This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9551B7564608940B81FE21B439BF3E8530D70BA42ABD01E8A695A28DC7C18EC6/0/323830333a3665303a3a2f33322d3332203d3e20323639393530.roa
File:                     323830333a3665303a3a2f33322d3332203d3e20323639393530.roa (raw, json)
Hash identifier:          ka99wVtTZnrrCuifkvc/ZbawcKNbct9a3Nq+2e98Sg8=
Subject key identifier:   13:78:B9:CE:15:95:BC:C7:53:0C:09:9C:78:EF:DB:97:8C:FE:9A:26
Certificate issuer:       /CN=36C171B261E1BB795D105356800CC5335D46091A
Certificate serial:       0660DE8F87DC12319D123255A00CD33C3B44C6AB
Authority key identifier: 36:C1:71:B2:61:E1:BB:79:5D:10:53:56:80:0C:C5:33:5D:46:09:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36C171B261E1BB795D105356800CC5335D46091A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9551B7564608940B81FE21B439BF3E8530D70BA42ABD01E8A695A28DC7C18EC6/0/323830333a3665303a3a2f33322d3332203d3e20323639393530.roa
Signing time:             Tue 06 Jan 2026 20:49:58 +0000
ROA not before:           Tue 06 Jan 2026 20:44:58 +0000
ROA not after:            Tue 05 Jan 2027 20:49:58 +0000
asID:                     269950
IP address blocks:        2803:6e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9551B7564608940B81FE21B439BF3E8530D70BA42ABD01E8A695A28DC7C18EC6/0/36C171B261E1BB795D105356800CC5335D46091A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9551B7564608940B81FE21B439BF3E8530D70BA42ABD01E8A695A28DC7C18EC6/0/36C171B261E1BB795D105356800CC5335D46091A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36C171B261E1BB795D105356800CC5335D46091A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 06:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:60:de:8f:87:dc:12:31:9d:12:32:55:a0:0c:d3:3c:3b:44:c6:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36C171B261E1BB795D105356800CC5335D46091A
        Validity
            Not Before: Jan  6 20:44:58 2026 GMT
            Not After : Jan  5 20:49:58 2027 GMT
        Subject: CN=1378B9CE1595BCC7530C099C78EFDB978CFE9A26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f1:83:2c:2e:c3:ea:9f:fe:c1:51:3b:76:3c:
                    25:06:27:19:cf:51:d2:50:9a:68:bd:a9:d0:01:fc:
                    ac:d8:27:fd:d2:7b:24:79:e5:b3:1d:16:79:13:74:
                    f6:af:60:fb:87:9e:80:26:de:99:a9:02:d2:99:08:
                    d0:e3:76:f0:f7:36:71:aa:20:f4:7b:e6:28:75:6a:
                    88:47:0d:bd:64:2f:2a:00:2e:33:9e:70:34:8e:e4:
                    98:99:86:d4:ca:cf:77:3e:74:77:33:b2:95:20:b2:
                    1e:a0:81:01:90:29:6c:73:00:66:f0:22:9b:6b:49:
                    98:6f:e8:64:cc:de:03:99:05:16:d1:20:2b:b9:c7:
                    b5:1d:40:52:a6:73:55:d8:3f:a1:75:0f:61:0e:38:
                    be:0b:63:67:dd:71:be:0d:8a:6e:10:30:87:ae:24:
                    13:02:48:a6:80:3a:ef:07:d4:5d:f2:58:4c:e9:a7:
                    18:93:0a:9f:c3:8a:c4:03:79:f5:d2:ac:ca:26:1e:
                    bb:0a:7c:31:fe:7a:9f:df:31:ee:89:5c:e1:d6:d8:
                    61:f1:7e:00:2e:2c:93:c6:28:aa:33:14:60:10:a9:
                    7f:9e:78:a0:66:67:56:ae:9a:b3:d6:2b:09:30:b0:
                    db:71:7e:a6:f3:5f:b1:84:87:92:e5:02:67:b9:f1:
                    0f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:78:B9:CE:15:95:BC:C7:53:0C:09:9C:78:EF:DB:97:8C:FE:9A:26
            X509v3 Authority Key Identifier:
                keyid:36:C1:71:B2:61:E1:BB:79:5D:10:53:56:80:0C:C5:33:5D:46:09:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9551B7564608940B81FE21B439BF3E8530D70BA42ABD01E8A695A28DC7C18EC6/0/36C171B261E1BB795D105356800CC5335D46091A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36C171B261E1BB795D105356800CC5335D46091A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9551B7564608940B81FE21B439BF3E8530D70BA42ABD01E8A695A28DC7C18EC6/0/323830333a3665303a3a2f33322d3332203d3e20323639393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:3c:bc:9a:e1:26:1a:0c:bc:a4:4d:b8:7a:4f:12:ca:e9:38:
         3c:96:c1:3c:08:8a:a5:a2:70:8c:4c:cb:38:c7:f2:7d:8f:f3:
         21:9d:67:1a:24:d6:92:28:ae:7a:33:02:60:03:c7:a0:33:34:
         11:4a:1f:05:28:32:30:5d:6d:6e:df:64:fa:70:95:ff:8c:56:
         9f:fa:98:12:a1:52:d4:d1:2c:0b:7c:c7:ea:42:af:34:45:c8:
         84:56:4b:58:83:41:1b:e3:55:43:ed:fb:3d:2c:8d:e1:19:81:
         0b:b5:ea:a1:f7:de:84:8d:a8:9b:e2:0c:4b:3e:7e:40:aa:08:
         e0:be:bc:41:f5:47:87:f9:0b:f2:9e:19:4f:0c:85:e7:4b:78:
         ba:0f:b9:17:04:b7:8b:04:5a:11:ab:82:a2:02:16:85:b0:cc:
         75:fd:75:6a:b5:d5:88:ad:63:a4:3b:89:dc:f7:b7:8a:53:a6:
         aa:33:e0:73:bb:7f:87:b7:6f:08:50:1d:6a:bb:20:d9:9d:7e:
         76:8f:d8:80:d1:4d:47:80:9c:1f:df:8c:53:1b:74:9f:35:a3:
         33:87:9f:09:a3:0d:87:d5:b1:33:71:f2:fe:60:fc:f8:3e:bb:
         03:59:1c:93:91:c6:16:26:41:16:a9:85:4b:d3:b0:eb:1f:1a:
         c4:e7:2f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:58:22 2026 by rpki-client