This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C74C77CF0F445D9E87E879164801E95E0C7D0BFAE95B9379B73A9E8720FDBFDA/0/323830333a386631303a3a2f33322d3332203d3e20323732313137.roa
File:                     323830333a386631303a3a2f33322d3332203d3e20323732313137.roa (raw, json)
Hash identifier:          gy8qbWryl7Bn4wUhJl5zwaIx/MPXnpeqH3OOAw5CJ9M=
Subject key identifier:   3C:C2:84:56:23:1D:46:61:F9:C5:11:55:73:D7:86:79:90:03:EF:9C
Certificate issuer:       /CN=963A20938985B7260F30AFD597E6AA10A2E76FE2
Certificate serial:       7C52FEB644A634EE13364E73C57B0E04114A95CB
Authority key identifier: 96:3A:20:93:89:85:B7:26:0F:30:AF:D5:97:E6:AA:10:A2:E7:6F:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/963A20938985B7260F30AFD597E6AA10A2E76FE2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C74C77CF0F445D9E87E879164801E95E0C7D0BFAE95B9379B73A9E8720FDBFDA/0/323830333a386631303a3a2f33322d3332203d3e20323732313137.roa
Signing time:             Tue 06 Jan 2026 19:22:17 +0000
ROA not before:           Tue 06 Jan 2026 19:17:17 +0000
ROA not after:            Tue 05 Jan 2027 19:22:17 +0000
asID:                     272117
IP address blocks:        2803:8f10::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C74C77CF0F445D9E87E879164801E95E0C7D0BFAE95B9379B73A9E8720FDBFDA/0/963A20938985B7260F30AFD597E6AA10A2E76FE2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C74C77CF0F445D9E87E879164801E95E0C7D0BFAE95B9379B73A9E8720FDBFDA/0/963A20938985B7260F30AFD597E6AA10A2E76FE2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/963A20938985B7260F30AFD597E6AA10A2E76FE2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 00:52:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:52:fe:b6:44:a6:34:ee:13:36:4e:73:c5:7b:0e:04:11:4a:95:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=963A20938985B7260F30AFD597E6AA10A2E76FE2
        Validity
            Not Before: Jan  6 19:17:17 2026 GMT
            Not After : Jan  5 19:22:17 2027 GMT
        Subject: CN=3CC28456231D4661F9C5115573D786799003EF9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c3:ce:65:96:6d:96:8c:33:1c:0f:f4:ea:0d:
                    b1:a5:c9:1a:69:79:e3:89:ca:be:d7:a2:07:09:a8:
                    86:a2:b2:77:8a:da:ea:db:80:b5:5b:c1:5b:76:75:
                    da:a9:1b:10:1b:b0:1d:fa:94:17:91:40:c4:bd:4b:
                    e0:b4:c8:37:ce:c8:7a:73:fb:85:11:a4:63:14:e9:
                    a8:b9:78:95:3b:a3:15:32:18:f3:9d:00:1d:33:27:
                    5a:85:02:c8:05:ca:99:52:e5:af:b8:91:f3:d7:a1:
                    ed:2f:d5:62:a6:a5:38:ff:1c:b6:14:0d:e7:fb:f9:
                    96:a8:a2:d4:96:ed:3b:a7:e4:65:d0:92:91:f9:6b:
                    8b:16:fe:c9:93:ce:85:fe:1a:27:8c:7f:e5:1a:e1:
                    58:12:26:28:8b:52:1f:ec:12:7a:95:d5:b7:83:30:
                    72:8b:11:df:9a:15:0b:c9:06:99:70:f7:f9:ca:20:
                    f4:f8:06:b5:b4:7f:17:e2:ee:ee:b9:32:7c:21:a0:
                    40:12:5d:c0:3d:8c:0e:c3:33:4c:ea:d1:61:04:a9:
                    c0:eb:5d:a6:06:5a:cb:52:ff:8a:85:a1:fd:25:39:
                    4a:2a:49:99:b5:9c:59:a8:07:2a:51:07:f8:ea:6a:
                    ce:7c:b0:54:c7:b9:f7:89:cf:d4:02:1e:63:28:ab:
                    bc:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C2:84:56:23:1D:46:61:F9:C5:11:55:73:D7:86:79:90:03:EF:9C
            X509v3 Authority Key Identifier:
                keyid:96:3A:20:93:89:85:B7:26:0F:30:AF:D5:97:E6:AA:10:A2:E7:6F:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C74C77CF0F445D9E87E879164801E95E0C7D0BFAE95B9379B73A9E8720FDBFDA/0/963A20938985B7260F30AFD597E6AA10A2E76FE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/963A20938985B7260F30AFD597E6AA10A2E76FE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C74C77CF0F445D9E87E879164801E95E0C7D0BFAE95B9379B73A9E8720FDBFDA/0/323830333a386631303a3a2f33322d3332203d3e20323732313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8f10::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:7a:89:a3:f5:51:fe:82:ec:3e:35:1d:f6:d7:c2:26:1c:f2:
         38:21:f4:21:45:e4:02:b9:37:50:cb:d2:92:ec:63:8f:6e:f9:
         87:99:6f:05:77:48:42:df:bb:3e:e2:ea:7a:85:ef:6a:e8:44:
         99:d6:40:7e:fd:77:44:bc:0e:ef:2e:d0:4b:77:8b:12:ac:ef:
         f7:12:a5:c1:62:0f:e7:33:dd:f7:84:2b:cc:24:5d:bd:21:7a:
         17:91:4f:a3:a0:8e:af:da:1b:3d:63:8f:d7:1d:ee:bf:a1:6c:
         50:60:8a:b9:f5:e2:c2:07:cb:f0:71:57:d0:fd:dd:2d:7f:6b:
         4f:71:c0:a0:99:59:db:c9:0d:72:ff:bb:06:32:01:f4:7e:3e:
         78:cc:db:c0:56:ad:19:ec:53:00:e5:30:2e:93:92:65:c7:fc:
         78:2c:6e:ee:e3:3d:ed:e9:ad:f1:a8:37:d7:3c:4e:df:12:cc:
         14:4b:42:7b:48:f2:1a:9c:27:a6:30:02:6a:9f:73:45:c5:33:
         e1:1a:0a:98:33:76:12:92:e3:55:d0:2d:ce:3c:2c:99:0f:35:
         ae:ed:59:71:d8:90:31:30:54:21:7c:95:52:0c:78:ce:f2:06:
         1e:22:2e:b7:81:af:51:93:8d:1f:89:5b:c8:13:a0:d6:b1:b3:
         75:80:85:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:29:41 2026 by rpki-client