This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/53363A3E2E26F6C6ED0FE15654876A85AE69CB74593096D00D14040295D299F4/0/323830333a6631303a3a2f33322d3634203d3e20323732313132.roa
File:                     323830333a6631303a3a2f33322d3634203d3e20323732313132.roa (raw, json)
Hash identifier:          xd15fYROkzr3dWwk5q6Ki+z+aifizY2ebUm4fxv6L1E=
Subject key identifier:   08:7A:07:43:14:FD:17:5B:8F:5E:46:76:34:62:CD:C9:9F:97:73:E3
Certificate issuer:       /CN=25D394E1B00C22B26AB000202E7D9DCB3A00BA81
Certificate serial:       2C42CB398BC39621453E089702F6F788B1A1919E
Authority key identifier: 25:D3:94:E1:B0:0C:22:B2:6A:B0:00:20:2E:7D:9D:CB:3A:00:BA:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25D394E1B00C22B26AB000202E7D9DCB3A00BA81.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/53363A3E2E26F6C6ED0FE15654876A85AE69CB74593096D00D14040295D299F4/0/323830333a6631303a3a2f33322d3634203d3e20323732313132.roa
Signing time:             Tue 06 Jan 2026 19:06:03 +0000
ROA not before:           Tue 06 Jan 2026 19:01:03 +0000
ROA not after:            Tue 05 Jan 2027 19:06:03 +0000
asID:                     272112
IP address blocks:        2803:f10::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/53363A3E2E26F6C6ED0FE15654876A85AE69CB74593096D00D14040295D299F4/0/25D394E1B00C22B26AB000202E7D9DCB3A00BA81.crl
                          rsync://repository.lacnic.net/rpki/lacnic/53363A3E2E26F6C6ED0FE15654876A85AE69CB74593096D00D14040295D299F4/0/25D394E1B00C22B26AB000202E7D9DCB3A00BA81.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25D394E1B00C22B26AB000202E7D9DCB3A00BA81.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:42:cb:39:8b:c3:96:21:45:3e:08:97:02:f6:f7:88:b1:a1:91:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25D394E1B00C22B26AB000202E7D9DCB3A00BA81
        Validity
            Not Before: Jan  6 19:01:03 2026 GMT
            Not After : Jan  5 19:06:03 2027 GMT
        Subject: CN=087A074314FD175B8F5E46763462CDC99F9773E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a7:77:61:9c:8c:a3:34:91:fe:79:03:d1:c0:
                    e6:74:f7:ae:94:2f:ad:22:4b:a6:5f:77:b0:62:96:
                    14:d8:90:8c:a5:24:d3:4a:c9:d1:9f:32:e1:70:2f:
                    9e:d1:0a:4f:58:89:67:67:09:10:1e:a0:af:d2:f9:
                    34:29:f1:c9:a4:26:2f:3c:e1:4f:89:23:72:45:38:
                    e8:70:9e:9c:a5:03:c8:ab:f4:8b:6a:58:75:54:6f:
                    d7:5e:dc:55:a6:d7:68:10:0a:77:13:7f:ca:ab:49:
                    7c:16:2b:b8:b6:27:bc:90:77:b7:a9:aa:fe:d8:87:
                    23:79:84:42:6b:10:3d:3e:19:b9:39:11:be:0b:fa:
                    e6:f0:31:65:44:0a:64:8e:91:a5:f6:e9:fb:6d:29:
                    b8:0c:c2:30:28:08:03:e2:5b:5e:2f:21:a3:4a:26:
                    60:9a:c1:c5:d3:5e:0b:35:88:bd:01:10:39:e4:ad:
                    66:24:b2:db:57:1c:2b:c0:87:dd:6a:09:d9:28:c4:
                    ae:11:c7:4e:7c:19:d1:7e:9a:ce:b2:6c:1f:ff:1e:
                    c8:91:ab:aa:7b:f8:a8:02:99:38:5f:3c:f4:08:0c:
                    75:f9:b9:30:35:64:ff:38:d7:39:2f:74:11:ad:21:
                    5e:97:03:7f:89:b9:56:e2:1b:eb:e2:65:0f:8c:76:
                    f4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:7A:07:43:14:FD:17:5B:8F:5E:46:76:34:62:CD:C9:9F:97:73:E3
            X509v3 Authority Key Identifier:
                keyid:25:D3:94:E1:B0:0C:22:B2:6A:B0:00:20:2E:7D:9D:CB:3A:00:BA:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/53363A3E2E26F6C6ED0FE15654876A85AE69CB74593096D00D14040295D299F4/0/25D394E1B00C22B26AB000202E7D9DCB3A00BA81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25D394E1B00C22B26AB000202E7D9DCB3A00BA81.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/53363A3E2E26F6C6ED0FE15654876A85AE69CB74593096D00D14040295D299F4/0/323830333a6631303a3a2f33322d3634203d3e20323732313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f10::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:29:4d:54:e5:6a:11:0a:42:cd:5a:37:a6:81:67:42:c9:a5:
         ac:a5:3c:20:02:a1:18:9d:8e:ad:4f:87:78:1b:48:97:84:c4:
         02:4a:a7:ec:1e:c0:d8:71:5f:0b:fb:b0:97:35:8b:e2:a4:61:
         68:bf:90:93:fb:6b:5b:c1:73:08:a3:eb:f7:1a:27:b8:d3:3e:
         66:4c:2e:eb:66:65:ec:45:af:4f:c5:b7:20:c3:ae:17:91:20:
         3f:93:03:04:f6:bc:ad:6e:f9:7f:34:df:9f:3a:2e:f6:b2:56:
         91:3c:37:20:c4:f2:8a:10:c9:10:5a:ce:8e:b6:a7:02:2c:2b:
         3e:21:74:7c:47:7c:b0:1f:56:60:71:dd:e6:6c:b4:2a:c7:55:
         92:38:18:f9:af:dd:ea:ee:8a:0a:1e:f4:1a:7a:f4:70:c9:b5:
         37:db:38:8a:c9:76:d2:01:4f:c8:55:7f:b2:dd:3b:55:89:bb:
         fb:63:01:97:d2:55:40:bc:86:53:02:b8:8e:3a:00:fe:e8:69:
         ae:4c:b4:8c:1b:d2:61:3c:f3:5b:85:81:ba:00:95:df:93:02:
         18:a6:66:e8:1e:89:52:26:71:5b:74:a7:af:be:03:10:19:f5:
         39:ab:52:5f:d7:9b:e4:91:cc:56:1e:f6:86:9d:e9:f6:3c:62:
         7c:c4:6e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:15:42 2026 by rpki-client