This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/323830333a663031303a3a2f33322d3332203d3e20323731383133.roa
File:                     323830333a663031303a3a2f33322d3332203d3e20323731383133.roa (raw, json)
Hash identifier:          Cv8sDryYnbe4KX/3h48r0O0xLxyDWBv2AILUOy8NsxQ=
Subject key identifier:   C0:46:55:44:77:DB:62:7F:D1:5E:1C:1A:A6:25:3C:20:58:74:C1:79
Certificate issuer:       /CN=921935EDD67E9C1816E703F1DABFFBF86CFA1B78
Certificate serial:       3DDDE4CDBD42A4E81EF7B09D2AA559780C5311B1
Authority key identifier: 92:19:35:ED:D6:7E:9C:18:16:E7:03:F1:DA:BF:FB:F8:6C:FA:1B:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/323830333a663031303a3a2f33322d3332203d3e20323731383133.roa
Signing time:             Tue 06 Jan 2026 19:36:16 +0000
ROA not before:           Tue 06 Jan 2026 19:31:16 +0000
ROA not after:            Tue 05 Jan 2027 19:36:16 +0000
asID:                     271813
IP address blocks:        2803:f010::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.crl
                          rsync://repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 01:28:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:dd:e4:cd:bd:42:a4:e8:1e:f7:b0:9d:2a:a5:59:78:0c:53:11:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=921935EDD67E9C1816E703F1DABFFBF86CFA1B78
        Validity
            Not Before: Jan  6 19:31:16 2026 GMT
            Not After : Jan  5 19:36:16 2027 GMT
        Subject: CN=C046554477DB627FD15E1C1AA6253C205874C179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:25:08:18:2b:90:7a:dc:56:08:f6:83:cb:2c:
                    16:cc:df:eb:cc:34:19:16:fe:7d:07:03:b4:50:95:
                    88:6d:f5:e6:98:5a:69:8c:b8:03:c0:c7:97:96:9d:
                    23:11:21:27:5a:ab:00:f1:3f:1d:a5:9e:55:de:5d:
                    4a:db:0a:3e:55:cc:ec:e2:04:7a:6d:4c:fd:5a:f5:
                    1b:35:f6:74:e9:ee:77:7d:d9:43:7c:52:d9:00:1b:
                    af:19:2e:ae:9d:89:38:e2:74:7e:1c:78:11:92:03:
                    77:fa:52:52:91:39:2a:ff:d1:2e:a1:44:11:43:be:
                    e0:cf:bb:03:42:29:b9:b3:30:25:07:ba:99:3b:87:
                    03:60:8f:1d:d1:0e:32:7e:b5:43:83:48:91:50:03:
                    8c:d0:04:53:b4:cd:bb:da:35:93:db:9c:9b:2d:f7:
                    d1:d1:9b:de:cd:07:b6:fe:98:b5:e8:c4:15:40:be:
                    72:fd:30:2b:d1:28:93:0a:dc:4a:0f:b3:6e:1c:88:
                    dd:13:37:f5:39:ee:c2:33:36:58:5b:d4:fd:27:3c:
                    e4:bd:e3:19:61:6c:8e:4c:9b:f2:40:cb:c9:42:39:
                    6b:c6:ad:af:bc:d1:ef:3b:5e:5c:7c:48:35:32:3e:
                    2c:e4:a8:ac:0d:54:36:f0:60:28:5f:23:78:04:29:
                    74:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:46:55:44:77:DB:62:7F:D1:5E:1C:1A:A6:25:3C:20:58:74:C1:79
            X509v3 Authority Key Identifier:
                keyid:92:19:35:ED:D6:7E:9C:18:16:E7:03:F1:DA:BF:FB:F8:6C:FA:1B:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/323830333a663031303a3a2f33322d3332203d3e20323731383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f010::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:54:16:38:a9:30:bc:1f:82:ca:4a:f3:4c:2a:c3:dd:7f:ac:
         2e:47:55:e8:2c:c7:9d:4c:cb:06:e6:b5:65:5d:1f:0e:5d:ec:
         38:74:90:5d:b6:1a:ba:7f:72:b0:31:8a:4e:72:7d:e7:6d:7a:
         40:a5:a5:20:6c:50:2d:7b:66:46:26:2f:b4:c4:ce:db:2b:1a:
         bb:90:74:b9:41:76:84:95:22:de:3d:59:ed:5f:36:4a:15:69:
         68:9f:bf:9d:1a:80:04:36:56:4a:9d:9c:dd:0c:a9:b0:60:0e:
         d7:34:08:e6:60:c5:76:38:04:24:1b:92:10:83:bc:46:a5:85:
         fa:16:ba:4f:70:47:6f:c4:94:89:80:dd:62:ea:b9:ae:57:65:
         66:77:a5:c2:f1:24:8b:f1:23:b3:83:42:85:9d:5d:dd:e8:5e:
         e5:cd:dd:b5:5e:c7:f5:ce:fe:dd:0c:f4:2b:33:a9:ff:4a:e4:
         04:d3:1a:30:13:4d:6b:16:46:f1:df:53:35:ab:04:68:ba:c8:
         bd:18:32:a6:22:8e:f5:22:09:69:27:a2:d5:46:55:e2:6f:39:
         53:ae:d6:5a:be:4f:a6:75:d8:28:ec:aa:93:70:9b:c0:0e:0a:
         ea:25:38:8e:1c:1d:2b:db:0d:49:f2:74:10:be:89:29:24:e1:
         d9:61:0b:c1
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUPd3kzb1CpOge97CdKqVZeAxTEbEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTIxOTM1RURENjdFOUMxODE2RTcwM0YxREFCRkZCRjg2
Q0ZBMUI3ODAeFw0yNjAxMDYxOTMxMTZaFw0yNzAxMDUxOTM2MTZaMDMxMTAvBgNV
BAMTKEMwNDY1NTQ0NzdEQjYyN0ZEMTVFMUMxQUE2MjUzQzIwNTg3NEMxNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1JQgYK5B63FYI9oPLLBbM3+vM
NBkW/n0HA7RQlYht9eaYWmmMuAPAx5eWnSMRISdaqwDxPx2lnlXeXUrbCj5VzOzi
BHptTP1a9Rs19nTp7nd92UN8UtkAG68ZLq6diTjidH4ceBGSA3f6UlKROSr/0S6h
RBFDvuDPuwNCKbmzMCUHupk7hwNgjx3RDjJ+tUODSJFQA4zQBFO0zbvaNZPbnJst
99HRm97NB7b+mLXoxBVAvnL9MCvRKJMK3EoPs24ciN0TN/U57sIzNlhb1P0nPOS9
4xlhbI5Mm/JAy8lCOWvGra+80e87Xlx8SDUyPizkqKwNVDbwYChfI3gEKXTPAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUwEZVRHfbYn/RXhwapiU8IFh0wXkwHwYDVR0j
BBgwFoAUkhk17dZ+nBgW5wPx2r/7+Gz6G3gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MzgzNThBNDQ2N0VFQzNDMERBN0NGMkU1RDNGM0E0MkIy
QTIyQjNENEFCNjMxQThENjlFOUVFMDg4NEYxQzAzLzAvOTIxOTM1RURENjdFOUMx
ODE2RTcwM0YxREFCRkZCRjg2Q0ZBMUI3OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MjE5MzVFREQ2N0U5QzE4MTZF
NzAzRjFEQUJGRkJGODZDRkExQjc4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTM4MzU4QTQ0NjdFRUMzQzBEQTdDRjJFNUQzRjNBNDJCMkEyMkIzRDRB
QjYzMUE4RDY5RTlFRTA4ODRGMUMwMy8wLzMyMzgzMDMzM2E2NjMwMzEzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMTM4MzEzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD8BAw
DQYJKoZIhvcNAQELBQADggEBAIVUFjipMLwfgspK80wqw91/rC5HVegsx51Mywbm
tWVdHw5d7Dh0kF22Grp/crAxik5yfedtekClpSBsUC17ZkYmL7TEztsrGruQdLlB
doSVIt49We1fNkoVaWifv50agAQ2VkqdnN0MqbBgDtc0COZgxXY4BCQbkhCDvEal
hfoWuk9wR2/ElImA3WLqua5XZWZ3pcLxJIvxI7ODQoWdXd3oXuXN3bVex/XO/t0M
9Cszqf9K5ATTGjATTWsWRvHfUzWrBGi6yL0YMqYijvUiCWknotVGVeJvOVOu1lq+
T6Z12CjsqpNwm8AOCuolOI4cHSvbDUnydBC+iSkk4dlhC8E=
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:23 2026 by rpki-client