This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a333030303a3a2f33362d3634203d3e20323733313134.roa
File:                     323830333a3739303a333030303a3a2f33362d3634203d3e20323733313134.roa (raw, json)
Hash identifier:          EHWEbEHJ+TrfnX4UjQgAz3SgY0Ce+owSY3NyxmlfcqM=
Subject key identifier:   0E:FA:97:81:3A:89:6F:7D:1A:6B:7E:7D:62:32:73:FA:F8:78:98:50
Certificate issuer:       /CN=9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA
Certificate serial:       1CCC057D45AF45A52E1DD118505062371CD59135
Authority key identifier: 9C:BA:EF:DC:63:E7:4F:3F:18:26:B3:BB:A5:DF:B4:1D:44:A9:7B:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a333030303a3a2f33362d3634203d3e20323733313134.roa
Signing time:             Tue 06 Jan 2026 19:24:59 +0000
ROA not before:           Tue 06 Jan 2026 19:19:59 +0000
ROA not after:            Tue 05 Jan 2027 19:24:59 +0000
asID:                     273114
IP address blocks:        2803:790:3000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:cc:05:7d:45:af:45:a5:2e:1d:d1:18:50:50:62:37:1c:d5:91:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA
        Validity
            Not Before: Jan  6 19:19:59 2026 GMT
            Not After : Jan  5 19:24:59 2027 GMT
        Subject: CN=0EFA97813A896F7D1A6B7E7D623273FAF8789850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a5:7d:d9:50:1b:61:78:4b:d2:8b:af:a2:19:
                    e8:92:52:e6:a9:5b:d4:6a:de:70:5f:8b:02:2d:fb:
                    d6:33:1e:05:07:3b:b4:a3:2d:d4:a9:af:e0:74:03:
                    59:81:de:5e:e3:f9:c5:92:df:00:f3:f7:42:1b:4a:
                    98:18:d7:f2:c2:c7:27:4b:4a:99:de:fc:00:b0:28:
                    f3:44:42:ab:ee:ba:90:71:ed:b0:8b:27:0f:27:33:
                    0a:8e:26:21:41:d1:44:37:1d:80:07:84:b7:4f:29:
                    42:bb:b5:4b:f2:4c:7a:ec:f8:cc:45:83:07:84:b3:
                    e6:4f:f2:4b:74:ad:fd:ec:9f:98:5f:d9:76:72:a6:
                    a8:02:3c:45:28:c8:de:24:71:57:04:5a:ba:7c:4a:
                    0e:8f:ec:89:6f:21:b2:3a:55:b8:24:19:73:a3:0e:
                    1a:3c:e9:4b:a4:fb:2f:c5:7d:b5:b0:10:2c:9e:53:
                    c4:01:bf:66:f7:eb:ca:92:15:f7:f0:46:bd:0d:a6:
                    38:2e:c8:46:bd:20:ed:5e:10:bf:df:93:5e:a9:2b:
                    5c:0a:4a:e8:5e:bd:96:41:6e:18:70:c4:16:80:96:
                    04:a4:f9:42:06:40:18:aa:b0:e8:f9:a1:26:5d:75:
                    c6:0b:f0:bb:1d:07:7d:01:1c:8c:4d:8e:3f:c5:74:
                    11:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:FA:97:81:3A:89:6F:7D:1A:6B:7E:7D:62:32:73:FA:F8:78:98:50
            X509v3 Authority Key Identifier:
                keyid:9C:BA:EF:DC:63:E7:4F:3F:18:26:B3:BB:A5:DF:B4:1D:44:A9:7B:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a333030303a3a2f33362d3634203d3e20323733313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:790:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2c:87:5d:9c:b3:17:83:87:8b:30:05:c3:f6:ab:3c:22:f6:fc:
         98:6e:9b:ae:81:9b:9d:d8:12:12:5b:5e:0d:3b:e1:0f:00:1f:
         15:88:72:74:ef:a7:89:cd:63:3f:c1:e1:b3:2a:51:cc:45:ca:
         af:bc:8d:c3:51:22:3a:32:22:14:41:ad:37:7a:a1:5a:65:ff:
         34:b9:2e:a7:a4:b1:c3:f2:d3:2d:f4:40:d0:aa:4a:3c:3d:80:
         3c:ac:ad:23:d9:d9:c7:59:5f:c6:e5:8f:7f:00:04:93:2c:1d:
         5e:7b:a6:fe:73:5b:8c:fa:28:93:36:27:bb:ae:00:d8:81:92:
         6f:6d:2a:e6:f5:0b:98:b7:b8:fc:6e:26:2e:a9:b5:e9:49:0b:
         9a:b7:4e:08:c4:53:2c:58:ac:ac:80:71:a9:ec:bd:ae:fc:ee:
         6d:70:f4:33:93:e0:92:0f:31:d7:f5:7a:95:3d:19:ec:6f:31:
         95:3b:2a:0a:9a:da:22:5a:7e:c8:13:d1:04:4b:3d:a9:10:23:
         c3:9f:67:d6:80:3e:01:5c:ed:78:ff:41:65:82:a5:a2:19:d3:
         8a:53:60:1e:c6:58:18:c3:02:4b:f5:dc:cb:a8:c8:b4:3c:2c:
         8d:48:35:a6:d2:67:da:9b:7f:4c:81:a9:6e:a8:6a:f5:bd:f9:
         d1:2c:74:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:05:29 2026 by rpki-client