This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68CFB0FCBC226AFC08760338ADBF84DD9A5B072396FBCE375EB0685B506A99FB/0/323830333a363363303a3a2f33322d3438203d3e20323635373338.roa
File:                     323830333a363363303a3a2f33322d3438203d3e20323635373338.roa (raw, json)
Hash identifier:          SZjNPIItIGURBq+0UdZkujfInkq9IVbPhQuO8FgupNk=
Subject key identifier:   61:80:71:77:35:88:9D:F6:22:35:B3:FD:F4:80:48:17:CC:CC:65:BE
Certificate issuer:       /CN=9F8EC7CE66A67C20F1A24E220E0701A4B8129C9E
Certificate serial:       23A2B1AE87BCB1AFA82C66669D7190BD46165796
Authority key identifier: 9F:8E:C7:CE:66:A6:7C:20:F1:A2:4E:22:0E:07:01:A4:B8:12:9C:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F8EC7CE66A67C20F1A24E220E0701A4B8129C9E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/68CFB0FCBC226AFC08760338ADBF84DD9A5B072396FBCE375EB0685B506A99FB/0/323830333a363363303a3a2f33322d3438203d3e20323635373338.roa
Signing time:             Tue 06 Jan 2026 19:06:55 +0000
ROA not before:           Tue 06 Jan 2026 19:01:55 +0000
ROA not after:            Tue 05 Jan 2027 19:06:55 +0000
asID:                     265738
IP address blocks:        2803:63c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/68CFB0FCBC226AFC08760338ADBF84DD9A5B072396FBCE375EB0685B506A99FB/0/9F8EC7CE66A67C20F1A24E220E0701A4B8129C9E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/68CFB0FCBC226AFC08760338ADBF84DD9A5B072396FBCE375EB0685B506A99FB/0/9F8EC7CE66A67C20F1A24E220E0701A4B8129C9E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F8EC7CE66A67C20F1A24E220E0701A4B8129C9E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:a2:b1:ae:87:bc:b1:af:a8:2c:66:66:9d:71:90:bd:46:16:57:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F8EC7CE66A67C20F1A24E220E0701A4B8129C9E
        Validity
            Not Before: Jan  6 19:01:55 2026 GMT
            Not After : Jan  5 19:06:55 2027 GMT
        Subject: CN=6180717735889DF62235B3FDF4804817CCCC65BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e0:15:9d:7c:63:bb:bf:ee:e1:1b:6f:e6:d8:
                    3a:8b:72:b8:d1:55:6b:95:b1:65:9f:5b:c8:27:9a:
                    7b:71:5c:17:7b:c8:36:f1:e5:98:da:6e:4a:66:d9:
                    aa:ca:8f:11:1b:34:05:67:de:11:6e:84:05:29:3c:
                    35:fc:56:7f:14:bb:46:c7:3a:77:2a:e8:cf:53:f1:
                    76:82:0a:11:a5:de:2f:fd:98:a8:40:01:58:68:4d:
                    86:72:bc:33:e3:38:28:6b:f2:d8:1a:b2:26:f2:4e:
                    d6:94:1a:d3:34:6b:2e:1d:56:8e:cd:34:ba:cd:cc:
                    68:9a:14:82:35:5c:d6:ae:76:ee:c6:40:11:86:15:
                    62:ac:32:9b:42:01:e1:b3:cf:dc:52:9c:41:89:4b:
                    f7:77:05:d2:7f:3e:c2:41:da:29:b6:97:a1:a2:89:
                    0b:a6:4b:7d:2c:36:e9:17:6c:a1:a3:d3:a2:63:b3:
                    e3:2e:43:62:13:18:2e:11:b4:ae:0e:a8:a8:57:18:
                    04:41:b9:96:49:e7:09:1f:a2:32:f2:a2:13:16:63:
                    b6:cb:22:e6:78:42:45:c1:44:5e:cd:ee:a8:b0:37:
                    94:38:5d:59:dd:cd:50:b4:04:2b:1c:49:73:7a:26:
                    e9:b5:ff:31:b3:2f:15:83:7a:03:81:f0:78:b5:ce:
                    6a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:80:71:77:35:88:9D:F6:22:35:B3:FD:F4:80:48:17:CC:CC:65:BE
            X509v3 Authority Key Identifier:
                keyid:9F:8E:C7:CE:66:A6:7C:20:F1:A2:4E:22:0E:07:01:A4:B8:12:9C:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/68CFB0FCBC226AFC08760338ADBF84DD9A5B072396FBCE375EB0685B506A99FB/0/9F8EC7CE66A67C20F1A24E220E0701A4B8129C9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F8EC7CE66A67C20F1A24E220E0701A4B8129C9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68CFB0FCBC226AFC08760338ADBF84DD9A5B072396FBCE375EB0685B506A99FB/0/323830333a363363303a3a2f33322d3438203d3e20323635373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:63c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:82:65:c8:6c:0b:2e:75:d4:76:44:fe:8e:38:6e:f7:6b:07:
         1a:78:e7:23:a4:bf:c8:85:b1:8a:4e:6c:6c:36:db:23:02:43:
         c0:95:78:f7:ab:ae:6d:df:ef:38:88:72:a3:96:f8:dc:bb:7a:
         58:65:94:c7:4c:c6:48:01:4e:0a:bf:de:15:64:94:94:d7:15:
         26:6f:54:d3:02:d4:a7:f4:b0:2b:dd:73:2d:cd:45:41:48:f9:
         20:57:47:5b:36:71:65:ba:51:2f:6b:72:35:fc:17:02:bf:08:
         a7:59:3d:05:dc:40:64:1c:2d:73:32:3f:92:e4:41:0c:cf:a3:
         f9:e5:45:f7:03:ca:05:00:21:7f:d9:e7:ba:9f:ad:6d:da:7b:
         c7:af:99:fa:d5:00:c6:3f:16:54:69:63:31:d5:86:40:f0:c8:
         4a:f2:0f:aa:10:cd:2a:a1:57:f2:96:26:31:e0:f2:99:38:55:
         24:d6:19:8a:94:98:d0:f3:6d:d3:85:e8:13:34:a6:7f:11:06:
         31:d0:d5:21:d3:6d:38:cf:a1:9f:2b:40:5d:1b:e4:fc:3e:73:
         4d:f4:b8:6b:2b:ef:14:30:2d:ca:4f:d6:08:16:2a:2d:72:38:
         65:24:e9:da:03:c4:af:9d:9d:56:24:06:08:29:25:ae:f8:31:
         3c:e4:b5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:26:50 2026 by rpki-client