This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BD03842362FAEFBF288DCD0380BB080EF1C244FE30A23E48FDC62394E1F048D/0/323830333a346332303a3a2f33322d3332203d3e20323635383238.roa
File:                     323830333a346332303a3a2f33322d3332203d3e20323635383238.roa (raw, json)
Hash identifier:          GFW6gAhSbKvvkGgKrWw5Jd+u7rKPdDHY3ltkLoWURTI=
Subject key identifier:   19:A0:F5:08:75:67:6F:30:73:6C:A5:F8:44:ED:91:95:80:D4:1B:F0
Certificate issuer:       /CN=B9AB59A03A8D1B251F8F5C17B450A8C25F5636EE
Certificate serial:       391AEDD83DF296210CABABA549A8C9C2DF22DD7C
Authority key identifier: B9:AB:59:A0:3A:8D:1B:25:1F:8F:5C:17:B4:50:A8:C2:5F:56:36:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9AB59A03A8D1B251F8F5C17B450A8C25F5636EE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BD03842362FAEFBF288DCD0380BB080EF1C244FE30A23E48FDC62394E1F048D/0/323830333a346332303a3a2f33322d3332203d3e20323635383238.roa
Signing time:             Tue 06 Jan 2026 19:42:01 +0000
ROA not before:           Tue 06 Jan 2026 19:37:01 +0000
ROA not after:            Tue 05 Jan 2027 19:42:01 +0000
asID:                     265828
IP address blocks:        2803:4c20::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BD03842362FAEFBF288DCD0380BB080EF1C244FE30A23E48FDC62394E1F048D/0/B9AB59A03A8D1B251F8F5C17B450A8C25F5636EE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BD03842362FAEFBF288DCD0380BB080EF1C244FE30A23E48FDC62394E1F048D/0/B9AB59A03A8D1B251F8F5C17B450A8C25F5636EE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9AB59A03A8D1B251F8F5C17B450A8C25F5636EE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 13:34:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:1a:ed:d8:3d:f2:96:21:0c:ab:ab:a5:49:a8:c9:c2:df:22:dd:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AB59A03A8D1B251F8F5C17B450A8C25F5636EE
        Validity
            Not Before: Jan  6 19:37:01 2026 GMT
            Not After : Jan  5 19:42:01 2027 GMT
        Subject: CN=19A0F50875676F30736CA5F844ED919580D41BF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9d:54:81:17:b7:5b:65:cd:8a:b9:89:32:77:
                    0f:fd:58:9f:86:9c:af:18:b7:0b:4a:7e:d4:78:76:
                    cc:f9:d3:ba:15:1d:0b:6d:24:92:2b:37:f1:db:9b:
                    87:58:3b:cc:cc:18:c1:96:8c:93:0a:10:d1:db:86:
                    5a:d7:de:52:b0:42:72:e9:58:ea:8f:ec:a8:32:a8:
                    56:6b:4a:2c:2d:39:01:40:86:5f:8c:28:56:52:b0:
                    91:2c:e0:6b:38:a6:d2:4c:d4:7f:eb:3b:bf:1f:14:
                    ff:97:9f:db:d8:5e:89:bc:41:db:71:bd:9b:ce:e0:
                    34:2c:ea:a2:9c:6f:b6:f7:a3:39:de:a6:70:6f:4c:
                    61:3e:1a:56:fa:34:62:3c:18:64:42:cf:d6:32:a6:
                    02:b3:77:a1:be:3e:9f:df:18:da:a8:4c:67:06:d2:
                    9a:ed:16:f2:fb:9e:fd:da:a0:e5:95:9d:af:28:0e:
                    a0:2b:7c:91:ee:d5:e0:c5:ff:d7:84:46:3c:8e:6e:
                    5f:a7:9b:ef:bf:d6:c2:74:a5:c2:aa:ef:c6:d6:d3:
                    4a:d6:87:64:12:b1:95:37:87:03:e8:f1:59:5e:41:
                    12:22:04:59:b9:99:35:3c:5f:cb:2e:2b:fe:eb:d0:
                    bc:a1:33:d6:42:09:bb:b0:50:8d:09:bb:d0:16:9d:
                    62:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A0:F5:08:75:67:6F:30:73:6C:A5:F8:44:ED:91:95:80:D4:1B:F0
            X509v3 Authority Key Identifier:
