This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A7D08928422CEB84F66F47334FC5FF26A23608A87C64BEC5ECFD0752263DB4E/0/323830333a656165303a3a2f33322d3332203d3e20323639393439.roa
File:                     323830333a656165303a3a2f33322d3332203d3e20323639393439.roa (raw, json)
Hash identifier:          OEtXlYiwvOY4qJyqVKB61keNwdTH7xPlomS/sr2IFCc=
Subject key identifier:   1D:B0:ED:47:22:49:7F:CE:38:BE:92:52:EB:D5:1A:F9:1D:30:BD:25
Certificate issuer:       /CN=7AE5BC811D41AB880C0B9EE47AD9B9980DC7EEAF
Certificate serial:       6C71D07FBA65BEF4A00B55A0AC492463AA1B0615
Authority key identifier: 7A:E5:BC:81:1D:41:AB:88:0C:0B:9E:E4:7A:D9:B9:98:0D:C7:EE:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7AE5BC811D41AB880C0B9EE47AD9B9980DC7EEAF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A7D08928422CEB84F66F47334FC5FF26A23608A87C64BEC5ECFD0752263DB4E/0/323830333a656165303a3a2f33322d3332203d3e20323639393439.roa
Signing time:             Tue 06 Jan 2026 19:11:18 +0000
ROA not before:           Tue 06 Jan 2026 19:06:18 +0000
ROA not after:            Tue 05 Jan 2027 19:11:18 +0000
asID:                     269949
IP address blocks:        2803:eae0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A7D08928422CEB84F66F47334FC5FF26A23608A87C64BEC5ECFD0752263DB4E/0/7AE5BC811D41AB880C0B9EE47AD9B9980DC7EEAF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A7D08928422CEB84F66F47334FC5FF26A23608A87C64BEC5ECFD0752263DB4E/0/7AE5BC811D41AB880C0B9EE47AD9B9980DC7EEAF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7AE5BC811D41AB880C0B9EE47AD9B9980DC7EEAF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 22:57:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:71:d0:7f:ba:65:be:f4:a0:0b:55:a0:ac:49:24:63:aa:1b:06:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AE5BC811D41AB880C0B9EE47AD9B9980DC7EEAF
        Validity
            Not Before: Jan  6 19:06:18 2026 GMT
            Not After : Jan  5 19:11:18 2027 GMT
        Subject: CN=1DB0ED4722497FCE38BE9252EBD51AF91D30BD25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:99:13:3b:ee:cc:7c:d4:b7:3d:66:3c:15:40:
                    8a:14:1b:74:27:f6:08:75:db:74:09:72:5f:52:29:
                    14:46:85:0a:c9:38:23:ea:d4:d3:15:fb:ed:9b:ec:
                    4b:1d:86:42:c3:e1:46:68:bb:14:85:35:26:40:5f:
                    75:a4:7a:06:24:4d:a7:76:a7:6e:1c:af:ba:cb:e0:
                    1a:74:4d:e4:54:9b:84:f1:3c:94:93:be:72:4b:c5:
                    37:40:e3:41:ff:0c:29:80:22:b2:aa:45:2f:c7:05:
                    5d:02:1f:3a:99:cb:f8:bb:56:21:15:bb:2e:f6:6f:
                    7a:da:8a:8b:5a:f1:4b:ef:dd:ea:9d:06:74:60:94:
                    e4:55:88:42:db:ad:58:80:9d:04:50:55:a5:a2:05:
                    65:0e:ed:61:5e:51:60:c5:e1:10:fc:24:8f:a5:ba:
                    aa:dc:c5:71:32:bb:13:2a:87:b1:46:85:e2:52:3f:
                    f1:6f:f2:68:2a:75:ab:71:3c:ce:c5:d3:b4:22:a1:
                    b1:3b:79:d5:3e:a2:7b:28:bf:15:9b:eb:2d:89:d6:
                    da:25:f2:34:f4:c1:35:88:47:97:6a:06:79:c2:fb:
                    a0:48:ea:8e:bd:7c:4c:a5:fd:4b:6d:ca:96:85:8f:
                    db:be:24:a1:11:4e:ac:c9:ad:52:15:87:19:e7:6f:
                    8c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B0:ED:47:22:49:7F:CE:38:BE:92:52:EB:D5:1A:F9:1D:30:BD:25
            X509v3 Authority Key Identifier:
                keyid:7A:E5:BC:81:1D:41:AB:88:0C:0B:9E:E4:7A:D9:B9:98:0D:C7:EE:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A7D08928422CEB84F66F47334FC5FF26A23608A87C64BEC5ECFD0752263DB4E/0/7AE5BC811D41AB880C0B9EE47AD9B9980DC7EEAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7AE5BC811D41AB880C0B9EE47AD9B9980DC7EEAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A7D08928422CEB84F66F47334FC5FF26A23608A87C64BEC5ECFD0752263DB4E/0/323830333a656165303a3a2f33322d3332203d3e20323639393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:eae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:49:64:20:95:d1:67:a3:98:6a:c0:82:6a:d9:90:b2:e4:b3:
         ce:34:30:5f:a2:4c:8b:0c:6f:fc:56:3b:25:09:a8:e7:44:1b:
         08:fc:ee:05:1a:a7:07:0e:16:de:77:3b:f7:07:e8:96:c0:7f:
         68:9b:52:64:25:53:e3:2c:c5:39:21:a2:44:ce:ef:ff:93:23:
         61:37:a6:7d:9a:62:26:dd:f2:3b:d1:7c:a3:40:09:1f:24:a1:
         2c:07:8c:62:84:6d:0b:57:ce:db:4a:ae:ff:8c:d0:94:b5:9c:
         8c:56:91:06:87:e9:9c:40:bf:0e:30:7d:73:1b:ab:3f:ec:cf:
         e2:fb:51:a1:44:66:a4:a7:69:95:33:81:27:a5:90:3f:07:aa:
         32:e4:b6:2c:5a:63:01:eb:88:ef:a8:fb:7c:41:2a:b2:f4:f8:
         8c:f3:80:e1:c2:88:ca:14:cb:19:8a:10:f4:8b:97:64:df:63:
         eb:a7:d8:e1:62:1d:e8:43:b8:00:45:ff:c4:e3:a8:31:88:78:
         77:4d:a6:01:7a:1b:3f:4d:cb:f7:3c:9c:93:b8:6b:de:05:03:
         07:6c:1f:2f:a1:12:db:48:ee:b2:04:27:09:3b:e0:1c:5d:9f:
         98:1c:91:ad:3b:c9:1a:d9:dc:8e:94:78:80:8b:77:39:e8:1d:
         44:63:a8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:55:02 2026 by rpki-client