This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/323830333a643438303a3a2f33322d3438203d3e2038303533.roa
File:                     323830333a643438303a3a2f33322d3438203d3e2038303533.roa (raw, json)
Hash identifier:          23xJo70VCrKy6zx4DNQx4WBJ6aVb0Ah6SdtBnaFVvVI=
Subject key identifier:   FE:DF:15:C3:18:E3:80:5C:B7:46:62:7B:5F:0A:5D:E1:6B:FD:69:49
Certificate issuer:       /CN=3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091
Certificate serial:       3D214076F72870B28EA6287983557F245AE562DF
Authority key identifier: 3C:48:A5:D3:7B:5C:07:1F:F1:A8:25:8C:AF:CE:4A:DC:F5:FA:60:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/323830333a643438303a3a2f33322d3438203d3e2038303533.roa
Signing time:             Tue 06 Jan 2026 19:39:21 +0000
ROA not before:           Tue 06 Jan 2026 19:34:21 +0000
ROA not after:            Tue 05 Jan 2027 19:39:21 +0000
asID:                     8053
IP address blocks:        2803:d480::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.crl
                          rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 14:54:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:21:40:76:f7:28:70:b2:8e:a6:28:79:83:55:7f:24:5a:e5:62:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091
        Validity
            Not Before: Jan  6 19:34:21 2026 GMT
            Not After : Jan  5 19:39:21 2027 GMT
        Subject: CN=FEDF15C318E3805CB746627B5F0A5DE16BFD6949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:28:8b:36:b2:32:35:ab:57:63:12:df:2f:90:
                    e3:95:09:4d:2b:a0:e9:fd:6a:c4:79:3c:1b:9f:9e:
                    f1:cb:4b:c5:8f:61:b8:54:34:a9:50:3a:22:de:dc:
                    d5:79:a6:be:a0:e7:83:3f:85:e1:07:21:ec:e0:0a:
                    3a:ea:2e:c1:d9:7a:58:69:fa:dd:e2:82:34:46:9f:
                    20:11:04:4c:b1:37:7c:91:71:2c:8e:1a:f8:ec:fa:
                    af:3e:6d:9c:dc:56:80:46:e0:dc:70:63:23:0e:a1:
                    ea:33:ef:6a:79:1b:9d:db:0b:dd:19:36:d2:74:06:
                    c7:76:79:98:9e:01:29:c9:a6:5c:f5:e5:8a:d5:47:
                    74:80:cf:f0:a4:05:63:42:ec:bc:2a:93:47:05:bd:
                    3f:92:d8:72:b9:7a:5c:8c:43:5a:03:ae:d7:6d:da:
                    52:b7:61:a1:61:07:b1:88:9b:1a:f6:b8:6a:b3:d1:
                    aa:bf:dd:00:4d:79:b0:29:1e:4e:ed:c0:a6:94:f4:
                    f1:ce:0a:58:78:c5:0e:c7:f6:dd:26:bf:64:45:ed:
                    33:4c:99:9c:05:39:3c:91:a4:fc:a2:91:f2:e9:63:
                    78:66:a4:c3:93:7b:62:80:cb:09:1e:ca:a7:d2:3b:
                    36:a3:d4:0c:e0:27:7a:e2:14:9a:be:a4:d5:d9:91:
                    19:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:DF:15:C3:18:E3:80:5C:B7:46:62:7B:5F:0A:5D:E1:6B:FD:69:49
            X509v3 Authority Key Identifier:
                keyid:3C:48:A5:D3:7B:5C:07:1F:F1:A8:25:8C:AF:CE:4A:DC:F5:FA:60:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/323830333a643438303a3a2f33322d3438203d3e2038303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d480::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:ed:26:2a:9f:89:b7:41:54:5b:e2:e6:af:5b:e1:de:04:a1:
         56:52:cb:fc:f1:5a:1c:d4:69:c5:2b:89:72:eb:d3:66:db:c6:
         fa:ee:ab:51:13:c9:89:3f:ba:d1:b6:52:a6:3e:9d:22:64:60:
         04:8b:c8:41:16:20:01:da:2b:a5:84:69:32:cc:2e:b0:64:40:
         8e:9c:cc:5b:76:8c:79:65:ea:79:98:75:e4:31:ab:44:68:12:
         8d:cb:88:12:d1:d0:3c:d9:ab:71:a5:fc:60:14:c2:9c:9c:3d:
         bb:3d:1b:8e:a4:40:ab:6a:e5:48:f9:1c:a1:e2:2a:bd:76:c2:
         bd:ec:40:9a:67:ab:e8:af:49:94:c8:fc:3c:fe:20:b6:13:19:
         52:aa:48:1f:f5:1d:c4:45:b8:ca:9c:ec:85:f8:42:cb:31:35:
         93:14:f1:c6:1d:29:ea:26:02:2b:99:0d:86:e7:0d:a8:3d:93:
         1d:4f:7f:91:16:35:d4:31:56:de:d2:ca:f7:08:81:ae:90:40:
         bc:7f:4b:be:f6:d1:d3:36:fe:90:ac:9e:9a:dd:71:52:2d:40:
         0a:03:73:0e:b6:6e:e7:2a:98:4b:98:6f:ea:f1:c5:d8:81:1f:
         a4:03:d3:3d:a1:bb:e2:17:cf:df:61:8f:bb:ef:ee:28:5f:b9:
         19:b1:ad:e1
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUPSFAdvcocLKOpih5g1V/JFrlYt8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0M0OEE1RDM3QjVDMDcxRkYxQTgyNThDQUZDRTRBRENG
NUZBNjA5MTAeFw0yNjAxMDYxOTM0MjFaFw0yNzAxMDUxOTM5MjFaMDMxMTAvBgNV
BAMTKEZFREYxNUMzMThFMzgwNUNCNzQ2NjI3QjVGMEE1REUxNkJGRDY5NDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHKIs2sjI1q1djEt8vkOOVCU0r
oOn9asR5PBufnvHLS8WPYbhUNKlQOiLe3NV5pr6g54M/heEHIezgCjrqLsHZelhp
+t3igjRGnyARBEyxN3yRcSyOGvjs+q8+bZzcVoBG4NxwYyMOoeoz72p5G53bC90Z
NtJ0Bsd2eZieASnJplz15YrVR3SAz/CkBWNC7Lwqk0cFvT+S2HK5elyMQ1oDrtdt
2lK3YaFhB7GImxr2uGqz0aq/3QBNebApHk7twKaU9PHOClh4xQ7H9t0mv2RF7TNM
mZwFOTyRpPyikfLpY3hmpMOTe2KAywkeyqfSOzaj1AzgJ3riFJq+pNXZkRmRAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQU/t8VwxjjgFy3RmJ7Xwpd4Wv9aUkwHwYDVR0j
BBgwFoAUPEil03tcBx/xqCWMr85K3PX6YJEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMDBDM0IzM0ExRDI1MUM2QkMxNTgyNTMzNUZBMjM1MTEw
MzEwOUUxRDFCMDhBRTU0RTg0NDg1ODVBRUJGQzhBLzAvM0M0OEE1RDM3QjVDMDcx
RkYxQTgyNThDQUZDRTRBRENGNUZBNjA5MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQzQ4QTVEMzdCNUMwNzFGRjFB
ODI1OENBRkNFNEFEQ0Y1RkE2MDkxLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzAwQzNCMzNBMUQyNTFDNkJDMTU4MjUzMzVGQTIzNTExMDMxMDlFMUQx
QjA4QUU1NEU4NDQ4NTg1QUVCRkM4QS8wLzMyMzgzMDMzM2E2NDM0MzgzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDM4MzAzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAPUgDANBgkq
hkiG9w0BAQsFAAOCAQEAku0mKp+Jt0FUW+Lmr1vh3gShVlLL/PFaHNRpxSuJcuvT
ZtvG+u6rURPJiT+60bZSpj6dImRgBIvIQRYgAdorpYRpMswusGRAjpzMW3aMeWXq
eZh15DGrRGgSjcuIEtHQPNmrcaX8YBTCnJw9uz0bjqRAq2rlSPkcoeIqvXbCvexA
mmer6K9JlMj8PP4gthMZUqpIH/UdxEW4ypzshfhCyzE1kxTxxh0p6iYCK5kNhucN
qD2THU9/kRY11DFW3tLK9wiBrpBAvH9LvvbR0zb+kKyemt1xUi1ACgNzDrZu5yqY
S5hv6vHF2IEfpAPTPaG74hfP32GPu+/uKF+5GbGt4Q==
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:47:06 2026 by rpki-client