This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/323030313a313333383a3a2f33322d3332203d3e203237383037.roa
File:                     323030313a313333383a3a2f33322d3332203d3e203237383037.roa (raw, json)
Hash identifier:          ApChKNuckoi8SXhZvR5a/8FYah+XGfqaMfLQFb1wQW4=
Subject key identifier:   F2:23:FC:9A:33:B8:9A:68:7D:16:FE:75:FE:C1:E6:4A:F9:41:5E:C4
Certificate issuer:       /CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
Certificate serial:       704589C680657636BA17927EFDC009CF682BA8B0
Authority key identifier: F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/323030313a313333383a3a2f33322d3332203d3e203237383037.roa
Signing time:             Tue 06 Jan 2026 19:17:25 +0000
ROA not before:           Tue 06 Jan 2026 19:12:25 +0000
ROA not after:            Tue 05 Jan 2027 19:17:25 +0000
asID:                     27807
IP address blocks:        2001:1338::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 14:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:45:89:c6:80:65:76:36:ba:17:92:7e:fd:c0:09:cf:68:2b:a8:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
        Validity
            Not Before: Jan  6 19:12:25 2026 GMT
            Not After : Jan  5 19:17:25 2027 GMT
        Subject: CN=F223FC9A33B89A687D16FE75FEC1E64AF9415EC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ae:d8:d6:c8:84:cc:19:f8:45:48:e9:58:d0:
                    3e:d7:05:68:02:f8:c0:0e:da:09:0c:95:07:c5:ff:
                    90:11:a0:a2:fb:eb:87:4d:fb:79:d1:83:08:e2:27:
                    d9:55:c5:d2:b1:c3:74:bd:4a:75:55:41:26:a6:e6:
                    e5:67:20:dd:40:ca:98:e9:54:3e:45:cc:55:de:ff:
                    82:ed:16:12:b6:01:be:27:36:ab:39:73:2f:48:34:
                    af:79:c7:36:c7:13:b5:db:ff:e8:1f:1e:cb:d7:44:
                    db:92:5f:9e:2a:8d:39:e1:ae:d7:ca:7a:5f:3c:0b:
                    1c:83:62:a6:10:53:23:4b:5c:b7:59:4e:a4:5a:e8:
                    ac:48:bf:ae:44:11:11:a5:97:f4:be:28:f8:32:60:
                    ae:ea:29:e1:8c:53:1b:9b:5e:d0:7e:03:fe:0b:86:
                    ad:c2:dc:86:3c:12:49:71:db:f9:5a:0a:b2:0e:e3:
                    0d:82:70:6b:7d:eb:2f:26:db:38:8a:d7:aa:01:33:
                    a9:29:02:61:eb:9c:d9:c7:64:af:b6:07:63:ae:b2:
                    eb:ae:c2:51:f1:32:6b:45:44:53:35:68:4e:16:9b:
                    b6:cc:1d:7f:91:2b:20:fc:b7:7e:2d:93:01:b2:3b:
                    d7:cd:fe:4e:c4:a4:52:b0:7a:06:bf:31:d1:7d:31:
                    ad:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:23:FC:9A:33:B8:9A:68:7D:16:FE:75:FE:C1:E6:4A:F9:41:5E:C4
            X509v3 Authority Key Identifier:
                keyid:F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/323030313a313333383a3a2f33322d3332203d3e203237383037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1338::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:30:f2:97:21:c0:71:5d:71:98:22:d9:11:4c:ed:b9:5a:92:
         0e:0c:5c:23:f2:a3:a7:48:57:e9:24:96:da:eb:96:eb:16:6c:
         70:81:bf:b5:29:4e:1d:fc:17:db:cb:11:d0:dd:aa:5b:c4:9b:
         43:56:70:e0:72:89:d7:07:1c:f7:b6:12:b8:fc:44:b6:f7:d8:
         5a:48:15:a6:39:43:9c:a0:2f:c5:af:93:26:02:7f:19:73:89:
         02:67:dc:2c:84:73:c2:7f:dc:70:ad:67:40:a2:f7:bf:ff:39:
         7e:1b:44:40:d6:2e:4d:a4:5a:6a:83:a0:df:98:b8:ca:a1:4f:
         c3:9e:ae:06:0c:06:ac:dc:7e:59:3b:f4:75:88:d9:f6:11:fd:
         69:00:f6:f8:5b:69:0e:ef:60:3e:c0:53:9d:80:a7:72:f3:d7:
         52:7e:f6:3c:38:1b:2e:d4:e9:28:dc:56:2a:fc:3e:2c:18:22:
         aa:29:01:63:f4:24:88:f8:9e:b9:2f:c6:83:dd:99:dd:49:dc:
         71:0f:9f:05:3d:9e:30:1c:a8:d2:2e:f8:9b:99:14:4b:6d:ce:
         29:6f:64:5d:36:f9:32:9a:82:e3:86:50:5f:7b:bc:fd:33:7c:
         92:16:b5:c7:dc:0e:2e:02:91:57:d1:6e:48:ac:c9:fb:08:21:
         78:b3:e0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:04:55 2026 by rpki-client