This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9396B23AF8705DC1F1A135270234432ABA016775C17819F67D69BF39C1BE97A8/0/323830333a376365303a3a2f33322d3332203d3e203233313430.roa
File:                     323830333a376365303a3a2f33322d3332203d3e203233313430.roa (raw, json)
Hash identifier:          CQ7NcYklVs0gkVGOZwVvW6jNzsMl8HmasnR6tJ9iQJo=
Subject key identifier:   9B:32:B9:C4:AB:FA:75:68:FD:B2:04:5D:11:F2:63:5E:30:C5:D1:38
Certificate issuer:       /CN=396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C
Certificate serial:       3346D686991BAE65A7DD694499B73EFF8129E271
Authority key identifier: 39:6E:80:8C:91:3B:9F:4B:FC:95:0B:4F:1D:DE:B1:15:9E:5C:9B:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9396B23AF8705DC1F1A135270234432ABA016775C17819F67D69BF39C1BE97A8/0/323830333a376365303a3a2f33322d3332203d3e203233313430.roa
Signing time:             Tue 06 Jan 2026 19:36:26 +0000
ROA not before:           Tue 06 Jan 2026 19:31:26 +0000
ROA not after:            Tue 05 Jan 2027 19:36:26 +0000
asID:                     23140
IP address blocks:        2803:7ce0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9396B23AF8705DC1F1A135270234432ABA016775C17819F67D69BF39C1BE97A8/0/396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9396B23AF8705DC1F1A135270234432ABA016775C17819F67D69BF39C1BE97A8/0/396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 14:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:46:d6:86:99:1b:ae:65:a7:dd:69:44:99:b7:3e:ff:81:29:e2:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C
        Validity
            Not Before: Jan  6 19:31:26 2026 GMT
            Not After : Jan  5 19:36:26 2027 GMT
        Subject: CN=9B32B9C4ABFA7568FDB2045D11F2635E30C5D138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c7:d8:13:96:8c:40:e8:1e:6b:90:45:b2:4e:
                    87:ba:4b:8b:e7:70:c9:e5:d7:9c:d7:36:b8:5d:52:
                    36:dc:59:a6:33:97:98:74:1c:e0:fb:2b:bd:f2:25:
                    66:16:c6:12:5a:83:eb:1b:da:33:4c:ba:0f:b0:d2:
                    e9:40:99:a4:0b:1b:f1:6d:d3:42:ae:c6:e1:a9:56:
                    28:ad:82:ee:18:1e:33:98:d5:f5:88:43:69:0d:8f:
                    05:93:e3:13:d7:50:e4:d7:9f:16:d6:5e:2c:ba:50:
                    55:68:3c:a8:db:9e:df:21:a0:7e:77:da:7a:21:cf:
                    67:f5:00:76:d8:1a:e7:17:29:13:45:c2:07:a1:cd:
                    6f:46:e8:6a:48:e5:34:f4:11:44:5b:12:11:14:4e:
                    5b:5c:c4:92:dd:f4:de:de:ec:95:91:6b:cc:1c:69:
                    fa:b8:88:66:ce:de:9e:f1:89:96:05:d2:60:4a:b7:
                    95:ea:7c:8e:6d:d2:c1:c4:56:41:0c:90:80:2b:a1:
                    e0:c3:46:1b:9f:6c:c3:bb:b9:4d:96:36:34:a2:32:
                    8f:e1:87:1f:ee:c9:25:a7:c8:82:f4:6a:66:03:3c:
                    12:2a:06:da:1f:63:1e:8c:2e:d5:f1:ef:f8:5b:df:
                    25:bf:01:e9:84:57:3f:93:d3:51:c4:fb:89:32:01:
                    9d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:32:B9:C4:AB:FA:75:68:FD:B2:04:5D:11:F2:63:5E:30:C5:D1:38
            X509v3 Authority Key Identifier:
                keyid:39:6E:80:8C:91:3B:9F:4B:FC:95:0B:4F:1D:DE:B1:15:9E:5C:9B:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9396B23AF8705DC1F1A135270234432ABA016775C17819F67D69BF39C1BE97A8/0/396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9396B23AF8705DC1F1A135270234432ABA016775C17819F67D69BF39C1BE97A8/0/323830333a376365303a3a2f33322d3332203d3e203233313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:e5:e4:60:d9:27:68:aa:f5:ab:04:15:4a:cd:16:02:fa:da:
         f0:a6:49:a2:04:7c:f5:01:fb:7b:a7:82:93:91:3a:84:61:43:
         4f:ae:15:ba:d2:6e:8a:bd:ba:48:67:95:dc:e8:60:51:5f:d5:
         e6:0c:91:17:00:0b:fe:d3:93:44:fc:9f:2f:6c:cf:2a:a2:80:
         6f:71:7e:cf:9b:99:48:af:68:00:2b:cf:07:fc:77:03:05:a1:
         ea:6d:04:f9:2b:0e:99:36:80:d0:23:c2:da:ba:c6:73:a3:db:
         23:59:16:30:dc:ce:dd:a1:cb:c4:26:ae:71:10:cc:c1:61:01:
         01:4d:00:53:78:b0:00:ba:4a:e2:97:71:42:38:23:af:e3:e4:
         cf:1f:fb:b4:0e:ec:72:21:87:22:d6:74:cb:4c:1a:e0:df:7d:
         f1:54:80:09:6d:89:7d:e1:8a:f5:ae:9f:92:47:36:e9:5e:4a:
         1a:c7:87:47:c3:73:33:9e:b9:99:f8:24:b3:12:f3:8f:85:6e:
         75:09:5b:87:4c:2d:da:41:7f:fc:14:13:b6:55:78:37:4e:73:
         c6:fc:bc:97:13:97:cc:1f:83:28:74:24:1a:11:87:ab:83:a1:
         9d:1b:4a:f3:d1:51:59:c6:bc:fd:00:5f:e8:11:85:dd:cb:6c:
         78:19:80:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:14:50 2026 by rpki-client