This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/41B787F8813E93720A4A1D12F7CAC1265E13C2B8C2A0E06C805B48E73792A172/0/323830333a613833303a3a2f33322d3438203d3e20323734323838.roa
File:                     323830333a613833303a3a2f33322d3438203d3e20323734323838.roa (raw, json)
Hash identifier:          5lHM75KsJ9iuRnjiJEBrogfipcy6fv7rmFNrYdVurBk=
Subject key identifier:   63:81:43:AA:83:66:81:87:08:5F:57:80:7E:BD:81:46:74:87:2D:F7
Certificate issuer:       /CN=CCD09AABD28B009E9F487EF1B8CD631B97622AC9
Certificate serial:       528EF0C44D306EC8785D8248A7AFDD29E0545802
Authority key identifier: CC:D0:9A:AB:D2:8B:00:9E:9F:48:7E:F1:B8:CD:63:1B:97:62:2A:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCD09AABD28B009E9F487EF1B8CD631B97622AC9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/41B787F8813E93720A4A1D12F7CAC1265E13C2B8C2A0E06C805B48E73792A172/0/323830333a613833303a3a2f33322d3438203d3e20323734323838.roa
Signing time:             Fri 09 Jan 2026 00:15:00 +0000
ROA not before:           Fri 09 Jan 2026 00:10:00 +0000
ROA not after:            Fri 08 Jan 2027 00:15:00 +0000
asID:                     274288
IP address blocks:        2803:a830::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/41B787F8813E93720A4A1D12F7CAC1265E13C2B8C2A0E06C805B48E73792A172/0/CCD09AABD28B009E9F487EF1B8CD631B97622AC9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/41B787F8813E93720A4A1D12F7CAC1265E13C2B8C2A0E06C805B48E73792A172/0/CCD09AABD28B009E9F487EF1B8CD631B97622AC9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCD09AABD28B009E9F487EF1B8CD631B97622AC9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 06:15:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:8e:f0:c4:4d:30:6e:c8:78:5d:82:48:a7:af:dd:29:e0:54:58:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCD09AABD28B009E9F487EF1B8CD631B97622AC9
        Validity
            Not Before: Jan  9 00:10:00 2026 GMT
            Not After : Jan  8 00:15:00 2027 GMT
        Subject: CN=638143AA83668187085F57807EBD814674872DF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e1:fe:99:bd:b1:ad:b6:7d:04:6e:49:bf:a5:
                    fe:94:34:7c:91:71:84:7c:26:b3:82:06:da:2d:68:
                    fa:ec:d4:22:80:47:01:b7:59:dc:86:b6:31:80:69:
                    db:ee:44:68:f5:ae:57:ca:9a:f5:d1:a4:36:77:c2:
                    19:a5:27:10:a5:5f:f0:31:b5:0e:41:59:4b:9b:96:
                    47:cd:8e:6a:cc:15:0d:3d:76:3b:e6:95:7b:e6:35:
                    5d:88:4d:6a:2c:da:90:b6:be:a9:dd:77:5a:61:d8:
                    c1:8d:50:2b:4a:d1:3a:fa:65:75:ad:2b:4c:a6:5d:
                    0d:42:0b:b3:35:18:5f:18:76:3d:2d:a7:65:45:97:
                    87:ca:ef:56:ae:ee:24:05:1b:01:8d:f0:ca:2b:b1:
                    3e:d2:07:11:ae:4a:3c:7e:3e:a1:16:4d:86:45:23:
                    00:1d:82:43:8d:e2:44:ff:b5:92:db:37:46:ec:22:
                    23:90:ee:7a:7a:3e:93:14:db:66:04:2a:9f:0f:41:
                    0e:1d:b5:a8:70:83:3e:ef:79:60:6b:d5:19:7e:c5:
                    9e:7c:fb:34:41:ec:d0:3f:14:b0:ca:a0:3e:66:dd:
                    be:ec:01:34:d9:ca:57:a1:17:f3:36:e6:1c:38:bf:
                    a4:42:ac:06:3d:68:96:e1:68:bf:b8:1b:b1:d9:54:
                    59:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:81:43:AA:83:66:81:87:08:5F:57:80:7E:BD:81:46:74:87:2D:F7
            X509v3 Authority Key Identifier:
                keyid:CC:D0:9A:AB:D2:8B:00:9E:9F:48:7E:F1:B8:CD:63:1B:97:62:2A:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/41B787F8813E93720A4A1D12F7CAC1265E13C2B8C2A0E06C805B48E73792A172/0/CCD09AABD28B009E9F487EF1B8CD631B97622AC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCD09AABD28B009E9F487EF1B8CD631B97622AC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/41B787F8813E93720A4A1D12F7CAC1265E13C2B8C2A0E06C805B48E73792A172/0/323830333a613833303a3a2f33322d3438203d3e20323734323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a830::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:f5:01:34:40:c9:dd:57:47:35:85:82:4f:b2:32:d8:ca:6b:
         90:21:c1:c8:bb:0d:3f:ab:2b:5e:08:93:b2:30:67:df:85:b9:
         8e:da:9e:de:04:0d:a4:9d:6c:6c:07:78:b9:2c:30:33:8d:40:
         07:47:7f:cb:45:39:e8:bc:98:ca:dc:e2:6a:ad:e9:16:19:6a:
         96:05:c6:95:06:7f:86:09:ca:a3:57:cb:eb:ba:d4:a3:b9:a9:
         57:03:e2:bd:ae:94:b0:71:e4:47:14:28:e7:ee:49:36:d1:e0:
         ec:39:09:72:0e:2d:63:e6:19:ea:d2:79:db:3f:97:cf:61:87:
         76:ab:c1:31:37:f9:1e:de:97:e3:7e:c4:b7:75:42:41:2f:50:
         cc:81:8d:86:be:93:b3:b0:79:b2:e3:ac:50:3f:d4:a7:73:ec:
         d9:c1:ae:89:aa:d6:34:c4:d8:13:39:b1:6c:3f:a5:1e:a9:55:
         4c:aa:37:17:4c:3c:91:c1:ca:e0:44:8a:05:4b:ac:5f:dc:48:
         ae:1e:ea:a4:6a:f4:06:5f:ff:11:6f:81:e4:c7:71:16:55:ee:
         a0:23:42:14:30:45:9b:d7:c0:f8:7b:b5:57:f6:6c:23:08:37:
         19:d0:06:9d:4c:ce:7a:f8:d7:5d:45:b0:51:86:91:ba:68:a2:
         63:76:f8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:47:43 2026 by rpki-client