This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8242AEDB377C5F1D98258FE4094FBF43D38725E4C14FBA584E1FDA9AAD5564B6/0/323830333a613238303a3a2f33322d3438203d3e20323633323132.roa
File:                     323830333a613238303a3a2f33322d3438203d3e20323633323132.roa (raw, json)
Hash identifier:          DMn2GdEV0bolsryoIp3ptoWNwBnf/ImwVkzTkHfmUrk=
Subject key identifier:   3E:89:34:8B:36:64:B4:0D:7A:29:52:2C:DF:B9:D2:E6:E5:5F:25:89
Certificate issuer:       /CN=AFBD0215C0EE827E1DDF72219656649845EB2918
Certificate serial:       72782CB12BE8AE0F410312A911491F724595D20B
Authority key identifier: AF:BD:02:15:C0:EE:82:7E:1D:DF:72:21:96:56:64:98:45:EB:29:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFBD0215C0EE827E1DDF72219656649845EB2918.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8242AEDB377C5F1D98258FE4094FBF43D38725E4C14FBA584E1FDA9AAD5564B6/0/323830333a613238303a3a2f33322d3438203d3e20323633323132.roa
Signing time:             Tue 06 Jan 2026 19:43:28 +0000
ROA not before:           Tue 06 Jan 2026 19:38:28 +0000
ROA not after:            Tue 05 Jan 2027 19:43:28 +0000
asID:                     263212
IP address blocks:        2803:a280::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8242AEDB377C5F1D98258FE4094FBF43D38725E4C14FBA584E1FDA9AAD5564B6/0/AFBD0215C0EE827E1DDF72219656649845EB2918.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8242AEDB377C5F1D98258FE4094FBF43D38725E4C14FBA584E1FDA9AAD5564B6/0/AFBD0215C0EE827E1DDF72219656649845EB2918.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFBD0215C0EE827E1DDF72219656649845EB2918.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 11:11:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:78:2c:b1:2b:e8:ae:0f:41:03:12:a9:11:49:1f:72:45:95:d2:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFBD0215C0EE827E1DDF72219656649845EB2918
        Validity
            Not Before: Jan  6 19:38:28 2026 GMT
            Not After : Jan  5 19:43:28 2027 GMT
        Subject: CN=3E89348B3664B40D7A29522CDFB9D2E6E55F2589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:31:64:2f:c4:1a:c9:78:1d:85:f5:9b:cd:a4:
                    b8:f4:ad:be:10:9a:f6:75:91:84:41:a2:e4:bb:1a:
                    cd:60:22:bd:da:31:32:a1:5d:62:24:0a:53:f4:90:
                    13:1c:a8:fc:c7:48:9e:61:03:d3:a4:16:e9:fa:eb:
                    ed:72:13:a3:14:d9:5a:51:05:d4:63:e3:d5:ad:42:
                    53:7a:77:42:5b:5f:68:77:c5:9d:18:e7:ad:b8:38:
                    e4:71:9c:7b:91:d5:98:34:a7:6b:05:45:f7:73:f2:
                    e0:a1:c8:47:47:e9:aa:96:39:7e:6b:98:e1:d1:df:
                    3a:76:fd:a7:49:af:70:c7:d4:b3:11:02:5b:87:49:
                    fc:4d:42:27:e7:c9:7c:b5:8d:66:69:bb:81:55:2b:
                    6c:2e:7e:1d:db:8c:e5:fd:92:fb:89:6b:7d:7a:b6:
                    65:2b:83:50:f1:55:45:cb:94:c4:60:dc:8b:53:ab:
                    de:78:94:f7:63:fd:e6:43:d3:af:e2:d0:8f:b2:12:
                    12:02:6a:62:55:fe:b5:aa:20:f9:78:f0:15:e7:8a:
                    fe:e0:81:73:2e:3f:c6:9c:c2:4c:44:f7:dc:f6:49:
                    9d:90:b2:57:d6:e5:11:f6:9a:c3:d0:8a:4a:f1:92:
                    9b:c8:5c:09:59:9a:10:22:5d:0b:e0:3c:29:95:18:
                    85:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:89:34:8B:36:64:B4:0D:7A:29:52:2C:DF:B9:D2:E6:E5:5F:25:89
            X509v3 Authority Key Identifier:
