This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BF5590544443B30345E096F57B882E70CEBAA45B4D65631AFBBB71D32F233DE1/0/323830333a336539303a3230303a3a2f34302d3430203d3e20323732393233.roa
File:                     323830333a336539303a3230303a3a2f34302d3430203d3e20323732393233.roa (raw, json)
Hash identifier:          xc1B3zCiWrUqxrPoT+nw1vqxYcvjkUocnkvqG/xh0IY=
Subject key identifier:   A6:0D:49:AA:D1:6F:DD:A8:52:4A:6B:2C:DF:34:35:41:68:6F:9D:31
Certificate issuer:       /CN=066347F3B4CE39202F57E5F9BBA727C66DF7D360
Certificate serial:       62EEA89F1A3C45432F362D905BAAE9B13F3B15D2
Authority key identifier: 06:63:47:F3:B4:CE:39:20:2F:57:E5:F9:BB:A7:27:C6:6D:F7:D3:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/066347F3B4CE39202F57E5F9BBA727C66DF7D360.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BF5590544443B30345E096F57B882E70CEBAA45B4D65631AFBBB71D32F233DE1/0/323830333a336539303a3230303a3a2f34302d3430203d3e20323732393233.roa
Signing time:             Tue 06 Jan 2026 19:41:57 +0000
ROA not before:           Tue 06 Jan 2026 19:36:57 +0000
ROA not after:            Tue 05 Jan 2027 19:41:57 +0000
asID:                     272923
IP address blocks:        2803:3e90:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BF5590544443B30345E096F57B882E70CEBAA45B4D65631AFBBB71D32F233DE1/0/066347F3B4CE39202F57E5F9BBA727C66DF7D360.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BF5590544443B30345E096F57B882E70CEBAA45B4D65631AFBBB71D32F233DE1/0/066347F3B4CE39202F57E5F9BBA727C66DF7D360.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/066347F3B4CE39202F57E5F9BBA727C66DF7D360.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ee:a8:9f:1a:3c:45:43:2f:36:2d:90:5b:aa:e9:b1:3f:3b:15:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=066347F3B4CE39202F57E5F9BBA727C66DF7D360
        Validity
            Not Before: Jan  6 19:36:57 2026 GMT
            Not After : Jan  5 19:41:57 2027 GMT
        Subject: CN=A60D49AAD16FDDA8524A6B2CDF343541686F9D31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:36:d4:75:d8:e5:e4:c0:23:93:d7:3b:e9:f7:
                    08:eb:b0:64:85:ba:37:93:52:34:27:f5:30:fe:f4:
                    82:55:ca:d2:8d:cb:b3:2c:9b:8f:a8:65:da:c0:6a:
                    bf:e5:3c:fc:7e:7f:ee:93:32:85:ec:6a:c5:d3:7f:
                    19:72:9b:f4:1d:f8:42:eb:27:52:4f:5e:11:f5:13:
                    b5:0c:48:0e:8a:64:94:d7:aa:4d:15:77:1a:60:4a:
                    ba:07:0e:ce:53:e8:65:80:08:bc:43:c2:55:fb:7f:
                    dd:63:aa:c6:cf:87:ae:a3:27:9c:f2:c4:8e:3a:df:
                    03:6b:52:99:2c:1b:5c:5b:62:d0:e1:56:45:6e:49:
                    08:53:3e:47:02:53:d7:5d:cc:64:98:5c:ff:e1:5d:
                    c2:1e:6f:ae:95:47:3c:2b:98:e8:67:d9:5a:77:1a:
                    56:fe:ae:3d:d4:33:4d:7d:55:6a:29:73:24:00:5f:
                    81:73:cf:77:48:af:6b:ca:00:47:6e:5d:46:bd:52:
                    17:ac:bd:a9:ea:19:39:36:1d:a2:97:31:8d:ff:7e:
                    5f:c5:a2:35:27:2e:9d:04:61:e9:64:5a:10:ab:0a:
                    38:2e:dd:21:9e:6b:72:93:63:ae:0f:5f:45:9d:d6:
                    dd:2f:9b:ff:11:a0:e8:13:f4:59:a2:4c:aa:fe:35:
                    c5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:0D:49:AA:D1:6F:DD:A8:52:4A:6B:2C:DF:34:35:41:68:6F:9D:31
            X509v3 Authority Key Identifier:
                keyid:06:63:47:F3:B4:CE:39:20:2F:57:E5:F9:BB:A7:27:C6:6D:F7:D3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BF5590544443B30345E096F57B882E70CEBAA45B4D65631AFBBB71D32F233DE1/0/066347F3B4CE39202F57E5F9BBA727C66DF7D360.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/066347F3B4CE39202F57E5F9BBA727C66DF7D360.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BF5590544443B30345E096F57B882E70CEBAA45B4D65631AFBBB71D32F233DE1/0/323830333a336539303a3230303a3a2f34302d3430203d3e20323732393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3e90:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         27:9b:be:6d:58:f5:23:5a:a5:27:20:39:41:bb:03:55:e3:cc:
         48:ef:81:5c:8a:44:21:35:eb:70:23:58:be:de:1b:3e:b7:20:
         02:b6:05:67:dd:8a:19:fa:d6:d9:70:d6:22:77:09:96:1c:3e:
         8d:55:12:07:85:b1:e0:e9:e9:04:4c:69:19:dc:f3:a0:97:77:
         07:5c:76:22:bc:6b:03:fb:ff:8c:46:0b:93:d5:36:1f:e5:d4:
         f9:e8:88:9e:ab:f6:9c:4e:4a:7e:3f:5f:8a:c8:13:a5:2f:87:
         e2:e8:e9:58:55:43:f9:83:a5:54:cd:db:cd:27:58:b7:ad:cf:
         78:c4:1a:0e:a5:e9:73:b8:d1:47:11:a2:57:a1:fa:ac:6f:d2:
         da:45:50:22:09:84:6b:3b:a8:4e:c2:92:90:d8:6a:c3:e6:da:
         36:10:44:ff:5f:a1:14:31:6f:7b:0f:cc:39:5d:f8:64:f1:a9:
         fe:d8:8e:ab:48:db:a7:b3:84:e8:2f:72:a4:51:df:f0:54:16:
         bc:59:12:7d:cd:72:23:06:ae:3a:f9:ee:37:59:5f:be:7e:d9:
         9f:6c:87:cc:be:b6:5c:3a:ca:21:58:bf:9e:d7:3e:02:d5:f8:
         27:0b:a9:f6:7f:5d:f9:4c:4c:13:6c:5b:44:10:33:e5:96:4e:
         a0:9d:ee:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:30:35 2026 by rpki-client