This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/323830333a366330303a3a2f33322d3332203d3e20323633373430.roa
File:                     323830333a366330303a3a2f33322d3332203d3e20323633373430.roa (raw, json)
Hash identifier:          uX5AljFwptzuwURVITckHAuCbKpy35fq+EchdKqCSVY=
Subject key identifier:   2A:F8:2B:92:01:A8:86:D5:BB:60:DB:02:97:A9:8B:6B:D3:F2:74:1A
Certificate issuer:       /CN=305370A1998C6AEF9B94283517F4B1E6BB5AD0BC
Certificate serial:       22A08F14E33997364411418206E22031B28CEEB2
Authority key identifier: 30:53:70:A1:99:8C:6A:EF:9B:94:28:35:17:F4:B1:E6:BB:5A:D0:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/323830333a366330303a3a2f33322d3332203d3e20323633373430.roa
Signing time:             Tue 06 Jan 2026 19:41:58 +0000
ROA not before:           Tue 06 Jan 2026 19:36:58 +0000
ROA not after:            Tue 05 Jan 2027 19:41:58 +0000
asID:                     263740
IP address blocks:        2803:6c00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 10:53:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a0:8f:14:e3:39:97:36:44:11:41:82:06:e2:20:31:b2:8c:ee:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305370A1998C6AEF9B94283517F4B1E6BB5AD0BC
        Validity
            Not Before: Jan  6 19:36:58 2026 GMT
            Not After : Jan  5 19:41:58 2027 GMT
        Subject: CN=2AF82B9201A886D5BB60DB0297A98B6BD3F2741A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ca:8e:9f:11:dd:dc:63:78:49:1a:01:c9:aa:
                    18:5c:8d:99:2e:d7:21:67:b9:d7:89:83:54:41:b6:
                    00:f5:ac:ef:78:91:d5:8c:82:34:54:c0:9c:b8:c1:
                    d9:a4:bf:2e:34:21:31:5a:b2:83:2e:c3:90:22:b5:
                    f9:95:2f:df:46:8f:58:7f:81:3e:fd:8b:2f:99:aa:
                    6d:c4:39:2a:28:d3:89:e0:6f:a8:a9:4d:3b:d5:34:
                    59:b7:de:5a:a0:c8:ec:18:cc:a2:04:78:2c:b4:da:
                    c1:d0:e5:63:61:29:7b:b0:0b:f1:f1:9b:04:f9:3a:
                    aa:8b:9f:97:35:9e:e0:0b:57:64:b5:43:81:52:43:
                    1e:ae:d1:29:4f:5b:8d:c2:26:76:08:99:8c:fc:7f:
                    d6:72:b6:a2:c5:f5:7e:4d:78:9a:90:5e:60:03:8b:
                    da:ab:f9:49:ee:65:cd:ff:0d:a2:fb:aa:b8:d6:67:
                    1f:71:8a:6e:2a:1b:5a:22:06:b9:10:75:38:2f:db:
                    a7:90:d6:a3:2d:38:67:0c:ef:ac:bb:6b:e0:28:32:
                    19:48:e8:d4:52:e7:ba:6e:cc:97:e5:3a:b7:99:a8:
                    1c:2f:5b:b2:8a:dd:14:67:84:4c:a4:b2:b6:ee:a0:
                    a5:0c:ee:31:68:94:47:ed:2e:2a:5b:5b:61:9c:6c:
                    4c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F8:2B:92:01:A8:86:D5:BB:60:DB:02:97:A9:8B:6B:D3:F2:74:1A
            X509v3 Authority Key Identifier:
                keyid:30:53:70:A1:99:8C:6A:EF:9B:94:28:35:17:F4:B1:E6:BB:5A:D0:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/323830333a366330303a3a2f33322d3332203d3e20323633373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6c00::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:7d:e6:b4:ba:e5:3c:0a:91:ee:48:cc:4a:bd:27:0b:dd:af:
