This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/323830333a396332303a3a2f33322d3438203d3e20323634363638.roa
File:                     323830333a396332303a3a2f33322d3438203d3e20323634363638.roa (raw, json)
Hash identifier:          zRzppmdk//4dvk6K3AhfrgKNJiPIMusm93rHYhETNzU=
Subject key identifier:   01:E6:DF:EF:D4:E2:83:7D:81:01:7E:44:2E:EB:AB:A3:AE:67:EF:45
Certificate issuer:       /CN=87170FE663930DA5DB9475CEAC8B0600B2C02832
Certificate serial:       454BCE4803B7FFC3376F15C9F9D71660EB44F109
Authority key identifier: 87:17:0F:E6:63:93:0D:A5:DB:94:75:CE:AC:8B:06:00:B2:C0:28:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/323830333a396332303a3a2f33322d3438203d3e20323634363638.roa
Signing time:             Tue 06 Jan 2026 19:04:01 +0000
ROA not before:           Tue 06 Jan 2026 18:59:01 +0000
ROA not after:            Tue 05 Jan 2027 19:04:01 +0000
asID:                     264668
IP address blocks:        2803:9c20::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.crl
                          rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 00:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:4b:ce:48:03:b7:ff:c3:37:6f:15:c9:f9:d7:16:60:eb:44:f1:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87170FE663930DA5DB9475CEAC8B0600B2C02832
        Validity
            Not Before: Jan  6 18:59:01 2026 GMT
            Not After : Jan  5 19:04:01 2027 GMT
        Subject: CN=01E6DFEFD4E2837D81017E442EEBABA3AE67EF45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6e:7f:86:2d:e9:9f:0b:1d:99:44:05:77:56:
                    46:3e:70:2c:41:f6:71:60:f4:51:cc:a2:6e:34:a3:
                    4a:6e:e4:78:97:2b:71:9a:cc:d6:bf:9f:1f:eb:fc:
                    17:a4:16:2f:ea:b2:f3:37:7c:b8:70:49:17:37:13:
                    1d:37:93:9a:00:a4:74:97:dd:1e:b6:92:85:61:a9:
                    cb:5e:68:30:98:08:82:fb:62:d7:0a:ec:4d:12:76:
                    0f:b1:7c:2e:0f:7e:fd:cd:0d:8d:5c:fd:d4:ed:a8:
                    71:f2:02:8e:6d:ff:eb:82:7a:7c:e6:5f:40:e9:3c:
                    61:b4:7b:dd:46:9f:95:34:ee:49:e6:8d:3d:d7:59:
                    54:96:1b:a8:5c:28:6e:c6:f4:95:93:30:c9:58:b4:
                    a1:e7:ac:48:04:20:f6:61:c0:77:d6:9f:94:ed:15:
                    47:37:c9:f1:d6:d0:cb:d3:e9:e5:f8:ca:92:c3:3a:
                    1c:3c:a7:90:44:ff:d6:f0:62:79:ed:81:15:6b:08:
                    1b:00:74:ba:b8:79:c5:42:d8:cd:2b:88:3d:43:e3:
                    2b:4d:3a:04:97:3e:4e:39:89:bd:3d:89:4c:8f:8a:
                    40:ae:6c:30:1b:1c:ad:97:a9:19:0d:fc:5b:47:c5:
                    d8:27:f4:b1:a2:dc:9a:e4:66:7b:1a:3a:a7:72:5b:
                    ab:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E6:DF:EF:D4:E2:83:7D:81:01:7E:44:2E:EB:AB:A3:AE:67:EF:45
            X509v3 Authority Key Identifier:
                keyid:87:17:0F:E6:63:93:0D:A5:DB:94:75:CE:AC:8B:06:00:B2:C0:28:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/323830333a396332303a3a2f33322d3438203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:69:01:fc:37:60:b7:70:54:e6:50:23:5d:39:51:cc:93:69:
         c8:f0:c6:ab:3a:2f:8f:08:c6:54:92:e0:d5:ea:39:12:81:be:
         71:4d:70:2c:a0:8e:0e:e5:64:ed:91:f3:76:70:53:6d:ea:9f:
         18:7d:13:fb:35:ab:7a:50:c0:c4:0a:b9:e7:68:c6:af:ab:ea:
         e6:b3:8f:e3:78:32:2d:4f:02:72:cc:c7:8b:4e:d7:ad:46:6c:
         46:ff:9b:a0:91:15:bb:f1:ca:4c:cc:af:86:0e:d7:8e:b7:a5:
         c7:97:08:7c:b0:8f:16:08:ea:ea:cc:28:98:74:bc:e4:92:95:
         ad:70:5c:e4:72:82:8f:64:62:3d:e1:d3:98:28:1e:b1:10:7e:
         67:87:50:ee:c0:b5:c8:d7:48:bb:87:90:16:7d:1f:a1:5f:0c:
         af:54:22:0d:b8:e4:7d:19:c4:89:7e:05:e1:a2:6a:d1:b0:77:
         8f:b0:27:a4:e5:86:e7:30:91:5b:f0:24:ac:3d:4f:3b:61:3e:
         19:e0:21:84:48:f6:7f:5f:c3:50:74:56:db:b5:2f:7a:66:b2:
         0c:13:17:04:5c:ea:ad:eb:2a:cd:1d:d9:52:7b:13:b5:02:9f:
         d9:25:aa:24:31:62:2f:96:d0:56:9e:35:66:2c:60:12:ef:73:
         ef:b6:96:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 14:55:08 2026 by rpki-client