This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F038FDFBB7B1E49D9D86DC7E35D79E00629C2E8B35FFA84F069EE5FC82E249E/0/323830333a353765303a3a2f33322d3438203d3e20323733393731.roa
File:                     323830333a353765303a3a2f33322d3438203d3e20323733393731.roa (raw, json)
Hash identifier:          y9flH0lU1VXmh1XoSfvCsjfS/0jfN//6QNQVnZSSGm8=
Subject key identifier:   19:17:36:1F:EB:5B:80:78:0B:2A:D6:86:05:A5:FA:67:3A:89:F3:AB
Certificate issuer:       /CN=04E7B9D3716A07CC64BF4BF135593DFC1BD55B4D
Certificate serial:       35267DFDA270E01FC0E433F57D9957D08D312182
Authority key identifier: 04:E7:B9:D3:71:6A:07:CC:64:BF:4B:F1:35:59:3D:FC:1B:D5:5B:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/04E7B9D3716A07CC64BF4BF135593DFC1BD55B4D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F038FDFBB7B1E49D9D86DC7E35D79E00629C2E8B35FFA84F069EE5FC82E249E/0/323830333a353765303a3a2f33322d3438203d3e20323733393731.roa
Signing time:             Mon 10 Nov 2025 23:52:14 +0000
ROA not before:           Mon 10 Nov 2025 23:47:14 +0000
ROA not after:            Mon 09 Nov 2026 23:52:14 +0000
asID:                     273971
IP address blocks:        2803:57e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F038FDFBB7B1E49D9D86DC7E35D79E00629C2E8B35FFA84F069EE5FC82E249E/0/04E7B9D3716A07CC64BF4BF135593DFC1BD55B4D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F038FDFBB7B1E49D9D86DC7E35D79E00629C2E8B35FFA84F069EE5FC82E249E/0/04E7B9D3716A07CC64BF4BF135593DFC1BD55B4D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/04E7B9D3716A07CC64BF4BF135593DFC1BD55B4D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 19:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:26:7d:fd:a2:70:e0:1f:c0:e4:33:f5:7d:99:57:d0:8d:31:21:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04E7B9D3716A07CC64BF4BF135593DFC1BD55B4D
        Validity
            Not Before: Nov 10 23:47:14 2025 GMT
            Not After : Nov  9 23:52:14 2026 GMT
        Subject: CN=1917361FEB5B80780B2AD68605A5FA673A89F3AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d3:9d:cf:56:9b:18:eb:57:f4:e2:47:b7:64:
                    0f:10:6d:e1:eb:f7:5b:7a:22:12:b4:ab:16:9a:7a:
                    10:ae:d3:a0:e1:ea:d1:45:d4:0e:56:54:52:99:32:
                    4f:55:5e:e6:72:cf:1e:3d:07:b4:5e:14:33:b4:16:
                    37:d9:37:a5:0a:3d:a9:d3:f5:cc:3f:29:e8:6a:d9:
                    2a:5b:be:5d:c2:2d:29:f0:f9:9c:47:59:d2:c8:0d:
                    dd:4e:93:19:c9:40:2c:69:da:03:12:f1:a4:0a:3b:
                    f5:c5:25:a0:43:33:28:81:84:7d:89:ef:51:0a:a5:
                    2a:0e:99:e1:79:68:52:cd:a2:21:c1:e8:0a:46:77:
                    fd:7c:56:42:a6:d0:0e:bc:92:ef:13:cc:6a:75:bc:
                    a9:3f:68:fb:b2:33:16:95:5e:9b:50:56:cd:70:66:
                    f8:e9:4b:9b:40:bf:06:62:7d:d2:87:98:24:0a:92:
                    11:72:d6:33:30:67:c2:cf:71:2a:4f:53:33:7a:84:
                    10:9e:0d:9a:18:ef:fd:72:52:7e:2c:49:8e:03:06:
                    c2:a7:09:80:2b:af:ed:2c:6e:9f:c1:60:49:0a:fe:
                    04:bc:0c:83:09:b4:48:6c:51:ba:0d:8d:b1:96:c5:
                    cd:41:c9:88:5f:31:1f:8d:0e:f4:be:4a:45:25:01:
                    f1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:17:36:1F:EB:5B:80:78:0B:2A:D6:86:05:A5:FA:67:3A:89:F3:AB
            X509v3 Authority Key Identifier:
                keyid:04:E7:B9:D3:71:6A:07:CC:64:BF:4B:F1:35:59:3D:FC:1B:D5:5B:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F038FDFBB7B1E49D9D86DC7E35D79E00629C2E8B35FFA84F069EE5FC82E249E/0/04E7B9D3716A07CC64BF4BF135593DFC1BD55B4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/04E7B9D3716A07CC64BF4BF135593DFC1BD55B4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F038FDFBB7B1E49D9D86DC7E35D79E00629C2E8B35FFA84F069EE5FC82E249E/0/323830333a353765303a3a2f33322d3438203d3e20323733393731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:57e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:89:fd:2d:0e:39:b9:17:9a:2a:65:a5:11:69:d4:94:56:9c:
         b1:71:02:c4:e5:15:ae:ef:41:4c:5e:21:2c:c5:4d:e7:cb:d2:
         cf:e2:c7:6d:06:6c:8b:05:a7:33:98:64:04:17:bb:34:01:08:
         1c:06:40:96:ad:18:2e:cd:dd:41:b7:0d:b4:50:29:5a:42:79:
         68:3f:8c:e3:57:9d:46:84:75:4d:c3:86:a8:74:75:de:7c:36:
         a9:2e:0b:c4:9f:f9:3d:47:d2:90:0a:bb:64:92:3b:93:42:3a:
         ed:7e:9f:09:77:05:48:d3:53:83:69:6e:17:a2:fc:24:8a:f0:
         97:95:1d:98:67:69:3f:9a:7a:63:05:97:bc:d4:b3:4f:a3:57:
         3f:79:60:c4:be:c9:c7:57:43:d8:f2:65:b4:2f:68:05:c9:a1:
         bc:f5:fd:08:fc:b5:92:87:7f:21:58:7b:3a:b3:31:9c:66:19:
         6f:88:ac:8d:ef:3a:62:0c:1a:6f:dd:7a:e7:2b:89:15:d5:36:
         1b:dc:f4:13:ae:cc:6d:b4:12:f1:8e:1e:9b:b3:e1:41:91:81:
         a0:ca:24:3a:84:21:2c:3b:ff:02:71:be:d7:b1:ac:b3:77:1a:
         74:01:1c:3d:24:fe:73:3b:22:36:54:4f:20:4e:31:09:15:28:
         b8:e1:ff:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 10:11:23 2025 by rpki-client