This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/323830333a3663303a3a2f33322d3438203d3e20323635363339.roa
File:                     323830333a3663303a3a2f33322d3438203d3e20323635363339.roa (raw, json)
Hash identifier:          /2tbruh7KuWopqB03XQmbGCjck7NDF+eK85C5wBqsh4=
Subject key identifier:   9E:70:E7:96:A9:B1:7E:C0:29:1C:B6:E5:0D:EE:D9:C9:8E:A5:9C:D2
Certificate issuer:       /CN=977DAB0EC7A954C08AF09602FA1EA52D5912541B
Certificate serial:       3F689E0763F9BCE85EAA1011158E2FB91628D7F3
Authority key identifier: 97:7D:AB:0E:C7:A9:54:C0:8A:F0:96:02:FA:1E:A5:2D:59:12:54:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/323830333a3663303a3a2f33322d3438203d3e20323635363339.roa
Signing time:             Thu 27 Nov 2025 17:53:43 +0000
ROA not before:           Thu 27 Nov 2025 17:48:43 +0000
ROA not after:            Thu 26 Nov 2026 17:53:43 +0000
asID:                     265639
IP address blocks:        2803:6c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 19:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:68:9e:07:63:f9:bc:e8:5e:aa:10:11:15:8e:2f:b9:16:28:d7:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=977DAB0EC7A954C08AF09602FA1EA52D5912541B
        Validity
            Not Before: Nov 27 17:48:43 2025 GMT
            Not After : Nov 26 17:53:43 2026 GMT
        Subject: CN=9E70E796A9B17EC0291CB6E50DEED9C98EA59CD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:30:5e:25:6b:20:05:23:b5:99:09:d5:34:48:
                    28:7f:5f:90:bd:95:2c:4f:e3:c0:b8:3f:6e:e2:5b:
                    49:20:ff:58:95:b5:1e:26:a3:c6:47:b2:c2:1a:8b:
                    c9:aa:b7:8e:bd:29:a8:64:69:bc:7b:8d:d1:66:67:
                    95:bf:a4:0c:24:bf:f2:5c:c4:6c:1d:bd:79:f6:0e:
                    bf:18:80:88:6b:9e:b1:ea:7b:a4:69:b1:46:7d:cc:
                    9e:8a:ec:13:8f:3c:1c:81:84:c4:8e:d5:67:13:48:
                    17:9b:42:dd:1c:21:a4:3c:2c:f6:f2:43:dd:ae:fc:
                    17:33:49:62:be:1b:e4:87:d8:36:ac:80:7c:1f:ab:
                    ba:9c:8d:df:f9:3c:d3:8a:05:15:cd:d6:2f:47:8b:
                    e0:50:83:87:07:4d:63:86:7f:e4:7f:e7:0a:92:b3:
                    19:65:d2:f1:c9:3f:ba:75:e8:d8:c3:5e:2a:06:22:
                    38:8b:e3:d6:8b:04:d7:9b:7f:84:90:ce:1e:98:cf:
                    21:c4:e9:27:4f:0c:ed:65:48:36:c3:80:3b:db:35:
                    40:9b:17:4d:55:05:91:a4:25:e7:44:5c:59:63:ff:
                    f9:68:fd:04:0d:50:c7:cc:34:58:b8:98:eb:a7:4a:
                    b2:eb:59:09:5b:0f:4d:eb:78:46:d3:43:90:6a:73:
                    1e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:70:E7:96:A9:B1:7E:C0:29:1C:B6:E5:0D:EE:D9:C9:8E:A5:9C:D2
            X509v3 Authority Key Identifier:
                keyid:97:7D:AB:0E:C7:A9:54:C0:8A:F0:96:02:FA:1E:A5:2D:59:12:54:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/323830333a3663303a3a2f33322d3438203d3e20323635363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:71:a0:71:00:ac:7b:75:57:b7:02:d2:96:0e:9e:2f:d0:2d:
         d3:2f:ef:3d:72:be:a1:b6:5c:5e:9b:4b:64:6c:34:c1:cd:e1:
         4e:37:53:9c:63:fa:ff:ab:72:9d:53:c7:26:57:30:ff:6c:41:
         2a:36:ad:66:29:15:2f:e9:42:ba:11:8b:fd:7e:59:24:52:5e:
         7f:97:9b:36:e9:d4:4c:2f:ff:13:94:f3:fe:d5:50:e3:29:f0:
         40:d4:bb:2b:8a:39:b9:39:de:7a:1a:c6:81:77:66:b7:e0:4d:
         cf:06:1c:e1:eb:02:77:13:85:64:4a:85:af:5c:4f:f8:4e:88:
         fb:23:81:f4:33:e0:95:8a:04:00:93:4b:e6:53:8c:7a:75:6d:
         8b:58:f0:55:d2:1c:69:24:cc:94:8f:fc:6a:4e:33:32:20:5a:
         f1:80:81:76:fd:1c:fd:d4:c1:81:24:77:d2:95:4e:e1:b6:82:
         01:57:08:23:c2:fd:52:30:b2:ff:39:c8:49:b8:45:e5:33:ed:
         cc:e3:72:3f:3c:ef:e5:ae:bc:29:9a:63:be:f5:3a:92:9d:ac:
         06:15:ea:c5:d7:e7:0d:d0:b8:7b:d6:02:be:c5:ca:ea:bb:fd:
         3a:0b:91:ea:6a:61:b6:34:f5:7e:75:d0:7c:6e:5a:e7:cb:5b:
         69:7b:25:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 13:58:20 2025 by rpki-client