This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/323830313a303a3434303a3a2f34382d3438203d3e2037333033.roa
File:                     323830313a303a3434303a3a2f34382d3438203d3e2037333033.roa (raw, json)
Hash identifier:          YTcEkbxnFQm40IT8CSS8sy14cLuC4pAR7JtdJEGSe78=
Subject key identifier:   A7:5F:4E:E2:A1:F6:10:59:CA:09:17:85:C2:2E:7C:E7:95:15:AC:43
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       6972427BEBC49F277340A3F4C2EC9054CA560D96
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/323830313a303a3434303a3a2f34382d3438203d3e2037333033.roa
Signing time:             Tue 06 Jan 2026 19:31:08 +0000
ROA not before:           Tue 06 Jan 2026 19:26:08 +0000
ROA not after:            Tue 05 Jan 2027 19:31:08 +0000
asID:                     7303
IP address blocks:        2801:0:440::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 03:47:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:72:42:7b:eb:c4:9f:27:73:40:a3:f4:c2:ec:90:54:ca:56:0d:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Jan  6 19:26:08 2026 GMT
            Not After : Jan  5 19:31:08 2027 GMT
        Subject: CN=A75F4EE2A1F61059CA091785C22E7CE79515AC43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:33:f8:2f:5f:11:53:6e:0a:27:f5:d6:cf:bf:
                    5b:48:69:80:37:53:c0:0a:5e:9e:f9:14:37:e3:c3:
                    e9:d6:b7:f2:d2:30:11:c0:1d:76:27:2a:9d:b0:08:
                    dc:d1:8d:96:a6:0b:c9:35:ae:d5:64:8d:11:4c:b4:
                    e5:8a:ab:2d:5f:44:1c:64:f6:66:6e:59:6a:f8:85:
                    3d:ca:49:2d:fc:39:e8:7b:d4:9a:c9:70:2d:d1:78:
                    c3:72:4b:32:97:75:8d:1c:ea:0a:26:18:df:67:33:
                    37:00:df:bd:e6:48:db:dc:c6:fc:18:d3:6a:1a:1a:
                    17:29:51:da:bb:44:b6:07:f0:99:87:2a:29:7e:8f:
                    90:39:22:87:26:77:56:fe:db:94:75:f7:9b:44:b5:
                    af:c6:b9:f7:78:2e:b7:34:02:1a:ec:35:86:b9:8e:
                    af:35:07:55:f2:a6:1c:40:e2:43:0b:5d:91:48:20:
                    96:7e:2a:7f:ad:f8:79:fa:ed:14:28:10:3e:33:7b:
                    be:f9:f8:97:00:7d:ee:f9:22:4b:10:e5:15:d0:e0:
                    cd:68:f2:d8:80:7d:99:94:42:42:e0:b5:17:7b:85:
                    89:42:d8:e1:3b:a3:ec:29:0e:35:4f:9a:74:c0:89:
                    dc:fc:9c:8e:d7:c8:2a:02:97:83:4e:0a:3d:8e:aa:
                    9a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:5F:4E:E2:A1:F6:10:59:CA:09:17:85:C2:2E:7C:E7:95:15:AC:43
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/323830313a303a3434303a3a2f34382d3438203d3e2037333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:440::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:17:8b:17:44:9e:e7:5c:e1:aa:df:1f:ff:e5:fb:b1:f4:f0:
         1f:26:54:cf:4d:bc:3c:e5:ae:3e:bc:c8:eb:4d:40:2e:01:41:
         4c:77:2a:21:84:7a:2b:8c:2f:e3:0c:83:7d:b8:5f:85:56:d9:
         aa:44:0a:38:42:f9:85:b7:4f:be:ba:79:80:14:1c:e9:d6:a4:
         ed:8a:78:2a:c0:83:20:98:3b:8a:0d:bc:b8:f6:48:bd:77:28:
         c0:ac:7f:c7:39:67:4c:53:a2:92:db:59:f9:2c:01:c0:20:5c:
         af:12:9a:5d:21:05:06:b2:06:89:67:78:37:99:2b:8c:3e:f0:
         20:fe:f8:5c:8f:77:a0:34:73:f4:e2:8b:19:d7:70:f3:3a:3c:
         14:aa:10:cb:c7:3d:ab:1c:db:2b:bf:2a:bf:58:26:ee:5e:46:
         25:cf:30:b2:aa:d7:69:45:b8:3e:0e:bc:28:d9:e8:2d:6e:cc:
         11:e7:8b:fe:34:be:19:bf:2e:3c:31:f7:fc:6f:c5:d4:1b:1e:
         41:f1:92:49:af:c6:23:04:3d:5b:16:b1:49:90:31:e3:53:e5:
         50:de:b6:ff:5a:15:09:3e:0b:1d:03:fd:29:ab:40:47:b3:2b:
         cf:a9:41:b7:27:4b:65:e1:ea:86:fd:8e:37:01:50:5e:90:44:
         c6:e2:88:05
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUaXJCe+vEnydzQKP0wuyQVMpWDZYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI4M0I1RjVBRERFMjQ2MUUwMDdERENGNzlBNDUzNEFG
QzdBNTc3RjAeFw0yNjAxMDYxOTI2MDhaFw0yNzAxMDUxOTMxMDhaMDMxMTAvBgNV
BAMTKEE3NUY0RUUyQTFGNjEwNTlDQTA5MTc4NUMyMkU3Q0U3OTUxNUFDNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdM/gvXxFTbgon9dbPv1tIaYA3
U8AKXp75FDfjw+nWt/LSMBHAHXYnKp2wCNzRjZamC8k1rtVkjRFMtOWKqy1fRBxk
9mZuWWr4hT3KSS38Oeh71JrJcC3ReMNySzKXdY0c6gomGN9nMzcA373mSNvcxvwY
02oaGhcpUdq7RLYH8JmHKil+j5A5Iocmd1b+25R195tEta/Gufd4Lrc0AhrsNYa5
jq81B1XyphxA4kMLXZFIIJZ+Kn+t+Hn67RQoED4ze775+JcAfe75IksQ5RXQ4M1o
8tiAfZmUQkLgtRd7hYlC2OE7o+wpDjVPmnTAidz8nI7XyCoCl4NOCj2Oqpo7AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUp19O4qH2EFnKCReFwi5855UVrEMwHwYDVR0j
BBgwFoAUEoO19a3eJGHgB93PeaRTSvx6V38wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRDBBMkUxRkM0NEI1M0Y0RDAzMDkwMUNEQ0NFRjYxRTQ5
QTg0Rjk5NTQ3RjY2RjA5MzQyNzkwQkFFMDMzQjVELzAvMTI4M0I1RjVBRERFMjQ2
MUUwMDdERENGNzlBNDUzNEFGQzdBNTc3Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMjgzQjVGNUFEREUyNDYxRTAw
N0REQ0Y3OUE0NTM0QUZDN0E1NzdGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0QwQTJFMUZDNDRCNTNGNEQwMzA5MDFDRENDRUY2MUU0OUE4NEY5OTU0
N0Y2NkYwOTM0Mjc5MEJBRTAzM0I1RC8wLzMyMzgzMDMxM2EzMDNhMzQzNDMwM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzczMzMwMzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoAQAABEAw
DQYJKoZIhvcNAQELBQADggEBAHsXixdEnudc4arfH//l+7H08B8mVM9NvDzlrj68
yOtNQC4BQUx3KiGEeiuML+MMg324X4VW2apECjhC+YW3T766eYAUHOnWpO2KeCrA
gyCYO4oNvLj2SL13KMCsf8c5Z0xTopLbWfksAcAgXK8Sml0hBQayBolneDeZK4w+
8CD++FyPd6A0c/TiixnXcPM6PBSqEMvHPasc2yu/Kr9YJu5eRiXPMLKq12lFuD4O
vCjZ6C1uzBHni/40vhm/Ljwx9/xvxdQbHkHxkkmvxiMEPVsWsUmQMeNT5VDetv9a
FQk+Cx0D/SmrQEezK8+pQbcnS2Xh6ob9jjcBUF6QRMbiiAU=
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:27:48 2026 by rpki-client