This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/323830333a376536303a3a2f33322d3332203d3e20323637393239.roa
File:                     323830333a376536303a3a2f33322d3332203d3e20323637393239.roa (raw, json)
Hash identifier:          +Uau173Sgwi66mcSkz9HKN2d/8dxNUiD18eZJoRTMG4=
Subject key identifier:   44:5B:58:1C:AB:2F:69:7F:72:B6:FC:49:B2:E1:FD:45:16:7A:7F:4E
Certificate issuer:       /CN=B3B26F6DCE0D551DF8808E116531308AEF126A54
Certificate serial:       5C45E37E9F8B69D2EB38FF63995834F27272B748
Authority key identifier: B3:B2:6F:6D:CE:0D:55:1D:F8:80:8E:11:65:31:30:8A:EF:12:6A:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/323830333a376536303a3a2f33322d3332203d3e20323637393239.roa
Signing time:             Tue 06 Jan 2026 19:24:18 +0000
ROA not before:           Tue 06 Jan 2026 19:19:18 +0000
ROA not after:            Tue 05 Jan 2027 19:24:18 +0000
asID:                     267929
IP address blocks:        2803:7e60::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:45:e3:7e:9f:8b:69:d2:eb:38:ff:63:99:58:34:f2:72:72:b7:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3B26F6DCE0D551DF8808E116531308AEF126A54
        Validity
            Not Before: Jan  6 19:19:18 2026 GMT
            Not After : Jan  5 19:24:18 2027 GMT
        Subject: CN=445B581CAB2F697F72B6FC49B2E1FD45167A7F4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d5:c6:0f:f3:bb:0e:9a:b9:f4:ba:b7:db:1c:
                    b6:a6:38:76:7a:cb:04:1e:b7:ba:bc:e0:f3:48:88:
                    e3:39:e3:07:af:92:41:5b:43:0b:a7:5f:ab:2d:32:
                    fc:b7:3b:03:44:fa:48:9a:4c:15:7b:60:b2:8c:df:
                    97:f2:6b:df:5a:cb:90:08:2d:f4:0e:5f:f7:f2:0a:
                    a3:e5:76:cb:34:45:f1:7c:8c:79:5e:01:2d:cc:99:
                    27:e8:e9:ab:73:63:c5:b3:24:41:f1:e0:ed:0b:08:
                    96:90:b7:1c:05:b3:32:93:b0:19:cc:46:0a:d4:9c:
                    ac:91:47:e6:c3:2d:83:34:93:86:b2:8e:19:c1:94:
                    0a:1e:e1:a9:01:cc:e3:f9:89:43:73:01:12:6c:27:
                    cc:be:1d:c7:dd:06:88:e3:55:b0:64:65:33:d7:c4:
                    d2:19:05:f5:f2:5c:be:f8:2a:6e:18:bb:f6:dc:25:
                    72:d8:58:93:02:67:cf:46:c2:0b:a3:a5:8b:6d:e4:
                    1d:b8:c6:2b:37:8e:df:93:7b:40:44:fc:ee:62:f0:
                    6e:16:90:1c:eb:d3:8e:14:b4:e1:bf:72:81:b6:14:
                    de:e6:a7:0a:84:3c:c0:c8:ef:21:34:55:05:9e:6b:
                    67:81:11:79:2d:bc:2c:ca:57:9c:aa:1b:14:80:b4:
                    56:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:5B:58:1C:AB:2F:69:7F:72:B6:FC:49:B2:E1:FD:45:16:7A:7F:4E
            X509v3 Authority Key Identifier:
                keyid:B3:B2:6F:6D:CE:0D:55:1D:F8:80:8E:11:65:31:30:8A:EF:12:6A:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/323830333a376536303a3a2f33322d3332203d3e20323637393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7e60::/32

