This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3AFD6CAD263EDDD91A18FB7FAD053A7707CFD10DC19CB5C2128B5F9089791E95/0/323830313a31303a333830303a3a2f34382d3438203d3e203237393531.roa
File:                     323830313a31303a333830303a3a2f34382d3438203d3e203237393531.roa (raw, json)
Hash identifier:          EdIzzvnIRs59OwNGnRIyf1bPzzmuqZf09TX13/tT7Rk=
Subject key identifier:   8E:B4:65:FC:F4:FC:38:B3:8F:55:4B:CF:60:B8:B8:12:AC:E2:97:1E
Certificate issuer:       /CN=3D231E14A658422E6C228D7F5D07188E2FED88C5
Certificate serial:       190066E3BBF17676D9029FE3B686879551F7A33A
Authority key identifier: 3D:23:1E:14:A6:58:42:2E:6C:22:8D:7F:5D:07:18:8E:2F:ED:88:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D231E14A658422E6C228D7F5D07188E2FED88C5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3AFD6CAD263EDDD91A18FB7FAD053A7707CFD10DC19CB5C2128B5F9089791E95/0/323830313a31303a333830303a3a2f34382d3438203d3e203237393531.roa
Signing time:             Tue 06 Jan 2026 19:25:50 +0000
ROA not before:           Tue 06 Jan 2026 19:20:50 +0000
ROA not after:            Tue 05 Jan 2027 19:25:50 +0000
asID:                     27951
IP address blocks:        2801:10:3800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3AFD6CAD263EDDD91A18FB7FAD053A7707CFD10DC19CB5C2128B5F9089791E95/0/3D231E14A658422E6C228D7F5D07188E2FED88C5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3AFD6CAD263EDDD91A18FB7FAD053A7707CFD10DC19CB5C2128B5F9089791E95/0/3D231E14A658422E6C228D7F5D07188E2FED88C5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D231E14A658422E6C228D7F5D07188E2FED88C5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 11:50:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:00:66:e3:bb:f1:76:76:d9:02:9f:e3:b6:86:87:95:51:f7:a3:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D231E14A658422E6C228D7F5D07188E2FED88C5
        Validity
            Not Before: Jan  6 19:20:50 2026 GMT
            Not After : Jan  5 19:25:50 2027 GMT
        Subject: CN=8EB465FCF4FC38B38F554BCF60B8B812ACE2971E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:05:45:4d:af:1d:88:78:83:d1:c6:93:6c:a2:
                    1b:3c:0b:40:eb:0a:bf:38:c8:76:5d:17:61:88:36:
                    3e:20:61:2c:f8:ed:0a:0c:68:63:04:de:67:a2:06:
                    9f:77:3b:ce:2e:68:8b:f4:57:5f:59:63:25:70:77:
                    84:08:b7:e5:9d:f3:4b:4a:0a:69:5d:36:85:e3:4c:
                    4a:32:52:14:05:cc:50:92:0e:72:cc:a6:d2:6c:cc:
                    09:cb:95:95:a7:af:96:38:9c:19:f9:7e:91:c9:f9:
                    48:6e:0c:82:63:77:85:d8:44:61:ae:c9:0e:60:f3:
                    4e:31:ab:d3:05:c9:c0:cc:1a:1b:b8:a3:ac:8a:b0:
                    6d:a3:79:e4:1d:cb:a5:19:8b:20:98:b2:d8:50:b5:
                    6a:b7:08:37:95:ea:1c:26:2e:c6:9f:83:34:a9:f9:
                    17:f5:82:db:03:aa:54:ce:76:17:62:5f:9c:10:5a:
                    14:f3:fe:2d:ce:6f:c5:ad:30:d3:12:92:05:5b:fd:
                    2d:63:3e:30:cf:86:f0:ed:3c:85:06:20:68:14:3b:
                    6e:ef:aa:fc:97:95:64:d3:6c:61:e0:21:4a:49:c3:
                    b4:97:16:99:94:d5:23:dc:76:51:dd:3e:5b:f9:11:
                    75:1b:14:8b:25:e1:08:cb:26:1b:95:55:55:1e:7e:
                    88:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B4:65:FC:F4:FC:38:B3:8F:55:4B:CF:60:B8:B8:12:AC:E2:97:1E
            X509v3 Authority Key Identifier:
