This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1DEC688CE1BC7E1EEAF3F82677078C9A253FC65372690F6E7B145EC9B84CC452/0/323830333a613431303a3a2f33322d3438203d3e203634313134.roa
File:                     323830333a613431303a3a2f33322d3438203d3e203634313134.roa (raw, json)
Hash identifier:          phmlRUssMD4lz171HlYSZVJwoZyEOSLztdG53Q4uW6A=
Subject key identifier:   E8:FD:34:00:68:FF:2E:52:82:AF:4B:99:CA:F1:44:2C:B9:B6:C5:67
Certificate issuer:       /CN=402EE1D9B06FF99090AB25CAA286ABC0E56BB374
Certificate serial:       50BC4C3667000119E7E5B6ADFDD0AC344625B54D
Authority key identifier: 40:2E:E1:D9:B0:6F:F9:90:90:AB:25:CA:A2:86:AB:C0:E5:6B:B3:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/402EE1D9B06FF99090AB25CAA286ABC0E56BB374.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1DEC688CE1BC7E1EEAF3F82677078C9A253FC65372690F6E7B145EC9B84CC452/0/323830333a613431303a3a2f33322d3438203d3e203634313134.roa
Signing time:             Tue 06 Jan 2026 19:08:13 +0000
ROA not before:           Tue 06 Jan 2026 19:03:13 +0000
ROA not after:            Tue 05 Jan 2027 19:08:13 +0000
asID:                     64114
IP address blocks:        2803:a410::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1DEC688CE1BC7E1EEAF3F82677078C9A253FC65372690F6E7B145EC9B84CC452/0/402EE1D9B06FF99090AB25CAA286ABC0E56BB374.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1DEC688CE1BC7E1EEAF3F82677078C9A253FC65372690F6E7B145EC9B84CC452/0/402EE1D9B06FF99090AB25CAA286ABC0E56BB374.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/402EE1D9B06FF99090AB25CAA286ABC0E56BB374.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:bc:4c:36:67:00:01:19:e7:e5:b6:ad:fd:d0:ac:34:46:25:b5:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=402EE1D9B06FF99090AB25CAA286ABC0E56BB374
        Validity
            Not Before: Jan  6 19:03:13 2026 GMT
            Not After : Jan  5 19:08:13 2027 GMT
        Subject: CN=E8FD340068FF2E5282AF4B99CAF1442CB9B6C567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d8:e0:02:4c:31:86:34:82:be:07:48:bd:d7:
                    75:a5:96:6c:36:a3:b3:d4:73:ca:bf:0d:7d:2c:d2:
                    ed:49:9e:e8:de:8d:a5:c9:a5:11:d9:20:82:6b:fc:
                    c0:2d:55:64:42:b5:c6:e2:44:da:e7:c6:f4:22:fd:
                    ac:f7:c9:eb:20:db:17:52:7e:91:a7:21:aa:b7:84:
                    53:79:c2:ed:88:8d:57:71:e8:17:be:55:22:c9:2b:
                    51:50:ec:e2:7b:9b:f2:43:d2:83:15:cd:06:95:1b:
                    d1:00:a7:d2:4e:03:f9:59:f6:18:6b:45:3b:fc:55:
                    a8:a1:ff:1e:e1:bb:b3:46:a4:4f:f6:e5:18:76:ca:
                    47:3a:4e:10:ca:68:94:f9:a7:30:b1:73:1d:15:72:
                    aa:bb:84:af:34:c0:b5:da:ba:56:a0:ab:5a:49:9a:
                    2c:c6:6a:d0:4d:c1:c8:69:a5:e1:80:bd:c5:89:e4:
                    36:4d:98:da:23:22:83:5d:43:5c:29:64:1d:f8:0e:
                    32:cb:4e:4c:52:02:fd:c4:de:42:26:68:55:26:a5:
                    38:7e:15:a1:f6:22:26:14:19:c4:33:c3:98:26:ce:
                    1f:79:73:37:2a:f5:cb:20:d6:61:17:ef:ee:01:18:
                    0b:fa:9b:7d:1a:58:dc:b5:2c:5c:73:ff:c6:c0:85:
                    a1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:FD:34:00:68:FF:2E:52:82:AF:4B:99:CA:F1:44:2C:B9:B6:C5:67
            X509v3 Authority Key Identifier:
                keyid:40:2E:E1:D9:B0:6F:F9:90:90:AB:25:CA:A2:86:AB:C0:E5:6B:B3:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1DEC688CE1BC7E1EEAF3F82677078C9A253FC65372690F6E7B145EC9B84CC452/0/402EE1D9B06FF99090AB25CAA286ABC0E56BB374.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/402EE1D9B06FF99090AB25CAA286ABC0E56BB374.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1DEC688CE1BC7E1EEAF3F82677078C9A253FC65372690F6E7B145EC9B84CC452/0/323830333a613431303a3a2f33322d3438203d3e203634313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a410::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:31:c8:56:43:9a:b5:29:f0:18:2f:7b:4f:bc:06:04:0f:44:
         22:b4:a2:27:c9:71:75:26:ec:b6:28:fd:46:9f:aa:1f:29:d9:
         31:2a:21:9f:1e:aa:2f:a4:fd:34:5c:77:15:ab:1e:9a:da:fc:
         86:39:df:e6:b5:44:f9:6c:a8:86:71:ba:21:41:23:49:e3:ab:
         9e:1c:f4:b5:1e:24:cc:e1:43:d9:84:79:79:ae:5b:32:18:c4:
         4c:18:84:5e:53:a8:48:0b:43:36:27:50:d2:44:02:cb:e4:32:
         cd:cb:d8:3b:54:b6:bb:17:b7:81:c7:17:c1:15:ff:98:a0:a4:
         04:45:36:f6:a2:57:4d:8a:47:7c:fd:f5:8d:4e:66:8c:ee:cd:
         99:5b:d9:96:a6:70:dc:67:55:4c:fd:f8:3c:bb:2a:21:41:0b:
         2e:12:1c:f2:07:08:98:78:42:9b:cb:9b:d3:49:6a:2e:d5:66:
         95:20:55:c7:15:c7:48:c9:2a:02:d2:61:c2:75:cb:db:5a:4f:
         8a:dd:f2:04:9b:26:7c:43:0a:41:d9:44:ef:81:06:c3:b4:3f:
         50:5c:34:76:11:55:88:ae:75:fb:c6:dd:1d:db:a1:4a:ec:8f:
         d0:47:4f:d7:bd:22:32:9e:c9:07:96:92:39:3c:96:5e:a6:8b:
         df:58:fb:1b
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUULxMNmcAARnn5bat/dCsNEYltU0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDAyRUUxRDlCMDZGRjk5MDkwQUIyNUNBQTI4NkFCQzBF
NTZCQjM3NDAeFw0yNjAxMDYxOTAzMTNaFw0yNzAxMDUxOTA4MTNaMDMxMTAvBgNV
BAMTKEU4RkQzNDAwNjhGRjJFNTI4MkFGNEI5OUNBRjE0NDJDQjlCNkM1NjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD2OACTDGGNIK+B0i913Wllmw2
o7PUc8q/DX0s0u1JnujejaXJpRHZIIJr/MAtVWRCtcbiRNrnxvQi/az3yesg2xdS
fpGnIaq3hFN5wu2IjVdx6Be+VSLJK1FQ7OJ7m/JD0oMVzQaVG9EAp9JOA/lZ9hhr
RTv8Vaih/x7hu7NGpE/25Rh2ykc6ThDKaJT5pzCxcx0Vcqq7hK80wLXaulagq1pJ
mizGatBNwchppeGAvcWJ5DZNmNojIoNdQ1wpZB34DjLLTkxSAv3E3kImaFUmpTh+
FaH2IiYUGcQzw5gmzh95czcq9csg1mEX7+4BGAv6m30aWNy1LFxz/8bAhaEnAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQU6P00AGj/LlKCr0uZyvFELLm2xWcwHwYDVR0j
BBgwFoAUQC7h2bBv+ZCQqyXKooarwOVrs3QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xREVDNjg4Q0UxQkM3RTFFRUFGM0Y4MjY3NzA3OEM5QTI1
M0ZDNjUzNzI2OTBGNkU3QjE0NUVDOUI4NENDNDUyLzAvNDAyRUUxRDlCMDZGRjk5
MDkwQUIyNUNBQTI4NkFCQzBFNTZCQjM3NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MDJFRTFEOUIwNkZGOTkwOTBB
QjI1Q0FBMjg2QUJDMEU1NkJCMzc0LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMURFQzY4OENFMUJDN0UxRUVBRjNGODI2NzcwNzhDOUEyNTNGQzY1Mzcy
NjkwRjZFN0IxNDVFQzlCODRDQzQ1Mi8wLzMyMzgzMDMzM2E2MTM0MzEzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDM2MzQzMTMxMzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA6QQMA0G
CSqGSIb3DQEBCwUAA4IBAQAhMchWQ5q1KfAYL3tPvAYED0QitKInyXF1Juy2KP1G
n6ofKdkxKiGfHqovpP00XHcVqx6a2vyGOd/mtUT5bKiGcbohQSNJ46ueHPS1HiTM
4UPZhHl5rlsyGMRMGIReU6hIC0M2J1DSRALL5DLNy9g7VLa7F7eBxxfBFf+YoKQE
RTb2oldNikd8/fWNTmaM7s2ZW9mWpnDcZ1VM/fg8uyohQQsuEhzyBwiYeEKby5vT
SWou1WaVIFXHFcdIySoC0mHCdcvbWk+K3fIEmyZ8QwpB2UTvgQbDtD9QXDR2EVWI
rnX7xt0d26FK7I/QR0/XvSIynskHlpI5PJZepovfWPsb
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:18:29 2026 by rpki-client