This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/323830333a3263303a663130303a3a2f34312d3432203d3e20323634383330.roa
File:                     323830333a3263303a663130303a3a2f34312d3432203d3e20323634383330.roa (raw, json)
Hash identifier:          cKH9gdfZZBkBCon7UX2TCDmbLZrGGkvRdzjk+mGNFMQ=
Subject key identifier:   E1:E8:21:C2:40:CA:D2:59:B1:F6:68:12:F6:A4:32:08:22:15:6C:70
Certificate issuer:       /CN=EEFCF62476998633F8D62C020C074FEF5CD0077E
Certificate serial:       2A370F60C39DF8472D0201ACBE51A51F6DD547E2
Authority key identifier: EE:FC:F6:24:76:99:86:33:F8:D6:2C:02:0C:07:4F:EF:5C:D0:07:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/323830333a3263303a663130303a3a2f34312d3432203d3e20323634383330.roa
Signing time:             Tue 06 Jan 2026 20:50:06 +0000
ROA not before:           Tue 06 Jan 2026 20:45:06 +0000
ROA not after:            Tue 05 Jan 2027 20:50:06 +0000
asID:                     264830
IP address blocks:        2803:2c0:f100::/41 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:37:0f:60:c3:9d:f8:47:2d:02:01:ac:be:51:a5:1f:6d:d5:47:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEFCF62476998633F8D62C020C074FEF5CD0077E
        Validity
            Not Before: Jan  6 20:45:06 2026 GMT
            Not After : Jan  5 20:50:06 2027 GMT
        Subject: CN=E1E821C240CAD259B1F66812F6A4320822156C70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:07:0f:12:91:73:a5:a3:68:e9:61:82:3a:6f:
                    02:7f:06:9a:9c:8c:60:aa:ec:8a:eb:af:15:87:50:
                    80:75:4e:3c:e9:3b:59:0e:12:94:47:7a:8b:2b:04:
                    dc:b3:05:48:40:79:df:af:e1:02:28:46:2d:fc:89:
                    4a:86:c3:68:51:85:ec:40:66:29:64:1d:8a:16:c1:
                    53:cf:1c:70:95:77:47:d4:6c:0e:45:07:0e:33:d4:
                    2b:df:68:d0:f0:ec:30:e4:a6:e6:21:e7:fa:9d:ae:
                    ea:21:4a:b7:cf:90:e9:b7:67:a9:a2:3a:02:10:6f:
                    bd:57:e4:2b:f6:21:a0:3b:80:0d:69:41:d0:30:75:
                    79:ee:a8:d0:43:1d:07:b6:b5:68:9f:d0:2e:3a:bb:
                    02:d7:ce:f2:33:8b:9b:98:b7:a9:d6:69:97:19:c6:
                    7b:8a:99:ac:bb:67:9f:66:1b:7a:7a:9f:64:4c:08:
                    77:89:11:9c:d3:5a:9e:ca:65:33:dc:94:b8:19:11:
                    cb:84:97:36:87:f8:cb:f4:7e:9d:96:a8:2a:54:5e:
                    f2:e2:30:0d:45:b4:8b:8e:17:f2:14:bb:d3:de:bb:
                    f4:3c:fd:87:8e:6e:d0:16:b6:8a:f2:18:74:e1:e6:
                    65:88:ef:71:8b:8b:8c:4a:0a:4b:d8:d9:4a:9b:a3:
                    8b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E8:21:C2:40:CA:D2:59:B1:F6:68:12:F6:A4:32:08:22:15:6C:70
            X509v3 Authority Key Identifier:
                keyid:EE:FC:F6:24:76:99:86:33:F8:D6:2C:02:0C:07:4F:EF:5C:D0:07:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/323830333a3263303a663130303a3a2f34312d3432203d3e20323634383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2c0:f100::/41

