This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/323830333a386265303a3a2f33322d3332203d3e20323730303831.roa
File:                     323830333a386265303a3a2f33322d3332203d3e20323730303831.roa (raw, json)
Hash identifier:          axjVssU0Gk1nu3HSBgY3fUo1apGbodvX7AFZWlK1CJU=
Subject key identifier:   9E:94:4F:8E:35:A3:4A:8A:F4:D4:38:2A:DF:3A:EE:48:F7:AC:36:E7
Certificate issuer:       /CN=0B1C628987A31BE87F63D8B3617E91E32E3908C3
Certificate serial:       3F1F4A73B0484F71044E5468F7898AD652EC7316
Authority key identifier: 0B:1C:62:89:87:A3:1B:E8:7F:63:D8:B3:61:7E:91:E3:2E:39:08:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/323830333a386265303a3a2f33322d3332203d3e20323730303831.roa
Signing time:             Tue 06 Jan 2026 19:34:16 +0000
ROA not before:           Tue 06 Jan 2026 19:29:16 +0000
ROA not after:            Tue 05 Jan 2027 19:34:16 +0000
asID:                     270081
IP address blocks:        2803:8be0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:1f:4a:73:b0:48:4f:71:04:4e:54:68:f7:89:8a:d6:52:ec:73:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B1C628987A31BE87F63D8B3617E91E32E3908C3
        Validity
            Not Before: Jan  6 19:29:16 2026 GMT
            Not After : Jan  5 19:34:16 2027 GMT
        Subject: CN=9E944F8E35A34A8AF4D4382ADF3AEE48F7AC36E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:7a:db:ff:bf:07:f0:fa:f9:4f:61:1a:73:07:
                    45:e1:0c:b6:b6:66:9c:40:68:0f:59:c8:fa:4e:26:
                    c3:e8:b2:91:42:f6:8c:58:79:69:16:ae:fb:25:1d:
                    26:f8:7d:74:82:e4:12:18:33:b8:c3:94:86:eb:84:
                    dc:8d:cb:79:ca:b2:0d:66:13:70:ab:65:c0:b3:2a:
                    a4:dc:50:2d:5b:38:64:3d:3a:0e:52:53:d2:9a:68:
                    96:45:d9:38:c8:ee:ba:d5:1a:40:07:2d:c8:44:18:
                    39:16:3f:00:d4:b0:13:15:e6:ea:07:90:49:c0:da:
                    84:3c:05:a1:74:a5:2a:dc:fb:7a:4f:77:31:85:67:
                    42:46:e7:89:75:75:4b:52:48:83:73:c4:ae:03:c4:
                    69:19:0d:34:54:eb:a5:06:f0:b6:38:c9:d1:09:28:
                    34:05:6c:be:73:3f:a5:03:ea:62:ef:86:de:15:0c:
                    36:a6:ac:9c:99:d3:6e:b3:7b:23:a6:19:d8:bd:07:
                    7f:75:29:ba:de:19:9c:5e:8f:73:d0:3b:a3:2f:08:
                    03:76:88:2a:ed:01:52:8b:34:5c:6a:42:67:4d:e9:
                    f8:87:35:6a:01:94:36:b8:d1:29:4f:be:3a:fa:6d:
                    74:1b:d8:06:72:ef:dd:0f:9b:1a:89:fa:b6:31:b9:
                    56:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:94:4F:8E:35:A3:4A:8A:F4:D4:38:2A:DF:3A:EE:48:F7:AC:36:E7
            X509v3 Authority Key Identifier:
                keyid:0B:1C:62:89:87:A3:1B:E8:7F:63:D8:B3:61:7E:91:E3:2E:39:08:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/323830333a386265303a3a2f33322d3332203d3e20323730303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8be0::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:43:88:fd:39:bf:3f:78:d2:62:1f:31:41:86:1d:78:46:db:
         0b:c9:1b:a9:95:c1:01:50:ef:e4:42:86:2e:1c:a6:49:b6:96:
         94:e4:27:9c:4b:b6:2f:8f:31:12:30:e4:ae:49:56:3d:d9:6f:
         7c:66:d4:da:42:d5:4a:8f:0c:61:13:43:f1:32:89:9b:e9:1d:
         c1:99:9a:c7:b7:2b:ac:d7:de:71:a8:d5:03:d3:52:9b:84:7d:
         66:92:e1:c3:60:39:16:b3:f8:74:d0:92:15:b8:4c:87:b6:ba:
         95:3b:c8:c9:05:5c:ff:32:2e:98:0d:43:a9:d1:c1:6c:4d:ae:
         67:5b:48:6d:2b:3c:23:b8:4e:a9:ea:e9:ff:5a:6c:cd:f2:84:
         3e:ee:4e:a7:ec:a5:c5:f6:3e:09:fe:e2:7a:19:4e:f5:90:84:
         ff:f2:a6:4b:e2:88:a7:c1:0e:16:45:d5:88:78:54:42:61:cc:
         90:83:b9:02:e5:fd:03:9f:c1:33:b3:ea:53:0b:3d:5a:9e:c6:
         2b:58:eb:40:88:9c:ee:77:09:47:3b:5f:21:d4:12:e4:fd:3d:
         21:1b:c8:21:8d:3b:13:59:07:c3:1f:4f:bf:ea:24:36:92:86:
         6e:8f:92:32:a9:67:43:20:4c:2d:23:e7:64:41:81:28:2b:cb:
         d9:37:c7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:19 2026 by rpki-client