This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9904E6B7B8D2E00850F88E32E2423B437905D8FAB166A1793DBC707772959D52/0/323830333a3863303a3a2f33322d3332203d3e20323634373734.roa
File:                     323830333a3863303a3a2f33322d3332203d3e20323634373734.roa (raw, json)
Hash identifier:          YnazZnVP/crSImcP4dvyihnwSJnCQKOYqHWeLhVVlFs=
Subject key identifier:   9F:00:37:00:AA:8D:73:02:FD:A8:4D:60:DB:D0:6F:F7:FE:7F:1B:7A
Certificate issuer:       /CN=9514A7D608C4CFA34185B1F9CECDCD5D234D119D
Certificate serial:       7B4B701E12198C47130316035E3EF0D28B102592
Authority key identifier: 95:14:A7:D6:08:C4:CF:A3:41:85:B1:F9:CE:CD:CD:5D:23:4D:11:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9514A7D608C4CFA34185B1F9CECDCD5D234D119D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9904E6B7B8D2E00850F88E32E2423B437905D8FAB166A1793DBC707772959D52/0/323830333a3863303a3a2f33322d3332203d3e20323634373734.roa
Signing time:             Thu 22 Jan 2026 16:26:50 +0000
ROA not before:           Thu 22 Jan 2026 16:21:50 +0000
ROA not after:            Thu 21 Jan 2027 16:26:50 +0000
asID:                     264774
IP address blocks:        2803:8c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9904E6B7B8D2E00850F88E32E2423B437905D8FAB166A1793DBC707772959D52/0/9514A7D608C4CFA34185B1F9CECDCD5D234D119D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9904E6B7B8D2E00850F88E32E2423B437905D8FAB166A1793DBC707772959D52/0/9514A7D608C4CFA34185B1F9CECDCD5D234D119D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9514A7D608C4CFA34185B1F9CECDCD5D234D119D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:4b:70:1e:12:19:8c:47:13:03:16:03:5e:3e:f0:d2:8b:10:25:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9514A7D608C4CFA34185B1F9CECDCD5D234D119D
        Validity
            Not Before: Jan 22 16:21:50 2026 GMT
            Not After : Jan 21 16:26:50 2027 GMT
        Subject: CN=9F003700AA8D7302FDA84D60DBD06FF7FE7F1B7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:97:f0:b6:51:29:d4:2a:1e:f6:2c:99:d0:85:
                    80:64:a6:84:ae:64:35:3e:68:e3:39:a2:3c:25:5b:
                    29:6e:1b:9b:58:7f:a8:ef:f2:b7:31:83:18:43:ba:
                    81:51:36:83:98:0d:fc:6d:1d:11:1a:85:52:78:c7:
                    80:bf:0d:2e:db:1d:81:39:cd:ff:f1:59:62:76:ee:
                    60:cd:c2:18:b4:12:40:cd:ca:f9:bd:dc:a0:5a:11:
                    cb:6d:f7:ee:47:95:71:31:47:e6:2d:36:86:47:e4:
                    4a:9c:a3:d3:99:3a:4f:7d:1c:9e:da:d6:a6:7c:83:
                    1f:d3:0f:24:26:db:0b:59:3b:25:e5:43:0c:33:57:
                    41:3a:a4:5d:0c:78:93:ad:23:e5:4a:90:62:cc:8f:
                    49:3a:9d:92:38:52:0b:b0:b0:4f:60:68:97:4a:4a:
                    62:48:7e:f5:c9:62:cb:1b:83:c3:55:bd:fa:e8:4e:
                    29:17:c9:f3:67:76:bd:5f:80:1b:6d:de:e4:49:68:
                    7d:8c:f8:a3:25:b1:73:0b:c8:b1:c1:5b:8e:f8:a4:
                    49:0d:d8:ef:e5:44:f8:50:ad:66:f8:77:88:0e:2e:
                    56:52:e4:a0:1b:20:13:93:6a:6a:a3:26:ae:2c:1b:
                    58:3a:18:87:3a:51:83:80:0e:a3:59:1b:3e:cf:a2:
                    d9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:00:37:00:AA:8D:73:02:FD:A8:4D:60:DB:D0:6F:F7:FE:7F:1B:7A
            X509v3 Authority Key Identifier:
                keyid:95:14:A7:D6:08:C4:CF:A3:41:85:B1:F9:CE:CD:CD:5D:23:4D:11:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9904E6B7B8D2E00850F88E32E2423B437905D8FAB166A1793DBC707772959D52/0/9514A7D608C4CFA34185B1F9CECDCD5D234D119D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9514A7D608C4CFA34185B1F9CECDCD5D234D119D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9904E6B7B8D2E00850F88E32E2423B437905D8FAB166A1793DBC707772959D52/0/323830333a3863303a3a2f33322d3332203d3e20323634373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:32:c4:33:3b:f0:80:f6:24:85:4a:10:8f:b0:e7:c5:f8:73:
         aa:f7:b4:8c:73:a8:15:10:85:dc:a0:db:de:26:4d:d0:e5:75:
         5f:b6:63:2e:c2:ca:d5:f7:b3:36:b6:4c:c2:40:be:28:65:24:
         3c:ff:e4:33:ec:ce:83:0f:0f:f7:1a:a0:38:52:a9:f3:e0:00:
         86:da:25:8d:6b:91:1c:69:e1:aa:c6:81:60:8b:36:73:0e:f5:
         d7:ef:49:78:49:ec:97:af:bb:e7:15:5b:38:70:a2:eb:02:e3:
         95:44:94:bc:98:8d:9a:1a:b0:a6:fe:fc:bf:de:5c:0c:ed:52:
         49:e1:4e:a2:a4:9e:0f:0e:ce:f5:04:62:ad:68:f1:22:3c:a8:
         15:5c:27:2a:b3:aa:c4:f4:33:16:64:de:c7:42:25:09:0c:02:
         0d:a1:60:79:fe:bc:f4:30:f9:a9:8c:7c:03:7b:af:95:e2:d0:
         89:6f:98:f4:f3:ce:d7:fa:73:d5:23:4b:cd:a4:c2:0b:aa:6c:
         98:42:7d:fa:85:66:ff:61:30:16:eb:9c:4c:3d:66:b4:2e:db:
         13:92:42:cb:16:d7:e6:b2:13:30:72:5c:68:2c:58:ea:f3:25:
         d9:25:9d:f9:2a:4d:73:3f:12:dd:1b:d9:be:dd:a2:cf:11:ef:
         c3:13:1b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:19:15 2026 by rpki-client