This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F44DC6830B20905E40EFF6D6630B7571AAE62A9298187D969A5F9A5EDEAC9105/0/323830333a373761303a3a2f33322d3332203d3e20323639383736.roa
File:                     323830333a373761303a3a2f33322d3332203d3e20323639383736.roa (raw, json)
Hash identifier:          nOGkHoAb4aPzYyT5mcQ4xXjsM493+S8t2NnYkSZZ0WE=
Subject key identifier:   3C:66:82:8B:7A:2E:82:60:98:DE:48:B2:96:BC:1D:B2:A2:39:C4:78
Certificate issuer:       /CN=33765A5A53AB5641AF9C73A1929D99EAB1234478
Certificate serial:       238EFA61CAF27F45102028198D85D1EEEBD0636E
Authority key identifier: 33:76:5A:5A:53:AB:56:41:AF:9C:73:A1:92:9D:99:EA:B1:23:44:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33765A5A53AB5641AF9C73A1929D99EAB1234478.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F44DC6830B20905E40EFF6D6630B7571AAE62A9298187D969A5F9A5EDEAC9105/0/323830333a373761303a3a2f33322d3332203d3e20323639383736.roa
Signing time:             Tue 06 Jan 2026 19:33:47 +0000
ROA not before:           Tue 06 Jan 2026 19:28:47 +0000
ROA not after:            Tue 05 Jan 2027 19:33:47 +0000
asID:                     269876
IP address blocks:        2803:77a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F44DC6830B20905E40EFF6D6630B7571AAE62A9298187D969A5F9A5EDEAC9105/0/33765A5A53AB5641AF9C73A1929D99EAB1234478.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F44DC6830B20905E40EFF6D6630B7571AAE62A9298187D969A5F9A5EDEAC9105/0/33765A5A53AB5641AF9C73A1929D99EAB1234478.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33765A5A53AB5641AF9C73A1929D99EAB1234478.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:8e:fa:61:ca:f2:7f:45:10:20:28:19:8d:85:d1:ee:eb:d0:63:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33765A5A53AB5641AF9C73A1929D99EAB1234478
        Validity
            Not Before: Jan  6 19:28:47 2026 GMT
            Not After : Jan  5 19:33:47 2027 GMT
        Subject: CN=3C66828B7A2E826098DE48B296BC1DB2A239C478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:86:7a:be:77:65:e3:12:df:1d:63:3a:01:6d:
                    0a:05:fa:db:54:86:11:c4:72:9a:92:6d:0e:a0:b5:
                    3d:67:f4:b0:93:0b:51:af:de:9f:7d:28:07:92:6f:
                    30:79:cf:ad:7b:b9:46:f6:16:f0:dd:27:a9:83:b4:
                    da:5c:bb:a0:e0:6e:6f:21:cf:b5:72:28:3f:a6:72:
                    68:57:1e:77:bc:91:cc:44:ec:bb:6b:ff:b7:5b:48:
                    ca:48:bf:ec:4c:f1:15:ba:c0:d3:18:70:d3:c0:68:
                    e8:da:d7:d0:1d:d3:1b:7f:59:86:2d:1c:ac:33:11:
                    5b:1c:96:77:85:96:70:48:77:ac:1b:8a:62:b0:12:
                    3a:a1:32:6e:fa:98:2d:33:c1:12:d7:81:8d:00:02:
                    0b:3c:94:77:3a:e6:08:4c:65:23:87:50:4c:e3:b5:
                    1a:a4:14:97:79:f7:12:81:26:c6:2a:9f:e4:1d:18:
                    67:d2:ad:19:31:51:dd:f3:a3:bf:10:d4:f3:49:bf:
                    8a:b8:26:b0:39:f1:1e:f8:2d:60:5e:03:ec:ad:46:
                    ff:c7:61:30:f6:15:0a:cc:f9:79:97:29:f9:b0:fd:
                    43:e3:55:4c:e0:84:c1:61:3d:1b:81:59:f7:de:67:
                    17:f0:2e:91:fd:4d:da:6a:86:58:0d:7a:49:d8:79:
                    a4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:66:82:8B:7A:2E:82:60:98:DE:48:B2:96:BC:1D:B2:A2:39:C4:78
            X509v3 Authority Key Identifier:
                keyid:33:76:5A:5A:53:AB:56:41:AF:9C:73:A1:92:9D:99:EA:B1:23:44:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F44DC6830B20905E40EFF6D6630B7571AAE62A9298187D969A5F9A5EDEAC9105/0/33765A5A53AB5641AF9C73A1929D99EAB1234478.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33765A5A53AB5641AF9C73A1929D99EAB1234478.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F44DC6830B20905E40EFF6D6630B7571AAE62A9298187D969A5F9A5EDEAC9105/0/323830333a373761303a3a2f33322d3332203d3e20323639383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:77a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:39:ef:2f:78:98:1e:78:e4:43:72:18:b1:12:a8:18:8c:89:
         c6:f5:e4:59:c8:35:42:a6:63:9a:41:b8:a4:8c:6e:0c:0b:f8:
         d2:59:8a:63:0d:fc:2e:73:39:d7:99:77:23:09:c2:63:85:60:
         44:ea:89:b3:68:8f:f3:7a:85:c6:03:36:2b:88:4f:42:70:bc:
         c0:cd:06:91:95:cf:44:7a:b5:60:c4:c6:b5:51:6f:25:a8:78:
         28:b1:7a:61:23:1f:22:32:31:39:ef:8b:8d:18:36:b3:be:5e:
         db:1d:95:01:ab:d9:1f:4f:f2:d7:6b:53:4d:ce:3f:0d:0f:88:
         91:8a:e7:dd:19:7d:78:d3:f1:e8:78:fb:d3:aa:ab:76:1a:b8:
         6b:3a:e0:23:4a:2e:9d:92:10:73:58:54:de:92:e1:b7:40:36:
         09:b4:61:2a:df:77:90:fc:33:7a:d0:33:1b:45:cd:05:4e:64:
         f7:15:72:c5:fb:67:8f:7a:01:36:49:b2:77:1d:51:92:4c:89:
         70:64:23:60:a4:74:38:19:9f:b0:b2:cf:86:30:a7:23:2d:95:
         8e:90:91:2c:c4:91:78:88:4f:8b:ef:1b:cd:87:ff:ec:69:ec:
         99:3b:dc:a0:e4:b7:80:e0:90:e5:09:d8:6c:89:85:6e:19:90:
         64:74:6d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:27:34 2026 by rpki-client