This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FC2692E9603D23AF02853DC75D35F465BF61721FEEA8F1D965544177D2F9846/0/323830333a656238303a3a2f33322d3333203d3e203631343933.roa
File:                     323830333a656238303a3a2f33322d3333203d3e203631343933.roa (raw, json)
Hash identifier:          vXcAGRggD/9+TypGVPUD3KQfZgxxENvBCtI/qP5DUdU=
Subject key identifier:   69:7A:85:F4:07:74:4F:B1:F9:CA:29:72:F5:36:CF:AB:C3:07:68:91
Certificate issuer:       /CN=1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF
Certificate serial:       200E0681361DB5B2C17C881DEF7EC76A224BD8A6
Authority key identifier: 1B:0F:9F:6A:DE:61:46:F8:6A:FF:A5:5E:79:F8:5D:04:B0:C1:3E:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FC2692E9603D23AF02853DC75D35F465BF61721FEEA8F1D965544177D2F9846/0/323830333a656238303a3a2f33322d3333203d3e203631343933.roa
Signing time:             Tue 06 Jan 2026 19:43:06 +0000
ROA not before:           Tue 06 Jan 2026 19:38:06 +0000
ROA not after:            Tue 05 Jan 2027 19:43:06 +0000
asID:                     61493
IP address blocks:        2803:eb80::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8FC2692E9603D23AF02853DC75D35F465BF61721FEEA8F1D965544177D2F9846/0/1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8FC2692E9603D23AF02853DC75D35F465BF61721FEEA8F1D965544177D2F9846/0/1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:0e:06:81:36:1d:b5:b2:c1:7c:88:1d:ef:7e:c7:6a:22:4b:d8:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF
        Validity
            Not Before: Jan  6 19:38:06 2026 GMT
            Not After : Jan  5 19:43:06 2027 GMT
        Subject: CN=697A85F407744FB1F9CA2972F536CFABC3076891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:54:3e:50:c0:67:0f:67:7f:88:c2:34:fc:86:
                    41:6b:d0:d9:66:75:22:74:47:e3:b3:aa:86:64:98:
                    39:49:30:ef:f7:27:e9:98:47:83:eb:0a:a7:0a:4d:
                    a4:e8:9d:4d:65:ce:94:7f:d7:ef:86:4a:b1:40:b4:
                    a7:90:36:71:80:03:b2:fb:91:5c:3c:01:3b:af:d1:
                    96:92:1b:31:88:ac:ee:06:69:9c:38:94:76:60:8e:
                    f7:d4:16:b5:b8:7a:2e:7a:94:81:8c:5d:85:e5:88:
                    53:40:32:ea:75:7f:a8:4f:fc:05:c5:68:2b:9c:eb:
                    c5:02:b3:77:fd:aa:48:c8:55:19:c7:68:59:02:9f:
                    30:d4:c8:ec:b8:85:02:77:2c:86:b6:88:42:ae:e2:
                    f1:b7:0c:17:e4:87:5c:08:3b:31:9d:33:5f:26:0a:
                    fe:02:cc:69:4b:30:2c:ce:3b:59:08:ee:c5:3b:43:
                    c2:69:89:9b:d1:fe:80:58:48:cf:75:37:3e:60:12:
                    43:3e:39:2b:e7:00:6d:a8:b5:95:7e:35:69:a8:12:
                    de:0f:ab:df:fb:d2:eb:61:4a:98:15:58:64:f2:dd:
                    95:fd:4b:f3:48:eb:c0:bc:01:51:86:5b:72:16:a0:
                    3e:c1:a3:fe:f3:49:06:fa:47:d2:2b:6b:c5:78:f1:
                    cd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7A:85:F4:07:74:4F:B1:F9:CA:29:72:F5:36:CF:AB:C3:07:68:91
            X509v3 Authority Key Identifier:
                keyid:1B:0F:9F:6A:DE:61:46:F8:6A:FF:A5:5E:79:F8:5D:04:B0:C1:3E:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FC2692E9603D23AF02853DC75D35F465BF61721FEEA8F1D965544177D2F9846/0/1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FC2692E9603D23AF02853DC75D35F465BF61721FEEA8F1D965544177D2F9846/0/323830333a656238303a3a2f33322d3333203d3e203631343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:eb80::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:80:a2:b8:56:27:c4:05:54:86:3b:76:3e:63:db:3e:28:aa:
         c3:ea:29:98:a3:c6:c4:27:84:a8:ad:99:74:54:8f:6b:df:93:
         84:72:2f:a6:18:83:87:ea:c9:e5:0c:df:ee:e1:14:fc:4b:5c:
         ff:24:02:6f:2b:cd:99:53:19:e7:d0:7d:37:8e:e6:82:13:6a:
         98:ce:b8:c2:cb:27:08:3b:a9:44:d6:c5:4f:4c:2a:f9:78:cb:
         54:5b:e8:26:46:3f:5e:21:91:99:30:a2:03:5d:1b:fa:3a:ce:
         d2:4c:41:9c:1e:a3:f5:bb:d6:45:8f:ad:50:c4:85:19:d9:3c:
         b1:17:d3:2c:26:fa:cc:fb:15:02:d2:1a:60:f4:fe:ba:9c:79:
         7e:0f:b6:7e:9b:2a:23:ee:a9:6e:1f:d9:7c:89:9f:8f:c6:4f:
         2c:52:fb:c0:51:47:ef:97:6b:4d:5a:b9:6e:74:d2:53:4e:3c:
         ca:81:3b:ea:0c:ff:ea:b5:c8:bd:2a:ae:8a:5c:24:98:d1:b3:
         e8:ba:44:68:1a:02:7c:aa:94:c4:12:80:b4:2a:e9:40:0b:45:
         91:2b:e1:1d:55:54:32:df:e4:38:81:3d:b9:1d:5c:8f:c7:a0:
         26:ac:94:1b:ff:2c:41:6b:6d:95:b3:bc:83:71:80:24:86:3f:
         45:47:34:4d
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUIA4GgTYdtbLBfIgd737HaiJL2KYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUIwRjlGNkFERTYxNDZGODZBRkZBNTVFNzlGODVEMDRC
MEMxM0VFRjAeFw0yNjAxMDYxOTM4MDZaFw0yNzAxMDUxOTQzMDZaMDMxMTAvBgNV
BAMTKDY5N0E4NUY0MDc3NDRGQjFGOUNBMjk3MkY1MzZDRkFCQzMwNzY4OTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMVD5QwGcPZ3+IwjT8hkFr0Nlm
dSJ0R+OzqoZkmDlJMO/3J+mYR4PrCqcKTaTonU1lzpR/1++GSrFAtKeQNnGAA7L7
kVw8ATuv0ZaSGzGIrO4GaZw4lHZgjvfUFrW4ei56lIGMXYXliFNAMup1f6hP/AXF
aCuc68UCs3f9qkjIVRnHaFkCnzDUyOy4hQJ3LIa2iEKu4vG3DBfkh1wIOzGdM18m
Cv4CzGlLMCzOO1kI7sU7Q8JpiZvR/oBYSM91Nz5gEkM+OSvnAG2otZV+NWmoEt4P
q9/70uthSpgVWGTy3ZX9S/NI68C8AVGGW3IWoD7Bo/7zSQb6R9Ira8V48c1NAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUaXqF9Ad0T7H5yily9TbPq8MHaJEwHwYDVR0j
BBgwFoAUGw+fat5hRvhq/6VeefhdBLDBPu8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84RkMyNjkyRTk2MDNEMjNBRjAyODUzREM3NUQzNUY0NjVC
RjYxNzIxRkVFQThGMUQ5NjU1NDQxNzdEMkY5ODQ2LzAvMUIwRjlGNkFERTYxNDZG
ODZBRkZBNTVFNzlGODVEMDRCMEMxM0VFRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQjBGOUY2QURFNjE0NkY4NkFG
RkE1NUU3OUY4NUQwNEIwQzEzRUVGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEZDMjY5MkU5NjAzRDIzQUYwMjg1M0RDNzVEMzVGNDY1QkY2MTcyMUZF
RUE4RjFEOTY1NTQ0MTc3RDJGOTg0Ni8wLzMyMzgzMDMzM2E2NTYyMzgzMDNhM2Ey
ZjMzMzIyZDMzMzMyMDNkM2UyMDM2MzEzNDM5MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA+uAMA0G
CSqGSIb3DQEBCwUAA4IBAQCXgKK4VifEBVSGO3Y+Y9s+KKrD6imYo8bEJ4SorZl0
VI9r35OEci+mGIOH6snlDN/u4RT8S1z/JAJvK82ZUxnn0H03juaCE2qYzrjCyycI
O6lE1sVPTCr5eMtUW+gmRj9eIZGZMKIDXRv6Os7STEGcHqP1u9ZFj61QxIUZ2Tyx
F9MsJvrM+xUC0hpg9P66nHl+D7Z+myoj7qluH9l8iZ+Pxk8sUvvAUUfvl2tNWrlu
dNJTTjzKgTvqDP/qtci9Kq6KXCSY0bPoukRoGgJ8qpTEEoC0KulAC0WRK+EdVVQy
3+Q4gT25HVyPx6AmrJQb/yxBa22Vs7yDcYAkhj9FRzRN
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:58:32 2026 by rpki-client