This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65400B805FC4A311FE62F1E886594A2ABB0E968645293803A577534722B2A92A/0/323830333a613032303a3a2f33322d3438203d3e20323635373933.roa
File:                     323830333a613032303a3a2f33322d3438203d3e20323635373933.roa (raw, json)
Hash identifier:          Nbbuy8HBVsm3X2TUT9HfTXqW2xWzGWGfcAmYf27RmPg=
Subject key identifier:   2D:9C:9B:B8:C4:3C:C0:61:9C:69:00:29:E0:B1:1D:D6:68:73:E0:A4
Certificate issuer:       /CN=1932D1177B6B1B833DA0B0BFDA867C3E41569172
Certificate serial:       7F651BDC47D600E0419980CB49892C9350B03423
Authority key identifier: 19:32:D1:17:7B:6B:1B:83:3D:A0:B0:BF:DA:86:7C:3E:41:56:91:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1932D1177B6B1B833DA0B0BFDA867C3E41569172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65400B805FC4A311FE62F1E886594A2ABB0E968645293803A577534722B2A92A/0/323830333a613032303a3a2f33322d3438203d3e20323635373933.roa
Signing time:             Tue 06 Jan 2026 19:42:45 +0000
ROA not before:           Tue 06 Jan 2026 19:37:45 +0000
ROA not after:            Tue 05 Jan 2027 19:42:45 +0000
asID:                     265793
IP address blocks:        2803:a020::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/65400B805FC4A311FE62F1E886594A2ABB0E968645293803A577534722B2A92A/0/1932D1177B6B1B833DA0B0BFDA867C3E41569172.crl
                          rsync://repository.lacnic.net/rpki/lacnic/65400B805FC4A311FE62F1E886594A2ABB0E968645293803A577534722B2A92A/0/1932D1177B6B1B833DA0B0BFDA867C3E41569172.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1932D1177B6B1B833DA0B0BFDA867C3E41569172.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 15:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:65:1b:dc:47:d6:00:e0:41:99:80:cb:49:89:2c:93:50:b0:34:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1932D1177B6B1B833DA0B0BFDA867C3E41569172
        Validity
            Not Before: Jan  6 19:37:45 2026 GMT
            Not After : Jan  5 19:42:45 2027 GMT
        Subject: CN=2D9C9BB8C43CC0619C690029E0B11DD66873E0A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:de:55:64:64:4d:86:6b:2d:4a:11:45:68:fc:
                    7a:9b:51:8e:48:63:bf:cc:53:5e:b9:86:15:84:70:
                    cf:98:74:21:4e:0f:99:e7:be:64:65:3d:c1:58:f2:
                    cc:c9:3a:b0:b5:40:a2:31:f6:bd:0c:6c:3f:29:11:
                    9a:cf:8e:31:2c:7f:ac:55:00:0a:f7:9b:af:fe:51:
                    19:69:5a:21:7d:c9:45:5a:5c:ff:eb:04:60:c8:d9:
                    9f:d2:75:d3:45:56:b0:49:10:e1:b5:0c:8e:95:a9:
                    b3:d2:17:28:b8:c5:50:0b:2e:8a:b2:fb:09:b5:0d:
                    d6:aa:28:55:35:e3:cb:f9:0c:e9:bf:61:c0:50:3f:
                    b4:fe:cf:57:e3:b2:7f:1c:83:ae:26:90:8b:54:5a:
                    b6:2f:e1:58:0c:ea:84:5b:b4:ae:99:be:e1:37:30:
                    af:56:bd:cb:26:30:89:ee:2f:50:b8:be:b1:42:6f:
                    b9:cc:eb:27:de:b5:e1:c6:1b:4e:e6:d8:63:6d:79:
                    fa:fc:43:33:95:52:52:9e:85:4b:5b:ef:ee:29:90:
                    1a:92:c5:3f:36:27:87:a5:ff:e7:c0:18:df:fc:cc:
                    15:0c:17:2b:a1:ae:55:b4:ca:c1:dc:f5:c9:60:da:
                    c6:1a:f9:7d:66:ec:57:92:21:3e:f0:fd:59:30:06:
                    b0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:9C:9B:B8:C4:3C:C0:61:9C:69:00:29:E0:B1:1D:D6:68:73:E0:A4
            X509v3 Authority Key Identifier:
                keyid:19:32:D1:17:7B:6B:1B:83:3D:A0:B0:BF:DA:86:7C:3E:41:56:91:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65400B805FC4A311FE62F1E886594A2ABB0E968645293803A577534722B2A92A/0/1932D1177B6B1B833DA0B0BFDA867C3E41569172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1932D1177B6B1B833DA0B0BFDA867C3E41569172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65400B805FC4A311FE62F1E886594A2ABB0E968645293803A577534722B2A92A/0/323830333a613032303a3a2f33322d3438203d3e20323635373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a020::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:64:bc:da:24:d2:fe:8b:71:cf:57:33:d3:f0:3f:95:1f:72:
         b3:ec:f7:71:d2:a4:3a:a1:b8:70:e1:cd:9d:61:7f:67:79:e0:
         ac:b7:a5:d6:6a:ca:20:14:c5:d3:26:d0:cb:f1:71:99:1e:5b:
         45:d2:e6:66:20:34:aa:da:9d:c6:07:c6:3d:27:25:2f:ff:e1:
         8f:d5:23:da:39:ad:9f:a3:bc:cd:a4:50:4a:da:ed:d4:9b:5a:
         57:4b:e8:58:98:05:7a:80:06:c6:31:47:02:1e:e5:f1:cb:d7:
         1d:f6:ec:0d:d7:96:76:46:3e:aa:a7:e9:87:a5:dc:7c:97:ba:
         fa:9c:0c:6b:20:da:4c:8d:34:30:ab:e7:fb:57:ae:20:93:88:
         26:33:79:d3:bd:49:33:14:36:0c:b1:36:8d:f5:f4:67:ec:81:
         40:aa:5b:46:99:09:48:28:ca:f4:9f:37:d5:05:9e:18:5e:8c:
         0d:7b:8c:29:17:86:6d:85:f6:a1:4d:6f:e0:54:f3:ff:70:d4:
         fd:b4:1c:a1:70:65:4b:8a:ff:3b:0a:bd:16:a7:8e:1e:9c:ac:
         d4:2a:3e:ea:c1:51:60:8a:26:fd:c3:a8:58:d6:67:4e:86:0f:
         86:ef:55:4a:2b:41:8a:ec:81:c4:a1:26:0c:31:5d:bc:f8:42:
         2a:c7:37:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:28:07 2026 by rpki-client