This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2DD3B0AA7D6DB59528108085A18B9FF969B5B062D180A63241CA04F5B56E163C/0/323830333a316165303a3a2f33322d3332203d3e20313336393037.roa
File:                     323830333a316165303a3a2f33322d3332203d3e20313336393037.roa (raw, json)
Hash identifier:          11fFfAwC1J+ZbnteC0/IVsGI5Vc4TzYf14SlyqAhl3Y=
Subject key identifier:   46:6F:24:9C:9A:C4:35:AE:85:9A:F7:78:CF:69:B4:BD:56:5D:95:BD
Certificate issuer:       /CN=36A232DEC8FF17295E0671B40126922251AAE733
Certificate serial:       4E81ABE66E4FB16230EA3F41BB6FC33B6C5214F4
Authority key identifier: 36:A2:32:DE:C8:FF:17:29:5E:06:71:B4:01:26:92:22:51:AA:E7:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36A232DEC8FF17295E0671B40126922251AAE733.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2DD3B0AA7D6DB59528108085A18B9FF969B5B062D180A63241CA04F5B56E163C/0/323830333a316165303a3a2f33322d3332203d3e20313336393037.roa
Signing time:             Tue 06 Jan 2026 20:48:19 +0000
ROA not before:           Tue 06 Jan 2026 20:43:19 +0000
ROA not after:            Tue 05 Jan 2027 20:48:19 +0000
asID:                     136907
IP address blocks:        2803:1ae0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2DD3B0AA7D6DB59528108085A18B9FF969B5B062D180A63241CA04F5B56E163C/0/36A232DEC8FF17295E0671B40126922251AAE733.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2DD3B0AA7D6DB59528108085A18B9FF969B5B062D180A63241CA04F5B56E163C/0/36A232DEC8FF17295E0671B40126922251AAE733.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36A232DEC8FF17295E0671B40126922251AAE733.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:81:ab:e6:6e:4f:b1:62:30:ea:3f:41:bb:6f:c3:3b:6c:52:14:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36A232DEC8FF17295E0671B40126922251AAE733
        Validity
            Not Before: Jan  6 20:43:19 2026 GMT
            Not After : Jan  5 20:48:19 2027 GMT
        Subject: CN=466F249C9AC435AE859AF778CF69B4BD565D95BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b7:a3:2e:04:c3:c2:a3:3a:bd:aa:45:eb:92:
                    dd:a5:56:d0:23:30:87:f2:da:f4:47:88:8e:28:6a:
                    a2:ce:af:83:e3:99:cf:67:73:bb:89:0b:74:08:3a:
                    ec:53:97:cd:1e:59:3b:01:e9:28:7c:9e:bd:c6:04:
                    f0:0b:d0:07:3d:2f:31:0d:ec:c1:e7:69:91:80:16:
                    54:c0:fc:42:b8:95:d9:ae:86:79:35:b7:13:73:32:
                    2d:9c:e5:45:fb:31:83:af:c5:1b:22:f1:7d:57:8e:
                    ec:25:44:f0:31:af:10:73:77:6f:22:13:05:6e:80:
                    69:cf:55:d0:6e:98:dd:be:c2:d1:2d:54:70:64:1b:
                    66:da:4d:3c:91:04:08:7d:ef:34:4d:cd:a1:ab:e5:
                    4e:c1:b4:91:d4:a4:85:ad:52:d0:8a:13:bd:17:77:
                    73:a3:f3:20:79:60:f8:b6:bc:82:27:36:ae:37:23:
                    7e:4d:65:59:5a:a1:a2:b6:b4:6b:8b:bc:33:fd:e5:
                    70:59:8c:f9:c1:a3:e7:68:4e:22:95:79:04:ca:1f:
                    c1:2e:69:56:fb:01:f1:44:b0:eb:87:ab:0d:5d:57:
                    2c:6b:c0:b6:c7:cb:9e:03:73:4a:33:09:97:a2:03:
                    61:d0:b8:4e:e5:ff:22:f0:ad:de:1e:3a:31:57:c3:
                    6d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:6F:24:9C:9A:C4:35:AE:85:9A:F7:78:CF:69:B4:BD:56:5D:95:BD
            X509v3 Authority Key Identifier:
                keyid:36:A2:32:DE:C8:FF:17:29:5E:06:71:B4:01:26:92:22:51:AA:E7:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2DD3B0AA7D6DB59528108085A18B9FF969B5B062D180A63241CA04F5B56E163C/0/36A232DEC8FF17295E0671B40126922251AAE733.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36A232DEC8FF17295E0671B40126922251AAE733.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2DD3B0AA7D6DB59528108085A18B9FF969B5B062D180A63241CA04F5B56E163C/0/323830333a316165303a3a2f33322d3332203d3e20313336393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1ae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:ca:4f:6e:57:76:9f:47:3e:cd:a1:c3:27:32:7c:60:9f:c0:
         c7:79:7d:c0:6b:d7:ff:87:cb:48:8f:7c:3e:a4:1f:f1:40:b1:
         07:1d:50:6f:49:8a:b8:4a:23:3a:e0:63:5c:5f:9a:6d:e1:02:
         98:64:03:5a:c6:d6:34:8e:5a:e2:3e:18:3a:ab:1c:cd:74:fb:
         16:86:d4:dd:a5:d5:15:52:c8:cf:3f:58:84:c3:bd:56:e5:d3:
         b6:d8:ec:9e:9d:e8:7a:14:bd:85:34:ce:5f:6c:30:40:c0:78:
         e7:30:c0:bd:b7:76:b2:18:a8:8d:6b:eb:07:b1:1f:8e:02:b2:
         18:11:59:ab:36:e3:1d:13:fe:51:35:ab:56:3d:4e:bf:ec:02:
         93:81:b7:82:70:84:1d:30:fb:7a:5e:4f:5b:ae:9d:ec:07:06:
         f9:b0:e4:bc:20:e7:51:37:63:a3:60:dd:aa:20:6e:3a:c5:b4:
         74:a8:80:ff:20:7e:ef:72:06:da:c5:24:dd:38:d1:2b:3c:a1:
         02:b0:88:6e:0c:05:88:2f:5c:4d:f3:5f:a1:50:ec:78:14:07:
         f5:e6:f4:b1:0f:70:11:fb:d8:01:c4:15:1f:10:ec:ff:9a:2a:
         67:9d:b1:d7:14:50:76:7d:a6:39:f5:e5:a7:36:49:9f:a5:51:
         2f:63:8d:fb
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUToGr5m5PsWIw6j9Bu2/DO2xSFPQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzZBMjMyREVDOEZGMTcyOTVFMDY3MUI0MDEyNjkyMjI1
MUFBRTczMzAeFw0yNjAxMDYyMDQzMTlaFw0yNzAxMDUyMDQ4MTlaMDMxMTAvBgNV
BAMTKDQ2NkYyNDlDOUFDNDM1QUU4NTlBRjc3OENGNjlCNEJENTY1RDk1QkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVt6MuBMPCozq9qkXrkt2lVtAj
MIfy2vRHiI4oaqLOr4Pjmc9nc7uJC3QIOuxTl80eWTsB6Sh8nr3GBPAL0Ac9LzEN
7MHnaZGAFlTA/EK4ldmuhnk1txNzMi2c5UX7MYOvxRsi8X1XjuwlRPAxrxBzd28i
EwVugGnPVdBumN2+wtEtVHBkG2baTTyRBAh97zRNzaGr5U7BtJHUpIWtUtCKE70X
d3Oj8yB5YPi2vIInNq43I35NZVlaoaK2tGuLvDP95XBZjPnBo+doTiKVeQTKH8Eu
aVb7AfFEsOuHqw1dVyxrwLbHy54Dc0ozCZeiA2HQuE7l/yLwrd4eOjFXw23zAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQURm8knJrENa6Fmvd4z2m0vVZdlb0wHwYDVR0j
BBgwFoAUNqIy3sj/FyleBnG0ASaSIlGq5zMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yREQzQjBBQTdENkRCNTk1MjgxMDgwODVBMThCOUZGOTY5
QjVCMDYyRDE4MEE2MzI0MUNBMDRGNUI1NkUxNjNDLzAvMzZBMjMyREVDOEZGMTcy
OTVFMDY3MUI0MDEyNjkyMjI1MUFBRTczMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNkEyMzJERUM4RkYxNzI5NUUw
NjcxQjQwMTI2OTIyMjUxQUFFNzMzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkREM0IwQUE3RDZEQjU5NTI4MTA4MDg1QTE4QjlGRjk2OUI1QjA2MkQx
ODBBNjMyNDFDQTA0RjVCNTZFMTYzQy8wLzMyMzgzMDMzM2EzMTYxNjUzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMxMzMzNjM5MzAzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDGuAw
DQYJKoZIhvcNAQELBQADggEBALXKT25Xdp9HPs2hwycyfGCfwMd5fcBr1/+Hy0iP
fD6kH/FAsQcdUG9JirhKIzrgY1xfmm3hAphkA1rG1jSOWuI+GDqrHM10+xaG1N2l
1RVSyM8/WITDvVbl07bY7J6d6HoUvYU0zl9sMEDAeOcwwL23drIYqI1r6wexH44C
shgRWas24x0T/lE1q1Y9Tr/sApOBt4JwhB0w+3peT1uunewHBvmw5Lwg51E3Y6Ng
3aogbjrFtHSogP8gfu9yBtrFJN040Ss8oQKwiG4MBYgvXE3zX6FQ7HgUB/Xm9LEP
cBH72AHEFR8Q7P+aKmedsdcUUHZ9pjn15ac2SZ+lUS9jjfs=
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:20:00 2026 by rpki-client