                keyid:AF:BD:02:15:C0:EE:82:7E:1D:DF:72:21:96:56:64:98:45:EB:29:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8242AEDB377C5F1D98258FE4094FBF43D38725E4C14FBA584E1FDA9AAD5564B6/0/AFBD0215C0EE827E1DDF72219656649845EB2918.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFBD0215C0EE827E1DDF72219656649845EB2918.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8242AEDB377C5F1D98258FE4094FBF43D38725E4C14FBA584E1FDA9AAD5564B6/0/323830333a613238303a3a2f33322d3438203d3e20323633323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a280::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:1d:07:f1:cd:c4:45:c4:d4:fd:dd:8e:bf:90:a3:bf:2a:cc:
         50:27:5f:a8:67:99:62:81:fb:39:ed:1d:7a:7a:5f:40:ce:fe:
         bb:70:b6:4b:78:17:91:cf:7f:ab:b8:f3:4f:75:cb:dd:11:79:
         9a:cb:9c:6c:8a:86:a1:8f:9b:e0:ba:6b:e2:eb:22:b3:14:a8:
         8f:40:36:bd:55:37:eb:70:f2:7f:21:2f:0a:72:19:86:7e:d5:
         f3:f8:df:07:e8:62:0f:ec:cb:97:91:ec:54:1c:a7:c8:fe:2b:
         83:d4:e3:1c:77:99:2a:c3:84:14:85:80:a4:82:83:53:8f:5f:
         c8:e1:14:f4:5e:2c:80:0a:7d:13:89:5a:09:c1:7b:6d:45:d9:
         6c:c4:ee:ab:31:7e:52:d2:78:c7:b3:9f:01:3e:20:c6:9f:6d:
         97:4b:0b:00:83:14:3b:f9:ea:7c:1b:cc:ce:f1:4e:b3:e0:2f:
         6f:c5:ae:87:dd:f9:a1:90:a3:ae:66:f3:61:95:51:10:50:39:
         0f:32:5c:4b:4b:ff:b8:89:b4:1a:3f:0f:81:82:a0:77:37:4b:
         2c:d8:1b:5d:c9:7f:ab:07:da:4b:fa:1c:0d:dd:24:34:3f:86:
         56:2f:89:2d:b8:ba:2b:1c:42:5d:92:37:53:e1:65:c2:84:fb:
         c2:8e:f7:90
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUcngssSvorg9BAxKpEUkfckWV0gswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUZCRDAyMTVDMEVFODI3RTFEREY3MjIxOTY1NjY0OTg0
NUVCMjkxODAeFw0yNjAxMDYxOTM4MjhaFw0yNzAxMDUxOTQzMjhaMDMxMTAvBgNV
BAMTKDNFODkzNDhCMzY2NEI0MEQ3QTI5NTIyQ0RGQjlEMkU2RTU1RjI1ODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKMWQvxBrJeB2F9ZvNpLj0rb4Q
mvZ1kYRBouS7Gs1gIr3aMTKhXWIkClP0kBMcqPzHSJ5hA9OkFun66+1yE6MU2VpR
BdRj49WtQlN6d0JbX2h3xZ0Y5624OORxnHuR1Zg0p2sFRfdz8uChyEdH6aqWOX5r
mOHR3zp2/adJr3DH1LMRAluHSfxNQifnyXy1jWZpu4FVK2wufh3bjOX9kvuJa316
tmUrg1DxVUXLlMRg3ItTq954lPdj/eZD06/i0I+yEhICamJV/rWqIPl48BXniv7g
gXMuP8acwkxE99z2SZ2QslfW5RH2msPQikrxkpvIXAlZmhAiXQvgPCmVGIUBAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUPok0izZktA16KVIs37nS5uVfJYkwHwYDVR0j
BBgwFoAUr70CFcDugn4d33IhllZkmEXrKRgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MjQyQUVEQjM3N0M1RjFEOTgyNThGRTQwOTRGQkY0M0Qz
ODcyNUU0QzE0RkJBNTg0RTFGREE5QUFENTU2NEI2LzAvQUZCRDAyMTVDMEVFODI3
RTFEREY3MjIxOTY1NjY0OTg0NUVCMjkxOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRkJEMDIxNUMwRUU4MjdFMURE
RjcyMjE5NjU2NjQ5ODQ1RUIyOTE4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODI0MkFFREIzNzdDNUYxRDk4MjU4RkU0MDk0RkJGNDNEMzg3MjVFNEMx
NEZCQTU4NEUxRkRBOUFBRDU1NjRCNi8wLzMyMzgzMDMzM2E2MTMyMzgzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMzMyMzEzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDooAw
DQYJKoZIhvcNAQELBQADggEBAE4dB/HNxEXE1P3djr+Qo78qzFAnX6hnmWKB+znt
HXp6X0DO/rtwtkt4F5HPf6u48091y90ReZrLnGyKhqGPm+C6a+LrIrMUqI9ANr1V
N+tw8n8hLwpyGYZ+1fP43wfoYg/sy5eR7FQcp8j+K4PU4xx3mSrDhBSFgKSCg1OP
X8jhFPReLIAKfROJWgnBe21F2WzE7qsxflLSeMeznwE+IMafbZdLCwCDFDv56nwb
zM7xTrPgL2/Frofd+aGQo65m82GVURBQOQ8yXEtL/7iJtBo/D4GCoHc3SyzYG13J
f6sH2kv6HA3dJDQ/hlYviS24uiscQl2SN1PhZcKE+8KO95A=
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:17:56 2026 by rpki-client