This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/747704800E6FCA522881230A2197A1BA97D91F8E7066CA4E0DBF407B4B42011E/0/323830333a386663303a3a2f33322d3438203d3e20323636373637.roa
File:                     323830333a386663303a3a2f33322d3438203d3e20323636373637.roa (raw, json)
Hash identifier:          j2/u7xkNsV4n23uvPeCkIOETSEm3reY39mjz9smDuxk=
Subject key identifier:   17:2D:E5:D0:75:2D:25:50:85:87:5E:78:AF:64:20:22:0A:52:45:A0
Certificate issuer:       /CN=B639E65ACFC73F2B9C830A20801066140D1966F6
Certificate serial:       306844646AD2C537BDD3AB6BBE540C07F18B22B9
Authority key identifier: B6:39:E6:5A:CF:C7:3F:2B:9C:83:0A:20:80:10:66:14:0D:19:66:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B639E65ACFC73F2B9C830A20801066140D1966F6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/747704800E6FCA522881230A2197A1BA97D91F8E7066CA4E0DBF407B4B42011E/0/323830333a386663303a3a2f33322d3438203d3e20323636373637.roa
Signing time:             Tue 06 Jan 2026 20:57:41 +0000
ROA not before:           Tue 06 Jan 2026 20:52:41 +0000
ROA not after:            Tue 05 Jan 2027 20:57:41 +0000
asID:                     266767
IP address blocks:        2803:8fc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/747704800E6FCA522881230A2197A1BA97D91F8E7066CA4E0DBF407B4B42011E/0/B639E65ACFC73F2B9C830A20801066140D1966F6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/747704800E6FCA522881230A2197A1BA97D91F8E7066CA4E0DBF407B4B42011E/0/B639E65ACFC73F2B9C830A20801066140D1966F6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B639E65ACFC73F2B9C830A20801066140D1966F6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 17:28:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:68:44:64:6a:d2:c5:37:bd:d3:ab:6b:be:54:0c:07:f1:8b:22:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B639E65ACFC73F2B9C830A20801066140D1966F6
        Validity
            Not Before: Jan  6 20:52:41 2026 GMT
            Not After : Jan  5 20:57:41 2027 GMT
        Subject: CN=172DE5D0752D255085875E78AF6420220A5245A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5d:e5:ba:e9:b9:4c:53:b7:ea:25:c9:32:a7:
                    e6:4e:9a:66:89:9d:32:60:62:cb:5f:a0:89:f7:69:
                    4c:3d:93:b6:98:50:bf:2d:93:5c:89:e8:cd:67:a3:
                    f0:aa:21:67:59:9f:d0:99:5a:e9:8b:86:c1:84:74:
                    a1:44:8e:1d:ac:2f:1f:2e:74:b7:30:58:e1:b9:24:
                    d6:55:5c:d3:69:98:90:08:53:3d:41:a6:35:3f:98:
                    89:ff:6e:53:44:1a:52:80:2b:05:84:19:f2:18:af:
                    81:85:aa:3a:63:48:9e:c5:b9:08:45:dd:08:10:d4:
                    50:2e:cb:cf:9a:32:96:0f:03:05:ad:27:d7:f1:42:
                    be:94:05:6f:f9:66:d0:b0:40:e3:de:8f:55:ce:86:
                    7c:bc:a9:dd:fe:e4:cc:94:43:8f:49:32:34:6b:eb:
                    f9:ee:60:73:c7:3a:4e:eb:8b:5c:9b:86:1a:b0:81:
                    5c:4b:91:e6:72:8d:1c:7c:96:d4:b4:25:d0:1c:27:
                    0e:59:60:4f:26:b1:a0:7a:2d:65:83:89:41:3a:48:
                    a1:19:9e:f6:23:82:ef:e9:59:46:8d:40:64:1d:32:
                    a6:c4:32:00:c6:b7:80:ac:14:01:1d:d4:5e:5d:7a:
                    b2:fc:9f:9f:66:90:58:df:4f:36:a7:8a:51:eb:25:
                    75:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:2D:E5:D0:75:2D:25:50:85:87:5E:78:AF:64:20:22:0A:52:45:A0
            X509v3 Authority Key Identifier:
                keyid:B6:39:E6:5A:CF:C7:3F:2B:9C:83:0A:20:80:10:66:14:0D:19:66:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/747704800E6FCA522881230A2197A1BA97D91F8E7066CA4E0DBF407B4B42011E/0/B639E65ACFC73F2B9C830A20801066140D1966F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B639E65ACFC73F2B9C830A20801066140D1966F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/747704800E6FCA522881230A2197A1BA97D91F8E7066CA4E0DBF407B4B42011E/0/323830333a386663303a3a2f33322d3438203d3e20323636373637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8fc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:be:a8:31:2a:b2:81:de:44:08:4f:e8:12:76:3a:e8:0f:76:
         23:5b:b3:af:a8:70:a9:46:8c:bc:5d:89:e5:23:2a:38:2f:60:
         85:76:11:2a:91:9b:c1:bb:22:b8:c4:c3:ae:ea:d0:06:b7:72:
         ca:ca:12:ea:60:3f:67:a5:a9:0a:5a:92:b5:08:9d:93:e4:df:
         d8:72:5e:67:55:58:f2:2f:73:d3:6c:3c:66:65:11:c9:52:a8:
         3d:92:0b:ca:d1:73:93:3e:5d:77:f6:ca:94:db:2f:6b:91:29:
         67:67:b8:43:6d:d0:e9:44:af:84:7e:5e:fb:d9:f1:81:f5:2e:
         96:8e:24:ff:a6:6f:f4:dd:44:f0:39:43:f3:1a:11:93:4f:7e:
         fe:bd:33:d8:2c:d8:86:1f:36:23:50:f2:e4:da:43:a7:f7:77:
         53:87:cd:8d:a6:a0:42:4d:50:25:77:c9:ec:a1:e6:4f:46:5c:
         7f:52:97:fe:24:bf:d4:d5:13:eb:14:ff:52:c0:d7:c1:c7:2a:
         94:12:8a:bf:e1:88:5a:17:18:e4:24:85:1c:60:90:a9:58:e0:
         3f:35:1d:ed:26:fb:07:c1:a8:4f:b0:f5:8c:ea:b0:32:07:bf:
         2a:d5:61:f5:27:3e:dd:df:ad:67:65:b6:b1:bc:47:b1:a6:f6:
         9f:14:c9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:05:47 2026 by rpki-client