This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9DA8C6A0A5D36D7F1AFFB191D4907002FFAA0AABF3C1E484B47ED02D28D7D10D/0/323830333a343834303a3a2f33322d3332203d3e20323633373537.roa
File:                     323830333a343834303a3a2f33322d3332203d3e20323633373537.roa (raw, json)
Hash identifier:          rFQZhGmZB9kD4ujwOxl5UkiSZfBBPkKvs46OUiRrYf0=
Subject key identifier:   52:F7:E7:8D:97:E7:94:5C:8E:A2:D2:F5:5F:93:81:2C:11:E2:0A:B4
Certificate issuer:       /CN=78E57A653F4F50DBE32E97A0E2737B358F4219C2
Certificate serial:       315303ECAB5B1B97F3848BDAAB72EA651E1A1A3C
Authority key identifier: 78:E5:7A:65:3F:4F:50:DB:E3:2E:97:A0:E2:73:7B:35:8F:42:19:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78E57A653F4F50DBE32E97A0E2737B358F4219C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9DA8C6A0A5D36D7F1AFFB191D4907002FFAA0AABF3C1E484B47ED02D28D7D10D/0/323830333a343834303a3a2f33322d3332203d3e20323633373537.roa
Signing time:             Tue 06 Jan 2026 19:23:45 +0000
ROA not before:           Tue 06 Jan 2026 19:18:45 +0000
ROA not after:            Tue 05 Jan 2027 19:23:45 +0000
asID:                     263757
IP address blocks:        2803:4840::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9DA8C6A0A5D36D7F1AFFB191D4907002FFAA0AABF3C1E484B47ED02D28D7D10D/0/78E57A653F4F50DBE32E97A0E2737B358F4219C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9DA8C6A0A5D36D7F1AFFB191D4907002FFAA0AABF3C1E484B47ED02D28D7D10D/0/78E57A653F4F50DBE32E97A0E2737B358F4219C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78E57A653F4F50DBE32E97A0E2737B358F4219C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 08:34:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:53:03:ec:ab:5b:1b:97:f3:84:8b:da:ab:72:ea:65:1e:1a:1a:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78E57A653F4F50DBE32E97A0E2737B358F4219C2
        Validity
            Not Before: Jan  6 19:18:45 2026 GMT
            Not After : Jan  5 19:23:45 2027 GMT
        Subject: CN=52F7E78D97E7945C8EA2D2F55F93812C11E20AB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:80:70:ef:2a:d7:82:6f:4c:19:10:0f:35:62:
                    67:76:9d:ce:73:2d:84:d6:4f:3d:2c:3a:ac:ca:80:
                    a3:44:a2:6d:b9:75:1a:99:13:3e:fd:ae:12:91:ec:
                    55:92:d9:71:f6:2a:53:5d:27:90:c8:1c:df:3b:58:
                    c9:62:e7:7d:6f:1b:1c:66:6b:18:68:cf:5c:27:6e:
                    f6:05:97:4d:10:af:13:f9:40:d6:47:f5:4e:92:bf:
                    f6:de:60:31:e3:15:7e:56:17:29:31:7a:4b:0f:f9:
                    18:91:b4:7c:42:bb:eb:72:07:a2:94:d2:ea:db:0b:
                    06:8b:f0:9d:5c:b1:4a:84:2a:d7:15:7b:81:6e:99:
                    23:70:1c:66:1f:46:bd:d2:9d:29:c6:a2:a8:31:e7:
                    21:58:92:b3:64:3a:8b:c5:01:ad:2c:79:22:39:66:
                    ed:0d:a9:cd:b5:99:ea:b3:f4:92:f2:c8:4e:75:a8:
                    6e:66:e2:12:00:10:e7:ea:fa:96:f5:d5:af:7a:5c:
                    72:5c:ef:ef:df:27:6d:f8:11:ed:60:61:29:f3:81:
                    8b:04:38:74:85:47:c8:e7:48:df:cb:8b:de:fd:b0:
                    75:33:81:9a:0a:87:c3:f5:a3:f0:eb:79:d0:fa:a6:
                    93:7f:e5:1f:4c:8e:52:ba:08:83:79:a8:c2:64:75:
                    20:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F7:E7:8D:97:E7:94:5C:8E:A2:D2:F5:5F:93:81:2C:11:E2:0A:B4
            X509v3 Authority Key Identifier:
