This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B094CDDDCD1B6914057184EE2367A2035454F2E72C40369C8F3F3CED59D10E7/0/323830333a373832303a3a2f33322d3438203d3e20323637373038.roa
File:                     323830333a373832303a3a2f33322d3438203d3e20323637373038.roa (raw, json)
Hash identifier:          nr2A3/4kCtiiovuJknfNeSwICAruJPMY+yS8+kV9wME=
Subject key identifier:   AE:36:1A:9F:C1:20:BE:89:33:26:9C:7A:E4:D5:A5:BC:2E:43:D9:2D
Certificate issuer:       /CN=472A97D26294E0079CE932F327B2410A8EBD5829
Certificate serial:       1B11B9A0575CF7AE8A5639057D6835EA93BA69DD
Authority key identifier: 47:2A:97:D2:62:94:E0:07:9C:E9:32:F3:27:B2:41:0A:8E:BD:58:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/472A97D26294E0079CE932F327B2410A8EBD5829.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B094CDDDCD1B6914057184EE2367A2035454F2E72C40369C8F3F3CED59D10E7/0/323830333a373832303a3a2f33322d3438203d3e20323637373038.roa
Signing time:             Tue 06 Jan 2026 19:42:51 +0000
ROA not before:           Tue 06 Jan 2026 19:37:51 +0000
ROA not after:            Tue 05 Jan 2027 19:42:51 +0000
asID:                     267708
IP address blocks:        2803:7820::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B094CDDDCD1B6914057184EE2367A2035454F2E72C40369C8F3F3CED59D10E7/0/472A97D26294E0079CE932F327B2410A8EBD5829.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B094CDDDCD1B6914057184EE2367A2035454F2E72C40369C8F3F3CED59D10E7/0/472A97D26294E0079CE932F327B2410A8EBD5829.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/472A97D26294E0079CE932F327B2410A8EBD5829.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:11:b9:a0:57:5c:f7:ae:8a:56:39:05:7d:68:35:ea:93:ba:69:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472A97D26294E0079CE932F327B2410A8EBD5829
        Validity
            Not Before: Jan  6 19:37:51 2026 GMT
            Not After : Jan  5 19:42:51 2027 GMT
        Subject: CN=AE361A9FC120BE8933269C7AE4D5A5BC2E43D92D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ca:90:06:80:88:0a:38:0d:18:fe:ba:79:34:
                    1e:fd:87:be:14:a6:d7:a7:3b:97:20:62:6d:53:5b:
                    3f:89:9c:9e:39:33:cf:a2:8a:aa:ec:28:21:ce:f7:
                    db:f2:11:47:b2:a2:d8:78:4e:d7:f3:ca:6b:77:57:
                    d3:d2:f2:2a:fe:d1:27:cb:89:23:fb:2c:e1:56:1a:
                    78:88:13:9e:fb:43:47:50:6f:9f:ea:0b:a6:b2:5e:
                    08:40:c9:07:48:2c:44:c9:29:e0:03:ac:b3:a5:04:
                    9c:82:d6:af:ac:53:15:f0:ce:21:88:31:c2:1f:34:
                    28:64:9e:95:22:14:e8:f4:f8:eb:72:4d:6d:23:44:
                    78:c1:98:23:9e:40:21:32:2f:03:30:4f:ec:6b:4f:
                    45:d9:1a:cf:af:19:8c:1e:ed:92:78:9c:5a:75:67:
                    6a:67:ee:a5:fa:54:ca:ae:5f:cd:7e:86:86:5a:08:
                    f0:2b:01:a7:ad:99:81:cd:f0:6b:c9:b6:33:26:62:
                    8e:80:0e:a2:64:3f:96:25:20:5c:69:3e:50:fb:e3:
                    c9:bc:dc:43:e5:c0:ac:e2:28:61:5a:a5:81:71:07:
                    5a:27:c0:ca:68:2e:b2:0b:79:ce:62:c8:61:0f:fb:
                    77:ba:f3:be:74:94:bf:45:60:e1:38:fc:c3:08:ef:
                    d5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:36:1A:9F:C1:20:BE:89:33:26:9C:7A:E4:D5:A5:BC:2E:43:D9:2D
            X509v3 Authority Key Identifier:
                keyid:47:2A:97:D2:62:94:E0:07:9C:E9:32:F3:27:B2:41:0A:8E:BD:58:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B094CDDDCD1B6914057184EE2367A2035454F2E72C40369C8F3F3CED59D10E7/0/472A97D26294E0079CE932F327B2410A8EBD5829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/472A97D26294E0079CE932F327B2410A8EBD5829.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B094CDDDCD1B6914057184EE2367A2035454F2E72C40369C8F3F3CED59D10E7/0/323830333a373832303a3a2f33322d3438203d3e20323637373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7820::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:4a:55:26:56:7b:ec:8c:51:6e:be:ad:1e:83:0d:1e:82:2e:
         d5:61:2f:1a:f9:93:aa:04:78:17:a8:bc:64:4c:86:03:db:86:
         79:97:f8:ea:72:a9:61:3b:f5:14:57:87:9a:6f:d7:d9:b9:0f:
         14:a5:fc:09:f3:1c:e9:3c:4c:d9:35:2e:63:d6:76:36:d4:52:
         1f:7b:b3:99:77:cd:74:b5:28:0e:01:b6:33:52:1c:2a:83:f2:
         ea:8b:63:de:88:70:02:35:29:77:e5:bb:3d:6e:57:ba:4a:21:
         ef:ed:af:3b:bc:d6:b4:a3:14:24:fa:5a:fe:b1:6e:08:59:67:
         2b:40:4e:7e:f6:8a:bd:99:1f:75:2d:4d:ee:7a:2c:d9:3f:7e:
         55:67:8a:95:0c:9a:4b:d3:8c:4d:f7:23:f8:67:83:b1:13:34:
         83:34:78:ec:72:2b:e4:2a:6d:63:7e:f8:2c:40:90:eb:86:c6:
         2c:7a:55:50:83:e5:3a:5e:b2:7e:ca:0a:ee:1d:6e:7c:3a:ea:
         10:73:0b:71:51:17:89:88:86:89:74:cd:81:d2:99:6d:b0:9b:
         93:32:1a:44:c0:ac:c3:08:a7:59:d3:de:84:1f:61:20:e9:d8:
         d8:11:07:f0:4f:c1:6c:eb:62:0c:4d:df:d9:44:0e:24:2a:2c:
         b7:a0:93:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:10:01 2026 by rpki-client