    Signature Algorithm: sha256WithRSAEncryption
         1e:38:42:77:8c:43:5f:3f:c8:d1:15:51:73:4a:f9:56:77:c1:
         c3:5b:ab:ab:ad:4a:52:82:93:a3:05:66:d6:da:19:d7:7e:3d:
         ed:05:88:44:07:6a:f4:dc:07:36:cd:c6:39:97:3d:d8:41:00:
         89:15:4a:74:a8:63:95:3c:e2:63:02:00:5b:0d:8a:55:f2:c1:
         0e:96:34:53:08:36:15:ea:5c:ca:d9:f5:65:69:e9:96:5c:f2:
         39:a0:82:6d:42:77:da:99:e1:15:9a:ed:ea:c7:5f:51:09:4f:
         7b:c5:73:f5:c1:36:7e:1d:2e:55:eb:a5:24:92:dc:45:af:0d:
         32:d1:81:d0:17:a9:7e:34:3e:23:c8:d7:31:24:25:dd:7e:28:
         26:c9:63:7f:d5:92:7c:49:8b:1c:b2:41:6a:4d:c0:f6:b0:08:
         81:57:49:1e:88:00:38:29:c9:48:9d:ce:1c:9a:93:bb:13:e1:
         c0:3d:2e:c8:5c:d9:38:90:53:e7:ef:9c:c6:32:9a:ae:7e:71:
         a2:01:48:d9:c6:d8:3a:8d:29:db:c3:a2:4b:c4:d7:f2:3d:2d:
         22:6b:cd:e7:2c:8e:9b:a0:f9:a7:c3:1e:93:d6:6f:d3:45:9f:
         1d:6d:3b:e6:b8:79:78:30:4f:62:cd:b1:6e:02:5f:05:83:4e:
         1b:94:66:16
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUKjcPYMOd+EctAgGsvlGlH23VR+IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUVGQ0Y2MjQ3Njk5ODYzM0Y4RDYyQzAyMEMwNzRGRUY1
Q0QwMDc3RTAeFw0yNjAxMDYyMDQ1MDZaFw0yNzAxMDUyMDUwMDZaMDMxMTAvBgNV
BAMTKEUxRTgyMUMyNDBDQUQyNTlCMUY2NjgxMkY2QTQzMjA4MjIxNTZDNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiBw8SkXOlo2jpYYI6bwJ/Bpqc
jGCq7IrrrxWHUIB1TjzpO1kOEpRHeosrBNyzBUhAed+v4QIoRi38iUqGw2hRhexA
ZilkHYoWwVPPHHCVd0fUbA5FBw4z1CvfaNDw7DDkpuYh5/qdruohSrfPkOm3Z6mi
OgIQb71X5Cv2IaA7gA1pQdAwdXnuqNBDHQe2tWif0C46uwLXzvIzi5uYt6nWaZcZ
xnuKmay7Z59mG3p6n2RMCHeJEZzTWp7KZTPclLgZEcuElzaH+Mv0fp2WqCpUXvLi
MA1FtIuOF/IUu9Peu/Q8/YeObtAWtoryGHTh5mWI73GLi4xKCkvY2Uqbo4vLAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQU4eghwkDK0lmx9mgS9qQyCCIVbHAwHwYDVR0j
BBgwFoAU7vz2JHaZhjP41iwCDAdP71zQB34wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80MTNENzJBQkE1QzFGNUFFMUJFOTc2NjdFREY0RTBGODNG
OEQzODgwQjlBRjEwOUJEQ0FBOTc4RUVFNTA4NkUxLzAvRUVGQ0Y2MjQ3Njk5ODYz
M0Y4RDYyQzAyMEMwNzRGRUY1Q0QwMDc3RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRUZDRjYyNDc2OTk4NjMzRjhE
NjJDMDIwQzA3NEZFRjVDRDAwNzdFLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDEzRDcyQUJBNUMxRjVBRTFCRTk3NjY3RURGNEUwRjgzRjhEMzg4MEI5
QUYxMDlCRENBQTk3OEVFRTUwODZFMS8wLzMyMzgzMDMzM2EzMjYzMzAzYTY2MzEz
MDMwM2EzYTJmMzQzMTJkMzQzMjIwM2QzZTIwMzIzNjM0MzgzMzMwLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcHKAMCwPEAMA0GCSqGSIb3DQEBCwUAA4IBAQAeOEJ3jENfP8jRFVFzSvlWd8HD
W6urrUpSgpOjBWbW2hnXfj3tBYhEB2r03Ac2zcY5lz3YQQCJFUp0qGOVPOJjAgBb
DYpV8sEOljRTCDYV6lzK2fVlaemWXPI5oIJtQnfameEVmu3qx19RCU97xXP1wTZ+
HS5V66UkktxFrw0y0YHQF6l+ND4jyNcxJCXdfigmyWN/1ZJ8SYscskFqTcD2sAiB
V0keiAA4KclInc4cmpO7E+HAPS7IXNk4kFPn75zGMpqufnGiAUjZxtg6jSnbw6JL
xNfyPS0ia83nLI6boPmnwx6T1m/TRZ8dbTvmuHl4ME9izbFuAl8Fg04blGYW
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:22:42 2026 by rpki-client