This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F126F7B24F058345981014FBD8FA8F21CC1044BE0D05370DA263D74AB89CBEE9/0/323830333a613165303a3a2f33322d3438203d3e203532333237.roa
File:                     323830333a613165303a3a2f33322d3438203d3e203532333237.roa (raw, json)
Hash identifier:          Gg+D1KOpiPIqVvXGNpsGKCrt3h1VhScSzN1TvZu2UBk=
Subject key identifier:   83:23:8D:F1:E4:8D:3A:BB:F7:DE:13:4F:8A:FF:C1:C5:E5:4E:0B:EB
Certificate issuer:       /CN=8490FC868F718F720126775187964F0F493B0CEB
Certificate serial:       5F609BB5B8FB1C9858FDD2CCE83A8EBB9A930997
Authority key identifier: 84:90:FC:86:8F:71:8F:72:01:26:77:51:87:96:4F:0F:49:3B:0C:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8490FC868F718F720126775187964F0F493B0CEB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F126F7B24F058345981014FBD8FA8F21CC1044BE0D05370DA263D74AB89CBEE9/0/323830333a613165303a3a2f33322d3438203d3e203532333237.roa
Signing time:             Tue 06 Jan 2026 19:16:57 +0000
ROA not before:           Tue 06 Jan 2026 19:11:57 +0000
ROA not after:            Tue 05 Jan 2027 19:16:57 +0000
asID:                     52327
IP address blocks:        2803:a1e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F126F7B24F058345981014FBD8FA8F21CC1044BE0D05370DA263D74AB89CBEE9/0/8490FC868F718F720126775187964F0F493B0CEB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F126F7B24F058345981014FBD8FA8F21CC1044BE0D05370DA263D74AB89CBEE9/0/8490FC868F718F720126775187964F0F493B0CEB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8490FC868F718F720126775187964F0F493B0CEB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 22:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:60:9b:b5:b8:fb:1c:98:58:fd:d2:cc:e8:3a:8e:bb:9a:93:09:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8490FC868F718F720126775187964F0F493B0CEB
        Validity
            Not Before: Jan  6 19:11:57 2026 GMT
            Not After : Jan  5 19:16:57 2027 GMT
        Subject: CN=83238DF1E48D3ABBF7DE134F8AFFC1C5E54E0BEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3d:51:4a:91:09:2d:d9:ea:bc:bd:52:32:3b:
                    26:04:48:9a:69:45:59:62:da:78:9b:31:d5:5e:7d:
                    02:32:fd:d8:70:39:d8:41:47:6c:2d:cc:45:28:4e:
                    bf:20:98:d9:f1:e0:17:fb:f3:d6:f0:c4:a7:cc:a5:
                    4b:96:c0:58:24:6c:33:69:f0:f3:aa:4c:bc:25:44:
                    00:fc:21:2a:67:1e:4e:89:3d:5b:7d:bd:12:e6:d8:
                    c0:40:bd:96:01:0c:7c:55:79:0d:d3:b9:4e:a3:b2:
                    e9:68:41:5c:5d:db:1b:46:61:3d:0f:82:78:76:5f:
                    b5:4a:f2:20:7f:d5:9f:bd:e1:ea:3a:a1:31:70:4b:
                    43:63:09:3c:70:a3:4b:aa:97:77:99:ae:7f:9c:d8:
                    4b:5c:ee:34:f4:e7:51:e3:5a:bc:4f:35:48:58:fe:
                    4c:37:ef:50:e6:d4:8d:b9:d7:70:c2:8a:6b:26:0c:
                    54:f8:88:11:91:94:aa:48:83:b3:c8:44:d0:8d:43:
                    6e:3f:fa:f9:69:32:a9:ba:1f:6e:4e:ee:e3:76:38:
                    5a:f6:f5:e5:6c:4f:0c:08:55:11:1d:45:e6:55:b5:
                    24:e2:23:da:13:41:5a:b7:50:a3:71:17:a7:ec:c4:
                    ba:bc:44:53:0b:1e:94:d0:8c:e6:ce:fd:a2:d6:08:
                    c3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:23:8D:F1:E4:8D:3A:BB:F7:DE:13:4F:8A:FF:C1:C5:E5:4E:0B:EB
            X509v3 Authority Key Identifier:
                keyid:84:90:FC:86:8F:71:8F:72:01:26:77:51:87:96:4F:0F:49:3B:0C:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F126F7B24F058345981014FBD8FA8F21CC1044BE0D05370DA263D74AB89CBEE9/0/8490FC868F718F720126775187964F0F493B0CEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8490FC868F718F720126775187964F0F493B0CEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F126F7B24F058345981014FBD8FA8F21CC1044BE0D05370DA263D74AB89CBEE9/0/323830333a613165303a3a2f33322d3438203d3e203532333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a1e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:28:7e:bf:e9:d0:b3:2b:ff:ce:23:81:18:e0:0a:1e:c6:74:
         36:66:82:7b:72:59:a0:a4:d1:c2:10:85:c0:d3:b2:33:53:75:
         78:7b:fc:64:65:92:11:b6:96:e4:9f:de:34:5e:6e:e7:06:3f:
         1b:60:a2:9f:ca:0a:15:7c:7a:66:21:79:c5:b5:33:cc:ac:bc:
         5c:8e:35:a1:70:fa:7e:b4:5f:3a:d6:00:64:ed:d5:25:47:33:
         d1:3a:ad:11:3b:a3:7b:cb:e1:3d:b9:d5:21:95:1a:ce:ed:c7:
         97:8b:20:20:4c:39:d3:a4:f2:01:af:dc:53:af:d9:af:fd:71:
         41:fe:df:3f:d3:e7:ae:11:cc:93:90:77:9c:b7:eb:99:14:5f:
         18:a0:d9:c5:17:8b:c7:b6:1f:0f:c0:96:bb:24:ce:c5:dc:45:
         f8:7a:6f:02:4f:a9:d3:d1:d3:ee:30:45:5d:22:3e:cb:bf:73:
         69:ef:e1:18:61:d9:2f:94:84:99:82:70:97:49:78:3b:9b:c0:
         03:5b:b6:5c:91:a4:d9:64:87:8c:b2:92:28:7a:5a:03:1c:7a:
         b1:46:37:3b:9c:d4:39:a4:c3:87:4b:df:8c:b1:6f:1f:cb:36:
         ea:cb:9c:fa:40:1d:be:9a:42:9e:3e:26:cf:81:fb:40:66:f4:
         c1:92:44:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:59:37 2026 by rpki-client