                keyid:B9:AB:59:A0:3A:8D:1B:25:1F:8F:5C:17:B4:50:A8:C2:5F:56:36:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BD03842362FAEFBF288DCD0380BB080EF1C244FE30A23E48FDC62394E1F048D/0/B9AB59A03A8D1B251F8F5C17B450A8C25F5636EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9AB59A03A8D1B251F8F5C17B450A8C25F5636EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BD03842362FAEFBF288DCD0380BB080EF1C244FE30A23E48FDC62394E1F048D/0/323830333a346332303a3a2f33322d3332203d3e20323635383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:9a:b4:ac:36:4d:cc:43:ae:87:20:61:87:78:6b:1e:88:5c:
         a6:22:48:56:da:2c:db:f5:fb:fe:28:f9:b0:ae:da:cb:ed:f1:
         1e:6c:5d:1f:62:56:64:ec:74:d2:4b:d0:70:e0:42:02:e3:57:
         35:9e:e8:b8:22:81:2f:a1:d7:d4:62:7c:da:df:6e:08:91:b1:
         a8:c1:7f:38:b7:02:da:a8:1d:23:da:09:28:74:de:98:fd:cf:
         e1:b9:d5:90:0e:97:85:25:47:95:ef:8d:a9:b5:4b:c7:ce:14:
         6e:30:0b:85:c9:01:ac:cb:8a:5d:e4:fb:12:91:a6:6a:ff:fe:
         c0:42:cf:1d:81:5a:9b:5c:5b:9f:78:79:c4:78:c0:8f:71:19:
         59:dc:84:cd:76:c0:c8:0f:3c:19:10:08:e5:fa:6b:87:16:1a:
         cd:cd:46:b4:ef:2b:46:26:a7:ca:22:aa:ad:f0:6f:1a:e9:d1:
         43:8b:b0:77:6b:27:b6:da:4f:5e:d1:14:f5:0a:ae:7f:05:cc:
         81:03:45:f7:0a:e1:65:02:1d:ef:08:be:15:be:89:1f:72:4c:
         2b:96:f2:e0:f9:8a:11:23:4b:dc:64:cd:05:62:0d:8f:2d:08:
         de:37:d5:ab:3b:1d:61:d6:74:54:46:84:11:7b:27:5b:11:1a:
         e1:2a:9c:7c
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUORrt2D3yliEMq6ulSajJwt8i3XwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlBQjU5QTAzQThEMUIyNTFGOEY1QzE3QjQ1MEE4QzI1
RjU2MzZFRTAeFw0yNjAxMDYxOTM3MDFaFw0yNzAxMDUxOTQyMDFaMDMxMTAvBgNV
BAMTKDE5QTBGNTA4NzU2NzZGMzA3MzZDQTVGODQ0RUQ5MTk1ODBENDFCRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPnVSBF7dbZc2KuYkydw/9WJ+G
nK8YtwtKftR4dsz507oVHQttJJIrN/Hbm4dYO8zMGMGWjJMKENHbhlrX3lKwQnLp
WOqP7KgyqFZrSiwtOQFAhl+MKFZSsJEs4Gs4ptJM1H/rO78fFP+Xn9vYXom8Qdtx
vZvO4DQs6qKcb7b3oznepnBvTGE+Glb6NGI8GGRCz9YypgKzd6G+Pp/fGNqoTGcG
0prtFvL7nv3aoOWVna8oDqArfJHu1eDF/9eERjyObl+nm++/1sJ0pcKq78bW00rW
h2QSsZU3hwPo8VleQRIiBFm5mTU8X8suK/7r0LyhM9ZCCbuwUI0Ju9AWnWKxAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUGaD1CHVnbzBzbKX4RO2RlYDUG/AwHwYDVR0j
BBgwFoAUuatZoDqNGyUfj1wXtFCowl9WNu4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQkQwMzg0MjM2MkZBRUZCRjI4OERDRDAzODBCQjA4MEVG
MUMyNDRGRTMwQTIzRTQ4RkRDNjIzOTRFMUYwNDhELzAvQjlBQjU5QTAzQThEMUIy
NTFGOEY1QzE3QjQ1MEE4QzI1RjU2MzZFRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COUFCNTlBMDNBOEQxQjI1MUY4
RjVDMTdCNDUwQThDMjVGNTYzNkVFLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUJEMDM4NDIzNjJGQUVGQkYyODhEQ0QwMzgwQkIwODBFRjFDMjQ0RkUz
MEEyM0U0OEZEQzYyMzk0RTFGMDQ4RC8wLzMyMzgzMDMzM2EzNDYzMzIzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNTM4MzIzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDTCAw
DQYJKoZIhvcNAQELBQADggEBAFGatKw2TcxDrocgYYd4ax6IXKYiSFbaLNv1+/4o
+bCu2svt8R5sXR9iVmTsdNJL0HDgQgLjVzWe6LgigS+h19RifNrfbgiRsajBfzi3
AtqoHSPaCSh03pj9z+G51ZAOl4UlR5Xvjam1S8fOFG4wC4XJAazLil3k+xKRpmr/
/sBCzx2BWptcW594ecR4wI9xGVnchM12wMgPPBkQCOX6a4cWGs3NRrTvK0Ymp8oi
qq3wbxrp0UOLsHdrJ7baT17RFPUKrn8FzIEDRfcK4WUCHe8IvhW+iR9yTCuW8uD5
ihEjS9xkzQViDY8tCN431as7HWHWdFRGhBF7J1sRGuEqnHw=
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:19:45 2026 by rpki-client