This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/323830333a336634303a3a2f33322d3332203d3e20323634373534.roa
File:                     323830333a336634303a3a2f33322d3332203d3e20323634373534.roa (raw, json)
Hash identifier:          lG4Zt15N0Vg0vkvdWGa+VipRg6pzZsWvER3x1NeOXOA=
Subject key identifier:   3E:F6:2D:EB:A7:50:14:41:BB:45:0A:17:C9:DA:24:BD:15:B7:90:27
Certificate issuer:       /CN=AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A
Certificate serial:       30AA347A83E616D51B3D0B022F8B5826B95243F7
Authority key identifier: AC:7B:8B:A3:D0:5E:21:1C:F7:69:7D:C3:8D:BB:75:91:FC:D3:07:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/323830333a336634303a3a2f33322d3332203d3e20323634373534.roa
Signing time:             Tue 06 Jan 2026 19:27:11 +0000
ROA not before:           Tue 06 Jan 2026 19:22:11 +0000
ROA not after:            Tue 05 Jan 2027 19:27:11 +0000
asID:                     264754
IP address blocks:        2803:3f40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 06:16:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:aa:34:7a:83:e6:16:d5:1b:3d:0b:02:2f:8b:58:26:b9:52:43:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A
        Validity
            Not Before: Jan  6 19:22:11 2026 GMT
            Not After : Jan  5 19:27:11 2027 GMT
        Subject: CN=3EF62DEBA7501441BB450A17C9DA24BD15B79027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:85:11:86:f1:e6:05:fe:0e:5d:42:90:cf:6d:
                    4f:d8:8c:ae:7d:8f:f0:0e:e0:70:84:af:90:bc:25:
                    a5:3d:90:0a:4d:f9:f0:ce:d2:8f:44:1d:95:8f:74:
                    e4:22:f1:73:07:31:19:37:9e:56:91:7c:9d:71:b7:
                    35:47:e0:6e:9c:95:86:84:31:e9:8f:98:2a:0b:ff:
                    cd:a1:d9:5e:67:94:5b:0c:64:b0:15:1e:f7:c9:31:
                    26:a5:bd:03:71:54:4a:b9:57:6c:08:a9:49:0f:fe:
                    fa:80:df:11:46:53:02:3f:09:17:85:5c:1b:d0:63:
                    66:e6:f4:7e:04:e1:c7:27:b6:57:89:e2:71:9a:1c:
                    47:25:04:6d:e5:95:b5:38:e0:74:81:12:46:34:0e:
                    37:43:a4:9e:96:65:1e:f9:e4:19:4f:17:8a:3d:a2:
                    3f:e3:a5:07:25:01:8b:11:df:5f:e2:a5:9c:c3:1c:
                    b4:4c:b6:63:0f:51:20:61:11:08:2a:d8:dc:77:b3:
                    1d:3e:29:6d:63:ef:3a:d4:72:85:52:62:7a:e4:bb:
                    13:02:4b:de:74:50:4c:29:bb:a1:2a:b1:4b:3d:e9:
                    29:00:71:ce:a0:99:5a:34:2c:de:d4:d0:4e:ad:72:
                    9d:7e:be:ce:e9:c5:14:a0:41:ac:98:2d:c8:de:3a:
                    a8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F6:2D:EB:A7:50:14:41:BB:45:0A:17:C9:DA:24:BD:15:B7:90:27
            X509v3 Authority Key Identifier:
                keyid:AC:7B:8B:A3:D0:5E:21:1C:F7:69:7D:C3:8D:BB:75:91:FC:D3:07:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/323830333a336634303a3a2f33322d3332203d3e20323634373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3f40::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:73:a7:0d:25:22:3d:0d:64:39:29:c9:ce:bf:30:52:2e:13:
         66:c8:cd:4d:07:7a:fe:d4:10:15:c4:86:35:82:df:33:96:b3:
         26:b0:7c:38:f6:9d:ca:62:3f:3c:0c:e8:4f:15:0e:d2:8f:9c:
         ca:20:86:57:73:8b:c8:49:7a:6e:d0:c4:10:dc:af:7c:a6:83:
         4b:78:01:02:ee:94:88:ac:ba:3c:60:db:b7:56:00:89:fb:01:
         16:f3:ac:a9:88:82:19:65:d8:7e:04:28:e9:d2:68:63:50:df:
         90:2c:76:7c:79:6e:14:53:c5:14:76:cc:c1:77:ef:b6:f2:4b:
         d9:fc:fe:dc:2c:54:41:be:45:0e:a1:03:18:74:cf:d8:0f:43:
         0c:5c:3c:3c:07:c1:b4:47:75:9d:27:30:3b:04:4e:0d:3e:35:
         5a:bc:1a:bb:41:e9:43:87:d2:b9:f9:9a:c8:bf:98:fe:98:0a:
         81:ce:c0:99:24:56:a8:70:3e:41:00:e9:45:a3:ea:f9:c0:71:
         87:02:25:10:7b:ca:b0:8f:a6:2a:6c:42:6c:7f:52:99:78:3e:
         2e:0a:e8:80:ac:97:ee:d7:2e:46:6d:ed:07:2c:a8:f3:27:fa:
         69:81:5f:1d:9e:fe:d4:59:a0:f0:f8:4a:82:e7:62:9f:0d:62:
         ce:30:0b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:29:31 2026 by rpki-client