This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/11E6857B655846489B75F9B6F43F3E1DB7AE0D50839633E7274C8C14258F83CD/0/323830333a3963303a66653a3a2f34372d3438203d3e20323732303430.roa
File:                     323830333a3963303a66653a3a2f34372d3438203d3e20323732303430.roa (raw, json)
Hash identifier:          t2dKkcWjT4i+yqekLKO+2kt9JsbfpVACKSnrg+sO9Ak=
Subject key identifier:   31:04:DD:D0:AC:86:B4:65:14:E2:E6:4A:26:D3:64:D1:8C:BE:10:BC
Certificate issuer:       /CN=402D616A95846FF1E7CE80C99CDB443F6B8B9107
Certificate serial:       3ADED196A826086888A631D621B3CDE0736D2D9C
Authority key identifier: 40:2D:61:6A:95:84:6F:F1:E7:CE:80:C9:9C:DB:44:3F:6B:8B:91:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/402D616A95846FF1E7CE80C99CDB443F6B8B9107.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/11E6857B655846489B75F9B6F43F3E1DB7AE0D50839633E7274C8C14258F83CD/0/323830333a3963303a66653a3a2f34372d3438203d3e20323732303430.roa
Signing time:             Sat 27 Dec 2025 20:56:21 +0000
ROA not before:           Sat 27 Dec 2025 20:51:21 +0000
ROA not after:            Sat 26 Dec 2026 20:56:21 +0000
asID:                     272040
IP address blocks:        2803:9c0:fe::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/11E6857B655846489B75F9B6F43F3E1DB7AE0D50839633E7274C8C14258F83CD/0/402D616A95846FF1E7CE80C99CDB443F6B8B9107.crl
                          rsync://repository.lacnic.net/rpki/lacnic/11E6857B655846489B75F9B6F43F3E1DB7AE0D50839633E7274C8C14258F83CD/0/402D616A95846FF1E7CE80C99CDB443F6B8B9107.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/402D616A95846FF1E7CE80C99CDB443F6B8B9107.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:de:d1:96:a8:26:08:68:88:a6:31:d6:21:b3:cd:e0:73:6d:2d:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=402D616A95846FF1E7CE80C99CDB443F6B8B9107
        Validity
            Not Before: Dec 27 20:51:21 2025 GMT
            Not After : Dec 26 20:56:21 2026 GMT
        Subject: CN=3104DDD0AC86B46514E2E64A26D364D18CBE10BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:05:b5:37:b1:6d:34:6d:80:91:fe:8e:5f:28:
                    ef:96:c2:77:70:89:a0:e8:29:a9:23:ec:17:85:2f:
                    3c:59:d0:8c:1e:54:d1:0c:53:f0:18:a9:3c:59:73:
                    e8:ee:27:ca:59:6f:31:42:75:68:6e:54:e2:02:4b:
                    4f:07:e8:c2:b9:85:80:f5:25:7a:23:30:a9:53:f5:
                    d4:51:3e:ec:97:b0:a5:be:74:7c:67:dd:67:ab:54:
                    39:bc:22:56:f0:c9:bd:e5:e9:9f:73:94:a9:45:3c:
                    6d:01:c5:e2:35:90:fb:cc:48:5b:fc:6e:14:3b:b2:
                    f9:57:b9:b2:2f:df:a1:1b:5c:78:79:5a:e8:68:9b:
                    6d:83:44:d6:df:29:99:0e:be:d2:a3:c7:4d:8c:ce:
                    f3:69:8a:0e:68:5d:f7:2c:9f:a7:d4:db:80:29:5d:
                    2c:7d:c4:5f:22:95:00:97:af:6a:8d:d9:67:f7:0d:
                    8c:5b:b5:97:79:8d:7f:78:ca:cd:c1:e0:64:ac:7b:
                    8b:a8:75:a0:76:35:b0:73:39:1f:83:20:8a:8b:a1:
                    0f:bf:ef:89:27:4f:26:54:0a:1a:37:f5:68:80:72:
                    6a:32:c2:94:d2:aa:2c:15:25:d4:a7:9b:6f:03:be:
                    86:4e:76:7a:3d:3a:68:79:e9:d2:78:bd:dd:2a:41:
                    da:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:04:DD:D0:AC:86:B4:65:14:E2:E6:4A:26:D3:64:D1:8C:BE:10:BC
            X509v3 Authority Key Identifier:
