This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EE8AA900F7278AB5F772C81590D7A0EC769BB2E73A8E5E8F2F577FC45D53A798/0/323830333a373764303a3a2f33322d3438203d3e20323734323438.roa
File:                     323830333a373764303a3a2f33322d3438203d3e20323734323438.roa (raw, json)
Hash identifier:          jU39JFT4k1wkmnbjRh1y09jjtpTLopKBnVt0FWE1Z+s=
Subject key identifier:   3B:BB:B3:84:01:BF:55:D1:7E:DF:1A:DC:D8:BF:2B:93:C7:E0:55:E8
Certificate issuer:       /CN=223075F348716C83172AC5FDDA1E4B2F1FECFD5F
Certificate serial:       226D8BC0667608E75A5A2CAD97729C6385DDD8B1
Authority key identifier: 22:30:75:F3:48:71:6C:83:17:2A:C5:FD:DA:1E:4B:2F:1F:EC:FD:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/223075F348716C83172AC5FDDA1E4B2F1FECFD5F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EE8AA900F7278AB5F772C81590D7A0EC769BB2E73A8E5E8F2F577FC45D53A798/0/323830333a373764303a3a2f33322d3438203d3e20323734323438.roa
Signing time:             Fri 21 Nov 2025 15:15:00 +0000
ROA not before:           Fri 21 Nov 2025 15:10:00 +0000
ROA not after:            Fri 20 Nov 2026 15:15:00 +0000
asID:                     274248
IP address blocks:        2803:77d0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EE8AA900F7278AB5F772C81590D7A0EC769BB2E73A8E5E8F2F577FC45D53A798/0/223075F348716C83172AC5FDDA1E4B2F1FECFD5F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EE8AA900F7278AB5F772C81590D7A0EC769BB2E73A8E5E8F2F577FC45D53A798/0/223075F348716C83172AC5FDDA1E4B2F1FECFD5F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/223075F348716C83172AC5FDDA1E4B2F1FECFD5F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 01:43:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:6d:8b:c0:66:76:08:e7:5a:5a:2c:ad:97:72:9c:63:85:dd:d8:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=223075F348716C83172AC5FDDA1E4B2F1FECFD5F
        Validity
            Not Before: Nov 21 15:10:00 2025 GMT
            Not After : Nov 20 15:15:00 2026 GMT
        Subject: CN=3BBBB38401BF55D17EDF1ADCD8BF2B93C7E055E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:40:d9:0b:6b:99:7f:e4:65:0b:ce:43:02:aa:
                    9b:f3:98:b2:cf:09:49:c5:86:cb:dd:d3:68:47:4f:
                    5d:14:ed:53:ab:38:cf:cf:e2:52:d6:fc:c3:9b:98:
                    69:b3:12:0d:58:a7:ad:87:ca:10:bf:a0:86:7c:e9:
                    1f:b8:fa:11:1d:41:1d:ad:7f:24:78:28:46:dc:fe:
                    35:8c:e4:8f:7d:07:db:58:05:08:ad:58:6f:c0:ef:
                    57:92:50:d5:de:02:bb:18:e3:db:f2:55:dd:1d:10:
                    7b:77:85:ed:e2:0e:12:15:54:0e:f3:05:76:ae:97:
                    33:69:38:47:51:8c:c8:ac:db:2b:8d:cc:c1:06:75:
                    d2:07:f1:0b:bc:e5:59:82:df:6c:86:3f:31:79:d1:
                    62:53:17:fe:5c:87:b2:93:c7:ff:30:36:d4:21:a0:
                    05:93:bf:16:86:d0:22:70:3d:ae:6b:85:38:32:64:
                    1d:c2:49:0a:56:90:a9:3d:e3:fc:b9:b2:16:89:a3:
                    2e:bc:87:a9:18:c6:58:06:07:a2:60:9e:fe:89:be:
                    b3:92:19:a4:46:bf:b9:99:dd:30:e5:b2:16:1a:23:
                    44:f5:e9:19:c6:b4:af:01:29:3f:6b:ac:4e:94:e0:
                    85:4a:ef:0d:ff:0e:db:b2:f5:1a:fb:21:73:75:0e:
                    26:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:BB:B3:84:01:BF:55:D1:7E:DF:1A:DC:D8:BF:2B:93:C7:E0:55:E8
            X509v3 Authority Key Identifier:
                keyid:22:30:75:F3:48:71:6C:83:17:2A:C5:FD:DA:1E:4B:2F:1F:EC:FD:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EE8AA900F7278AB5F772C81590D7A0EC769BB2E73A8E5E8F2F577FC45D53A798/0/223075F348716C83172AC5FDDA1E4B2F1FECFD5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/223075F348716C83172AC5FDDA1E4B2F1FECFD5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EE8AA900F7278AB5F772C81590D7A0EC769BB2E73A8E5E8F2F577FC45D53A798/0/323830333a373764303a3a2f33322d3438203d3e20323734323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:77d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:26:db:5f:3e:ca:a1:1b:69:f2:14:e0:0b:1c:66:b1:97:99:
         41:d1:f2:02:eb:15:20:2a:c0:36:90:b6:57:f0:6c:94:ac:41:
         7c:43:5c:b8:d3:70:d9:74:05:65:b9:f6:4b:22:94:05:6f:a1:
         94:cf:ad:03:4d:96:47:95:cf:8d:45:69:d3:b0:77:32:89:0a:
         06:77:b4:67:47:c9:3b:47:e1:3a:bc:e5:33:62:40:97:48:9c:
         c6:89:92:f3:da:88:f0:a2:7c:54:d4:d9:f1:fc:1a:df:83:8c:
         69:74:06:be:d2:d9:02:58:4e:c7:38:87:b1:c8:b3:95:63:17:
         fe:b7:5c:a9:ff:e7:cd:bf:a1:53:e5:4b:83:3f:13:e5:eb:68:
         0d:56:d0:3d:dd:82:63:a7:c0:dc:98:3c:f0:e0:41:e5:16:0b:
         95:95:93:c4:aa:15:0c:04:4e:b7:fb:79:29:c9:77:46:41:c2:
         01:12:47:ac:0c:38:5e:3b:cc:a3:41:dd:d1:8c:42:2f:32:1e:
         b1:81:9c:11:9b:4c:32:56:8d:8e:dc:3d:eb:d4:a1:89:2d:d5:
         60:fc:1d:b1:98:89:5e:2d:c4:33:5d:ee:6c:f2:3c:59:77:fb:
         0d:a2:bd:53:6a:a8:c5:bc:f5:5c:8c:27:55:7b:b8:24:d8:a1:
         99:2d:a5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 11:58:42 2025 by rpki-client