This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/323830333a623263303a3a2f33322d3438203d3e20323634383531.roa
File:                     323830333a623263303a3a2f33322d3438203d3e20323634383531.roa (raw, json)
Hash identifier:          LhJQ1j2h2L32N+jmLr//xhA+9IXxaxVLwYLZ11gvdCo=
Subject key identifier:   70:8A:E5:FE:3E:20:36:BB:59:64:3F:28:05:31:CE:3E:0A:26:2B:0A
Certificate issuer:       /CN=CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F
Certificate serial:       19919756E1D0C06BF18A9EEEF82895B1D182A17D
Authority key identifier: CB:E7:2B:8D:81:5E:9A:3D:3D:87:C1:0B:39:ED:41:69:A8:4A:B6:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/323830333a623263303a3a2f33322d3438203d3e20323634383531.roa
Signing time:             Tue 06 Jan 2026 19:13:08 +0000
ROA not before:           Tue 06 Jan 2026 19:08:08 +0000
ROA not after:            Tue 05 Jan 2027 19:13:08 +0000
asID:                     264851
IP address blocks:        2803:b2c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 08:04:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:91:97:56:e1:d0:c0:6b:f1:8a:9e:ee:f8:28:95:b1:d1:82:a1:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F
        Validity
            Not Before: Jan  6 19:08:08 2026 GMT
            Not After : Jan  5 19:13:08 2027 GMT
        Subject: CN=708AE5FE3E2036BB59643F280531CE3E0A262B0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7a:64:2c:7d:96:7a:d4:b1:d3:be:ef:41:2b:
                    5a:8a:32:27:11:5f:99:06:ca:6d:3f:15:50:97:30:
                    dc:a2:19:08:23:cc:17:a5:04:df:e9:c1:ef:d7:70:
                    e9:df:b4:dd:ec:00:cd:b6:7f:c2:4c:a3:65:db:1f:
                    e4:1b:45:b8:26:f0:73:dd:81:d2:94:94:75:5a:6f:
                    dd:07:e6:3d:2f:d2:03:b3:e2:1b:c0:02:e3:82:9e:
                    ce:1d:06:2a:04:6c:b7:5d:46:9d:c1:17:36:92:63:
                    d7:eb:db:2e:cf:f3:5f:a4:6f:3d:f1:a1:94:29:82:
                    ba:04:23:3b:d8:e3:6d:a3:90:40:a8:a6:1b:07:23:
                    78:f2:4d:68:c3:25:6e:60:34:a6:35:03:24:ef:cd:
                    42:32:53:29:4e:b2:dc:42:b6:36:91:12:ca:67:36:
                    f0:09:c0:55:a0:2a:f0:4b:cd:42:dd:ce:e4:5a:69:
                    2d:a0:42:d4:ca:06:6e:9d:47:92:f7:9b:b0:39:20:
                    3a:f7:07:4d:38:b4:d2:ea:15:01:fb:a9:9e:e9:83:
                    d6:c6:ab:29:e5:43:36:f2:ee:da:72:e7:e4:8b:0d:
                    b8:d9:1c:2d:5b:1f:e4:69:de:5a:b1:6b:72:49:de:
                    d0:15:b0:e3:c2:fe:2e:9c:57:0d:52:56:93:01:80:
                    1b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:8A:E5:FE:3E:20:36:BB:59:64:3F:28:05:31:CE:3E:0A:26:2B:0A
            X509v3 Authority Key Identifier:
                keyid:CB:E7:2B:8D:81:5E:9A:3D:3D:87:C1:0B:39:ED:41:69:A8:4A:B6:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/323830333a623263303a3a2f33322d3438203d3e20323634383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b2c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:61:ab:bb:5c:62:7e:f4:9d:ee:b7:aa:e8:b5:e8:e8:42:a6:
         66:f2:91:5c:42:ab:4e:3d:cd:5a:02:98:e7:cd:e9:b6:a4:27:
         b0:02:8f:f2:a1:86:e4:d4:fd:ab:10:a2:9d:ff:8f:f1:bb:72:
         b7:06:d6:ef:26:12:25:2d:6e:63:00:e4:d6:be:ad:4f:79:40:
         d5:57:db:a8:1a:27:e0:66:b4:69:f5:ff:cd:71:6c:6a:e2:cc:
         bf:3a:e7:57:3f:0e:18:07:6c:bf:4f:8e:df:8d:ae:fc:22:37:
         0b:7f:e9:9c:a4:8f:21:86:ee:a2:ee:c2:5d:b4:04:8d:13:0d:
         39:e4:b2:d1:1e:7a:af:e0:ca:96:70:70:ef:cb:06:01:b8:e8:
         2c:06:e7:53:a6:b6:6c:0b:c3:b3:38:29:55:20:a0:fe:ae:2c:
         f0:00:73:30:3d:48:3b:27:d3:32:2e:67:9a:72:86:b4:93:99:
         b4:d1:ad:16:50:c0:95:85:73:c9:9d:58:5c:ef:a6:60:67:5b:
         17:c5:b6:fd:73:6c:a5:5a:8b:2a:91:8f:5a:86:bd:5c:30:00:
         0e:e0:b5:59:fb:b9:65:f2:e0:85:62:69:e5:72:75:e2:c4:d6:
         b3:da:0c:b0:61:f4:68:7b:49:a2:0f:4e:2f:7b:df:a9:49:1c:
         12:40:60:26
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUGZGXVuHQwGvxip7u+CiVsdGCoX0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JFNzJCOEQ4MTVFOUEzRDNEODdDMTBCMzlFRDQxNjlB
ODRBQjY4RjAeFw0yNjAxMDYxOTA4MDhaFw0yNzAxMDUxOTEzMDhaMDMxMTAvBgNV
BAMTKDcwOEFFNUZFM0UyMDM2QkI1OTY0M0YyODA1MzFDRTNFMEEyNjJCMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVemQsfZZ61LHTvu9BK1qKMicR
X5kGym0/FVCXMNyiGQgjzBelBN/pwe/XcOnftN3sAM22f8JMo2XbH+QbRbgm8HPd
gdKUlHVab90H5j0v0gOz4hvAAuOCns4dBioEbLddRp3BFzaSY9fr2y7P81+kbz3x
oZQpgroEIzvY422jkECophsHI3jyTWjDJW5gNKY1AyTvzUIyUylOstxCtjaREspn
NvAJwFWgKvBLzULdzuRaaS2gQtTKBm6dR5L3m7A5IDr3B004tNLqFQH7qZ7pg9bG
qynlQzby7tpy5+SLDbjZHC1bH+Rp3lqxa3JJ3tAVsOPC/i6cVw1SVpMBgBvZAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUcIrl/j4gNrtZZD8oBTHOPgomKwowHwYDVR0j
BBgwFoAUy+crjYFemj09h8ELOe1BaahKto8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMTdFMEYyOEQ3QjEwOTY0MzM4MjEzNEE5MjhBREI3RDhD
MTMxOTcyNzAyRUE0MkEwNDhDMjc2NEM4MERDN0MxLzAvQ0JFNzJCOEQ4MTVFOUEz
RDNEODdDMTBCMzlFRDQxNjlBODRBQjY4Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkU3MkI4RDgxNUU5QTNEM0Q4
N0MxMEIzOUVENDE2OUE4NEFCNjhGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTE3RTBGMjhEN0IxMDk2NDMzODIxMzRBOTI4QURCN0Q4QzEzMTk3Mjcw
MkVBNDJBMDQ4QzI3NjRDODBEQzdDMS8wLzMyMzgzMDMzM2E2MjMyNjMzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNDM4MzUzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDssAw
DQYJKoZIhvcNAQELBQADggEBAHVhq7tcYn70ne63qui16OhCpmbykVxCq049zVoC
mOfN6bakJ7ACj/KhhuTU/asQop3/j/G7crcG1u8mEiUtbmMA5Na+rU95QNVX26ga
J+BmtGn1/81xbGrizL8651c/DhgHbL9Pjt+NrvwiNwt/6ZykjyGG7qLuwl20BI0T
DTnkstEeeq/gypZwcO/LBgG46CwG51OmtmwLw7M4KVUgoP6uLPAAczA9SDsn0zIu
Z5pyhrSTmbTRrRZQwJWFc8mdWFzvpmBnWxfFtv1zbKVaiyqRj1qGvVwwAA7gtVn7
uWXy4IViaeVydeLE1rPaDLBh9Gh7SaIPTi9736lJHBJAYCY=
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:04:50 2026 by rpki-client