This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1702E1A3DF1D1A79A56BD5C10CAA1F95F3CE7660852C9B5974427E47DF65C9B8/0/323830333a3361303a3a2f33322d3332203d3e203438323532.roa
File:                     323830333a3361303a3a2f33322d3332203d3e203438323532.roa (raw, json)
Hash identifier:          FYE4lP3noj2HTlKUNkJNKBnULVnfdg1WzHy2lv/03/k=
Subject key identifier:   CD:3C:E6:01:35:CE:CF:E7:BB:E2:70:CC:6E:3B:E9:B9:DB:30:B1:47
Certificate issuer:       /CN=23B95CF72FE276BEB53EBBC11D213ED7A3BE995B
Certificate serial:       1F3259B810D5605A2CE66E58A04D3B98FEC42546
Authority key identifier: 23:B9:5C:F7:2F:E2:76:BE:B5:3E:BB:C1:1D:21:3E:D7:A3:BE:99:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/23B95CF72FE276BEB53EBBC11D213ED7A3BE995B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1702E1A3DF1D1A79A56BD5C10CAA1F95F3CE7660852C9B5974427E47DF65C9B8/0/323830333a3361303a3a2f33322d3332203d3e203438323532.roa
Signing time:             Tue 06 Jan 2026 19:07:27 +0000
ROA not before:           Tue 06 Jan 2026 19:02:27 +0000
ROA not after:            Tue 05 Jan 2027 19:07:27 +0000
asID:                     48252
IP address blocks:        2803:3a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1702E1A3DF1D1A79A56BD5C10CAA1F95F3CE7660852C9B5974427E47DF65C9B8/0/23B95CF72FE276BEB53EBBC11D213ED7A3BE995B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1702E1A3DF1D1A79A56BD5C10CAA1F95F3CE7660852C9B5974427E47DF65C9B8/0/23B95CF72FE276BEB53EBBC11D213ED7A3BE995B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/23B95CF72FE276BEB53EBBC11D213ED7A3BE995B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 04:11:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:32:59:b8:10:d5:60:5a:2c:e6:6e:58:a0:4d:3b:98:fe:c4:25:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23B95CF72FE276BEB53EBBC11D213ED7A3BE995B
        Validity
            Not Before: Jan  6 19:02:27 2026 GMT
            Not After : Jan  5 19:07:27 2027 GMT
        Subject: CN=CD3CE60135CECFE7BBE270CC6E3BE9B9DB30B147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:54:4f:52:63:07:58:ab:e0:14:8a:82:be:a6:
                    80:e1:c6:6b:e3:59:cb:7f:2e:f4:d6:44:15:00:d6:
                    46:97:56:81:0e:d0:3a:4f:d9:67:48:e3:1e:8e:45:
                    5d:26:2b:c7:58:b6:a9:fc:1d:7e:fc:10:dd:8c:f7:
                    6a:f7:81:57:03:65:fd:a4:02:58:41:f2:4f:22:dc:
                    d3:86:5e:ef:71:aa:44:63:e4:64:8b:2c:95:4f:97:
                    23:f7:2d:f0:a0:18:64:d0:71:82:25:2a:06:d9:ed:
                    e7:38:a7:2e:ab:10:04:d0:2a:94:8b:8e:41:c1:f1:
                    27:2f:5c:77:1f:e9:45:f8:8f:51:23:c6:f7:cd:d4:
                    bf:bd:fb:48:c5:f0:26:7f:b4:77:f2:31:02:24:94:
                    70:a3:2d:a8:48:b1:97:0f:3d:cb:7a:d6:c8:f9:07:
                    5a:ea:f5:91:43:71:ac:06:0a:1a:37:1a:ec:7f:3a:
                    51:3d:36:25:61:1c:97:7a:51:f5:0e:1a:ae:90:cf:
                    db:02:d2:ee:db:51:38:5b:a6:ef:51:b3:d6:02:f2:
                    38:c6:4f:8d:89:aa:9f:f1:e4:c5:c0:8c:59:13:df:
                    d7:35:6c:50:9b:11:63:3b:17:6c:1b:ed:7c:15:18:
                    83:89:6b:4e:5b:a2:a8:f7:c3:56:7b:e8:01:6a:8f:
                    71:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:3C:E6:01:35:CE:CF:E7:BB:E2:70:CC:6E:3B:E9:B9:DB:30:B1:47
            X509v3 Authority Key Identifier:
                keyid:23:B9:5C:F7:2F:E2:76:BE:B5:3E:BB:C1:1D:21:3E:D7:A3:BE:99:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1702E1A3DF1D1A79A56BD5C10CAA1F95F3CE7660852C9B5974427E47DF65C9B8/0/23B95CF72FE276BEB53EBBC11D213ED7A3BE995B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/23B95CF72FE276BEB53EBBC11D213ED7A3BE995B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1702E1A3DF1D1A79A56BD5C10CAA1F95F3CE7660852C9B5974427E47DF65C9B8/0/323830333a3361303a3a2f33322d3332203d3e203438323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:15:d6:8f:2f:4b:dd:b5:0d:e3:08:16:9e:86:58:ff:4c:8d:
         ea:5b:7e:57:90:21:66:d5:60:d9:f3:99:08:fc:06:68:91:4e:
         5b:63:72:10:a4:9c:3f:bf:ad:f9:08:89:80:e9:05:16:2b:82:
         96:e9:3f:b7:27:d0:76:6b:55:b5:d4:0b:57:cf:d4:b5:46:0e:
         9a:f7:8c:5d:5f:58:fb:3a:3f:91:a0:b0:6a:3d:54:73:47:c6:
         43:b1:5a:15:80:d1:0f:b2:d2:05:e6:02:c2:57:56:49:2b:fb:
         04:9f:fe:c1:23:76:17:85:92:26:4d:6a:24:85:5d:ba:ce:7f:
         3f:9c:44:c3:5c:88:f4:9d:b6:0d:0b:ca:ec:60:34:b8:82:ac:
         0c:38:d8:2f:f4:57:35:06:61:8a:ca:10:cd:2b:4e:04:57:39:
         99:b7:da:67:2d:aa:ff:d2:07:58:78:fa:42:56:5b:ba:78:ef:
         09:41:9e:6a:b0:e8:39:b2:44:c0:5c:ba:dd:e6:86:cb:e2:07:
         e2:87:5e:eb:b8:8f:88:6d:90:9b:b9:97:c5:c7:ad:52:10:a8:
         74:b9:8f:a6:63:ab:2f:2d:73:d0:9c:de:15:8d:a0:cd:a3:4a:
         61:58:a0:de:64:61:38:23:ac:e0:6b:9f:0e:38:58:28:43:a0:
         15:c3:37:62
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUHzJZuBDVYFos5m5YoE07mP7EJUYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjNCOTVDRjcyRkUyNzZCRUI1M0VCQkMxMUQyMTNFRDdB
M0JFOTk1QjAeFw0yNjAxMDYxOTAyMjdaFw0yNzAxMDUxOTA3MjdaMDMxMTAvBgNV
BAMTKENEM0NFNjAxMzVDRUNGRTdCQkUyNzBDQzZFM0JFOUI5REIzMEIxNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWVE9SYwdYq+AUioK+poDhxmvj
Wct/LvTWRBUA1kaXVoEO0DpP2WdI4x6ORV0mK8dYtqn8HX78EN2M92r3gVcDZf2k
AlhB8k8i3NOGXu9xqkRj5GSLLJVPlyP3LfCgGGTQcYIlKgbZ7ec4py6rEATQKpSL
jkHB8ScvXHcf6UX4j1EjxvfN1L+9+0jF8CZ/tHfyMQIklHCjLahIsZcPPct61sj5
B1rq9ZFDcawGCho3Gux/OlE9NiVhHJd6UfUOGq6Qz9sC0u7bUThbpu9Rs9YC8jjG
T42Jqp/x5MXAjFkT39c1bFCbEWM7F2wb7XwVGIOJa05boqj3w1Z76AFqj3EzAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUzTzmATXOz+e74nDMbjvpudswsUcwHwYDVR0j
BBgwFoAUI7lc9y/idr61PrvBHSE+16O+mVswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNzAyRTFBM0RGMUQxQTc5QTU2QkQ1QzEwQ0FBMUY5NUYz
Q0U3NjYwODUyQzlCNTk3NDQyN0U0N0RGNjVDOUI4LzAvMjNCOTVDRjcyRkUyNzZC
RUI1M0VCQkMxMUQyMTNFRDdBM0JFOTk1Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yM0I5NUNGNzJGRTI3NkJFQjUz
RUJCQzExRDIxM0VEN0EzQkU5OTVCLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTcwMkUxQTNERjFEMUE3OUE1NkJENUMxMENBQTFGOTVGM0NFNzY2MDg1
MkM5QjU5NzQ0MjdFNDdERjY1QzlCOC8wLzMyMzgzMDMzM2EzMzYxMzAzYTNhMmYz
MzMyMmQzMzMyMjAzZDNlMjAzNDM4MzIzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMDoDANBgkq
hkiG9w0BAQsFAAOCAQEAoBXWjy9L3bUN4wgWnoZY/0yN6lt+V5AhZtVg2fOZCPwG
aJFOW2NyEKScP7+t+QiJgOkFFiuCluk/tyfQdmtVtdQLV8/UtUYOmveMXV9Y+zo/
kaCwaj1Uc0fGQ7FaFYDRD7LSBeYCwldWSSv7BJ/+wSN2F4WSJk1qJIVdus5/P5xE
w1yI9J22DQvK7GA0uIKsDDjYL/RXNQZhisoQzStOBFc5mbfaZy2q/9IHWHj6QlZb
unjvCUGearDoObJEwFy63eaGy+IH4ode67iPiG2Qm7mXxcetUhCodLmPpmOrLy1z
0JzeFY2gzaNKYVig3mRhOCOs4GufDjhYKEOgFcM3Yg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:30:10 2026 by rpki-client