This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83B2BEE363D705DB0D2D6B52B454658212F4DFC907FCBAC036F825B5EEB9A8E1/0/323830333a333939303a3a2f33322d3438203d3e20323732383431.roa
File:                     323830333a333939303a3a2f33322d3438203d3e20323732383431.roa (raw, json)
Hash identifier:          +kA0f3cZ7Aoha5GnAFIlxe51u89o6lKDuPeBSHc/iJA=
Subject key identifier:   7C:43:09:5C:26:08:E8:CE:81:B1:DE:A2:8E:8E:76:85:2C:B1:3E:8A
Certificate issuer:       /CN=B12C8684CDE363FEB78E9520BBC6F0FE30F16EFC
Certificate serial:       022F20167E30E32D63708EBBB7342B8199564076
Authority key identifier: B1:2C:86:84:CD:E3:63:FE:B7:8E:95:20:BB:C6:F0:FE:30:F1:6E:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B12C8684CDE363FEB78E9520BBC6F0FE30F16EFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83B2BEE363D705DB0D2D6B52B454658212F4DFC907FCBAC036F825B5EEB9A8E1/0/323830333a333939303a3a2f33322d3438203d3e20323732383431.roa
Signing time:             Tue 06 Jan 2026 19:47:02 +0000
ROA not before:           Tue 06 Jan 2026 19:42:02 +0000
ROA not after:            Tue 05 Jan 2027 19:47:02 +0000
asID:                     272841
IP address blocks:        2803:3990::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83B2BEE363D705DB0D2D6B52B454658212F4DFC907FCBAC036F825B5EEB9A8E1/0/B12C8684CDE363FEB78E9520BBC6F0FE30F16EFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83B2BEE363D705DB0D2D6B52B454658212F4DFC907FCBAC036F825B5EEB9A8E1/0/B12C8684CDE363FEB78E9520BBC6F0FE30F16EFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B12C8684CDE363FEB78E9520BBC6F0FE30F16EFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:2f:20:16:7e:30:e3:2d:63:70:8e:bb:b7:34:2b:81:99:56:40:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12C8684CDE363FEB78E9520BBC6F0FE30F16EFC
        Validity
            Not Before: Jan  6 19:42:02 2026 GMT
            Not After : Jan  5 19:47:02 2027 GMT
        Subject: CN=7C43095C2608E8CE81B1DEA28E8E76852CB13E8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0d:4d:2c:04:ef:7c:7f:bd:49:f8:1c:b3:72:
                    e6:87:ad:87:52:d4:c5:61:41:7f:16:37:fe:79:57:
                    17:d6:42:9e:1c:a9:ce:ad:76:2e:ba:15:24:39:30:
                    1c:c0:f4:01:f3:4e:94:93:64:27:67:0d:84:4b:89:
                    5f:ce:43:cd:9f:cf:60:40:84:f1:ec:dd:ff:d9:39:
                    c0:fe:05:eb:d8:fd:f5:31:cf:a3:47:4e:89:1f:d5:
                    22:8a:4e:b1:2d:f3:41:87:06:ab:46:65:24:7d:60:
                    b7:81:dc:f0:a3:cd:e6:0b:26:e6:8d:8b:85:23:29:
                    73:38:dd:56:b0:24:25:a0:b2:cd:90:4e:59:9d:c4:
                    96:1b:f1:31:ca:8f:c9:26:ba:19:0b:7b:ec:94:f6:
                    2a:e7:3d:96:c3:c1:e6:e9:31:b5:e9:f4:f1:fc:cc:
                    63:40:f3:89:a4:65:28:cd:82:9b:82:70:b6:61:45:
                    49:bf:fc:b5:96:61:f6:69:96:45:0e:7f:3d:06:f3:
                    70:fc:b3:7c:cd:cf:b8:ac:42:f4:23:87:02:ea:15:
                    b3:be:74:0b:46:a0:5c:12:48:8b:8f:5b:08:d1:f7:
                    ed:c5:7a:6d:c4:53:9b:b4:d0:b8:48:63:8e:4b:81:
                    27:28:ec:cc:21:13:b4:90:53:56:69:18:13:33:eb:
                    25:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:43:09:5C:26:08:E8:CE:81:B1:DE:A2:8E:8E:76:85:2C:B1:3E:8A
            X509v3 Authority Key Identifier:
                keyid:B1:2C:86:84:CD:E3:63:FE:B7:8E:95:20:BB:C6:F0:FE:30:F1:6E:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83B2BEE363D705DB0D2D6B52B454658212F4DFC907FCBAC036F825B5EEB9A8E1/0/B12C8684CDE363FEB78E9520BBC6F0FE30F16EFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B12C8684CDE363FEB78E9520BBC6F0FE30F16EFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83B2BEE363D705DB0D2D6B52B454658212F4DFC907FCBAC036F825B5EEB9A8E1/0/323830333a333939303a3a2f33322d3438203d3e20323732383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3990::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:c8:a7:f2:a2:de:c2:e2:c3:a7:1e:12:11:d4:7f:49:f5:e4:
         22:37:b5:57:0e:c9:16:02:0c:94:80:88:27:af:ca:29:17:71:
         a4:4a:e6:25:3b:94:64:2e:55:dd:cd:de:76:ae:09:75:25:43:
         ef:e8:cd:54:0c:c6:5a:f6:1c:cb:88:6d:5e:e3:68:04:b8:e9:
         40:98:33:1c:1d:48:bc:3d:d8:21:85:1c:ba:8f:97:c8:9e:91:
         d0:98:d0:3a:01:e7:f1:f5:a5:5a:14:fb:b2:2d:f9:51:6c:d9:
         9b:2b:20:41:0b:e1:25:c2:60:be:46:b1:ed:14:fc:fa:88:4d:
         cb:bb:dc:47:8a:da:67:d5:4f:95:ca:76:b5:fd:23:9b:78:a9:
         65:a0:d3:d9:be:49:40:e2:d2:81:b3:af:a6:bf:1d:76:d6:fa:
         06:a5:a6:ed:c7:e3:4e:40:f7:dd:89:24:c8:ba:f8:cd:a1:ed:
         57:97:cf:da:36:4b:2e:72:4d:22:12:61:47:76:43:52:af:a9:
         4c:a6:05:6b:12:8a:b2:0f:f5:0b:ea:3f:d2:68:18:21:87:a6:
         27:9f:f1:d5:92:01:99:05:af:83:b8:28:00:90:59:ec:81:e4:
         23:b1:3b:85:96:5b:a5:0a:37:70:10:ef:5f:84:17:ce:be:3e:
         35:af:57:ed
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUAi8gFn4w4y1jcI67tzQrgZlWQHYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjEyQzg2ODRDREUzNjNGRUI3OEU5NTIwQkJDNkYwRkUz
MEYxNkVGQzAeFw0yNjAxMDYxOTQyMDJaFw0yNzAxMDUxOTQ3MDJaMDMxMTAvBgNV
BAMTKDdDNDMwOTVDMjYwOEU4Q0U4MUIxREVBMjhFOEU3Njg1MkNCMTNFOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzDU0sBO98f71J+ByzcuaHrYdS
1MVhQX8WN/55VxfWQp4cqc6tdi66FSQ5MBzA9AHzTpSTZCdnDYRLiV/OQ82fz2BA
hPHs3f/ZOcD+BevY/fUxz6NHTokf1SKKTrEt80GHBqtGZSR9YLeB3PCjzeYLJuaN
i4UjKXM43VawJCWgss2QTlmdxJYb8THKj8kmuhkLe+yU9irnPZbDwebpMbXp9PH8
zGNA84mkZSjNgpuCcLZhRUm//LWWYfZplkUOfz0G83D8s3zNz7isQvQjhwLqFbO+
dAtGoFwSSIuPWwjR9+3Fem3EU5u00LhIY45LgSco7MwhE7SQU1ZpGBMz6yVhAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUfEMJXCYI6M6Bsd6ijo52hSyxPoowHwYDVR0j
BBgwFoAUsSyGhM3jY/63jpUgu8bw/jDxbvwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84M0IyQkVFMzYzRDcwNURCMEQyRDZCNTJCNDU0NjU4MjEy
RjRERkM5MDdGQ0JBQzAzNkY4MjVCNUVFQjlBOEUxLzAvQjEyQzg2ODRDREUzNjNG
RUI3OEU5NTIwQkJDNkYwRkUzMEYxNkVGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMTJDODY4NENERTM2M0ZFQjc4
RTk1MjBCQkM2RjBGRTMwRjE2RUZDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODNCMkJFRTM2M0Q3MDVEQjBEMkQ2QjUyQjQ1NDY1ODIxMkY0REZDOTA3
RkNCQUMwMzZGODI1QjVFRUI5QThFMS8wLzMyMzgzMDMzM2EzMzM5MzkzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMjM4MzQzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDOZAw
DQYJKoZIhvcNAQELBQADggEBAI/Ip/Ki3sLiw6ceEhHUf0n15CI3tVcOyRYCDJSA
iCevyikXcaRK5iU7lGQuVd3N3nauCXUlQ+/ozVQMxlr2HMuIbV7jaAS46UCYMxwd
SLw92CGFHLqPl8iekdCY0DoB5/H1pVoU+7It+VFs2ZsrIEEL4SXCYL5Gse0U/PqI
Tcu73EeK2mfVT5XKdrX9I5t4qWWg09m+SUDi0oGzr6a/HXbW+galpu3H405A992J
JMi6+M2h7VeXz9o2Sy5yTSISYUd2Q1KvqUymBWsSirIP9QvqP9JoGCGHpief8dWS
AZkFr4O4KACQWeyB5COxO4WWW6UKN3AQ71+EF86+PjWvV+0=
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:54:51 2026 by rpki-client