This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE4F4B537633F057E5D7A50F05241B24ECB6101701C1CD692F3E7A681925BE62/0/323830333a313064303a3a2f33322d3332203d3e20323733393639.roa
File:                     323830333a313064303a3a2f33322d3332203d3e20323733393639.roa (raw, json)
Hash identifier:          dDVcalpIOxTaQxtVLc9yKzlqwylXZMFTFUE2iRUmGsY=
Subject key identifier:   89:7F:33:C5:F2:89:C9:E4:ED:1A:A0:57:40:31:ED:30:75:08:CF:17
Certificate issuer:       /CN=958A517F1B57F15CAC71A4ABE5A03A21F805ED14
Certificate serial:       3DD6B8CE987A6F440F709AE90847E6093D00DE5D
Authority key identifier: 95:8A:51:7F:1B:57:F1:5C:AC:71:A4:AB:E5:A0:3A:21:F8:05:ED:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958A517F1B57F15CAC71A4ABE5A03A21F805ED14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE4F4B537633F057E5D7A50F05241B24ECB6101701C1CD692F3E7A681925BE62/0/323830333a313064303a3a2f33322d3332203d3e20323733393639.roa
Signing time:             Tue 11 Nov 2025 23:52:21 +0000
ROA not before:           Tue 11 Nov 2025 23:47:21 +0000
ROA not after:            Tue 10 Nov 2026 23:52:21 +0000
asID:                     273969
IP address blocks:        2803:10d0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE4F4B537633F057E5D7A50F05241B24ECB6101701C1CD692F3E7A681925BE62/0/958A517F1B57F15CAC71A4ABE5A03A21F805ED14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE4F4B537633F057E5D7A50F05241B24ECB6101701C1CD692F3E7A681925BE62/0/958A517F1B57F15CAC71A4ABE5A03A21F805ED14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958A517F1B57F15CAC71A4ABE5A03A21F805ED14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 12 Dec 2025 00:27:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:d6:b8:ce:98:7a:6f:44:0f:70:9a:e9:08:47:e6:09:3d:00:de:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=958A517F1B57F15CAC71A4ABE5A03A21F805ED14
        Validity
            Not Before: Nov 11 23:47:21 2025 GMT
            Not After : Nov 10 23:52:21 2026 GMT
        Subject: CN=897F33C5F289C9E4ED1AA0574031ED307508CF17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8a:db:b5:d0:6a:7c:92:4b:49:9f:51:c4:ec:
                    30:45:11:67:fc:30:42:a4:37:d7:c2:0b:6d:a2:d7:
                    4a:f1:f0:0e:22:ca:41:43:67:8e:2f:3e:30:cb:60:
                    1b:a1:32:99:73:24:9c:56:7c:65:5b:ec:d1:97:04:
                    82:df:b0:f3:e8:56:1a:82:0c:93:e0:26:a5:51:73:
                    2d:7e:8c:43:4e:ed:29:f6:f3:8e:61:ec:77:38:df:
                    b6:e7:63:3c:ab:c6:d3:af:13:17:7b:e0:c9:e3:d9:
                    1a:f8:f8:e0:12:a3:5d:f8:23:bc:d5:0f:75:e7:d2:
                    a6:1f:9d:47:79:44:82:85:72:bc:d1:69:b1:77:af:
                    df:8d:ee:ef:19:5c:ac:c8:cc:be:f5:8d:d9:3f:73:
                    f7:6d:25:67:de:48:84:62:75:61:82:57:7a:2e:de:
                    9c:3e:17:63:e7:40:08:75:94:af:b5:c1:d6:0b:df:
                    1a:35:5e:10:dc:97:b6:dc:34:58:9a:28:4b:81:49:
                    04:9f:1f:f5:a1:fe:14:24:00:b6:a3:df:91:10:60:
                    dd:65:e6:7f:48:38:89:16:b4:f2:f0:ff:2d:7b:16:
                    5e:3b:f4:a9:98:5e:7e:55:bd:46:6f:51:42:b9:6c:
                    d7:43:c0:c9:84:54:20:84:5f:fe:07:44:ef:36:f9:
                    bd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:7F:33:C5:F2:89:C9:E4:ED:1A:A0:57:40:31:ED:30:75:08:CF:17
            X509v3 Authority Key Identifier:
                keyid:95:8A:51:7F:1B:57:F1:5C:AC:71:A4:AB:E5:A0:3A:21:F8:05:ED:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE4F4B537633F057E5D7A50F05241B24ECB6101701C1CD692F3E7A681925BE62/0/958A517F1B57F15CAC71A4ABE5A03A21F805ED14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958A517F1B57F15CAC71A4ABE5A03A21F805ED14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE4F4B537633F057E5D7A50F05241B24ECB6101701C1CD692F3E7A681925BE62/0/323830333a313064303a3a2f33322d3332203d3e20323733393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:10d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:05:25:70:99:f7:4e:1b:b2:3c:1b:8f:1a:e4:b0:4c:8c:c5:
         69:ab:2e:58:34:7e:e9:ee:9a:0d:ec:0e:f8:bf:d6:fc:71:49:
         01:b0:99:6b:c9:8e:c7:a3:07:00:d1:92:ed:4d:6a:f6:84:ce:
         53:b2:d5:54:79:c4:ac:27:3b:63:5b:be:76:15:f5:a1:d8:d8:
         70:3b:19:c3:4e:48:72:66:52:b4:d7:b8:fd:b0:95:52:2b:b5:
         c8:5d:a6:23:a8:36:ae:df:98:f9:85:b0:4a:e2:55:89:ac:44:
         85:ef:61:fc:e0:1a:87:77:72:29:f9:47:a2:4e:29:df:c7:8c:
         ff:b9:01:b9:06:7d:82:ef:25:29:3c:c8:af:6d:2c:6d:da:d1:
         55:a0:f1:66:46:49:d2:a9:1b:00:37:ab:da:ed:37:34:07:a7:
         e1:88:08:a7:98:84:50:fa:f3:17:58:23:1b:39:83:35:a5:bd:
         a8:3f:d4:cd:4b:cd:65:9c:23:de:e6:0a:78:b3:ef:8e:61:be:
         84:0f:10:78:15:06:1a:b0:88:56:9b:93:0b:97:19:4e:da:12:
         53:fe:24:67:5b:8f:f8:2c:70:50:ca:ec:a3:51:e0:79:64:5a:
         68:6e:64:69:e4:25:2c:4b:ce:6a:9b:66:95:54:45:f9:cf:93:
         53:59:33:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 22:26:19 2025 by rpki-client