This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A3BA7D2E104D271ED801DC143FD1C47E9FAAD8CA286339D67F685DFC03A5A7B/0/323830363a3363333a3a2f33322d3438203d3e20323730323232.roa
File:                     323830363a3363333a3a2f33322d3438203d3e20323730323232.roa (raw, json)
Hash identifier:          eTyOo+no8ImdiaTTdJOPqilimiQ5CE7ym0LD4C/TjDs=
Subject key identifier:   AF:77:1F:0E:73:5F:AE:68:D9:65:4D:DD:7C:72:6A:D3:4F:47:7D:68
Certificate issuer:       /CN=12E10688952241783849ADC1F70B3E3EA7C252A2
Certificate serial:       2D201E02D2A07D8C4889455F1A3CC9A8E249ADBB
Authority key identifier: 12:E1:06:88:95:22:41:78:38:49:AD:C1:F7:0B:3E:3E:A7:C2:52:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12E10688952241783849ADC1F70B3E3EA7C252A2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A3BA7D2E104D271ED801DC143FD1C47E9FAAD8CA286339D67F685DFC03A5A7B/0/323830363a3363333a3a2f33322d3438203d3e20323730323232.roa
Signing time:             Tue 06 Jan 2026 19:37:19 +0000
ROA not before:           Tue 06 Jan 2026 19:32:19 +0000
ROA not after:            Tue 05 Jan 2027 19:37:19 +0000
asID:                     270222
IP address blocks:        2806:3c3::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A3BA7D2E104D271ED801DC143FD1C47E9FAAD8CA286339D67F685DFC03A5A7B/0/12E10688952241783849ADC1F70B3E3EA7C252A2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A3BA7D2E104D271ED801DC143FD1C47E9FAAD8CA286339D67F685DFC03A5A7B/0/12E10688952241783849ADC1F70B3E3EA7C252A2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12E10688952241783849ADC1F70B3E3EA7C252A2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:20:1e:02:d2:a0:7d:8c:48:89:45:5f:1a:3c:c9:a8:e2:49:ad:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12E10688952241783849ADC1F70B3E3EA7C252A2
        Validity
            Not Before: Jan  6 19:32:19 2026 GMT
            Not After : Jan  5 19:37:19 2027 GMT
        Subject: CN=AF771F0E735FAE68D9654DDD7C726AD34F477D68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d7:c8:17:5a:8c:df:ff:c3:64:bc:9c:68:72:
                    ce:81:08:82:cb:a5:da:85:df:50:d2:3d:0a:c9:b4:
                    71:c6:4e:ea:de:1b:f4:eb:e5:50:d1:52:45:09:a0:
                    5a:72:ff:a9:83:c5:2b:cb:6f:2d:ef:74:61:9c:f3:
                    3c:fb:cc:0a:15:c0:42:82:71:f8:98:62:5c:56:c3:
                    5c:40:79:bb:85:ce:a6:50:42:2d:04:fa:0d:18:11:
                    31:ae:62:c9:93:32:ef:9b:f9:3c:36:bf:5f:c9:20:
                    40:2a:5f:3d:99:f3:46:02:72:59:7e:60:0c:42:a6:
                    fc:11:17:ff:13:ff:0e:22:32:3c:2a:ef:18:56:31:
                    ef:bb:10:5e:8a:01:23:3a:0e:9a:93:bc:74:0d:1a:
                    4b:8e:4b:4f:4b:a2:9c:87:70:af:c2:f3:81:f9:fc:
                    46:63:3b:8a:f7:a2:37:93:d1:b0:42:cc:c8:30:73:
                    e1:fa:7e:27:cf:be:d2:0d:60:42:38:46:cf:31:d5:
                    38:89:27:71:14:ae:2d:9c:1e:ed:7f:69:9f:95:cf:
                    ab:6d:1f:84:18:68:67:4d:d2:a7:34:c2:4a:1f:5e:
                    62:0a:3c:99:05:2f:0b:2a:29:6d:58:64:8b:98:4a:
                    9c:49:3f:4c:36:65:1e:41:03:9e:8c:cf:31:b4:2b:
                    5e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:77:1F:0E:73:5F:AE:68:D9:65:4D:DD:7C:72:6A:D3:4F:47:7D:68
            X509v3 Authority Key Identifier:
                keyid:12:E1:06:88:95:22:41:78:38:49:AD:C1:F7:0B:3E:3E:A7:C2:52:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A3BA7D2E104D271ED801DC143FD1C47E9FAAD8CA286339D67F685DFC03A5A7B/0/12E10688952241783849ADC1F70B3E3EA7C252A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12E10688952241783849ADC1F70B3E3EA7C252A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A3BA7D2E104D271ED801DC143FD1C47E9FAAD8CA286339D67F685DFC03A5A7B/0/323830363a3363333a3a2f33322d3438203d3e20323730323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3c3::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:cd:9f:7c:7a:f7:a3:e2:f6:72:9b:9c:fa:b7:8c:4c:c6:06:
         8a:cc:5d:77:06:b3:eb:69:09:e6:65:05:92:03:d7:ef:6e:61:
         ad:a2:ad:e3:8b:c6:da:0b:5d:a6:40:ef:3a:44:01:d5:24:4f:
         07:c9:03:c9:a7:5a:bd:19:4d:6a:8d:d2:13:b9:30:dc:d5:5e:
         43:70:a9:e0:c6:2a:0f:7d:c3:7c:9d:af:1b:a0:40:fe:5e:fb:
         74:09:12:f4:1a:05:2d:79:5f:0b:7d:45:8c:3b:a3:00:96:fa:
         6e:dc:74:2e:7d:10:ae:a4:45:76:65:aa:23:8a:f5:f5:11:12:
         20:51:05:e9:50:da:b4:9b:ec:d7:bb:8c:11:ba:38:e5:4f:fb:
         1b:70:76:8f:f2:81:ff:fc:be:0b:68:05:47:7a:48:ba:13:c6:
         1c:a7:67:68:b6:e9:77:3d:df:00:06:97:10:1a:17:db:86:a0:
         c6:d8:09:bc:2d:aa:a5:b9:07:4d:5b:77:e1:90:d8:aa:db:f4:
         39:65:ef:4d:4c:2f:28:55:9d:92:f8:80:78:a5:05:33:15:2c:
         66:87:b1:d0:a8:37:d0:8b:50:56:c3:e1:ea:02:c5:8a:28:01:
         ae:11:1b:49:ec:9c:b6:08:1c:d0:cb:57:4f:4e:8b:bd:c8:73:
         13:06:b1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:15:59 2026 by rpki-client