         43:60:9b:a0:3d:ae:a2:06:85:1b:1d:53:ca:11:b4:e7:68:3a:
         9f:25:86:6c:8d:38:60:85:15:84:02:91:fc:e5:3f:a2:47:b7:
         42:bc:fe:63:d0:ef:57:78:20:5b:90:2a:a4:da:74:86:ef:1f:
         b4:d8:78:4f:e8:6b:f7:93:69:32:b8:a2:2f:b2:6d:5e:57:02:
         b7:81:a1:d1:20:93:ab:86:31:3c:ed:49:44:f2:86:d9:1a:33:
         cd:4c:5c:28:9c:c2:d0:69:6b:ea:36:67:2f:3c:22:b5:57:5f:
         d3:85:59:1c:3f:32:41:50:78:28:13:de:a8:8c:6b:e2:94:7f:
         91:3a:cc:1f:fd:84:5a:2d:ef:e0:aa:67:58:e1:a5:0e:52:de:
         0b:bf:e1:0b:38:fa:93:8c:56:35:0a:f7:66:cc:99:32:92:bc:
         15:9e:75:0a:2e:06:f1:e6:73:db:2f:48:b8:91:d5:07:0e:96:
         50:6c:ec:f6:9c:64:de:f4:1a:98:be:ba:6a:d9:cc:8d:15:40:
         12:07:f3:0f:c3:6c:cd:c6:6c:fe:46:7b:e2:c3:69:ca:48:67:
         d7:c0:a8:23:9f:9a:90:c2:80:a6:75:0c:32:2d:9a:a5:3f:55:
         ca:65:ba:d2
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUIqCPFOM5lzZEEUGCBuIgMbKM7rIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA1MzcwQTE5OThDNkFFRjlCOTQyODM1MTdGNEIxRTZC
QjVBRDBCQzAeFw0yNjAxMDYxOTM2NThaFw0yNzAxMDUxOTQxNThaMDMxMTAvBgNV
BAMTKDJBRjgyQjkyMDFBODg2RDVCQjYwREIwMjk3QTk4QjZCRDNGMjc0MUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7yo6fEd3cY3hJGgHJqhhcjZku
1yFnudeJg1RBtgD1rO94kdWMgjRUwJy4wdmkvy40ITFasoMuw5AitfmVL99Gj1h/
gT79iy+Zqm3EOSoo04ngb6ipTTvVNFm33lqgyOwYzKIEeCy02sHQ5WNhKXuwC/Hx
mwT5OqqLn5c1nuALV2S1Q4FSQx6u0SlPW43CJnYImYz8f9ZytqLF9X5NeJqQXmAD
i9qr+UnuZc3/DaL7qrjWZx9xim4qG1oiBrkQdTgv26eQ1qMtOGcM76y7a+AoMhlI
6NRS57puzJflOreZqBwvW7KK3RRnhEyksrbuoKUM7jFolEftLipbW2GcbEzlAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUKvgrkgGohtW7YNsCl6mLa9PydBowHwYDVR0j
BBgwFoAUMFNwoZmMau+blCg1F/Sx5rta0LwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NzAxQzQzMUE1MjlFQTIwRTk1MUNDRjA5ODcyNUJFQzdG
MDVEODE3M0E0MDVDMUE5REVCNjQwQkE5N0JFRTVBLzAvMzA1MzcwQTE5OThDNkFF
RjlCOTQyODM1MTdGNEIxRTZCQjVBRDBCQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMDUzNzBBMTk5OEM2QUVGOUI5
NDI4MzUxN0Y0QjFFNkJCNUFEMEJDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTcwMUM0MzFBNTI5RUEyMEU5NTFDQ0YwOTg3MjVCRUM3RjA1RDgxNzNB
NDA1QzFBOURFQjY0MEJBOTdCRUU1QS8wLzMyMzgzMDMzM2EzNjYzMzAzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMzM3MzQzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDbAAw
DQYJKoZIhvcNAQELBQADggEBALB95rS65TwKke5IzEq9Jwvdr0Ngm6A9rqIGhRsd
U8oRtOdoOp8lhmyNOGCFFYQCkfzlP6JHt0K8/mPQ71d4IFuQKqTadIbvH7TYeE/o
a/eTaTK4oi+ybV5XAreBodEgk6uGMTztSUTyhtkaM81MXCicwtBpa+o2Zy88IrVX
X9OFWRw/MkFQeCgT3qiMa+KUf5E6zB/9hFot7+CqZ1jhpQ5S3gu/4Qs4+pOMVjUK
92bMmTKSvBWedQouBvHmc9svSLiR1QcOllBs7PacZN70Gpi+umrZzI0VQBIH8w/D
bM3GbP5Ge+LDacpIZ9fAqCOfmpDCgKZ1DDItmqU/VcplutI=
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:20:04 2026 by rpki-client