This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757BAD82C1507A948E8184A59EDE8AF15F432F637F2AD03FB7668CC9C1D53CAA/0/323830333a333361303a3a2f33322d3634203d3e203532343731.roa
File:                     323830333a333361303a3a2f33322d3634203d3e203532343731.roa (raw, json)
Hash identifier:          BD8haJaS2xm89lIQPcEgu/ySkUUl06wQa0yFWtdqh/A=
Subject key identifier:   47:B1:BF:89:8E:60:61:63:1F:AA:8F:C5:49:84:2D:84:11:F2:8D:E9
Certificate issuer:       /CN=2A6C417EA637B9F50D220D62AE4762455E2FD4C7
Certificate serial:       5983A93166925CF17DB25965DC9427B0FF507FE4
Authority key identifier: 2A:6C:41:7E:A6:37:B9:F5:0D:22:0D:62:AE:47:62:45:5E:2F:D4:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A6C417EA637B9F50D220D62AE4762455E2FD4C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757BAD82C1507A948E8184A59EDE8AF15F432F637F2AD03FB7668CC9C1D53CAA/0/323830333a333361303a3a2f33322d3634203d3e203532343731.roa
Signing time:             Tue 06 Jan 2026 20:55:01 +0000
ROA not before:           Tue 06 Jan 2026 20:50:01 +0000
ROA not after:            Tue 05 Jan 2027 20:55:01 +0000
asID:                     52471
IP address blocks:        2803:33a0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/757BAD82C1507A948E8184A59EDE8AF15F432F637F2AD03FB7668CC9C1D53CAA/0/2A6C417EA637B9F50D220D62AE4762455E2FD4C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/757BAD82C1507A948E8184A59EDE8AF15F432F637F2AD03FB7668CC9C1D53CAA/0/2A6C417EA637B9F50D220D62AE4762455E2FD4C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A6C417EA637B9F50D220D62AE4762455E2FD4C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:83:a9:31:66:92:5c:f1:7d:b2:59:65:dc:94:27:b0:ff:50:7f:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A6C417EA637B9F50D220D62AE4762455E2FD4C7
        Validity
            Not Before: Jan  6 20:50:01 2026 GMT
            Not After : Jan  5 20:55:01 2027 GMT
        Subject: CN=47B1BF898E6061631FAA8FC549842D8411F28DE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5d:55:91:91:d8:e7:00:49:92:7e:a3:0a:b8:
                    23:44:c4:94:90:5b:9f:f0:7b:fa:65:24:74:d8:67:
                    66:a4:ce:90:98:56:eb:05:c2:5a:c5:34:30:73:f3:
                    83:4f:f4:f4:3d:df:bc:39:85:e5:02:33:63:f8:c0:
                    28:97:bc:f6:3b:1d:cf:a1:96:bc:75:a6:6d:0e:5e:
                    63:bd:83:32:a4:4b:19:b0:80:b8:ff:09:b6:22:49:
                    36:48:38:18:c2:0a:22:9a:a3:fa:94:30:7a:66:22:
                    d9:7c:1c:77:78:88:f0:88:fd:68:bd:6e:21:b3:a9:
                    a5:36:d8:62:45:25:61:6e:4e:6d:8a:03:47:16:29:
                    47:23:79:77:49:db:be:dc:ac:80:8c:e8:a5:9b:95:
                    a2:77:24:e7:43:0d:ef:f5:94:dd:65:28:ee:d9:d1:
                    af:c1:3d:92:ed:82:4d:3e:a1:26:10:82:ed:07:7a:
                    1e:14:d6:d6:b0:87:0c:f3:3f:c8:4d:13:84:33:dc:
                    d5:c6:f9:d8:9b:aa:ac:33:9b:18:24:8a:f6:ff:dd:
                    d8:6c:03:d6:7b:5b:eb:07:01:c5:4f:21:13:ff:db:
                    32:18:e4:1a:fc:58:76:29:11:52:b0:7d:34:80:b5:
                    c5:8a:7a:2b:98:5b:ff:a7:17:e3:d8:98:82:bc:fd:
                    96:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B1:BF:89:8E:60:61:63:1F:AA:8F:C5:49:84:2D:84:11:F2:8D:E9
            X509v3 Authority Key Identifier:
                keyid:2A:6C:41:7E:A6:37:B9:F5:0D:22:0D:62:AE:47:62:45:5E:2F:D4:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757BAD82C1507A948E8184A59EDE8AF15F432F637F2AD03FB7668CC9C1D53CAA/0/2A6C417EA637B9F50D220D62AE4762455E2FD4C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A6C417EA637B9F50D220D62AE4762455E2FD4C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757BAD82C1507A948E8184A59EDE8AF15F432F637F2AD03FB7668CC9C1D53CAA/0/323830333a333361303a3a2f33322d3634203d3e203532343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:33a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:3d:0c:52:57:eb:6f:d0:9a:00:f6:94:56:b0:57:4a:f5:60:
         6f:9d:8b:3f:c5:7b:4f:0b:2a:6e:7e:6d:40:64:87:b9:bc:38:
         de:17:ef:7d:ab:a1:61:58:e1:53:08:64:d8:a2:d7:ad:43:3c:
         de:f2:65:ee:50:c1:02:6e:53:a2:84:c1:eb:76:16:66:0a:a2:
         91:b2:1b:47:e9:9b:da:7f:5c:13:69:de:14:ae:34:d5:cd:62:
         23:82:6c:5d:bc:42:ed:06:52:59:53:14:af:ce:d5:07:41:ec:
         cd:a0:e9:1a:60:65:2e:b6:73:2f:3e:d2:70:30:5b:85:82:98:
         0e:e1:42:d9:7f:24:f1:dc:eb:a2:42:b5:af:e1:8e:bc:36:b9:
         06:80:37:07:e0:94:a8:57:ab:d5:49:9c:cd:79:a9:74:44:4c:
         57:36:f2:63:e9:f7:e2:d2:43:16:b1:4c:07:e2:a2:d0:e4:31:
         e6:e1:96:e3:78:c3:c3:2f:99:b1:b0:23:a3:4b:20:7d:db:ab:
         87:80:74:e5:e9:1e:b0:7c:76:7a:95:ec:5c:8a:11:d1:98:3b:
         3d:07:b5:dc:81:10:80:06:fa:b0:15:a3:0d:25:e2:b5:60:09:
         a7:bb:a1:37:c3:ed:6a:61:46:88:cf:dc:6a:dd:c3:e8:3e:8d:
         f9:5a:a9:c8
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUWYOpMWaSXPF9slll3JQnsP9Qf+QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkE2QzQxN0VBNjM3QjlGNTBEMjIwRDYyQUU0NzYyNDU1
RTJGRDRDNzAeFw0yNjAxMDYyMDUwMDFaFw0yNzAxMDUyMDU1MDFaMDMxMTAvBgNV
BAMTKDQ3QjFCRjg5OEU2MDYxNjMxRkFBOEZDNTQ5ODQyRDg0MTFGMjhERTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+XVWRkdjnAEmSfqMKuCNExJSQ
W5/we/plJHTYZ2akzpCYVusFwlrFNDBz84NP9PQ937w5heUCM2P4wCiXvPY7Hc+h
lrx1pm0OXmO9gzKkSxmwgLj/CbYiSTZIOBjCCiKao/qUMHpmItl8HHd4iPCI/Wi9
biGzqaU22GJFJWFuTm2KA0cWKUcjeXdJ277crICM6KWblaJ3JOdDDe/1lN1lKO7Z
0a/BPZLtgk0+oSYQgu0Heh4U1tawhwzzP8hNE4Qz3NXG+dibqqwzmxgkivb/3dhs
A9Z7W+sHAcVPIRP/2zIY5Br8WHYpEVKwfTSAtcWKeiuYW/+nF+PYmIK8/ZaZAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUR7G/iY5gYWMfqo/FSYQthBHyjekwHwYDVR0j
BBgwFoAUKmxBfqY3ufUNIg1irkdiRV4v1McwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NTdCQUQ4MkMxNTA3QTk0OEU4MTg0QTU5RURFOEFGMTVG
NDMyRjYzN0YyQUQwM0ZCNzY2OENDOUMxRDUzQ0FBLzAvMkE2QzQxN0VBNjM3QjlG
NTBEMjIwRDYyQUU0NzYyNDU1RTJGRDRDNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQTZDNDE3RUE2MzdCOUY1MEQy
MjBENjJBRTQ3NjI0NTVFMkZENEM3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzU3QkFEODJDMTUwN0E5NDhFODE4NEE1OUVERThBRjE1RjQzMkY2MzdG
MkFEMDNGQjc2NjhDQzlDMUQ1M0NBQS8wLzMyMzgzMDMzM2EzMzMzNjEzMDNhM2Ey
ZjMzMzIyZDM2MzQyMDNkM2UyMDM1MzIzNDM3MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAzOgMA0G
CSqGSIb3DQEBCwUAA4IBAQBmPQxSV+tv0JoA9pRWsFdK9WBvnYs/xXtPCypufm1A
ZIe5vDjeF+99q6FhWOFTCGTYotetQzze8mXuUMECblOihMHrdhZmCqKRshtH6Zva
f1wTad4UrjTVzWIjgmxdvELtBlJZUxSvztUHQezNoOkaYGUutnMvPtJwMFuFgpgO
4ULZfyTx3OuiQrWv4Y68NrkGgDcH4JSoV6vVSZzNeal0RExXNvJj6ffi0kMWsUwH
4qLQ5DHm4ZbjeMPDL5mxsCOjSyB926uHgHTl6R6wfHZ6lexcihHRmDs9B7XcgRCA
BvqwFaMNJeK1YAmnu6E3w+1qYUaIz9xq3cPoPo35WqnI
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:17:16 2026 by rpki-client