This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4EBC094E8656711D6DED2BD9FBCE4C2B857A5DC39B416FAFCF159BC2022A63D8/0/323830333a643632303a3a2f33322d3332203d3e20323635383636.roa
File:                     323830333a643632303a3a2f33322d3332203d3e20323635383636.roa (raw, json)
Hash identifier:          v/PNyUtFQekTmieNh4l2Qa6ECEBqFfeMaVJFSVWtnSg=
Subject key identifier:   07:B4:E0:A7:0B:AB:28:6A:CA:B2:69:B7:A5:18:7F:EE:DD:FD:58:3F
Certificate issuer:       /CN=7868C8505B52C8303D8289F2104AC607113D9295
Certificate serial:       37E95E7E99EE2712E71EC8BC0B73C1DAEC658B87
Authority key identifier: 78:68:C8:50:5B:52:C8:30:3D:82:89:F2:10:4A:C6:07:11:3D:92:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7868C8505B52C8303D8289F2104AC607113D9295.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4EBC094E8656711D6DED2BD9FBCE4C2B857A5DC39B416FAFCF159BC2022A63D8/0/323830333a643632303a3a2f33322d3332203d3e20323635383636.roa
Signing time:             Tue 06 Jan 2026 19:46:37 +0000
ROA not before:           Tue 06 Jan 2026 19:41:37 +0000
ROA not after:            Tue 05 Jan 2027 19:46:37 +0000
asID:                     265866
IP address blocks:        2803:d620::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4EBC094E8656711D6DED2BD9FBCE4C2B857A5DC39B416FAFCF159BC2022A63D8/0/7868C8505B52C8303D8289F2104AC607113D9295.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4EBC094E8656711D6DED2BD9FBCE4C2B857A5DC39B416FAFCF159BC2022A63D8/0/7868C8505B52C8303D8289F2104AC607113D9295.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7868C8505B52C8303D8289F2104AC607113D9295.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:e9:5e:7e:99:ee:27:12:e7:1e:c8:bc:0b:73:c1:da:ec:65:8b:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7868C8505B52C8303D8289F2104AC607113D9295
        Validity
            Not Before: Jan  6 19:41:37 2026 GMT
            Not After : Jan  5 19:46:37 2027 GMT
        Subject: CN=07B4E0A70BAB286ACAB269B7A5187FEEDDFD583F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7f:04:34:e0:67:1e:59:48:8b:0e:4b:7c:cb:
                    d5:7a:02:35:38:c3:cb:7a:00:24:16:c9:42:d5:61:
                    44:94:09:94:e8:f9:9a:93:eb:45:e0:9d:35:a7:a5:
                    23:ea:e5:47:82:f8:ab:27:13:d2:eb:ca:55:a1:c0:
                    2b:ac:36:61:3f:4f:00:03:0f:24:84:dc:7b:e2:61:
                    ec:28:a0:bc:d5:ce:24:1c:38:5c:fc:c1:8c:6c:54:
                    18:d3:3f:de:9b:3a:81:93:c4:6b:73:e0:03:91:67:
                    22:25:fd:dc:28:32:d9:60:c0:d4:ec:02:67:3e:73:
                    7d:7c:65:ce:6a:5a:36:4a:44:2b:b5:6c:df:c1:d0:
                    91:e3:50:d3:99:c8:f2:3f:43:a9:27:90:37:56:26:
                    52:9b:21:c1:6a:c4:b4:c7:32:b3:be:92:c5:aa:b0:
                    9c:44:a6:8e:f4:74:47:76:8f:76:38:bb:9e:4e:c7:
                    b6:80:7f:25:81:f4:3b:f5:19:cd:18:34:02:d7:16:
                    68:b6:73:fc:4d:c3:36:63:8b:30:8d:af:7b:04:4c:
                    9b:ed:3f:27:12:de:05:d3:87:41:88:d9:76:90:41:
                    a8:fd:f0:bb:5c:b2:df:0f:7f:a5:12:2e:c5:ad:b1:
                    40:7e:e6:93:4f:06:d7:c8:24:2a:50:bc:d3:27:80:
                    55:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B4:E0:A7:0B:AB:28:6A:CA:B2:69:B7:A5:18:7F:EE:DD:FD:58:3F
            X509v3 Authority Key Identifier:
                keyid:78:68:C8:50:5B:52:C8:30:3D:82:89:F2:10:4A:C6:07:11:3D:92:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4EBC094E8656711D6DED2BD9FBCE4C2B857A5DC39B416FAFCF159BC2022A63D8/0/7868C8505B52C8303D8289F2104AC607113D9295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7868C8505B52C8303D8289F2104AC607113D9295.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4EBC094E8656711D6DED2BD9FBCE4C2B857A5DC39B416FAFCF159BC2022A63D8/0/323830333a643632303a3a2f33322d3332203d3e20323635383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d620::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:ce:f3:ff:c3:25:27:2b:0f:c4:df:5f:ec:5d:c1:78:88:83:
         c5:38:db:91:7a:51:d3:71:92:29:66:ca:67:9f:18:1a:44:66:
         df:f9:e1:85:bc:55:fd:6b:be:5a:49:5e:fc:57:83:ac:7f:c2:
         42:79:5f:16:c3:c8:b6:ca:a7:78:bf:58:d7:7a:de:4c:4c:ee:
         d0:ac:f0:c6:9d:5c:00:6b:7c:d8:83:ff:27:4a:0b:99:e3:43:
         34:5c:2d:e0:10:29:89:53:b3:96:9e:3e:a3:b0:66:d0:59:bf:
         53:7b:2f:4c:07:2e:47:64:10:40:aa:84:ad:2a:28:6d:a9:e8:
         ce:13:18:7c:20:4b:b7:32:9f:08:01:8a:a2:23:df:bd:bf:69:
         5e:8d:0f:6c:25:01:72:46:ac:cb:0d:15:7f:9d:e8:8e:00:64:
         c4:95:ce:f7:cc:65:70:c0:6d:64:7e:ae:a0:42:f1:79:93:1b:
         12:19:f9:12:6d:e6:37:8c:d0:1d:7c:61:5e:5a:3b:95:66:d2:
         9d:83:6a:f8:cc:f0:f5:3d:b8:cd:c2:01:f9:c8:de:d8:15:29:
         9f:4b:24:d5:37:f0:bb:59:78:46:c3:ca:4c:a1:76:5f:66:e4:
         01:41:66:15:08:f4:b6:2e:ea:22:45:a3:d8:55:10:21:5d:8f:
         05:48:06:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:15:32 2026 by rpki-client