    Signature Algorithm: sha256WithRSAEncryption
         c4:45:32:da:26:96:84:d4:f3:25:7e:8e:27:f8:d7:7d:b4:a9:
         d1:02:51:26:c2:9c:1f:c5:92:7a:20:42:06:e7:41:c3:8a:29:
         93:f5:bb:b5:25:ba:69:12:cb:48:7d:e2:dc:5c:1d:32:de:20:
         50:2e:50:dd:88:1d:27:6f:bb:ed:de:10:e7:68:04:ac:62:94:
         e1:59:b9:ed:fb:77:f9:24:d3:75:c3:0b:7d:c0:46:16:ce:3a:
         f2:56:18:f7:35:9a:75:34:52:1b:53:2c:b6:72:cd:77:55:35:
         6f:13:08:5f:13:05:07:0b:1c:cf:f2:1c:1d:8d:9c:c0:95:aa:
         09:e0:62:bd:1d:4d:52:59:bf:98:cb:a1:33:7f:32:df:54:e6:
         dd:e9:32:51:15:76:40:09:7c:09:b6:98:ec:52:1d:59:55:4f:
         c9:d3:bd:dc:8a:b0:a7:c2:dc:5c:b6:84:ad:10:d3:7a:00:28:
         23:86:3f:e3:29:d5:04:b3:58:68:a9:a2:08:c8:81:e8:73:b9:
         36:3e:61:5c:7d:96:30:0b:8e:ad:08:bd:af:c4:d9:28:d6:d4:
         76:4f:f9:ef:7c:9e:d3:df:1e:95:c4:a8:1c:18:92:ae:02:fa:
         0a:13:2a:a9:33:a3:53:23:6e:17:83:f1:c9:9c:5f:66:2e:18:
         52:20:88:dd
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUXEXjfp+LadLrOP9jmVg08nJyt0gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjNCMjZGNkRDRTBENTUxREY4ODA4RTExNjUzMTMwOEFF
RjEyNkE1NDAeFw0yNjAxMDYxOTE5MThaFw0yNzAxMDUxOTI0MThaMDMxMTAvBgNV
BAMTKDQ0NUI1ODFDQUIyRjY5N0Y3MkI2RkM0OUIyRTFGRDQ1MTY3QTdGNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC01cYP87sOmrn0urfbHLamOHZ6
ywQet7q84PNIiOM54wevkkFbQwunX6stMvy3OwNE+kiaTBV7YLKM35fya99ay5AI
LfQOX/fyCqPldss0RfF8jHleAS3MmSfo6atzY8WzJEHx4O0LCJaQtxwFszKTsBnM
RgrUnKyRR+bDLYM0k4ayjhnBlAoe4akBzOP5iUNzARJsJ8y+HcfdBojjVbBkZTPX
xNIZBfXyXL74Km4Yu/bcJXLYWJMCZ89GwgujpYtt5B24xis3jt+Te0BE/O5i8G4W
kBzr044UtOG/coG2FN7mpwqEPMDI7yE0VQWea2eBEXktvCzKV5yqGxSAtFaLAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQURFtYHKsvaX9ytvxJsuH9RRZ6f04wHwYDVR0j
BBgwFoAUs7Jvbc4NVR34gI4RZTEwiu8SalQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wREQyOTJCMjExNzI0REVDREMzMDM3NTFEQjg1QjYyQUNE
NjlCMzIxMEY4QTcwQjRCRDcyRTZGRDczNDEyRTBBLzAvQjNCMjZGNkRDRTBENTUx
REY4ODA4RTExNjUzMTMwOEFFRjEyNkE1NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CM0IyNkY2RENFMEQ1NTFERjg4
MDhFMTE2NTMxMzA4QUVGMTI2QTU0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEREMjkyQjIxMTcyNERFQ0RDMzAzNzUxREI4NUI2MkFDRDY5QjMyMTBG
OEE3MEI0QkQ3MkU2RkQ3MzQxMkUwQS8wLzMyMzgzMDMzM2EzNzY1MzYzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNzM5MzIzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDfmAw
DQYJKoZIhvcNAQELBQADggEBAMRFMtomloTU8yV+jif41320qdECUSbCnB/Fknog
QgbnQcOKKZP1u7UlumkSy0h94txcHTLeIFAuUN2IHSdvu+3eEOdoBKxilOFZue37
d/kk03XDC33ARhbOOvJWGPc1mnU0UhtTLLZyzXdVNW8TCF8TBQcLHM/yHB2NnMCV
qgngYr0dTVJZv5jLoTN/Mt9U5t3pMlEVdkAJfAm2mOxSHVlVT8nTvdyKsKfC3Fy2
hK0Q03oAKCOGP+Mp1QSzWGipogjIgehzuTY+YVx9ljALjq0Iva/E2SjW1HZP+e98
ntPfHpXEqBwYkq4C+goTKqkzo1MjbheD8cmcX2YuGFIgiN0=
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:14 2026 by rpki-client