This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/323830333a343736303a3a2f33322d3438203d3e20323639383138.roa
File:                     323830333a343736303a3a2f33322d3438203d3e20323639383138.roa (raw, json)
Hash identifier:          AJ8i42zDRoSCJBd6fjni0O4+GKBaLVj8NDw6i771OVE=
Subject key identifier:   00:14:1F:A6:03:92:E5:3B:9E:17:46:CE:34:DD:AA:FA:5A:9C:F2:CF
Certificate issuer:       /CN=7388AE25CB67430754ACD1DB6E94F8DAAC362F9C
Certificate serial:       68D6DF5EDB4510FEA0F023780093550FEE42B14C
Authority key identifier: 73:88:AE:25:CB:67:43:07:54:AC:D1:DB:6E:94:F8:DA:AC:36:2F:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/323830333a343736303a3a2f33322d3438203d3e20323639383138.roa
Signing time:             Tue 06 Jan 2026 19:18:45 +0000
ROA not before:           Tue 06 Jan 2026 19:13:45 +0000
ROA not after:            Tue 05 Jan 2027 19:18:45 +0000
asID:                     269818
IP address blocks:        2803:4760::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d6:df:5e:db:45:10:fe:a0:f0:23:78:00:93:55:0f:ee:42:b1:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7388AE25CB67430754ACD1DB6E94F8DAAC362F9C
        Validity
            Not Before: Jan  6 19:13:45 2026 GMT
            Not After : Jan  5 19:18:45 2027 GMT
        Subject: CN=00141FA60392E53B9E1746CE34DDAAFA5A9CF2CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cf:11:37:1d:34:86:5a:7d:09:23:d5:0a:cd:
                    81:c9:ab:d8:b1:b8:f0:63:b9:12:12:af:8f:de:bd:
                    05:0d:28:28:4a:7e:ae:88:57:3a:d5:64:f0:3a:b8:
                    c8:f9:20:8a:86:da:9e:c7:02:ad:e5:d7:94:ac:f1:
                    6b:9c:fa:6a:f8:b8:5f:54:a2:fa:50:a9:49:12:a8:
                    b1:18:2c:98:a1:1d:39:01:7e:78:4e:f5:e8:86:dc:
                    e7:df:c5:39:b9:8c:ce:55:78:bd:96:36:b0:5e:d9:
                    9f:0d:06:e6:1b:f8:72:ac:04:49:f9:91:0b:22:05:
                    8b:aa:18:b7:1a:20:01:ff:bc:13:1f:ff:5a:5b:72:
                    3e:d1:4d:f4:5c:53:bd:c8:46:f3:ac:de:15:3b:71:
                    22:71:85:8c:62:35:13:73:28:78:f1:7b:f7:48:31:
                    66:39:af:79:35:bd:4d:84:a7:bd:6c:b4:c6:87:fa:
                    02:db:a0:07:d5:e4:46:ef:af:94:55:2e:e2:c1:a7:
                    f8:c7:91:c1:92:69:ff:74:f5:f2:b4:09:7c:75:d5:
                    38:3d:87:ce:6b:49:cd:cd:91:8c:47:ac:60:1b:77:
                    d6:f9:76:54:cc:73:5f:8a:78:02:1a:82:2f:d8:d7:
                    1c:7a:e8:be:39:2a:6b:00:89:69:7d:85:2a:7d:2c:
                    72:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:14:1F:A6:03:92:E5:3B:9E:17:46:CE:34:DD:AA:FA:5A:9C:F2:CF
            X509v3 Authority Key Identifier:
                keyid:73:88:AE:25:CB:67:43:07:54:AC:D1:DB:6E:94:F8:DA:AC:36:2F:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/323830333a343736303a3a2f33322d3438203d3e20323639383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4760::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:7e:60:33:24:9b:5e:08:69:ef:31:a8:c1:da:57:ed:1f:a1:
         51:60:c3:c2:d2:d7:bd:c9:33:03:57:62:e0:fc:ef:5c:b2:dc:
         5d:0d:94:00:cf:c4:18:03:d9:93:02:e3:98:3b:dc:1f:a7:51:
         46:3b:e8:8e:e3:e0:0f:7a:62:52:39:01:8c:6d:f2:22:38:16:
         97:82:d8:fc:a2:a5:a8:59:da:b1:40:66:71:82:5a:2b:0f:63:
         df:b7:08:b8:a3:b8:6c:d9:b1:ed:dc:6b:d1:12:1e:cc:84:28:
         74:a6:16:5e:54:c0:41:ba:9f:9b:cc:28:b0:96:15:f1:a0:a0:
         6b:5a:3a:b7:f1:3f:00:1f:18:1a:ca:ba:97:82:d4:ec:90:f1:
         ac:ac:1c:34:4d:bb:af:2d:f6:62:08:04:4c:ae:70:f6:a3:f4:
         41:da:70:f3:65:67:af:41:89:4c:6b:44:75:e1:b9:79:43:2a:
         dc:d6:3b:2a:23:2d:87:10:68:17:fa:2c:c7:79:e1:8c:b8:a0:
         20:75:f7:24:c8:2a:89:ef:97:60:57:c0:4a:83:e2:24:59:8a:
         74:8e:5f:7d:62:ca:2e:9f:58:17:fe:eb:22:9b:88:fc:8e:ec:
         60:f0:e6:6c:aa:55:49:0a:b7:ac:11:26:a1:47:7a:f1:6a:82:
         da:ab:dc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:19:55 2026 by rpki-client