This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15C3BB6099B97BC8E08A75FF94370F86A1C28E6532DABABD3634AF5E69F507DE/0/323830333a613234303a3a2f33322d3332203d3e20323633383035.roa
File:                     323830333a613234303a3a2f33322d3332203d3e20323633383035.roa (raw, json)
Hash identifier:          Y7buh0o6qtCq5jhdwMMQdtbEQYsbuWBh1Hmfzv0Q2nU=
Subject key identifier:   BB:3C:A6:AE:1D:16:07:BB:CA:FC:A6:7F:2A:8A:1D:41:66:2A:FF:38
Certificate issuer:       /CN=167EE05CDDBFADE3ECF5193F43552053B07369F1
Certificate serial:       17A870DAFAFD793543CF79038AD36B93FDAE724D
Authority key identifier: 16:7E:E0:5C:DD:BF:AD:E3:EC:F5:19:3F:43:55:20:53:B0:73:69:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/167EE05CDDBFADE3ECF5193F43552053B07369F1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15C3BB6099B97BC8E08A75FF94370F86A1C28E6532DABABD3634AF5E69F507DE/0/323830333a613234303a3a2f33322d3332203d3e20323633383035.roa
Signing time:             Tue 06 Jan 2026 19:09:41 +0000
ROA not before:           Tue 06 Jan 2026 19:04:41 +0000
ROA not after:            Tue 05 Jan 2027 19:09:41 +0000
asID:                     263805
IP address blocks:        2803:a240::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/15C3BB6099B97BC8E08A75FF94370F86A1C28E6532DABABD3634AF5E69F507DE/0/167EE05CDDBFADE3ECF5193F43552053B07369F1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/15C3BB6099B97BC8E08A75FF94370F86A1C28E6532DABABD3634AF5E69F507DE/0/167EE05CDDBFADE3ECF5193F43552053B07369F1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/167EE05CDDBFADE3ECF5193F43552053B07369F1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 22:15:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:a8:70:da:fa:fd:79:35:43:cf:79:03:8a:d3:6b:93:fd:ae:72:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167EE05CDDBFADE3ECF5193F43552053B07369F1
        Validity
            Not Before: Jan  6 19:04:41 2026 GMT
            Not After : Jan  5 19:09:41 2027 GMT
        Subject: CN=BB3CA6AE1D1607BBCAFCA67F2A8A1D41662AFF38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3e:3f:71:09:d7:a0:84:1b:7c:a8:e6:7b:27:
                    b1:29:b9:49:65:7c:37:7d:94:01:6a:76:fa:c8:b2:
                    ea:3d:26:d6:f8:c0:3e:e9:b0:b3:ed:1e:85:c8:55:
                    56:83:c2:06:88:c5:ea:dd:88:2a:5a:9a:fb:a4:af:
                    ef:5c:ae:e7:d9:9c:cb:b5:41:e7:0c:a4:e3:49:ca:
                    81:5b:90:52:55:e9:2b:56:5a:54:c0:c5:61:8d:5a:
                    56:12:e3:08:08:15:fa:a1:81:03:db:18:61:42:bc:
                    85:f2:75:8e:b2:80:61:90:85:5c:e9:0b:e6:07:9a:
                    39:93:19:aa:67:b5:5f:c1:57:36:4e:f1:19:0e:f1:
                    09:9d:aa:1e:8d:a7:96:a0:01:6b:a1:87:69:9c:1b:
                    eb:57:02:84:a0:d9:30:f8:a6:91:67:ae:fe:85:b3:
                    5b:e0:98:18:be:ac:3c:99:ef:b4:3b:d5:3c:38:5e:
                    7c:5d:4f:ad:b4:7d:95:66:89:f8:51:df:5d:df:3f:
                    c7:e4:63:cb:82:bb:45:39:9b:db:68:08:0c:0d:e0:
                    a0:bd:27:c6:cd:ad:ce:0d:53:3c:1d:ad:a2:8c:65:
                    0c:60:e9:d4:d9:f3:1a:ab:82:6c:0d:e8:d5:d7:7f:
                    e2:6c:ff:61:f6:f4:12:e1:84:cd:c6:53:ae:af:4f:
                    63:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:3C:A6:AE:1D:16:07:BB:CA:FC:A6:7F:2A:8A:1D:41:66:2A:FF:38
            X509v3 Authority Key Identifier:
                keyid:16:7E:E0:5C:DD:BF:AD:E3:EC:F5:19:3F:43:55:20:53:B0:73:69:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15C3BB6099B97BC8E08A75FF94370F86A1C28E6532DABABD3634AF5E69F507DE/0/167EE05CDDBFADE3ECF5193F43552053B07369F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/167EE05CDDBFADE3ECF5193F43552053B07369F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15C3BB6099B97BC8E08A75FF94370F86A1C28E6532DABABD3634AF5E69F507DE/0/323830333a613234303a3a2f33322d3332203d3e20323633383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a240::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:19:ee:66:7b:58:f8:6a:c6:f8:64:43:6b:3f:cf:59:d4:61:
         70:14:b0:d8:ea:fe:de:7c:a4:7e:3f:a6:aa:7d:c6:d4:a5:ae:
         36:7a:e9:19:c3:22:45:f9:c0:cd:ee:4c:a0:71:fc:d8:2b:77:
         7e:7c:44:2a:01:c6:1f:95:fb:6b:01:5c:6f:ca:e1:ae:c6:0b:
         d5:96:fb:c8:3b:7b:70:3a:6b:e6:f9:0b:60:76:5e:49:7a:65:
         fd:54:38:7f:6f:ec:e0:61:77:d1:f9:c8:3b:b8:ac:f8:30:7e:
         b2:46:f3:30:4a:dc:b8:ac:d0:84:63:08:95:c4:61:5e:20:71:
         d3:b6:a3:e1:46:c5:1c:19:d0:f0:e2:a8:d4:38:5c:dc:95:b4:
         ab:81:f2:62:97:0f:e4:16:dd:e1:e3:a2:9c:ad:28:db:6a:20:
         13:cf:9d:06:09:db:cb:7d:fd:54:22:19:91:92:c0:bc:c1:65:
         6c:e2:4f:99:91:77:88:e2:e7:bf:45:25:f7:14:11:98:8a:fe:
         90:ba:54:ec:df:b0:e5:fe:1d:57:6a:92:c9:a3:a8:77:42:93:
         ca:07:d5:71:19:c5:ba:42:86:97:93:15:3d:8e:12:f1:34:3a:
         88:47:42:82:e6:39:26:48:7c:77:e4:17:8e:36:73:61:c7:85:
         8d:94:c3:8c
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUF6hw2vr9eTVDz3kDitNrk/2uck0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY3RUUwNUNEREJGQURFM0VDRjUxOTNGNDM1NTIwNTNC
MDczNjlGMTAeFw0yNjAxMDYxOTA0NDFaFw0yNzAxMDUxOTA5NDFaMDMxMTAvBgNV
BAMTKEJCM0NBNkFFMUQxNjA3QkJDQUZDQTY3RjJBOEExRDQxNjYyQUZGMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrPj9xCdeghBt8qOZ7J7EpuUll
fDd9lAFqdvrIsuo9Jtb4wD7psLPtHoXIVVaDwgaIxerdiCpamvukr+9crufZnMu1
QecMpONJyoFbkFJV6StWWlTAxWGNWlYS4wgIFfqhgQPbGGFCvIXydY6ygGGQhVzp
C+YHmjmTGapntV/BVzZO8RkO8Qmdqh6Np5agAWuhh2mcG+tXAoSg2TD4ppFnrv6F
s1vgmBi+rDyZ77Q71Tw4XnxdT620fZVmifhR313fP8fkY8uCu0U5m9toCAwN4KC9
J8bNrc4NUzwdraKMZQxg6dTZ8xqrgmwN6NXXf+Js/2H29BLhhM3GU66vT2NhAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUuzymrh0WB7vK/KZ/KoodQWYq/zgwHwYDVR0j
BBgwFoAUFn7gXN2/rePs9Rk/Q1UgU7BzafEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNUMzQkI2MDk5Qjk3QkM4RTA4QTc1RkY5NDM3MEY4NkEx
QzI4RTY1MzJEQUJBQkQzNjM0QUY1RTY5RjUwN0RFLzAvMTY3RUUwNUNEREJGQURF
M0VDRjUxOTNGNDM1NTIwNTNCMDczNjlGMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNjdFRTA1Q0REQkZBREUzRUNG
NTE5M0Y0MzU1MjA1M0IwNzM2OUYxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTVDM0JCNjA5OUI5N0JDOEUwOEE3NUZGOTQzNzBGODZBMUMyOEU2NTMy
REFCQUJEMzYzNEFGNUU2OUY1MDdERS8wLzMyMzgzMDMzM2E2MTMyMzQzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMzM4MzAzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDokAw
DQYJKoZIhvcNAQELBQADggEBACYZ7mZ7WPhqxvhkQ2s/z1nUYXAUsNjq/t58pH4/
pqp9xtSlrjZ66RnDIkX5wM3uTKBx/Ngrd358RCoBxh+V+2sBXG/K4a7GC9WW+8g7
e3A6a+b5C2B2Xkl6Zf1UOH9v7OBhd9H5yDu4rPgwfrJG8zBK3Lis0IRjCJXEYV4g
cdO2o+FGxRwZ0PDiqNQ4XNyVtKuB8mKXD+QW3eHjopytKNtqIBPPnQYJ28t9/VQi
GZGSwLzBZWziT5mRd4ji579FJfcUEZiK/pC6VOzfsOX+HVdqksmjqHdCk8oH1XEZ
xbpChpeTFT2OEvE0OohHQoLmOSZIfHfkF442c2HHhY2Uw4w=
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:19:32 2026 by rpki-client