This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/323830333a396332303a3a2f33322d3438203d3e203532343638.roa
File:                     323830333a396332303a3a2f33322d3438203d3e203532343638.roa (raw, json)
Hash identifier:          +72Fkja4/TCVNee1FDgLJNhdqYW8fYNmMRz71S1BW2c=
Subject key identifier:   E3:4D:27:13:C0:C8:11:1E:1A:98:A3:ED:7A:E1:31:3F:9C:25:9F:D6
Certificate issuer:       /CN=87170FE663930DA5DB9475CEAC8B0600B2C02832
Certificate serial:       08B4118179D24E4C591F5AA7309B58663B1F31EB
Authority key identifier: 87:17:0F:E6:63:93:0D:A5:DB:94:75:CE:AC:8B:06:00:B2:C0:28:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/323830333a396332303a3a2f33322d3438203d3e203532343638.roa
Signing time:             Tue 06 Jan 2026 19:04:01 +0000
ROA not before:           Tue 06 Jan 2026 18:59:01 +0000
ROA not after:            Tue 05 Jan 2027 19:04:01 +0000
asID:                     52468
IP address blocks:        2803:9c20::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.crl
                          rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 15 Feb 2026 21:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:b4:11:81:79:d2:4e:4c:59:1f:5a:a7:30:9b:58:66:3b:1f:31:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87170FE663930DA5DB9475CEAC8B0600B2C02832
        Validity
            Not Before: Jan  6 18:59:01 2026 GMT
            Not After : Jan  5 19:04:01 2027 GMT
        Subject: CN=E34D2713C0C8111E1A98A3ED7AE1313F9C259FD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0f:bd:2e:c7:2e:0a:83:b1:3c:27:65:14:fd:
                    2a:f6:23:6d:5f:67:5b:49:b5:85:7b:93:a9:bf:8c:
                    48:aa:2b:fe:f3:cf:43:d7:2f:ea:9b:1a:1d:52:7c:
                    4d:41:5f:34:da:06:64:2b:b3:2f:d0:cf:38:d7:a6:
                    17:38:d5:d4:58:f7:60:72:5f:ec:e6:e8:29:7d:ba:
                    d5:35:7a:6d:fb:84:66:bf:87:2c:6e:8a:ec:fd:5b:
                    22:be:1f:85:6a:3e:29:9b:68:f8:48:b6:55:ec:9e:
                    d2:14:35:fe:14:66:f8:00:f8:21:97:c9:33:e1:3a:
                    7f:2e:eb:ed:73:59:34:11:d4:94:44:79:ae:55:0e:
                    f7:65:24:b8:15:aa:fd:88:fd:43:47:71:6d:ee:15:
                    ac:a0:0b:70:57:54:a2:92:c3:a4:8e:ae:e1:8d:ce:
                    04:81:e4:ac:d4:34:26:6d:46:0e:51:0c:09:be:98:
                    2e:a6:55:6c:ce:84:e4:6d:44:d5:87:59:71:c6:12:
                    6a:7b:90:0c:c2:15:84:93:e8:fb:15:4a:e4:64:95:
                    8e:28:5f:e5:17:d8:13:33:80:13:eb:80:21:ac:cb:
                    17:ba:ed:e3:9c:d8:60:c7:ea:fa:73:48:6f:6b:79:
                    51:bd:b2:53:d8:2e:eb:9c:3a:ec:33:1b:0d:f1:84:
                    42:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:4D:27:13:C0:C8:11:1E:1A:98:A3:ED:7A:E1:31:3F:9C:25:9F:D6
            X509v3 Authority Key Identifier:
                keyid:87:17:0F:E6:63:93:0D:A5:DB:94:75:CE:AC:8B:06:00:B2:C0:28:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/323830333a396332303a3a2f33322d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:e0:19:2f:1c:4a:d8:dc:8d:9a:e0:5f:ec:69:a5:0f:91:2d:
         e8:e0:16:9c:3c:cc:84:b3:60:9b:8c:74:4b:3c:aa:e6:00:21:
         ba:78:7e:63:9f:57:ca:d4:3f:46:20:79:11:44:f9:6e:8c:ef:
         1d:10:b8:1d:de:3d:69:97:37:0d:c6:4d:55:83:18:5d:7b:09:
         d7:8d:58:b1:79:c3:54:79:a1:2d:6d:1a:59:9a:12:57:ce:38:
         9e:be:a0:26:93:df:aa:f6:f3:29:95:93:67:d0:ac:e9:ec:e9:
         77:77:70:8d:b9:04:83:09:56:93:81:3e:b8:5f:f0:54:d3:d7:
         a7:fe:ea:3b:39:1e:23:3a:c4:97:43:7b:89:2b:35:e4:77:2f:
         2c:1d:b9:58:52:63:82:82:4b:98:87:1d:9d:16:7e:f6:a3:24:
         c7:83:c7:f1:52:0f:c5:1a:c4:7e:03:0d:05:d6:72:15:b5:b3:
         b5:bf:60:d4:4a:33:9d:09:e3:2d:0f:24:0d:f8:5c:09:22:65:
         d9:d2:b5:ce:4e:e9:ef:eb:5c:6d:56:45:fc:f4:32:a0:0d:56:
         75:4a:4b:f3:1f:3d:35:8e:de:3e:a8:a9:7b:d9:67:1e:d1:4c:
         82:dd:f2:fb:89:0a:54:09:a7:91:12:3d:26:c3:24:85:fe:d3:
         93:fc:bb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 18:42:36 2026 by rpki-client