                keyid:3D:23:1E:14:A6:58:42:2E:6C:22:8D:7F:5D:07:18:8E:2F:ED:88:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3AFD6CAD263EDDD91A18FB7FAD053A7707CFD10DC19CB5C2128B5F9089791E95/0/3D231E14A658422E6C228D7F5D07188E2FED88C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D231E14A658422E6C228D7F5D07188E2FED88C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3AFD6CAD263EDDD91A18FB7FAD053A7707CFD10DC19CB5C2128B5F9089791E95/0/323830313a31303a333830303a3a2f34382d3438203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:10:3800::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:ca:8a:70:7d:dd:7b:a3:4b:e9:51:a1:7d:4e:62:64:99:a6:
         99:b4:60:48:aa:97:89:06:e1:2e:ba:d5:6a:65:2b:05:54:42:
         6d:a6:d7:c3:df:65:9d:76:61:e4:44:3a:0f:22:51:a2:3c:f4:
         a0:b9:c2:ee:42:b4:0e:e4:0b:f4:9e:0b:f6:dd:fe:8e:36:dd:
         88:04:7a:03:6a:0b:16:1f:77:6f:55:63:f2:39:9b:fc:6d:ec:
         ba:8b:ec:b9:b1:e3:dd:5c:d5:8f:18:25:4b:75:c3:f5:ff:cc:
         f1:1e:16:6f:62:e1:98:b5:f4:1c:d4:a7:40:e5:ae:ea:00:66:
         40:8a:11:a9:83:60:b8:d6:86:cb:79:32:c6:d6:75:ae:8f:22:
         53:d7:5f:6c:f8:bc:90:5e:a0:7c:04:09:31:92:b7:9e:e3:c9:
         c7:a8:22:6d:f7:21:1c:a1:bc:07:c3:ef:7d:b7:37:a2:d4:04:
         f9:de:9b:41:fc:00:4e:20:71:04:c0:8d:ac:9b:d0:d2:69:f8:
         25:00:5c:a4:3f:c3:7d:f3:93:16:dd:af:b6:82:b5:9d:aa:74:
         49:a1:b4:1b:bb:45:51:9b:39:2b:ad:78:cb:95:16:00:c7:89:
         f0:0f:12:89:19:4b:1d:95:68:a9:8e:06:4e:20:37:9d:6a:53:
         c6:53:80:50
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUGQBm47vxdnbZAp/jtoaHlVH3ozowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0QyMzFFMTRBNjU4NDIyRTZDMjI4RDdGNUQwNzE4OEUy
RkVEODhDNTAeFw0yNjAxMDYxOTIwNTBaFw0yNzAxMDUxOTI1NTBaMDMxMTAvBgNV
BAMTKDhFQjQ2NUZDRjRGQzM4QjM4RjU1NEJDRjYwQjhCODEyQUNFMjk3MUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7BUVNrx2IeIPRxpNsohs8C0Dr
Cr84yHZdF2GINj4gYSz47QoMaGME3meiBp93O84uaIv0V19ZYyVwd4QIt+Wd80tK
CmldNoXjTEoyUhQFzFCSDnLMptJszAnLlZWnr5Y4nBn5fpHJ+UhuDIJjd4XYRGGu
yQ5g804xq9MFycDMGhu4o6yKsG2jeeQdy6UZiyCYsthQtWq3CDeV6hwmLsafgzSp
+Rf1gtsDqlTOdhdiX5wQWhTz/i3Ob8WtMNMSkgVb/S1jPjDPhvDtPIUGIGgUO27v
qvyXlWTTbGHgIUpJw7SXFpmU1SPcdlHdPlv5EXUbFIsl4QjLJhuVVVUefoiHAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUjrRl/PT8OLOPVUvPYLi4Eqzilx4wHwYDVR0j
BBgwFoAUPSMeFKZYQi5sIo1/XQcYji/tiMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQUZENkNBRDI2M0VEREQ5MUExOEZCN0ZBRDA1M0E3NzA3
Q0ZEMTBEQzE5Q0I1QzIxMjhCNUY5MDg5NzkxRTk1LzAvM0QyMzFFMTRBNjU4NDIy
RTZDMjI4RDdGNUQwNzE4OEUyRkVEODhDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRDIzMUUxNEE2NTg0MjJFNkMy
MjhEN0Y1RDA3MTg4RTJGRUQ4OEM1LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0FGRDZDQUQyNjNFREREOTFBMThGQjdGQUQwNTNBNzcwN0NGRDEwREMx
OUNCNUMyMTI4QjVGOTA4OTc5MUU5NS8wLzMyMzgzMDMxM2EzMTMwM2EzMzM4MzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzczOTM1MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AQAQOAAwDQYJKoZIhvcNAQELBQADggEBAHLKinB93XujS+lRoX1OYmSZppm0YEiq
l4kG4S661WplKwVUQm2m18PfZZ12YeREOg8iUaI89KC5wu5CtA7kC/SeC/bd/o42
3YgEegNqCxYfd29VY/I5m/xt7LqL7Lmx491c1Y8YJUt1w/X/zPEeFm9i4Zi19BzU
p0DlruoAZkCKEamDYLjWhst5MsbWda6PIlPXX2z4vJBeoHwECTGSt57jyceoIm33
IRyhvAfD7323N6LUBPnem0H8AE4gcQTAjayb0NJp+CUAXKQ/w33zkxbdr7aCtZ2q
dEmhtBu7RVGbOSuteMuVFgDHifAPEokZSx2VaKmOBk4gN51qU8ZTgFA=
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:57:12 2026 by rpki-client