This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/74CACE6676950E34AFA1BFD4231CFBC472D8A5CE71FCF3988EA0D51C594176B8/0/323830333a333232303a3a2f33322d3332203d3e20323633363933.roa
File:                     323830333a333232303a3a2f33322d3332203d3e20323633363933.roa (raw, json)
Hash identifier:          AtERxNYuhqs2jTcWBDguE8sMWB1bf9dpUry7B9qIf8U=
Subject key identifier:   94:24:E6:A7:B1:4D:9E:5C:A1:33:E1:48:58:19:5A:69:9E:E5:43:F8
Certificate issuer:       /CN=475F767228FF8A3E789E7A8F5CEA94BEA09DB3E9
Certificate serial:       4BABBEBA107380B8B66268335742357958260830
Authority key identifier: 47:5F:76:72:28:FF:8A:3E:78:9E:7A:8F:5C:EA:94:BE:A0:9D:B3:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/475F767228FF8A3E789E7A8F5CEA94BEA09DB3E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/74CACE6676950E34AFA1BFD4231CFBC472D8A5CE71FCF3988EA0D51C594176B8/0/323830333a333232303a3a2f33322d3332203d3e20323633363933.roa
Signing time:             Tue 06 Jan 2026 19:05:11 +0000
ROA not before:           Tue 06 Jan 2026 19:00:11 +0000
ROA not after:            Tue 05 Jan 2027 19:05:11 +0000
asID:                     263693
IP address blocks:        2803:3220::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/74CACE6676950E34AFA1BFD4231CFBC472D8A5CE71FCF3988EA0D51C594176B8/0/475F767228FF8A3E789E7A8F5CEA94BEA09DB3E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/74CACE6676950E34AFA1BFD4231CFBC472D8A5CE71FCF3988EA0D51C594176B8/0/475F767228FF8A3E789E7A8F5CEA94BEA09DB3E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/475F767228FF8A3E789E7A8F5CEA94BEA09DB3E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 19:42:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ab:be:ba:10:73:80:b8:b6:62:68:33:57:42:35:79:58:26:08:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=475F767228FF8A3E789E7A8F5CEA94BEA09DB3E9
        Validity
            Not Before: Jan  6 19:00:11 2026 GMT
            Not After : Jan  5 19:05:11 2027 GMT
        Subject: CN=9424E6A7B14D9E5CA133E14858195A699EE543F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d8:8b:19:8b:fd:99:e1:f1:11:64:14:ad:a8:
                    6d:d0:0f:b4:75:c7:2d:b9:87:6e:43:de:94:d6:a1:
                    b1:d1:cf:54:08:21:4d:bc:a5:af:77:f0:2f:f2:46:
                    fd:a3:c7:bc:25:bc:27:91:0f:63:29:01:e2:f0:e7:
                    a7:02:c6:25:2d:14:48:e3:9a:d9:6f:b7:eb:28:7a:
                    12:5b:c6:7d:93:9a:2f:cd:4c:52:56:76:5c:1c:e3:
                    80:30:12:67:af:2e:44:3a:79:e6:7e:dd:83:15:47:
                    bf:d7:f7:4b:24:76:fa:62:35:e5:19:7a:db:a1:a9:
                    b0:cf:62:ef:71:4e:0a:2a:d1:c6:4c:e6:6d:dd:e9:
                    77:21:cb:f1:4d:82:10:6b:3a:d4:68:40:3f:34:22:
                    79:bc:97:79:bf:9f:d3:6c:bd:de:f7:43:b5:e4:bc:
                    07:c2:da:a8:b7:7c:d7:f4:5f:3b:32:86:20:a6:0e:
                    2b:b0:b4:4c:98:93:b3:6d:9c:8c:c7:70:81:96:78:
                    02:72:c1:bf:ab:0c:08:cb:c6:1f:94:42:f1:0c:06:
                    da:0d:d8:72:fd:cf:ab:c7:c4:e9:a4:56:a0:a8:0a:
                    49:6d:aa:59:f6:6c:7d:72:fb:c1:1f:79:b5:5d:14:
                    6d:a8:a5:40:a6:b5:ab:ae:d7:78:25:1a:fe:0f:fb:
                    e5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:24:E6:A7:B1:4D:9E:5C:A1:33:E1:48:58:19:5A:69:9E:E5:43:F8
            X509v3 Authority Key Identifier:
                keyid:47:5F:76:72:28:FF:8A:3E:78:9E:7A:8F:5C:EA:94:BE:A0:9D:B3:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/74CACE6676950E34AFA1BFD4231CFBC472D8A5CE71FCF3988EA0D51C594176B8/0/475F767228FF8A3E789E7A8F5CEA94BEA09DB3E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/475F767228FF8A3E789E7A8F5CEA94BEA09DB3E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/74CACE6676950E34AFA1BFD4231CFBC472D8A5CE71FCF3988EA0D51C594176B8/0/323830333a333232303a3a2f33322d3332203d3e20323633363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3220::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:15:1d:9b:73:a1:99:52:94:88:2d:0a:09:a0:d5:42:57:c3:
         95:63:16:9c:7e:36:a1:0b:d4:13:57:d9:92:c1:a6:bb:5b:95:
         18:1c:33:0b:e3:1b:c3:58:11:7d:80:28:a4:24:bc:cd:83:56:
         62:74:fc:9c:24:fe:01:a2:c0:ef:bb:73:5c:13:d2:12:33:b8:
         b3:3d:51:8f:36:de:bf:da:9d:51:03:1d:60:b4:38:91:43:ee:
         55:c9:4d:31:44:f1:e7:08:a1:dd:67:ba:2f:97:39:ec:4d:c7:
         99:4b:25:3a:f4:ca:97:e7:fb:e5:d6:78:5a:10:76:ac:b7:7d:
         d5:c7:0e:38:83:97:81:ea:9c:c4:85:37:4d:14:1f:c7:9f:27:
         f9:fa:0f:99:9a:60:ab:ee:ed:f8:e3:76:df:6b:c0:9b:cc:7c:
         27:f5:a9:00:8c:9f:b8:df:26:79:b4:e8:e2:72:81:7f:d7:c2:
         f4:10:85:26:79:83:6f:b2:ce:9e:f9:5c:bd:a1:05:b3:ef:f3:
         e3:eb:d2:ff:2d:ca:4b:45:b3:d4:8d:19:1c:7b:d1:86:b7:66:
         18:c0:0f:d0:6c:35:e5:90:90:7a:1a:b7:4d:42:da:fa:9f:a2:
         bf:56:11:08:45:fc:bc:2e:cc:18:cb:72:ab:76:b6:52:bb:2b:
         22:d3:05:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:51 2026 by rpki-client