                keyid:40:2D:61:6A:95:84:6F:F1:E7:CE:80:C9:9C:DB:44:3F:6B:8B:91:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/11E6857B655846489B75F9B6F43F3E1DB7AE0D50839633E7274C8C14258F83CD/0/402D616A95846FF1E7CE80C99CDB443F6B8B9107.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/402D616A95846FF1E7CE80C99CDB443F6B8B9107.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/11E6857B655846489B75F9B6F43F3E1DB7AE0D50839633E7274C8C14258F83CD/0/323830333a3963303a66653a3a2f34372d3438203d3e20323732303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9c0:fe::/47

    Signature Algorithm: sha256WithRSAEncryption
         b2:cc:f1:54:46:79:f6:e8:86:f0:5b:c9:03:f6:14:be:bd:aa:
         f8:73:af:47:5c:d0:43:3f:3d:50:01:e2:cd:dc:be:17:89:63:
         a8:6f:b3:4c:76:37:a3:f5:35:be:a8:13:18:78:5b:dd:3a:dd:
         e8:3a:bc:8c:d8:6e:1f:a1:05:1e:14:51:c2:0b:91:a3:98:b7:
         36:47:7b:30:c2:0f:51:5b:58:41:5f:fe:df:d9:e3:86:19:c6:
         c1:9f:7e:2d:8c:5c:c3:51:c1:65:5a:0c:b1:4c:71:86:b5:5c:
         2f:d4:f6:08:e3:10:f2:3d:51:68:b1:dd:c0:71:3c:57:23:ae:
         25:d7:cd:16:95:7b:25:db:99:69:19:74:98:a4:b0:79:88:ef:
         51:cf:2e:80:b8:fd:02:f7:15:d3:e5:fd:cd:13:76:f7:d3:a7:
         23:fa:ce:82:17:97:66:ce:5b:02:80:df:2a:f4:8b:39:3b:bf:
         d4:ee:c0:65:44:d6:4a:c8:e9:3a:b4:c8:4a:20:10:4c:01:c2:
         80:36:7d:84:70:3f:8c:64:a8:f4:90:d6:1d:21:63:98:3d:d1:
         43:c0:34:aa:4d:a9:25:18:dc:32:7c:ea:82:af:ec:18:d2:ab:
         86:d5:90:f6:36:d9:8d:2f:e4:a5:96:50:97:98:93:ec:56:09:
         7b:b4:89:71
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUOt7RlqgmCGiIpjHWIbPN4HNtLZwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDAyRDYxNkE5NTg0NkZGMUU3Q0U4MEM5OUNEQjQ0M0Y2
QjhCOTEwNzAeFw0yNTEyMjcyMDUxMjFaFw0yNjEyMjYyMDU2MjFaMDMxMTAvBgNV
BAMTKDMxMDREREQwQUM4NkI0NjUxNEUyRTY0QTI2RDM2NEQxOENCRTEwQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWBbU3sW00bYCR/o5fKO+Wwndw
iaDoKakj7BeFLzxZ0IweVNEMU/AYqTxZc+juJ8pZbzFCdWhuVOICS08H6MK5hYD1
JXojMKlT9dRRPuyXsKW+dHxn3WerVDm8Ilbwyb3l6Z9zlKlFPG0BxeI1kPvMSFv8
bhQ7svlXubIv36EbXHh5Wuhom22DRNbfKZkOvtKjx02MzvNpig5oXfcsn6fU24Ap
XSx9xF8ilQCXr2qN2Wf3DYxbtZd5jX94ys3B4GSse4uodaB2NbBzOR+DIIqLoQ+/
74knTyZUCho39WiAcmoywpTSqiwVJdSnm28DvoZOdno9Omh56dJ4vd0qQdo7AgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUMQTd0KyGtGUU4uZKJtNk0Yy+ELwwHwYDVR0j
BBgwFoAUQC1hapWEb/HnzoDJnNtEP2uLkQcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMUU2ODU3QjY1NTg0NjQ4OUI3NUY5QjZGNDNGM0UxREI3
QUUwRDUwODM5NjMzRTcyNzRDOEMxNDI1OEY4M0NELzAvNDAyRDYxNkE5NTg0NkZG
MUU3Q0U4MEM5OUNEQjQ0M0Y2QjhCOTEwNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MDJENjE2QTk1ODQ2RkYxRTdD
RTgwQzk5Q0RCNDQzRjZCOEI5MTA3LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTFFNjg1N0I2NTU4NDY0ODlCNzVGOUI2RjQzRjNFMURCN0FFMEQ1MDgz
OTYzM0U3Mjc0QzhDMTQyNThGODNDRC8wLzMyMzgzMDMzM2EzOTYzMzAzYTY2NjUz
YTNhMmYzNDM3MmQzNDM4MjAzZDNlMjAzMjM3MzIzMDM0MzAucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwEo
AwnAAP4wDQYJKoZIhvcNAQELBQADggEBALLM8VRGefbohvBbyQP2FL69qvhzr0dc
0EM/PVAB4s3cvheJY6hvs0x2N6P1Nb6oExh4W9063eg6vIzYbh+hBR4UUcILkaOY
tzZHezDCD1FbWEFf/t/Z44YZxsGffi2MXMNRwWVaDLFMcYa1XC/U9gjjEPI9UWix
3cBxPFcjriXXzRaVeyXbmWkZdJiksHmI71HPLoC4/QL3FdPl/c0TdvfTpyP6zoIX
l2bOWwKA3yr0izk7v9TuwGVE1krI6Tq0yEogEEwBwoA2fYRwP4xkqPSQ1h0hY5g9
0UPANKpNqSUY3DJ86oKv7BjSq4bVkPY22Y0v5KWWUJeYk+xWCXu0iXE=
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:25:32 2026 by rpki-client