This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F7D93F31A55DB6BC0A37009DE4C2A9F646532B9B13F57318539716493300469/0/323830333a356530303a3a2f33322d3438203d3e20323637373635.roa
File:                     323830333a356530303a3a2f33322d3438203d3e20323637373635.roa (raw, json)
Hash identifier:          6oJ7THFpgSXIe3FMfhk7tYTaJsQl0XFtRFEDRGfTKxo=
Subject key identifier:   05:64:18:A7:1C:42:D7:44:94:C0:0D:82:5F:CD:C8:69:61:63:79:B8
Certificate issuer:       /CN=A420AC4C72DA7B64E98421B8B94378106902CB9F
Certificate serial:       77ABC0B689F5073D0D8F793EF34CB8D834EB237C
Authority key identifier: A4:20:AC:4C:72:DA:7B:64:E9:84:21:B8:B9:43:78:10:69:02:CB:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A420AC4C72DA7B64E98421B8B94378106902CB9F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F7D93F31A55DB6BC0A37009DE4C2A9F646532B9B13F57318539716493300469/0/323830333a356530303a3a2f33322d3438203d3e20323637373635.roa
Signing time:             Tue 06 Jan 2026 19:25:19 +0000
ROA not before:           Tue 06 Jan 2026 19:20:19 +0000
ROA not after:            Tue 05 Jan 2027 19:25:19 +0000
asID:                     267765
IP address blocks:        2803:5e00::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F7D93F31A55DB6BC0A37009DE4C2A9F646532B9B13F57318539716493300469/0/A420AC4C72DA7B64E98421B8B94378106902CB9F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F7D93F31A55DB6BC0A37009DE4C2A9F646532B9B13F57318539716493300469/0/A420AC4C72DA7B64E98421B8B94378106902CB9F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A420AC4C72DA7B64E98421B8B94378106902CB9F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ab:c0:b6:89:f5:07:3d:0d:8f:79:3e:f3:4c:b8:d8:34:eb:23:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A420AC4C72DA7B64E98421B8B94378106902CB9F
        Validity
            Not Before: Jan  6 19:20:19 2026 GMT
            Not After : Jan  5 19:25:19 2027 GMT
        Subject: CN=056418A71C42D74494C00D825FCDC869616379B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:01:17:6d:29:a2:c1:aa:4e:ff:9e:6a:89:df:
                    48:bd:e2:f9:76:86:61:28:e1:c6:b7:0a:e4:75:92:
                    92:22:f6:2e:e2:9a:3d:1c:21:41:e7:15:51:a0:3e:
                    90:0b:69:95:db:a6:c6:ba:6d:ad:a3:2d:d1:04:7d:
                    68:82:b6:6c:03:1e:5e:8b:6e:2b:db:02:ab:ad:5a:
                    20:ad:4b:64:69:34:43:db:99:54:dd:78:eb:26:61:
                    37:4c:8d:fe:91:c8:e3:ce:3c:c9:00:6d:07:11:f2:
                    4a:e2:02:43:3b:2a:c3:d7:09:32:71:d5:15:ce:ef:
                    fa:81:97:b1:05:ea:78:4d:25:61:af:cd:07:82:a3:
                    40:35:9a:80:d7:11:15:d4:1a:e5:37:7b:1f:6e:20:
                    d1:4d:de:24:b9:e9:09:8f:dd:30:e4:2d:31:14:a6:
                    ea:0f:62:bb:ee:89:10:1d:cf:4c:b0:04:91:11:65:
                    60:de:78:ce:d0:7f:26:79:9c:4b:d5:28:2d:ce:10:
                    ea:fc:8c:03:e3:eb:b9:00:5c:e3:5c:7a:e4:12:4b:
                    b0:5a:9f:3d:d6:01:b0:c9:5b:9a:f4:0a:a1:85:ec:
                    6b:b0:76:d0:f8:e0:d2:78:57:4e:01:62:d1:83:e9:
                    f7:a8:a8:44:e3:c1:44:89:41:e2:a5:9c:29:8e:5c:
                    4e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:64:18:A7:1C:42:D7:44:94:C0:0D:82:5F:CD:C8:69:61:63:79:B8
            X509v3 Authority Key Identifier:
                keyid:A4:20:AC:4C:72:DA:7B:64:E9:84:21:B8:B9:43:78:10:69:02:CB:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F7D93F31A55DB6BC0A37009DE4C2A9F646532B9B13F57318539716493300469/0/A420AC4C72DA7B64E98421B8B94378106902CB9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A420AC4C72DA7B64E98421B8B94378106902CB9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F7D93F31A55DB6BC0A37009DE4C2A9F646532B9B13F57318539716493300469/0/323830333a356530303a3a2f33322d3438203d3e20323637373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5e00::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:35:a6:c0:0d:0b:6e:05:0e:96:ae:b7:86:0d:f6:0b:f8:2a:
         68:30:28:3f:30:73:c3:b6:55:3c:f3:6e:69:e9:2c:82:f7:e1:
         6d:f8:6d:fb:b4:99:25:bf:cd:87:02:09:4b:9b:4f:81:e6:a9:
         a8:90:d4:e4:a0:ea:61:64:3a:9a:1f:ee:0f:f7:0c:ef:18:4a:
         3c:60:7c:eb:1a:d7:3d:d1:77:36:7b:fb:2c:9a:a1:9d:3e:46:
         24:39:e2:88:66:29:b6:e8:c0:d3:2a:5e:32:65:45:f4:df:21:
         40:f2:b3:aa:77:2f:83:a4:77:ac:18:63:14:9b:3b:eb:5a:11:
         e3:40:1d:2e:14:a1:50:46:a0:3d:c3:bf:0e:74:87:f8:25:40:
         a4:4e:5b:76:ae:4e:15:d1:93:0f:5e:d8:9b:34:db:59:e8:90:
         0c:6f:bb:dc:de:31:be:74:1a:e7:89:76:92:dd:ec:cb:a1:52:
         87:d1:b8:2c:d3:e3:ea:dc:17:10:20:e4:5f:16:a5:65:57:7a:
         7d:99:44:0f:c7:98:55:f9:de:54:8a:4f:9d:10:6e:96:23:02:
         eb:10:c8:81:fe:fa:dd:96:3c:77:6d:d2:4c:c7:c4:cf:0e:a4:
         55:e4:5a:32:af:37:2c:c8:73:4d:dc:b0:81:05:52:79:b3:24:
         5c:54:38:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:57:40 2026 by rpki-client