This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/323830333a623832303a3a2f33322d3332203d3e20323635383135.roa
File:                     323830333a623832303a3a2f33322d3332203d3e20323635383135.roa (raw, json)
Hash identifier:          auuInZlGCclunacYmuEMS+fm6uzopuLO/wbZJCvGei4=
Subject key identifier:   21:6D:E0:9D:9B:A9:50:76:FD:AF:0D:CF:65:5E:C7:F1:92:78:BA:41
Certificate issuer:       /CN=03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253
Certificate serial:       599AFA93299FE1F116F0ADB1EF1600105D1CDF69
Authority key identifier: 03:86:2A:9B:FC:B9:7E:E6:B6:2C:E1:DB:07:7E:3B:6E:AD:5F:E2:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/323830333a623832303a3a2f33322d3332203d3e20323635383135.roa
Signing time:             Tue 06 Jan 2026 19:42:54 +0000
ROA not before:           Tue 06 Jan 2026 19:37:54 +0000
ROA not after:            Tue 05 Jan 2027 19:42:54 +0000
asID:                     265815
IP address blocks:        2803:b820::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 06:08:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:9a:fa:93:29:9f:e1:f1:16:f0:ad:b1:ef:16:00:10:5d:1c:df:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253
        Validity
            Not Before: Jan  6 19:37:54 2026 GMT
            Not After : Jan  5 19:42:54 2027 GMT
        Subject: CN=216DE09D9BA95076FDAF0DCF655EC7F19278BA41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:72:f3:03:c2:72:9b:d3:e1:73:c4:03:dd:0d:
                    3f:17:24:c1:dc:9e:2f:60:f4:d4:55:af:af:9c:88:
                    b1:65:99:70:d3:cf:d5:7c:d0:b8:02:23:8f:71:4f:
                    38:02:15:c1:1c:6c:c0:09:bc:71:eb:90:00:95:c7:
                    84:f3:10:f4:67:6e:ad:d6:86:87:cc:96:60:d3:b2:
                    b7:71:55:b0:7c:38:6a:78:3f:74:68:03:f0:57:b6:
                    f7:aa:6c:c5:a4:90:87:83:cd:4a:a7:c6:7d:c9:01:
                    17:26:83:9d:e4:88:7f:cc:8d:a7:ce:0b:5e:0f:35:
                    a7:8d:07:50:92:84:70:18:8b:df:cb:89:4b:0b:04:
                    aa:80:de:84:76:21:52:49:60:69:75:56:29:0e:cf:
                    e4:76:c8:53:b7:1e:88:5a:3b:33:ca:55:32:c1:79:
                    a0:f7:42:4d:4e:44:a7:aa:d9:33:c1:ee:0b:fb:59:
                    31:87:0b:2a:cb:1f:fd:5b:55:82:62:0e:dd:20:f9:
                    1e:59:30:71:75:de:64:4f:6f:98:8d:c1:f9:40:ac:
                    ce:0d:c1:0e:7f:38:12:a1:39:93:d1:03:41:ad:72:
                    22:82:54:5c:01:fb:3f:c2:21:ad:b6:42:6b:86:43:
                    85:40:e0:69:d0:93:8a:e7:6b:50:77:0f:08:68:2e:
                    4d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:6D:E0:9D:9B:A9:50:76:FD:AF:0D:CF:65:5E:C7:F1:92:78:BA:41
            X509v3 Authority Key Identifier:
                keyid:03:86:2A:9B:FC:B9:7E:E6:B6:2C:E1:DB:07:7E:3B:6E:AD:5F:E2:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/323830333a623832303a3a2f33322d3332203d3e20323635383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b820::/32

    Signature Algorithm: sha256WithRSAEncryption
         af:4c:75:13:2d:d1:cf:2e:fc:92:b1:2f:1f:94:cc:b0:ab:66:
         1c:58:42:93:d2:52:dd:aa:b1:ba:f7:dc:5e:e5:d6:cb:ff:8e:
         01:f0:f1:6a:70:d0:8b:b6:46:01:f3:4f:a6:0e:7c:39:4b:ec:
         5b:62:ba:f0:91:e7:7d:ee:ce:c7:66:ae:f0:8d:40:55:12:7c:
         b6:eb:cc:e4:98:77:58:46:22:23:55:94:5a:86:72:c8:cf:e3:
         d5:2c:19:23:2b:4e:2f:82:54:7e:9f:d3:71:78:df:8a:1b:8f:
         df:d9:d2:50:8c:1f:3f:d0:df:e1:08:92:ac:cd:10:67:3c:5d:
         1f:d8:c1:3a:4b:4b:65:9b:a6:c5:55:4e:d5:74:94:02:5d:07:
         8e:c5:14:79:35:15:25:3a:48:c8:5b:a7:9f:aa:62:58:00:a6:
         dc:25:88:b5:52:74:2c:aa:3a:86:f2:29:1b:a1:18:66:e6:12:
         e1:d2:1c:91:a8:fa:d8:5a:79:a8:c6:4a:76:80:83:9f:71:e8:
         7d:8f:b0:3b:f2:26:da:3d:1d:1f:93:26:a4:44:17:19:a6:a5:
         54:37:72:cf:bc:20:e8:d7:f2:3e:f4:6e:8f:6b:6b:3a:de:15:
         f7:42:e2:dd:f1:01:5c:f0:d4:fb:5f:e3:32:38:57:93:4a:e3:
         36:99:50:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:29:56 2026 by rpki-client