This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61CCC720CDBC167213ADAA418043DA86E1FE3975F38BB23C48C43A8E8C60C3F0/0/323830333a333638303a3a2f33322d3438203d3e203237383531.roa
File:                     323830333a333638303a3a2f33322d3438203d3e203237383531.roa (raw, json)
Hash identifier:          GF9ILTqHaVSGjSXIASRmWMsUQfLDlOnh32XdbJ4E2vY=
Subject key identifier:   2C:A5:22:2F:8D:CC:51:E2:E4:CC:EB:0F:7C:71:E5:CB:F5:54:00:CE
Certificate issuer:       /CN=5762012909FC5692BB70AC7A12BF804F577A0AE8
Certificate serial:       31C299725C3655DE93840462A03785DC1D22A206
Authority key identifier: 57:62:01:29:09:FC:56:92:BB:70:AC:7A:12:BF:80:4F:57:7A:0A:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5762012909FC5692BB70AC7A12BF804F577A0AE8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61CCC720CDBC167213ADAA418043DA86E1FE3975F38BB23C48C43A8E8C60C3F0/0/323830333a333638303a3a2f33322d3438203d3e203237383531.roa
Signing time:             Tue 06 Jan 2026 19:41:28 +0000
ROA not before:           Tue 06 Jan 2026 19:36:28 +0000
ROA not after:            Tue 05 Jan 2027 19:41:28 +0000
asID:                     27851
IP address blocks:        2803:3680::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61CCC720CDBC167213ADAA418043DA86E1FE3975F38BB23C48C43A8E8C60C3F0/0/5762012909FC5692BB70AC7A12BF804F577A0AE8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61CCC720CDBC167213ADAA418043DA86E1FE3975F38BB23C48C43A8E8C60C3F0/0/5762012909FC5692BB70AC7A12BF804F577A0AE8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5762012909FC5692BB70AC7A12BF804F577A0AE8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:25:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:c2:99:72:5c:36:55:de:93:84:04:62:a0:37:85:dc:1d:22:a2:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5762012909FC5692BB70AC7A12BF804F577A0AE8
        Validity
            Not Before: Jan  6 19:36:28 2026 GMT
            Not After : Jan  5 19:41:28 2027 GMT
        Subject: CN=2CA5222F8DCC51E2E4CCEB0F7C71E5CBF55400CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:eb:d8:b0:22:0a:10:96:31:41:7d:5f:52:7e:
                    06:71:81:8b:66:21:f5:dd:b0:54:af:cb:40:9a:de:
                    7c:c6:cc:6e:c1:fa:cc:eb:5d:81:9b:e2:9b:e6:75:
                    58:87:04:79:49:ca:d4:c4:c3:4f:77:8b:6b:d7:f0:
                    0f:72:8c:96:c3:ea:30:e4:7b:a6:7e:87:d5:0d:b7:
                    f6:45:2a:d6:30:44:c8:49:ce:c6:e7:c2:a4:d5:85:
                    e5:b3:c0:d1:83:64:1a:d9:bb:cc:39:ce:bb:bb:51:
                    12:dc:a3:f8:52:81:35:52:b7:85:cc:77:1e:a1:67:
                    44:51:bf:fa:d2:6c:8a:8a:b9:4c:e9:08:9f:b4:1c:
                    1c:ab:77:38:8e:24:54:cd:f5:60:1a:43:1e:db:af:
                    f9:2d:e6:6c:53:0e:03:61:62:07:09:8a:e6:93:4a:
                    69:74:f9:bb:ee:b6:9c:a0:68:70:fa:36:06:e1:5a:
                    3a:3a:a1:31:16:02:ec:c4:7b:83:a9:af:2d:b8:1e:
                    27:31:f8:2a:c1:55:11:e3:21:5d:cc:b1:ba:62:2c:
                    f7:e5:71:d7:95:a0:95:48:ee:76:66:55:6f:c6:07:
                    1a:67:74:67:5a:ff:cf:57:99:e9:c6:2a:be:99:c2:
                    5d:87:92:fa:37:e4:00:4d:1b:13:9b:8e:d5:53:14:
                    a3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A5:22:2F:8D:CC:51:E2:E4:CC:EB:0F:7C:71:E5:CB:F5:54:00:CE
            X509v3 Authority Key Identifier:
                keyid:57:62:01:29:09:FC:56:92:BB:70:AC:7A:12:BF:80:4F:57:7A:0A:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61CCC720CDBC167213ADAA418043DA86E1FE3975F38BB23C48C43A8E8C60C3F0/0/5762012909FC5692BB70AC7A12BF804F577A0AE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5762012909FC5692BB70AC7A12BF804F577A0AE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61CCC720CDBC167213ADAA418043DA86E1FE3975F38BB23C48C43A8E8C60C3F0/0/323830333a333638303a3a2f33322d3438203d3e203237383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3680::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:2e:ec:ac:86:98:6c:32:e4:47:c3:97:79:c9:16:4f:2a:a3:
         99:40:8f:60:b0:49:1f:a9:80:a1:9f:2e:b1:02:04:34:49:67:
         47:93:09:f4:cd:00:41:cd:94:e3:24:ea:e6:3d:4f:dd:43:eb:
         ec:2a:85:eb:8d:f1:8c:00:3c:32:7f:29:79:46:14:85:6a:f0:
         4e:6e:e9:44:e7:6d:4a:e7:b1:a5:80:26:4a:14:a7:ed:64:0c:
         6a:d4:c5:f2:4e:0f:08:f4:5c:7b:bb:f2:e4:ce:4b:f5:e2:74:
         b4:b0:68:81:75:b7:69:a3:cf:3e:9b:13:11:31:46:f6:66:c9:
         44:e9:35:de:9a:63:8f:32:98:7b:c7:66:d1:00:51:8c:1c:25:
         93:ee:ce:3e:b0:3b:74:fb:68:fd:c6:c5:e5:9b:36:0e:10:07:
         1b:77:2c:59:3c:f8:da:74:ab:99:db:7e:8b:28:6c:38:c4:35:
         48:af:5a:48:a6:32:41:2b:c6:84:f7:71:a7:c0:c7:53:fc:0c:
         d7:51:fc:56:9d:26:dc:2b:dd:f7:13:95:d8:9d:37:09:ac:54:
         fc:d0:34:27:fd:b4:dc:3b:4d:ab:bb:1c:db:78:67:45:e0:49:
         58:b6:2d:b4:7d:5c:7e:a8:3b:3c:e8:eb:b1:fc:00:f8:5a:fc:
         68:3c:5c:4b
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUMcKZclw2Vd6ThARioDeF3B0iogYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTc2MjAxMjkwOUZDNTY5MkJCNzBBQzdBMTJCRjgwNEY1
NzdBMEFFODAeFw0yNjAxMDYxOTM2MjhaFw0yNzAxMDUxOTQxMjhaMDMxMTAvBgNV
BAMTKDJDQTUyMjJGOERDQzUxRTJFNENDRUIwRjdDNzFFNUNCRjU1NDAwQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq69iwIgoQljFBfV9SfgZxgYtm
IfXdsFSvy0Ca3nzGzG7B+szrXYGb4pvmdViHBHlJytTEw093i2vX8A9yjJbD6jDk
e6Z+h9UNt/ZFKtYwRMhJzsbnwqTVheWzwNGDZBrZu8w5zru7URLco/hSgTVSt4XM
dx6hZ0RRv/rSbIqKuUzpCJ+0HByrdziOJFTN9WAaQx7br/kt5mxTDgNhYgcJiuaT
Sml0+bvutpygaHD6NgbhWjo6oTEWAuzEe4Opry24Hicx+CrBVRHjIV3MsbpiLPfl
cdeVoJVI7nZmVW/GBxpndGda/89XmenGKr6Zwl2Hkvo35ABNGxObjtVTFKNLAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQULKUiL43MUeLkzOsPfHHly/VUAM4wHwYDVR0j
BBgwFoAUV2IBKQn8VpK7cKx6Er+AT1d6CugwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MUNDQzcyMENEQkMxNjcyMTNBREFBNDE4MDQzREE4NkUx
RkUzOTc1RjM4QkIyM0M0OEM0M0E4RThDNjBDM0YwLzAvNTc2MjAxMjkwOUZDNTY5
MkJCNzBBQzdBMTJCRjgwNEY1NzdBMEFFOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NzYyMDEyOTA5RkM1NjkyQkI3
MEFDN0ExMkJGODA0RjU3N0EwQUU4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjFDQ0M3MjBDREJDMTY3MjEzQURBQTQxODA0M0RBODZFMUZFMzk3NUYz
OEJCMjNDNDhDNDNBOEU4QzYwQzNGMC8wLzMyMzgzMDMzM2EzMzM2MzgzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczODM1MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAzaAMA0G
CSqGSIb3DQEBCwUAA4IBAQCkLuyshphsMuRHw5d5yRZPKqOZQI9gsEkfqYChny6x
AgQ0SWdHkwn0zQBBzZTjJOrmPU/dQ+vsKoXrjfGMADwyfyl5RhSFavBObulE521K
57GlgCZKFKftZAxq1MXyTg8I9Fx7u/Lkzkv14nS0sGiBdbdpo88+mxMRMUb2ZslE
6TXemmOPMph7x2bRAFGMHCWT7s4+sDt0+2j9xsXlmzYOEAcbdyxZPPjadKuZ236L
KGw4xDVIr1pIpjJBK8aE93GnwMdT/AzXUfxWnSbcK933E5XYnTcJrFT80DQn/bTc
O02ruxzbeGdF4ElYti20fVx+qDs86Oux/AD4WvxoPFxL
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:38:43 2026 by rpki-client