This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/323830363a3230663a3a2f33322d3332203d3e203238343038.roa
File:                     323830363a3230663a3a2f33322d3332203d3e203238343038.roa (raw, json)
Hash identifier:          A7j4KAwX7srdutgoA1bKp/garsAZLJz6waV122kpRdc=
Subject key identifier:   BA:75:31:3A:66:97:FC:DC:21:CF:40:8D:88:42:BF:31:8D:4D:EE:64
Certificate issuer:       /CN=FC239C74A9FF2A748422668CEC9CB03F6D9A3FC2
Certificate serial:       37EA4C42D6ECDDDA817AA9E1695399031152DB8C
Authority key identifier: FC:23:9C:74:A9:FF:2A:74:84:22:66:8C:EC:9C:B0:3F:6D:9A:3F:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC239C74A9FF2A748422668CEC9CB03F6D9A3FC2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/323830363a3230663a3a2f33322d3332203d3e203238343038.roa
Signing time:             Thu 20 Nov 2025 23:50:00 +0000
ROA not before:           Thu 20 Nov 2025 23:45:00 +0000
ROA not after:            Thu 19 Nov 2026 23:50:00 +0000
asID:                     28408
IP address blocks:        2806:20f::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/FC239C74A9FF2A748422668CEC9CB03F6D9A3FC2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/FC239C74A9FF2A748422668CEC9CB03F6D9A3FC2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC239C74A9FF2A748422668CEC9CB03F6D9A3FC2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Dec 2025 08:05:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ea:4c:42:d6:ec:dd:da:81:7a:a9:e1:69:53:99:03:11:52:db:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC239C74A9FF2A748422668CEC9CB03F6D9A3FC2
        Validity
            Not Before: Nov 20 23:45:00 2025 GMT
            Not After : Nov 19 23:50:00 2026 GMT
        Subject: CN=BA75313A6697FCDC21CF408D8842BF318D4DEE64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:38:08:4e:74:b8:1c:76:59:76:9c:d6:7a:81:
                    ad:3d:01:12:1e:36:6c:27:f6:e9:db:e8:7a:31:53:
                    5c:2e:13:20:df:5c:ab:eb:33:a2:a5:de:75:4b:93:
                    32:a4:f0:39:3a:c1:3f:e4:20:13:aa:5d:36:04:3f:
                    1c:4e:ab:21:39:11:60:e7:6d:1a:89:16:64:a7:7c:
                    9e:fb:ab:86:11:78:ed:68:d3:00:9c:bd:7c:1e:06:
                    05:54:bd:3e:ba:6e:54:6b:25:53:1a:be:f0:82:3d:
                    a4:7c:db:c0:c5:4e:81:8e:ac:99:90:e8:1b:0f:d8:
                    e7:56:1e:bd:f2:59:42:b0:df:b2:c8:7c:ab:74:55:
                    92:cc:da:c5:e1:df:94:69:a3:5d:b0:b7:66:3f:e8:
                    09:2a:98:70:cf:c9:28:f8:fe:35:ac:1c:a0:4e:5c:
                    1c:fb:ed:34:69:ef:b3:00:59:72:dd:62:e9:4b:09:
                    19:06:b2:52:9c:ba:1f:67:d9:0b:77:70:57:9d:fa:
                    1b:98:26:c3:e7:49:08:c3:3b:a3:64:1f:ea:3e:0b:
                    38:1c:ac:c0:a2:db:af:55:61:c7:78:d8:bf:27:f4:
                    80:a0:8b:ee:1d:6c:09:25:95:39:05:69:d9:96:00:
                    d6:d5:c0:1b:2d:2c:35:50:f3:ad:e2:0b:c0:8e:6e:
                    78:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:75:31:3A:66:97:FC:DC:21:CF:40:8D:88:42:BF:31:8D:4D:EE:64
            X509v3 Authority Key Identifier:
                keyid:FC:23:9C:74:A9:FF:2A:74:84:22:66:8C:EC:9C:B0:3F:6D:9A:3F:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/FC239C74A9FF2A748422668CEC9CB03F6D9A3FC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC239C74A9FF2A748422668CEC9CB03F6D9A3FC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/323830363a3230663a3a2f33322d3332203d3e203238343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:20f::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:66:22:69:26:bb:12:39:c0:58:c2:75:d4:31:3c:be:48:b9:
         9d:6a:f8:ac:73:46:c0:c1:82:b4:5d:3f:af:99:19:f3:b6:bf:
         24:0a:04:c8:5d:46:8b:db:78:ad:98:06:d8:1a:86:75:c9:53:
         1c:72:d4:92:6b:1a:c1:1c:c4:74:33:14:8e:86:00:90:8c:4d:
         a3:e2:64:1e:82:6d:b6:9e:73:64:ea:18:cd:65:23:6f:22:4f:
         ef:13:4e:3d:bd:e3:12:58:95:79:58:92:7b:b4:77:92:75:ca:
         b7:8d:03:7c:d4:46:69:99:b8:c8:22:20:05:39:59:cd:90:76:
         15:2b:5f:66:ec:58:ed:b6:98:1b:02:53:98:98:19:4b:be:b0:
         be:0c:33:d7:05:4b:6d:29:7b:5d:bc:6b:80:da:fd:59:71:36:
         3b:b4:85:32:84:fc:5f:b9:81:41:63:0a:b4:a8:2f:fd:f4:fe:
         69:28:69:c7:ed:1c:d7:29:a4:be:f0:62:38:c7:25:fe:b7:fa:
         11:3d:0c:21:62:c3:da:ae:f8:d7:7d:d2:d2:f3:e5:7d:c7:94:
         b6:bd:8d:b2:4c:3e:8f:d4:35:59:6d:30:ca:bf:4f:a9:71:b1:
         08:05:51:c3:3c:0f:b2:ee:aa:1e:8d:6f:a8:79:3a:99:bf:47:
         7e:c3:d1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 11:59:37 2025 by rpki-client