This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F777E57EA6DBD25E9E0E1CE306C770BC91EE8467401527C91965C3828FD00069/0/323830333a373736303a3a2f33322d3438203d3e20323639383239.roa
File:                     323830333a373736303a3a2f33322d3438203d3e20323639383239.roa (raw, json)
Hash identifier:          pxhWw8BHxLPKQ3kONa5I0K0qZEC0PfiMwjItj4/ZBvk=
Subject key identifier:   98:A1:6D:A2:ED:32:30:9E:F9:02:E1:DC:63:79:8B:6C:21:1B:F7:D4
Certificate issuer:       /CN=0F648EC543C3C7C2094A45E4678D768C42B868C7
Certificate serial:       697F83432A7B4E08466C45D48110B272A1A4D6D8
Authority key identifier: 0F:64:8E:C5:43:C3:C7:C2:09:4A:45:E4:67:8D:76:8C:42:B8:68:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F648EC543C3C7C2094A45E4678D768C42B868C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F777E57EA6DBD25E9E0E1CE306C770BC91EE8467401527C91965C3828FD00069/0/323830333a373736303a3a2f33322d3438203d3e20323639383239.roa
Signing time:             Tue 06 Jan 2026 19:24:04 +0000
ROA not before:           Tue 06 Jan 2026 19:19:04 +0000
ROA not after:            Tue 05 Jan 2027 19:24:04 +0000
asID:                     269829
IP address blocks:        2803:7760::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F777E57EA6DBD25E9E0E1CE306C770BC91EE8467401527C91965C3828FD00069/0/0F648EC543C3C7C2094A45E4678D768C42B868C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F777E57EA6DBD25E9E0E1CE306C770BC91EE8467401527C91965C3828FD00069/0/0F648EC543C3C7C2094A45E4678D768C42B868C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F648EC543C3C7C2094A45E4678D768C42B868C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:7f:83:43:2a:7b:4e:08:46:6c:45:d4:81:10:b2:72:a1:a4:d6:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F648EC543C3C7C2094A45E4678D768C42B868C7
        Validity
            Not Before: Jan  6 19:19:04 2026 GMT
            Not After : Jan  5 19:24:04 2027 GMT
        Subject: CN=98A16DA2ED32309EF902E1DC63798B6C211BF7D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:78:56:04:b0:c8:63:e6:b0:b2:e4:41:ee:ae:
                    c8:15:d6:33:81:ca:b8:e2:69:c7:4e:1f:e2:cf:0e:
                    f0:f6:ff:63:2f:c3:bb:55:fd:2b:73:23:cf:de:1b:
                    82:68:c8:86:7a:fe:be:0a:3f:ea:dc:3e:fa:73:13:
                    cd:d5:2f:4d:7e:6a:61:ed:f4:58:8d:70:d5:9d:d0:
                    c2:5f:e7:d9:4a:c9:1a:e2:63:d6:56:9a:3f:32:6e:
                    2f:ee:8d:f1:1f:44:32:66:0f:f4:cd:ac:0c:02:ce:
                    53:8f:0b:12:e3:e8:02:c1:ac:eb:64:31:83:f8:14:
                    65:1a:d3:a3:d5:78:44:b9:65:df:ff:c2:36:9f:b0:
                    39:7d:c1:6b:da:8b:08:34:3e:45:b3:ef:f5:22:66:
                    43:61:df:3f:be:e6:d7:af:a4:21:53:17:a4:f1:e2:
                    35:55:b7:b6:63:ae:04:e3:ef:79:9a:6f:ef:ca:43:
                    74:6a:76:4e:c9:94:7b:5b:90:a2:03:47:86:4a:84:
                    79:c1:51:d8:36:ef:69:51:fd:c1:a5:c4:80:16:3c:
                    1a:f4:06:47:8f:e9:7b:52:1e:54:06:06:22:7f:a8:
                    f1:ba:7c:c1:a4:c4:2d:40:60:c9:2f:6a:a8:ff:3f:
                    e1:87:0d:e3:3d:02:97:09:eb:d6:88:c8:9a:9d:ab:
                    64:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A1:6D:A2:ED:32:30:9E:F9:02:E1:DC:63:79:8B:6C:21:1B:F7:D4
            X509v3 Authority Key Identifier:
                keyid:0F:64:8E:C5:43:C3:C7:C2:09:4A:45:E4:67:8D:76:8C:42:B8:68:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F777E57EA6DBD25E9E0E1CE306C770BC91EE8467401527C91965C3828FD00069/0/0F648EC543C3C7C2094A45E4678D768C42B868C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F648EC543C3C7C2094A45E4678D768C42B868C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F777E57EA6DBD25E9E0E1CE306C770BC91EE8467401527C91965C3828FD00069/0/323830333a373736303a3a2f33322d3438203d3e20323639383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7760::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:99:cf:59:fb:c9:f9:b0:1e:47:78:43:78:68:af:86:68:2a:
         d3:7d:bf:a9:8d:d5:dc:72:9a:0b:4c:7c:12:81:8d:33:90:e7:
         76:ea:75:69:06:aa:6b:cd:2e:70:b3:1e:93:81:59:b3:b2:be:
         c5:44:49:39:00:1d:e9:17:ab:dc:26:cb:2f:79:50:7b:fa:e9:
         49:b4:0d:52:3b:ec:c2:4b:88:98:1c:dd:a3:d7:92:26:70:bd:
         9c:bd:f1:87:fa:a0:4e:63:4a:dc:1e:46:10:24:82:04:94:af:
         2e:68:dd:93:85:fa:d0:4d:69:bd:0d:78:e0:a1:57:95:a7:20:
         03:f5:41:0f:fd:22:bd:b3:ee:d6:31:fc:33:26:53:5d:c2:e5:
         6a:de:fa:a7:d7:4d:3b:9f:2e:67:19:69:7b:d9:97:9d:5f:e7:
         48:27:2e:17:ed:bb:c9:de:b2:9e:74:56:e9:c7:41:51:3b:ea:
         34:4c:9d:80:b9:18:77:b7:3e:01:a7:6f:c6:ba:da:30:bd:b4:
         c0:a0:29:ca:21:28:4a:fc:1f:83:85:c9:4e:45:5d:ae:a4:9f:
         30:a9:aa:f4:f0:ed:d8:fe:a6:57:c9:6f:49:39:57:b7:8c:47:
         fb:78:85:64:64:0f:49:c9:44:70:13:d5:4c:0d:28:4f:6c:ca:
         01:25:ee:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:05:15 2026 by rpki-client