30:f6:3d:62:ac:da:bc:fb:74:21:2c:5b:
                    64:c4:fd:31:f6:97:d0:39:1c:4d:06:f9:02:8f:61:
                    18:0d:3c:3c:d7:92:94:f5:85:6d:0d:1c:4f:2d:55:
                    ae:9d:1b:64:3f:1c:ec:5a:4a:67:e1:bb:ef:11:b0:
                    8e:5e:fe:20:98:24:35:a4:b1:14:55:23:43:e7:7f:
                    7b:14:05:2e:41:1c:21:4c:04:9b:f4:a6:6e:bd:50:
                    cd:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:4A:04:5F:26:6E:DC:89:A2:0E:0D:B3:85:D7:23:C0:60:CE:79:DD
            X509v3 Authority Key Identifier:
                keyid:D1:3D:A9:81:D2:AB:4A:09:FB:01:7D:89:9B:24:12:5D:3F:D5:7A:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/939692FCBA2CBFEC64CB9594463B43E1D89DE4C453690BA02D1AFF801AB84162/0/D13DA981D2AB4A09FB017D899B24125D3FD57AF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D13DA981D2AB4A09FB017D899B24125D3FD57AF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/939692FCBA2CBFEC64CB9594463B43E1D89DE4C453690BA02D1AFF801AB84162/0/323830333a383864303a3a2f33322d3438203d3e20323733393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:88d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:81:c8:c0:0f:31:95:5d:49:e5:58:98:28:da:1d:5a:1c:10:
         4f:9e:63:f4:81:45:a1:b2:bf:1b:f0:d4:13:f8:05:58:5f:f9:
         2e:c1:6c:7a:0b:d8:63:81:7b:06:3b:ee:e5:47:1e:f6:62:53:
         b5:57:6f:48:6c:f8:86:a3:31:55:18:12:25:cd:f5:ef:b1:35:
         2f:71:08:88:2a:11:5d:71:3d:38:7e:2a:b6:b4:33:2a:82:3a:
         63:a8:90:ae:ce:ba:45:80:1c:57:d6:d1:c1:88:31:10:89:2d:
         17:17:30:44:ca:4f:92:f3:68:14:61:62:db:d1:bf:d8:16:c4:
         15:9f:14:4c:f7:53:24:37:76:2f:b5:61:4a:24:1b:31:8b:81:
         c5:6a:f6:91:7c:5c:10:78:75:6a:d4:94:ed:42:47:e5:6e:1a:
         ef:aa:d4:cd:a4:0a:7f:0b:51:f3:6b:47:9f:a0:a5:aa:fe:21:
         db:fb:ea:a2:fa:52:35:3a:72:1e:56:04:40:21:73:79:26:69:
         d0:5d:5a:20:58:86:06:7d:09:9e:37:ea:6f:7f:ea:1c:d6:3e:
         14:87:20:dc:22:57:26:71:56:68:fc:3b:11:2c:5f:21:10:e1:
         5d:36:f6:6c:32:cd:f5:c0:2f:fe:d3:14:19:06:af:0f:8f:bd:
         ec:f6:06:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 10:07:23 2025 by rpki-client