                keyid:78:E5:7A:65:3F:4F:50:DB:E3:2E:97:A0:E2:73:7B:35:8F:42:19:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9DA8C6A0A5D36D7F1AFFB191D4907002FFAA0AABF3C1E484B47ED02D28D7D10D/0/78E57A653F4F50DBE32E97A0E2737B358F4219C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78E57A653F4F50DBE32E97A0E2737B358F4219C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9DA8C6A0A5D36D7F1AFFB191D4907002FFAA0AABF3C1E484B47ED02D28D7D10D/0/323830333a343834303a3a2f33322d3332203d3e20323633373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4840::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:a1:4e:af:dd:b0:45:06:28:8a:8b:ca:b3:96:22:48:46:a7:
         fa:7a:58:51:2b:99:47:4e:5a:e8:8f:c8:e6:d8:31:7c:86:e1:
         63:f2:04:4d:16:5b:f6:1c:8e:f3:c3:a4:cd:d3:1b:76:1e:38:
         c7:46:e4:e3:bb:34:ed:40:1f:f2:b5:d3:09:9c:71:57:af:dc:
         27:68:c9:20:3b:55:7c:3a:ab:b8:65:94:59:aa:b2:69:ca:24:
         c1:8d:e6:f9:96:11:fe:16:30:e4:49:67:22:31:6a:d9:98:7a:
         5a:ef:71:df:98:db:49:42:f1:4c:c2:db:74:df:7b:b2:75:a0:
         06:56:15:7f:f5:47:93:28:c2:ef:4a:58:dd:9c:70:37:cc:84:
         f3:4c:b6:61:c0:1d:f9:67:dd:8d:45:29:25:d2:19:28:ed:19:
         8c:00:a7:0e:1e:71:e4:d6:2d:f7:d9:b7:0a:54:70:bf:8f:77:
         d8:10:a8:8b:d6:16:cd:c3:98:ca:35:83:43:51:15:e9:08:3f:
         a9:fe:b7:d5:8f:2d:64:a0:39:e8:ec:8c:03:50:2e:8d:ab:90:
         46:a0:1d:e8:a7:df:b4:e5:7a:2b:5c:94:8f:a5:d0:9b:52:e7:
         d7:ae:0b:cc:7c:66:f5:c1:bf:2d:29:b0:0d:46:f8:cc:ec:00:
         35:b2:ae:57
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUMVMD7KtbG5fzhIvaq3LqZR4aGjwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzhFNTdBNjUzRjRGNTBEQkUzMkU5N0EwRTI3MzdCMzU4
RjQyMTlDMjAeFw0yNjAxMDYxOTE4NDVaFw0yNzAxMDUxOTIzNDVaMDMxMTAvBgNV
BAMTKDUyRjdFNzhEOTdFNzk0NUM4RUEyRDJGNTVGOTM4MTJDMTFFMjBBQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjgHDvKteCb0wZEA81Ymd2nc5z
LYTWTz0sOqzKgKNEom25dRqZEz79rhKR7FWS2XH2KlNdJ5DIHN87WMli531vGxxm
axhoz1wnbvYFl00QrxP5QNZH9U6Sv/beYDHjFX5WFykxeksP+RiRtHxCu+tyB6KU
0urbCwaL8J1csUqEKtcVe4FumSNwHGYfRr3SnSnGoqgx5yFYkrNkOovFAa0seSI5
Zu0Nqc21meqz9JLyyE51qG5m4hIAEOfq+pb11a96XHJc7+/fJ234Ee1gYSnzgYsE
OHSFR8jnSN/Li979sHUzgZoKh8P1o/DredD6ppN/5R9MjlK6CIN5qMJkdSC7AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUUvfnjZfnlFyOotL1X5OBLBHiCrQwHwYDVR0j
BBgwFoAUeOV6ZT9PUNvjLpeg4nN7NY9CGcIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85REE4QzZBMEE1RDM2RDdGMUFGRkIxOTFENDkwNzAwMkZG
QUEwQUFCRjNDMUU0ODRCNDdFRDAyRDI4RDdEMTBELzAvNzhFNTdBNjUzRjRGNTBE
QkUzMkU5N0EwRTI3MzdCMzU4RjQyMTlDMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83OEU1N0E2NTNGNEY1MERCRTMy
RTk3QTBFMjczN0IzNThGNDIxOUMyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOURBOEM2QTBBNUQzNkQ3RjFBRkZCMTkxRDQ5MDcwMDJGRkFBMEFBQkYz
QzFFNDg0QjQ3RUQwMkQyOEQ3RDEwRC8wLzMyMzgzMDMzM2EzNDM4MzQzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMzM3MzUzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDSEAw
DQYJKoZIhvcNAQELBQADggEBABKhTq/dsEUGKIqLyrOWIkhGp/p6WFErmUdOWuiP
yObYMXyG4WPyBE0WW/YcjvPDpM3TG3YeOMdG5OO7NO1AH/K10wmccVev3CdoySA7
VXw6q7hllFmqsmnKJMGN5vmWEf4WMORJZyIxatmYelrvcd+Y20lC8UzC23Tfe7J1
oAZWFX/1R5Mowu9KWN2ccDfMhPNMtmHAHfln3Y1FKSXSGSjtGYwApw4eceTWLffZ
twpUcL+Pd9gQqIvWFs3DmMo1g0NRFekIP6n+t9WPLWSgOejsjANQLo2rkEagHein
37TleitclI+l0JtS59euC8x8ZvXBvy0psA1G+MzsADWyrlc=
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:28 2026 by rpki-client