This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4626A0A123ED414D3F34975B9FE3F354FCD765EED3C7E2E60DDCBB27E216988C/0/323830333a343161303a3a2f33322d3332203d3e20323637363931.roa
File:                     323830333a343161303a3a2f33322d3332203d3e20323637363931.roa (raw, json)
Hash identifier:          vF6K0YqNu7KzoRbcdFuJRFCntm3dEWxwVtvy6+ypRx0=
Subject key identifier:   E9:5B:C6:AF:12:B6:8F:F3:7A:D3:AE:C4:6E:9C:E6:7F:11:A2:F2:58
Certificate issuer:       /CN=64A6B1C6C883A1694B4E88ED11BD2A96CBEEE0C3
Certificate serial:       60B85697E10D49507752AC4E3B162277E76AD9E6
Authority key identifier: 64:A6:B1:C6:C8:83:A1:69:4B:4E:88:ED:11:BD:2A:96:CB:EE:E0:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64A6B1C6C883A1694B4E88ED11BD2A96CBEEE0C3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4626A0A123ED414D3F34975B9FE3F354FCD765EED3C7E2E60DDCBB27E216988C/0/323830333a343161303a3a2f33322d3332203d3e20323637363931.roa
Signing time:             Tue 06 Jan 2026 18:58:19 +0000
ROA not before:           Tue 06 Jan 2026 18:53:19 +0000
ROA not after:            Tue 05 Jan 2027 18:58:19 +0000
asID:                     267691
IP address blocks:        2803:41a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4626A0A123ED414D3F34975B9FE3F354FCD765EED3C7E2E60DDCBB27E216988C/0/64A6B1C6C883A1694B4E88ED11BD2A96CBEEE0C3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4626A0A123ED414D3F34975B9FE3F354FCD765EED3C7E2E60DDCBB27E216988C/0/64A6B1C6C883A1694B4E88ED11BD2A96CBEEE0C3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64A6B1C6C883A1694B4E88ED11BD2A96CBEEE0C3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:b8:56:97:e1:0d:49:50:77:52:ac:4e:3b:16:22:77:e7:6a:d9:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64A6B1C6C883A1694B4E88ED11BD2A96CBEEE0C3
        Validity
            Not Before: Jan  6 18:53:19 2026 GMT
            Not After : Jan  5 18:58:19 2027 GMT
        Subject: CN=E95BC6AF12B68FF37AD3AEC46E9CE67F11A2F258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a3:e6:52:f6:3f:c8:81:c0:7c:12:68:18:b0:
                    b0:43:13:f2:91:ac:c0:20:a9:69:11:75:43:b2:91:
                    d6:8d:3a:af:c6:67:8c:16:f6:b9:a0:07:5f:44:17:
                    a5:ed:dc:16:f2:77:db:71:ce:0b:94:bc:46:c5:d8:
                    8d:a8:90:33:20:ff:49:06:ad:16:eb:55:84:33:0c:
                    92:45:88:f7:d2:d0:5d:c4:60:78:12:dd:a0:41:3c:
                    65:2b:c6:04:88:47:b5:63:da:19:be:09:6d:b7:fe:
                    c5:ea:0f:08:fc:6d:62:07:36:67:75:13:0b:88:9d:
                    ce:20:f7:27:7c:2f:f5:74:cb:21:6a:0f:31:4e:96:
                    ff:f6:1c:4c:ad:db:23:75:81:67:a3:32:27:03:6f:
                    ae:d1:4a:60:d8:11:8f:c6:cc:b7:21:39:f0:04:80:
                    2f:41:03:75:f9:a9:3c:85:01:c7:bf:8a:05:16:14:
                    cd:1c:fa:17:04:18:55:21:f8:15:8f:0c:01:df:4e:
                    63:ee:6d:26:23:fc:02:b4:64:74:93:a6:74:7c:87:
                    1e:2a:63:ba:c3:b0:7d:35:e2:b6:01:30:e0:ac:a8:
                    fc:4a:ff:6c:ac:6a:f5:54:ed:9b:91:4a:94:97:5b:
                    97:35:54:31:21:ce:0b:23:1b:e9:e6:ef:ff:6b:89:
                    79:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:5B:C6:AF:12:B6:8F:F3:7A:D3:AE:C4:6E:9C:E6:7F:11:A2:F2:58
            X509v3 Authority Key Identifier:
                keyid:64:A6:B1:C6:C8:83:A1:69:4B:4E:88:ED:11:BD:2A:96:CB:EE:E0:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4626A0A123ED414D3F34975B9FE3F354FCD765EED3C7E2E60DDCBB27E216988C/0/64A6B1C6C883A1694B4E88ED11BD2A96CBEEE0C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64A6B1C6C883A1694B4E88ED11BD2A96CBEEE0C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4626A0A123ED414D3F34975B9FE3F354FCD765EED3C7E2E60DDCBB27E216988C/0/323830333a343161303a3a2f33322d3332203d3e20323637363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:41a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:98:9a:7b:71:d5:82:dd:cd:b1:5d:da:9a:0b:0d:fc:a5:df:
         be:40:3a:0d:45:96:dd:a5:b4:ff:2d:29:ce:a0:15:36:16:24:
         24:f2:ee:5c:9b:58:0c:08:9b:82:03:65:da:44:a6:4f:07:0d:
         7e:74:79:55:fc:4b:17:f3:7a:31:2a:99:03:cc:33:db:da:e9:
         f4:9a:37:55:8c:92:c2:63:cb:2c:87:aa:9d:b2:e9:b1:bf:44:
         68:59:ed:17:a8:2f:7d:b5:c8:38:5c:ea:f8:d5:2e:71:b3:c5:
         d9:ae:05:2b:65:ce:84:aa:15:67:5d:c9:4d:7c:c2:05:35:02:
         1f:e4:20:2e:cb:3f:6f:1a:a3:9f:fe:d6:18:04:c1:59:87:e5:
         73:24:79:aa:42:41:67:61:c5:35:12:d0:df:53:ec:6b:94:de:
         b8:f3:a0:44:25:b2:d9:fa:f0:09:15:fe:1e:6c:aa:02:a3:14:
         d6:9a:dc:a6:38:9b:cf:f6:07:07:89:d5:10:cb:46:0d:98:f2:
         8c:0d:c8:f4:0b:ba:a5:81:4d:52:58:be:18:40:23:33:4c:af:
         84:14:5e:40:95:13:0f:84:44:bf:9c:9b:a7:da:a1:2e:7f:a1:
         91:dc:f1:22:27:6c:15:34:2f:4f:50:71:f1:ec:fa:9e:6c:b8:
         60:76:a6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:04:51 2026 by rpki-client