This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a373030303a3a2f33362d3634203d3e20323733313134.roa
File:                     323830333a3739303a373030303a3a2f33362d3634203d3e20323733313134.roa (raw, json)
Hash identifier:          wGa9UHRKiXJ/uF0byenLz8fuTLoUKRVTFVQiQvyQub4=
Subject key identifier:   10:41:2A:EF:7C:92:0F:74:0A:F8:BA:64:45:A9:3D:14:5B:93:E9:D2
Certificate issuer:       /CN=9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA
Certificate serial:       38815857B9454514B78FB659F2D96A85CD3F8781
Authority key identifier: 9C:BA:EF:DC:63:E7:4F:3F:18:26:B3:BB:A5:DF:B4:1D:44:A9:7B:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a373030303a3a2f33362d3634203d3e20323733313134.roa
Signing time:             Tue 06 Jan 2026 19:25:00 +0000
ROA not before:           Tue 06 Jan 2026 19:20:00 +0000
ROA not after:            Tue 05 Jan 2027 19:25:00 +0000
asID:                     273114
IP address blocks:        2803:790:7000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:81:58:57:b9:45:45:14:b7:8f:b6:59:f2:d9:6a:85:cd:3f:87:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA
        Validity
            Not Before: Jan  6 19:20:00 2026 GMT
            Not After : Jan  5 19:25:00 2027 GMT
        Subject: CN=10412AEF7C920F740AF8BA6445A93D145B93E9D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bd:b7:8e:f3:23:36:39:46:d7:3c:34:84:7c:
                    cc:fb:ed:cf:27:48:22:83:9d:f2:e8:51:00:16:d7:
                    17:52:64:6f:e3:9e:16:da:9b:9f:de:68:f0:18:b0:
                    64:00:e7:ca:eb:2f:09:0f:74:ae:6b:d1:53:c8:b2:
                    7b:1c:40:12:da:1d:21:c7:de:54:59:19:17:69:f5:
                    92:d7:6e:09:2d:26:8f:b3:f6:d8:bb:63:a3:42:7a:
                    c3:dd:8a:bc:fe:86:b2:a0:ae:18:b3:7d:94:92:c2:
                    6d:52:50:11:f2:25:cf:49:f0:f2:6d:04:15:dd:f4:
                    17:86:01:45:8e:f5:72:05:b1:c4:e7:e3:9c:00:93:
                    6e:54:63:1d:d3:8f:ff:97:1d:4b:2f:c2:d3:32:68:
                    f2:bf:94:49:c7:b6:38:fa:7e:a0:76:06:ec:df:02:
                    9e:85:47:e7:d4:3c:ce:b2:a1:dc:aa:89:82:3e:0d:
                    de:61:e8:80:ac:99:1a:5c:a6:d4:14:7b:1e:4a:5a:
                    1d:fe:17:ca:01:34:15:8d:62:53:d2:95:cc:e3:7e:
                    00:1e:1c:ed:de:5a:23:a9:70:9a:db:b3:b7:b0:7f:
                    fe:d6:df:bc:6d:26:14:37:8d:7b:da:09:df:28:60:
                    5e:d9:e4:7f:b4:28:ea:4b:f4:ff:8b:37:57:33:98:
                    b2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:41:2A:EF:7C:92:0F:74:0A:F8:BA:64:45:A9:3D:14:5B:93:E9:D2
            X509v3 Authority Key Identifier:
                keyid:9C:BA:EF:DC:63:E7:4F:3F:18:26:B3:BB:A5:DF:B4:1D:44:A9:7B:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a373030303a3a2f33362d3634203d3e20323733313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:790:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9f:ae:1f:23:02:58:59:a1:79:45:58:fd:db:5b:5a:36:af:1e:
         4c:38:7f:d0:a9:7e:67:4c:78:78:76:e7:3d:ff:ef:da:5a:d0:
         bb:aa:b5:ff:43:be:4d:99:4a:f1:98:0e:39:b7:91:3b:2c:ce:
         02:8e:cf:0f:9e:22:88:21:40:4f:82:bb:0c:3e:d4:63:39:19:
         58:a5:bc:a7:77:ae:0f:25:d6:da:90:c4:e5:e6:b6:33:b8:cd:
         da:33:8e:35:11:36:95:65:a0:26:c5:99:e9:62:3b:98:0f:64:
         7e:cb:c4:fe:88:2c:d7:56:4f:ca:63:47:ee:9a:17:0d:e7:07:
         38:b2:70:f7:fc:a3:e3:2c:1f:d9:5c:a9:6a:8c:3a:21:57:c7:
         65:cf:5e:83:cc:f2:63:64:63:c5:4b:06:fd:9d:bb:31:8b:51:
         08:ba:9a:04:cc:a4:a2:58:14:2a:15:5f:fb:fd:92:84:d9:70:
         c9:32:5e:e4:46:ef:36:95:08:10:f8:02:b9:35:59:e7:9e:fe:
         e2:92:2d:39:fd:71:48:dc:10:79:91:39:de:dd:cd:16:31:38:
         22:ba:5a:cf:95:05:e3:36:de:40:bf:f3:e9:e2:76:6f:dd:67:
         41:6b:ed:bf:5f:63:f2:cd:52:88:70:31:0f:29:90:e7:34:5e:
         df:89:18:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:06:28 2026 by rpki-client