This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/323830333a336634303a3a2f33322d3438203d3e20323634373534.roa
File:                     323830333a336634303a3a2f33322d3438203d3e20323634373534.roa (raw, json)
Hash identifier:          d/U3foJ37xBg+psUzdmvtKB45aPbVWzMlZ5OUhKSBSQ=
Subject key identifier:   6E:AC:8F:F0:DF:DE:C3:7B:8C:79:CE:C8:53:F5:42:B3:7F:88:43:B3
Certificate issuer:       /CN=AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A
Certificate serial:       2BC31D8C4DCA3637096C55EEEA207D7B5C09C634
Authority key identifier: AC:7B:8B:A3:D0:5E:21:1C:F7:69:7D:C3:8D:BB:75:91:FC:D3:07:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/323830333a336634303a3a2f33322d3438203d3e20323634373534.roa
Signing time:             Tue 06 Jan 2026 19:27:09 +0000
ROA not before:           Tue 06 Jan 2026 19:22:09 +0000
ROA not after:            Tue 05 Jan 2027 19:27:09 +0000
asID:                     264754
IP address blocks:        2803:3f40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 06:16:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:c3:1d:8c:4d:ca:36:37:09:6c:55:ee:ea:20:7d:7b:5c:09:c6:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A
        Validity
            Not Before: Jan  6 19:22:09 2026 GMT
            Not After : Jan  5 19:27:09 2027 GMT
        Subject: CN=6EAC8FF0DFDEC37B8C79CEC853F542B37F8843B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:88:3e:77:70:84:b6:75:f5:14:3c:1c:91:69:
                    9a:fa:97:59:d7:c7:60:33:cd:fb:d0:87:bb:f7:f5:
                    47:2c:1c:91:9e:fc:10:cc:71:bd:b1:83:04:e8:39:
                    ae:05:09:76:58:2e:4b:6b:d9:02:1b:37:2e:a2:71:
                    47:0b:ba:2b:bb:fa:e7:a0:a1:ed:f6:e7:fc:41:32:
                    b0:ed:52:8c:a0:64:9d:22:9c:13:cc:f5:04:38:6d:
                    f3:c4:9b:11:6f:f7:a5:78:a0:db:a1:c7:4b:d5:fb:
                    b4:93:f2:ff:fb:3e:3b:bd:38:9b:ea:36:a4:20:7b:
                    c6:34:7a:97:03:e8:da:93:87:57:78:90:86:f0:31:
                    2c:79:cb:4a:a4:11:60:0b:35:6c:4d:9b:0d:80:02:
                    5d:42:06:94:07:54:0b:14:3c:b3:23:23:a1:a3:00:
                    6e:46:10:1c:15:25:99:68:b9:63:05:b9:47:b0:b3:
                    f0:43:15:1a:2b:af:a9:47:fb:57:08:9c:66:8e:f4:
                    73:9d:ea:b9:a9:74:b9:57:ff:b3:25:5e:d3:ac:57:
                    84:ce:f7:34:d6:c6:11:aa:bd:15:c3:b4:7f:66:c1:
                    1d:13:69:88:3d:3f:43:73:67:26:ad:8b:cf:e3:3a:
                    2e:2e:f6:fb:3b:03:ca:0c:3e:ff:27:65:8f:56:b9:
                    46:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:AC:8F:F0:DF:DE:C3:7B:8C:79:CE:C8:53:F5:42:B3:7F:88:43:B3
            X509v3 Authority Key Identifier:
                keyid:AC:7B:8B:A3:D0:5E:21:1C:F7:69:7D:C3:8D:BB:75:91:FC:D3:07:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/323830333a336634303a3a2f33322d3438203d3e20323634373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3f40::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:64:b4:9e:bc:1a:07:fc:b7:f2:04:c9:28:71:2c:d7:20:22:
         3a:89:79:82:a7:1c:30:5b:5d:3c:66:f7:96:0a:ca:48:c5:12:
         06:33:cb:62:2c:4e:e7:8b:85:bc:b4:03:21:5d:71:20:24:7f:
         d0:e4:fa:20:89:0c:91:88:37:56:ee:32:ff:cf:ef:b6:31:83:
         a3:34:df:07:d1:39:9a:80:15:82:fa:56:e0:9e:f6:ae:dd:c3:
         4c:a2:6a:15:d0:35:58:94:82:fe:f8:c8:81:23:c1:33:94:dc:
         e2:a2:cc:c0:19:f2:24:79:be:c6:a2:2f:da:b2:2e:a4:e6:9f:
         eb:0c:28:4d:72:e6:56:d1:e0:ad:aa:af:59:a1:7a:fc:db:ff:
         1b:6a:cc:45:2f:c0:b1:d8:07:5e:32:f6:1f:cb:6a:01:90:88:
         cf:46:9e:f0:11:b4:e3:09:2c:f3:ce:50:56:af:45:c2:a3:2e:
         87:f0:4d:33:fb:0d:35:df:2d:c2:f5:e6:54:36:c3:cc:a9:3f:
         52:64:12:68:d1:87:c8:2e:46:55:42:81:e1:08:9f:27:40:94:
         19:fc:90:91:b8:c7:37:8e:f7:ad:1b:a7:a0:1b:25:0a:b3:07:
         fc:27:3e:cf:9b:ab:35:da:01:67:c5:a8:47:52:e0:ef:39:64:
         22:45:97:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:29:32 2026 by rpki-client