This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a383030303a3a2f33362d3634203d3e20323733313134.roa
File:                     323830333a3739303a383030303a3a2f33362d3634203d3e20323733313134.roa (raw, json)
Hash identifier:          pJlMhtXKf7hBgUhVUrxntDoEwg8QnYAUSkQBulkuLcg=
Subject key identifier:   1B:ED:E8:60:36:3B:7F:4B:37:12:68:E6:4D:AB:80:DA:AE:F3:5F:2A
Certificate issuer:       /CN=9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA
Certificate serial:       1075D9BEDF4B554A92FACE0C0AF85D3D2C77DB72
Authority key identifier: 9C:BA:EF:DC:63:E7:4F:3F:18:26:B3:BB:A5:DF:B4:1D:44:A9:7B:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a383030303a3a2f33362d3634203d3e20323733313134.roa
Signing time:             Tue 06 Jan 2026 19:24:58 +0000
ROA not before:           Tue 06 Jan 2026 19:19:58 +0000
ROA not after:            Tue 05 Jan 2027 19:24:58 +0000
asID:                     273114
IP address blocks:        2803:790:8000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:75:d9:be:df:4b:55:4a:92:fa:ce:0c:0a:f8:5d:3d:2c:77:db:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA
        Validity
            Not Before: Jan  6 19:19:58 2026 GMT
            Not After : Jan  5 19:24:58 2027 GMT
        Subject: CN=1BEDE860363B7F4B371268E64DAB80DAAEF35F2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7f:63:ac:91:5c:73:95:21:f5:25:55:d2:18:
                    cc:16:64:42:f3:22:b3:71:d2:11:c6:c2:4e:14:90:
                    e0:24:a6:2e:bd:28:7f:31:87:27:a2:60:d0:a8:92:
                    86:18:7e:30:9e:ec:7a:77:ad:1f:ef:e2:09:11:1e:
                    58:6b:ae:79:32:a0:78:11:fb:41:d2:8f:7d:76:a0:
                    94:6a:89:be:bf:89:02:55:61:74:d3:96:12:8b:2b:
                    d5:77:30:0c:e2:0a:e0:8e:34:28:64:e9:64:46:c5:
                    8f:d2:ea:c6:3f:f9:74:b5:c6:4a:c0:43:9e:59:ad:
                    6c:64:80:99:35:fa:40:7c:87:a2:53:f3:17:fe:dd:
                    6a:48:52:04:df:cb:86:ec:c4:c7:71:8d:48:dc:9a:
                    92:fc:6a:92:43:c6:62:53:a0:24:ba:98:03:c1:25:
                    a5:bc:86:02:b6:43:a1:c1:35:7a:df:be:7a:17:fd:
                    3f:66:3c:e7:8e:5f:ac:f5:d4:87:a2:7c:d8:41:32:
                    ba:5f:96:be:b4:93:5b:6f:62:8c:02:0b:01:b1:39:
                    fe:13:7d:31:ce:58:c4:ad:34:59:93:46:8d:5c:f8:
                    ab:eb:eb:87:d1:f4:78:b2:e1:9f:dd:c9:c9:1f:a3:
                    3b:88:1b:60:8f:74:3a:ac:da:7b:8d:81:fb:2a:a7:
                    2c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:ED:E8:60:36:3B:7F:4B:37:12:68:E6:4D:AB:80:DA:AE:F3:5F:2A
            X509v3 Authority Key Identifier:
                keyid:9C:BA:EF:DC:63:E7:4F:3F:18:26:B3:BB:A5:DF:B4:1D:44:A9:7B:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a383030303a3a2f33362d3634203d3e20323733313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:790:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2a:6c:33:e6:b9:3f:e8:60:c0:f3:19:c5:f7:9c:fd:76:2d:6b:
         07:de:7b:21:a0:e0:47:70:0d:ff:b3:f3:78:1b:76:68:fc:71:
         9f:a4:4b:86:ff:04:23:2b:3b:35:9b:16:71:a9:da:71:e9:e8:
         66:43:54:94:52:8f:c6:1f:6f:eb:57:70:6a:f0:94:d9:84:48:
         a6:8a:c2:66:99:8e:7c:57:25:e7:44:79:83:a7:07:10:b4:5f:
         b5:60:ef:00:a1:92:a2:c4:a5:c2:67:0b:1a:1c:63:df:5b:50:
         1f:15:50:9e:aa:00:b2:93:50:d8:a7:38:41:52:86:6d:b5:ff:
         b3:db:36:97:89:31:09:5c:bc:10:c3:49:5e:cd:83:53:2f:b2:
         97:cc:36:ce:04:26:72:8d:d2:0d:42:c4:2a:03:ac:5a:1c:9e:
         0e:e6:02:6c:30:a8:45:cf:9b:17:d3:02:79:52:07:26:40:06:
         82:ae:61:16:ad:d7:14:a5:af:b6:db:76:08:b6:62:4b:09:62:
         8e:81:59:37:43:72:96:ce:3c:62:e9:2e:4c:91:97:05:37:76:
         69:03:91:fc:9f:1e:15:8e:d5:10:64:be:08:1e:9b:60:2a:1a:
         5b:eb:d5:a8:6e:9e:62:d9:6e:8b:9b:28:d4:7e:bd:ed:d8:a4:
         d5:a4:c3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:05:43 2026 by rpki-client