This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/323830333a343938303a3a2f33322d3438203d3e203532333238.roa
File:                     323830333a343938303a3a2f33322d3438203d3e203532333238.roa (raw, json)
Hash identifier:          aVb3D0c1DzFOLsqJQpoc0xYKoyYrThPf21iyZQh3mXM=
Subject key identifier:   BF:A7:B7:9E:CB:00:36:5C:00:F1:47:E6:D2:1B:C2:C9:B3:E6:15:B2
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       04BC381D7A6843DD027DAFA287FB148210F6D285
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/323830333a343938303a3a2f33322d3438203d3e203532333238.roa
Signing time:             Tue 06 Jan 2026 19:12:53 +0000
ROA not before:           Tue 06 Jan 2026 19:07:53 +0000
ROA not after:            Tue 05 Jan 2027 19:12:53 +0000
asID:                     52328
IP address blocks:        2803:4980::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 09:37:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:bc:38:1d:7a:68:43:dd:02:7d:af:a2:87:fb:14:82:10:f6:d2:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Jan  6 19:07:53 2026 GMT
            Not After : Jan  5 19:12:53 2027 GMT
        Subject: CN=BFA7B79ECB00365C00F147E6D21BC2C9B3E615B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a3:43:79:2f:49:35:b7:50:f9:29:6f:4f:ec:
                    fd:16:7d:57:2b:28:07:67:96:ee:7c:7f:ff:81:ed:
                    e2:ef:24:cd:8d:1d:37:c0:3f:01:b3:f4:b1:9f:79:
                    79:f6:84:37:93:a6:61:62:6f:31:17:65:d5:51:5e:
                    2d:c8:0e:8b:91:a1:2d:72:ed:ab:e7:f1:be:ef:5b:
                    e2:b2:0d:d8:c8:43:4e:0f:10:4e:0a:5b:20:5a:8b:
                    c0:10:28:42:89:ac:c4:49:33:ce:0c:c9:5e:a6:6a:
                    27:bb:ca:37:d9:dc:4b:86:ef:52:13:24:09:dc:b3:
                    8b:09:af:f5:52:bb:90:bc:f2:54:21:55:0c:f3:69:
                    23:52:4d:28:5c:16:6f:cf:d0:41:51:fb:df:49:86:
                    7b:4c:0e:4c:17:f1:d1:02:36:4f:40:50:ed:66:d7:
                    8f:6f:91:6f:8b:cb:77:6a:1f:c0:95:00:73:76:6e:
                    3b:07:d4:a2:b5:5c:9b:47:1b:e2:96:6b:1b:f7:f3:
                    d2:46:0c:9e:64:ea:f8:7f:f7:c4:a5:46:8c:74:a4:
                    fb:5c:c1:d4:6d:80:40:85:7f:89:5e:d8:20:67:46:
                    18:69:be:f2:b8:22:cd:53:c6:9a:91:b8:87:1a:97:
                    5a:63:a3:43:a2:c3:34:e4:07:40:de:f6:5c:7d:30:
                    10:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A7:B7:9E:CB:00:36:5C:00:F1:47:E6:D2:1B:C2:C9:B3:E6:15:B2
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/323830333a343938303a3a2f33322d3438203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4980::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:85:ca:a6:a3:23:0e:49:7a:be:6e:e3:6e:85:bd:24:d7:f8:
         b3:a1:68:7c:0a:8a:fa:8e:32:e3:a8:cd:4f:1b:a0:93:19:b5:
         44:dc:13:ef:8b:e3:a2:72:13:7c:52:bf:b3:77:87:37:cc:54:
         f8:4e:10:70:3b:d4:da:06:b7:96:e3:80:d2:96:da:66:66:cd:
         57:69:f4:44:bb:5a:26:6c:0f:86:05:63:ac:81:2c:87:e7:a4:
         25:26:b9:dd:59:52:a8:77:1b:6f:45:ff:93:d2:c1:eb:07:96:
         84:d4:d7:cc:cb:bd:c3:e3:46:e7:ff:db:16:c0:9b:ee:8f:c7:
         be:dd:13:44:51:da:5c:8c:05:d1:b9:17:93:4a:00:80:4f:34:
         e5:55:30:6f:01:83:d5:6a:6d:03:e2:3e:bf:0a:fb:3c:e8:99:
         72:97:42:9d:53:91:44:fe:e3:7b:37:a6:e7:41:11:e2:30:43:
         d7:0c:85:51:ed:3d:d5:2a:56:ef:b6:9d:fa:73:3c:2c:57:f3:
         be:20:c8:e6:03:44:00:52:3a:ed:df:1a:7f:e9:86:8b:26:16:
         40:1c:de:42:b4:61:13:17:48:d4:4a:e9:fc:7d:a0:d4:d8:6a:
         36:69:3c:cb:d4:ea:b5:89:61:d5:15:55:66:51:ad:0e:f8:70:
         2d:6c:62:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:34:17 2026 by rpki-client