This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/32CF848E94534A3CD76C920E9349CED510FEAA4D77C21940B4DC108E5AC2920F/0/323830333a363434303a3a2f33322d3332203d3e20323633373535.roa
File:                     323830333a363434303a3a2f33322d3332203d3e20323633373535.roa (raw, json)
Hash identifier:          X3NpEA7NEbE7fTuPHMozaVRvUbOoeUX1mZRzVhUdsUs=
Subject key identifier:   1D:18:4B:11:D5:C4:E7:26:9D:00:6A:FE:BA:2C:0E:67:ED:22:84:07
Certificate issuer:       /CN=64EBE7741095629A165538B55C948F9A0C4FB045
Certificate serial:       22FA2F79F3E9FA576897697E9E5F17B389BEB1C3
Authority key identifier: 64:EB:E7:74:10:95:62:9A:16:55:38:B5:5C:94:8F:9A:0C:4F:B0:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64EBE7741095629A165538B55C948F9A0C4FB045.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/32CF848E94534A3CD76C920E9349CED510FEAA4D77C21940B4DC108E5AC2920F/0/323830333a363434303a3a2f33322d3332203d3e20323633373535.roa
Signing time:             Tue 06 Jan 2026 19:35:49 +0000
ROA not before:           Tue 06 Jan 2026 19:30:49 +0000
ROA not after:            Tue 05 Jan 2027 19:35:49 +0000
asID:                     263755
IP address blocks:        2803:6440::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/32CF848E94534A3CD76C920E9349CED510FEAA4D77C21940B4DC108E5AC2920F/0/64EBE7741095629A165538B55C948F9A0C4FB045.crl
                          rsync://repository.lacnic.net/rpki/lacnic/32CF848E94534A3CD76C920E9349CED510FEAA4D77C21940B4DC108E5AC2920F/0/64EBE7741095629A165538B55C948F9A0C4FB045.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64EBE7741095629A165538B55C948F9A0C4FB045.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:fa:2f:79:f3:e9:fa:57:68:97:69:7e:9e:5f:17:b3:89:be:b1:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64EBE7741095629A165538B55C948F9A0C4FB045
        Validity
            Not Before: Jan  6 19:30:49 2026 GMT
            Not After : Jan  5 19:35:49 2027 GMT
        Subject: CN=1D184B11D5C4E7269D006AFEBA2C0E67ED228407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:28:ed:b8:e9:52:15:00:df:7f:2a:be:0a:72:
                    cf:6f:06:61:79:e4:bd:a4:e4:5d:c7:25:e2:e7:8d:
                    4a:69:2b:7e:48:bf:f7:3a:9a:d7:f9:e8:eb:d7:d4:
                    db:6e:3a:e8:ad:3e:f5:9f:56:fb:ac:b7:13:17:d5:
                    c1:b0:a1:26:05:b1:87:3b:55:47:5b:89:6c:af:7f:
                    17:46:ff:af:c8:03:f6:02:ef:7a:38:8b:73:c0:fa:
                    0b:cc:07:5e:46:67:ca:53:b8:00:03:91:45:38:90:
                    b4:e3:22:c9:52:98:79:3b:87:44:64:9e:63:d2:0f:
                    c6:94:62:6b:81:6e:2b:64:61:30:c1:48:af:89:77:
                    b9:6f:f4:f3:bb:8d:71:2e:0d:60:c3:1b:bc:8f:e1:
                    ff:e0:bf:4c:be:e5:52:a6:cf:18:1c:7d:c7:21:57:
                    f2:76:63:01:96:a3:ae:05:09:ba:97:91:bb:20:4c:
                    95:f6:19:b2:1a:94:46:e9:fe:f3:93:3e:a6:3f:ac:
                    c0:8b:27:52:6f:b9:7b:0a:d4:d6:db:ff:ac:8e:6a:
                    af:0d:69:ef:56:78:36:33:d9:2d:22:f9:9c:55:68:
                    39:5c:9b:01:60:79:54:02:e0:0a:11:d8:45:f5:ac:
                    c8:61:e8:8d:53:7a:e0:54:10:23:fa:f3:10:f1:dc:
                    73:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:18:4B:11:D5:C4:E7:26:9D:00:6A:FE:BA:2C:0E:67:ED:22:84:07
            X509v3 Authority Key Identifier:
                keyid:64:EB:E7:74:10:95:62:9A:16:55:38:B5:5C:94:8F:9A:0C:4F:B0:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/32CF848E94534A3CD76C920E9349CED510FEAA4D77C21940B4DC108E5AC2920F/0/64EBE7741095629A165538B55C948F9A0C4FB045.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64EBE7741095629A165538B55C948F9A0C4FB045.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/32CF848E94534A3CD76C920E9349CED510FEAA4D77C21940B4DC108E5AC2920F/0/323830333a363434303a3a2f33322d3332203d3e20323633373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6440::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:b1:c7:97:33:bf:3c:8d:9d:38:04:2c:0f:4b:e4:9c:72:58:
         23:ce:fa:be:39:57:ee:cb:53:fe:eb:e2:77:7a:15:1b:ad:e2:
         b8:9f:03:8c:b3:5b:f5:64:e7:2f:39:10:c6:d5:70:2b:ae:12:
         fb:f2:2b:0e:a8:38:20:85:7f:e5:d5:31:40:9c:67:92:06:81:
         c9:b7:6c:aa:6d:42:34:ee:1c:79:05:08:97:5b:25:0a:5c:bd:
         a2:8a:c8:d5:25:ae:9e:a9:65:ec:0a:f2:ab:52:f9:ad:6b:41:
         12:2c:d1:3c:29:bf:6f:64:ac:f8:0f:08:bc:10:52:8a:0a:2a:
         64:4b:46:11:d7:a0:bf:87:07:ba:a7:21:ce:05:65:bb:f0:a6:
         d5:c8:c0:46:f8:62:f6:ea:8f:7a:d9:4a:c3:3e:83:4c:be:33:
         d8:43:e2:44:b2:5d:2a:78:ef:48:04:6b:ef:75:da:71:ba:f5:
         4a:65:1a:04:cc:55:56:12:be:97:4b:18:2e:a4:0f:92:66:d4:
         d6:4c:7c:c8:4f:6f:c8:fc:a4:7c:19:cb:38:cd:f0:42:90:68:
         3c:5a:b7:b3:35:d8:e8:9e:c2:9d:ae:e4:78:37:d7:ae:68:bc:
         79:32:56:02:f5:21:c5:2d:a5:aa:99:b4:b1:61:29:e6:c7:29:
         42:c9:0b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:17:07 2026 by rpki-client