This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/14CB370010DE6D85153F1C51BFF7A0D15EEE00AE2DE4C16398C1B30E930DFF07/0/323830333a626634303a3a2f33322d3438203d3e20323634373634.roa
File:                     323830333a626634303a3a2f33322d3438203d3e20323634373634.roa (raw, json)
Hash identifier:          F6d8PO3xQmIzs0uUv4mJT7nt9jFzFqBHZTcSKirgE64=
Subject key identifier:   22:F4:A8:2E:B7:F6:0E:32:54:44:EF:D1:F1:69:CF:31:FA:A8:DF:66
Certificate issuer:       /CN=95116A890D205119BAB4C1812515C4DD5B11AEFF
Certificate serial:       3E4328469149A40F2B1B2B2D1E5EABA670C4EFEF
Authority key identifier: 95:11:6A:89:0D:20:51:19:BA:B4:C1:81:25:15:C4:DD:5B:11:AE:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/95116A890D205119BAB4C1812515C4DD5B11AEFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/14CB370010DE6D85153F1C51BFF7A0D15EEE00AE2DE4C16398C1B30E930DFF07/0/323830333a626634303a3a2f33322d3438203d3e20323634373634.roa
Signing time:             Tue 20 Jan 2026 14:26:16 +0000
ROA not before:           Tue 20 Jan 2026 14:21:16 +0000
ROA not after:            Tue 19 Jan 2027 14:26:16 +0000
asID:                     264764
IP address blocks:        2803:bf40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/14CB370010DE6D85153F1C51BFF7A0D15EEE00AE2DE4C16398C1B30E930DFF07/0/95116A890D205119BAB4C1812515C4DD5B11AEFF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/14CB370010DE6D85153F1C51BFF7A0D15EEE00AE2DE4C16398C1B30E930DFF07/0/95116A890D205119BAB4C1812515C4DD5B11AEFF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/95116A890D205119BAB4C1812515C4DD5B11AEFF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 12:45:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:43:28:46:91:49:a4:0f:2b:1b:2b:2d:1e:5e:ab:a6:70:c4:ef:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95116A890D205119BAB4C1812515C4DD5B11AEFF
        Validity
            Not Before: Jan 20 14:21:16 2026 GMT
            Not After : Jan 19 14:26:16 2027 GMT
        Subject: CN=22F4A82EB7F60E325444EFD1F169CF31FAA8DF66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4c:da:c4:cd:02:1e:28:8b:4f:f9:8e:25:a2:
                    1a:c7:89:14:6c:5a:0b:7e:b9:f6:7d:39:a6:e2:42:
                    02:88:70:27:22:ab:19:27:53:70:92:b8:c6:e9:96:
                    3f:0e:6c:90:96:bb:9a:0c:b2:d9:02:8c:5d:e9:33:
                    01:fc:17:fd:be:31:dd:0f:87:f7:52:2b:fd:52:f2:
                    27:03:2e:b3:98:a6:14:8c:02:16:77:af:3c:1d:85:
                    64:ad:87:70:20:17:3b:50:fa:34:f5:d8:55:5a:36:
                    cc:ac:1a:d4:d5:e4:4e:e9:e1:ed:48:66:06:90:a9:
                    f1:f0:b9:9d:08:cd:b1:07:98:2e:63:07:1b:2d:88:
                    31:93:50:c2:7d:15:bd:27:ea:6d:01:73:b8:e9:68:
                    9b:3d:3d:0f:5a:f7:50:71:09:15:df:52:5e:e3:16:
                    b4:0a:a8:eb:5c:0b:59:18:41:e8:ad:95:f7:cc:9f:
                    6e:f6:70:83:18:e1:43:69:e1:d1:20:42:bf:32:af:
                    0a:cc:29:eb:2b:ec:8e:57:c9:75:c3:11:eb:6e:d5:
                    ea:3b:3b:ca:8f:a0:ee:a8:b4:f8:55:ae:a7:8c:bb:
                    bf:d3:66:af:dc:f1:86:4b:99:ca:d3:86:e4:58:63:
                    de:0a:d8:99:da:aa:16:94:db:82:7b:46:a6:8a:06:
                    b2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F4:A8:2E:B7:F6:0E:32:54:44:EF:D1:F1:69:CF:31:FA:A8:DF:66
            X509v3 Authority Key Identifier:
                keyid:95:11:6A:89:0D:20:51:19:BA:B4:C1:81:25:15:C4:DD:5B:11:AE:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/14CB370010DE6D85153F1C51BFF7A0D15EEE00AE2DE4C16398C1B30E930DFF07/0/95116A890D205119BAB4C1812515C4DD5B11AEFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/95116A890D205119BAB4C1812515C4DD5B11AEFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/14CB370010DE6D85153F1C51BFF7A0D15EEE00AE2DE4C16398C1B30E930DFF07/0/323830333a626634303a3a2f33322d3438203d3e20323634373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bf40::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:2d:93:9d:7a:4e:1c:f0:0a:66:f6:97:ba:59:04:41:bf:61:
         39:34:d3:70:75:d7:6f:29:fa:1e:ef:27:2e:99:f0:d7:4a:d3:
         df:eb:f5:db:eb:69:ba:fa:02:a6:d6:76:de:0e:be:7c:be:76:
         1e:78:10:db:92:d2:7c:bb:3b:ad:24:e7:95:ec:67:a8:c1:d9:
         05:37:b0:ad:e7:ad:25:b3:27:5b:89:68:14:26:fa:ff:38:d0:
         9c:20:22:3e:cd:ac:e0:bd:c7:d8:33:e3:ec:ac:25:1c:3a:61:
         d0:e4:c3:dd:f0:a3:c0:33:89:2a:57:ab:71:d3:a9:5f:96:dc:
         2e:6e:d7:3e:56:44:e3:88:a9:79:73:ed:b5:a6:26:9e:1a:dd:
         7d:92:f5:d0:c9:6f:3b:5f:56:b7:4a:cf:34:8b:c0:e5:a8:8c:
         fb:9b:f0:6c:4e:38:2f:97:d0:7d:80:93:65:75:5e:da:61:7e:
         4e:36:8b:9a:77:f4:84:8d:ce:bc:d5:05:85:f2:e2:aa:fb:94:
         bc:51:96:27:9a:c0:4b:4e:2d:e9:69:48:2a:e7:1a:a6:3e:b5:
         14:04:79:4a:f4:86:84:00:27:dd:91:2b:49:3a:74:ed:05:09:
         58:10:d1:ee:c7:d9:b6:0f:e4:d3:7e:4a:6b:4a:ed:89:ee:b1:
         6e:db:bb:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:05:53 2026 by rpki-client