This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/323830303a3339303a3a2f33322d3333203d3e203235363230.roa
File:                     323830303a3339303a3a2f33322d3333203d3e203235363230.roa (raw, json)
Hash identifier:          XUTsc0jNVhMZIP1UyafOrSLJ/9Yed4zpd5Sl867BAp0=
Subject key identifier:   B8:5E:C2:97:F4:5E:23:7D:78:3C:52:6D:1C:5D:D0:F9:A8:DA:6E:3F
Certificate issuer:       /CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
Certificate serial:       2A63B1CC6796D94B4921122F255DCC30F4AA7CC6
Authority key identifier: 3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/323830303a3339303a3a2f33322d3333203d3e203235363230.roa
Signing time:             Tue 06 Jan 2026 19:23:05 +0000
ROA not before:           Tue 06 Jan 2026 19:18:05 +0000
ROA not after:            Tue 05 Jan 2027 19:23:05 +0000
asID:                     25620
IP address blocks:        2800:390::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:63:b1:cc:67:96:d9:4b:49:21:12:2f:25:5d:cc:30:f4:aa:7c:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
        Validity
            Not Before: Jan  6 19:18:05 2026 GMT
            Not After : Jan  5 19:23:05 2027 GMT
        Subject: CN=B85EC297F45E237D783C526D1C5DD0F9A8DA6E3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d7:f3:93:b4:72:1f:6d:d1:d9:8f:b7:73:82:
                    23:be:77:ca:cb:fb:b7:09:e7:30:fb:16:19:7c:74:
                    ac:51:ca:1f:13:35:8f:1f:f4:ce:c4:33:7d:f5:4a:
                    b3:ff:fa:35:69:35:85:39:25:0f:ae:c5:f7:c7:b5:
                    58:4a:d2:71:a1:07:f8:b5:3d:6d:0e:10:d6:18:d6:
                    6c:54:96:72:23:42:ea:3d:b8:b8:55:86:20:6f:98:
                    97:1b:ba:86:fb:b5:9b:35:9c:fa:19:a6:4d:80:2d:
                    39:6e:1b:1e:26:44:5b:2c:67:d8:f2:dc:99:83:9c:
                    6b:aa:ec:8a:b1:4e:d3:59:35:7c:60:50:96:89:9d:
                    8b:ab:a3:7e:87:2e:75:96:01:43:ea:e8:e1:28:3d:
                    2a:80:11:23:20:00:43:64:bb:e7:f7:1d:6e:00:11:
                    4d:5b:51:95:4b:01:f5:58:79:d9:ae:2b:b4:fa:19:
                    9e:9c:4b:9a:28:9c:c2:08:72:35:1f:04:25:8c:5b:
                    ce:e3:ac:46:2f:03:05:4c:4b:bb:26:05:23:0b:90:
                    1e:5e:a8:b3:9a:ec:09:90:84:12:a3:ff:41:90:30:
                    19:e1:cf:fb:0e:60:19:a3:2f:d1:6e:71:07:10:cc:
                    f9:92:0b:bf:d0:85:d8:72:67:75:b2:9a:b7:59:40:
                    5b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:5E:C2:97:F4:5E:23:7D:78:3C:52:6D:1C:5D:D0:F9:A8:DA:6E:3F
            X509v3 Authority Key Identifier:
                keyid:3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/323830303a3339303a3a2f33322d3333203d3e203235363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:390::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:c7:68:57:17:6a:e2:45:db:cb:cf:bd:55:6c:a7:d6:49:84:
         63:9f:5b:cf:c2:41:a3:1d:f3:d3:82:ed:32:c1:1b:05:36:47:
         11:2f:78:b4:84:20:4b:e9:c2:31:66:75:c7:c6:61:4c:61:f6:
         bd:c8:20:e7:26:c8:fe:2b:43:25:ea:8b:fa:ee:b7:17:82:3a:
         05:d4:7a:fe:05:ce:8e:e2:f7:ef:75:28:ac:46:09:a4:88:62:
         34:76:51:63:82:33:62:bb:46:d7:f5:0f:7d:96:fe:5e:2b:5a:
         32:4a:b5:4d:f0:4e:ae:b2:f6:d4:ae:cf:42:fd:f1:ac:6a:ca:
         f7:c5:b6:30:dc:8d:6a:8d:0a:93:16:f1:e5:fd:66:8f:03:54:
         ee:89:78:62:2d:95:43:71:df:f5:83:d8:d4:21:a5:dc:de:77:
         c4:b3:0d:46:2e:69:4b:c0:3a:e5:22:b7:4c:ed:47:bf:2a:0e:
         4c:ff:88:47:cf:f2:94:93:18:45:8d:94:ca:ca:3b:27:09:60:
         4b:61:83:eb:6e:f0:3b:13:a2:b0:31:e2:94:dd:b0:9a:6d:46:
         05:37:ca:a9:b0:a5:4b:3a:99:66:6b:32:5f:43:6f:51:cb:da:
         51:ea:58:a5:af:e1:dd:a1:4e:08:83:44:0d:fb:c1:68:0b:63:
         bd:6c:07:89
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUKmOxzGeW2UtJIRIvJV3MMPSqfMYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0E0NjY1NEQ2RjAyQ0VDNDFFQUE0MzM5NDk4NDg2QzYw
OUJGMzRFQzAeFw0yNjAxMDYxOTE4MDVaFw0yNzAxMDUxOTIzMDVaMDMxMTAvBgNV
BAMTKEI4NUVDMjk3RjQ1RTIzN0Q3ODNDNTI2RDFDNUREMEY5QThEQTZFM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC61/OTtHIfbdHZj7dzgiO+d8rL
+7cJ5zD7Fhl8dKxRyh8TNY8f9M7EM331SrP/+jVpNYU5JQ+uxffHtVhK0nGhB/i1
PW0OENYY1mxUlnIjQuo9uLhVhiBvmJcbuob7tZs1nPoZpk2ALTluGx4mRFssZ9jy
3JmDnGuq7IqxTtNZNXxgUJaJnYuro36HLnWWAUPq6OEoPSqAESMgAENku+f3HW4A
EU1bUZVLAfVYedmuK7T6GZ6cS5oonMIIcjUfBCWMW87jrEYvAwVMS7smBSMLkB5e
qLOa7AmQhBKj/0GQMBnhz/sOYBmjL9FucQcQzPmSC7/QhdhyZ3WymrdZQFt3AgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUuF7Cl/ReI314PFJtHF3Q+ajabj8wHwYDVR0j
BBgwFoAUOkZlTW8CzsQeqkM5SYSGxgm/NOwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMEYxQjg1NTI5ODhBQzdCMjk5QzI3MDU2RjQ3MzNDMjMw
MzIxMkNBMkJBMDZCMkEyQ0YyQzVDODAzOENGRjJDLzAvM0E0NjY1NEQ2RjAyQ0VD
NDFFQUE0MzM5NDk4NDg2QzYwOUJGMzRFQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQTQ2NjU0RDZGMDJDRUM0MUVB
QTQzMzk0OTg0ODZDNjA5QkYzNEVDLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDBGMUI4NTUyOTg4QUM3QjI5OUMyNzA1NkY0NzMzQzIzMDMyMTJDQTJC
QTA2QjJBMkNGMkM1QzgwMzhDRkYyQy8wLzMyMzgzMDMwM2EzMzM5MzAzYTNhMmYz
MzMyMmQzMzMzMjAzZDNlMjAzMjM1MzYzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAADkDANBgkq
hkiG9w0BAQsFAAOCAQEAVsdoVxdq4kXby8+9VWyn1kmEY59bz8JBox3z04LtMsEb
BTZHES94tIQgS+nCMWZ1x8ZhTGH2vcgg5ybI/itDJeqL+u63F4I6BdR6/gXOjuL3
73UorEYJpIhiNHZRY4IzYrtG1/UPfZb+XitaMkq1TfBOrrL21K7PQv3xrGrK98W2
MNyNao0Kkxbx5f1mjwNU7ol4Yi2VQ3Hf9YPY1CGl3N53xLMNRi5pS8A65SK3TO1H
vyoOTP+IR8/ylJMYRY2Uyso7JwlgS2GD627wOxOisDHilN2wmm1GBTfKqbClSzqZ
ZmsyX0NvUcvaUepYpa/h3aFOCINEDfvBaAtjvWwHiQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:08:08 2026 by rpki-client