This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5976D519B5A542B2BCBF2249EB926C15B1C77C2DA9F38290FF163291DA390DB8/0/323830333a663961303a3a2f33322d3438203d3e20323637373334.roa
File:                     323830333a663961303a3a2f33322d3438203d3e20323637373334.roa (raw, json)
Hash identifier:          y27kDvJNyMn8rXQYH/2ZRqOWHJLGAC17vFSiU/XclP0=
Subject key identifier:   3D:FE:B6:67:2D:15:14:19:3C:8A:68:57:C1:60:87:D5:D2:D4:64:16
Certificate issuer:       /CN=78DB9B853B894970FDA0B31FC3D80A965749E569
Certificate serial:       3269CBBB6039431439E8E9D1EAAF6C2AF2949279
Authority key identifier: 78:DB:9B:85:3B:89:49:70:FD:A0:B3:1F:C3:D8:0A:96:57:49:E5:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78DB9B853B894970FDA0B31FC3D80A965749E569.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5976D519B5A542B2BCBF2249EB926C15B1C77C2DA9F38290FF163291DA390DB8/0/323830333a663961303a3a2f33322d3438203d3e20323637373334.roa
Signing time:             Tue 06 Jan 2026 19:01:46 +0000
ROA not before:           Tue 06 Jan 2026 18:56:46 +0000
ROA not after:            Tue 05 Jan 2027 19:01:46 +0000
asID:                     267734
IP address blocks:        2803:f9a0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5976D519B5A542B2BCBF2249EB926C15B1C77C2DA9F38290FF163291DA390DB8/0/78DB9B853B894970FDA0B31FC3D80A965749E569.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5976D519B5A542B2BCBF2249EB926C15B1C77C2DA9F38290FF163291DA390DB8/0/78DB9B853B894970FDA0B31FC3D80A965749E569.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78DB9B853B894970FDA0B31FC3D80A965749E569.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 06:28:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:69:cb:bb:60:39:43:14:39:e8:e9:d1:ea:af:6c:2a:f2:94:92:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78DB9B853B894970FDA0B31FC3D80A965749E569
        Validity
            Not Before: Jan  6 18:56:46 2026 GMT
            Not After : Jan  5 19:01:46 2027 GMT
        Subject: CN=3DFEB6672D1514193C8A6857C16087D5D2D46416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:41:ee:ae:9d:40:e8:cf:ec:91:8e:7d:32:48:
                    13:87:7a:d8:76:d4:41:2c:9e:23:69:40:92:92:0a:
                    ca:82:fb:f3:88:b8:cf:d8:24:80:40:d5:d5:e2:a6:
                    77:db:bc:07:d1:4f:47:d1:86:49:4c:f4:ed:2a:b4:
                    1e:9d:92:ad:06:eb:bd:ad:5d:02:77:36:ec:56:69:
                    2c:10:f0:41:82:59:3d:31:fb:96:41:f1:5f:14:21:
                    42:7f:74:86:95:aa:2a:e0:09:4d:85:41:d1:28:fa:
                    25:4e:bb:1b:85:f0:a7:fd:d9:86:39:c8:f2:07:c3:
                    46:e4:65:39:8f:e3:08:b7:22:e8:ae:50:8f:57:63:
                    1f:59:d5:d8:ed:ef:61:06:2a:a5:16:b5:28:79:b3:
                    4f:3d:1b:85:8d:a2:c2:4b:ef:28:c0:fd:99:b3:6d:
                    e6:f1:c4:4d:3d:d2:d3:c4:2c:cc:b6:c8:69:6f:2e:
                    a0:47:8f:a3:f9:90:ca:00:c7:4d:72:5f:e3:5a:c4:
                    e1:14:99:80:a3:a8:e2:e9:cb:31:db:be:f2:0e:be:
                    4c:7e:21:e4:48:cf:76:3b:3a:41:3e:c2:58:00:ea:
                    20:20:da:04:63:3b:57:39:03:5f:85:86:f6:46:ed:
                    7f:30:8b:27:a8:62:50:fb:79:d2:64:d7:87:44:e6:
                    85:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:FE:B6:67:2D:15:14:19:3C:8A:68:57:C1:60:87:D5:D2:D4:64:16
            X509v3 Authority Key Identifier:
                keyid:78:DB:9B:85:3B:89:49:70:FD:A0:B3:1F:C3:D8:0A:96:57:49:E5:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5976D519B5A542B2BCBF2249EB926C15B1C77C2DA9F38290FF163291DA390DB8/0/78DB9B853B894970FDA0B31FC3D80A965749E569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78DB9B853B894970FDA0B31FC3D80A965749E569.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5976D519B5A542B2BCBF2249EB926C15B1C77C2DA9F38290FF163291DA390DB8/0/323830333a663961303a3a2f33322d3438203d3e20323637373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f9a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:d7:10:c8:c3:c0:14:fe:d3:e2:26:8b:61:da:b3:68:a7:8c:
         9a:ca:8f:f4:96:48:69:e5:92:84:d8:b8:47:be:f9:a6:52:24:
         06:3b:14:c2:36:44:9d:73:cd:a8:fd:7c:f0:bf:4a:09:9f:a6:
         97:b3:d8:91:c1:de:3b:1f:7a:be:79:00:6c:8c:2a:b1:72:e9:
         73:74:79:28:79:de:31:42:1e:2f:a4:74:4b:67:38:fd:c2:79:
         d3:cb:cc:fa:75:93:a9:d2:62:9d:a2:dc:c1:72:9c:49:4f:61:
         02:ed:39:2d:15:5c:df:bd:c3:9b:01:16:e4:90:29:ad:28:bd:
         ab:13:04:70:b9:e4:e8:36:03:5d:c2:4b:f0:38:f0:2f:2f:e2:
         dc:80:67:33:b1:ef:e1:5a:c7:62:01:02:92:9f:53:37:61:37:
         fc:0a:96:c2:7e:96:48:73:ba:6c:81:74:22:bf:62:85:a8:ee:
         61:3a:80:30:08:a5:07:80:eb:03:4d:1e:f7:c4:95:3e:4e:36:
         ed:6a:9f:a9:f7:bf:d2:54:c2:cd:27:a0:b3:4f:22:ff:95:ec:
         c8:7c:86:0e:bc:77:24:84:37:37:f0:56:ae:dd:9c:25:44:0b:
         7d:30:b0:67:71:88:11:05:a7:5f:17:a4:c8:58:8a:59:51:2f:
         e8:33:16:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:23:41 2026 by rpki-client