This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/323830333a643138303a3a2f33322d3438203d3e20323633323435.roa
File:                     323830333a643138303a3a2f33322d3438203d3e20323633323435.roa (raw, json)
Hash identifier:          fjL8D4Hvwwzf7TFqIBU5ObTtpHnIjCAP0kUkqvmEq9M=
Subject key identifier:   0C:C7:DD:3E:C6:0E:AE:D5:58:6F:71:25:3A:AB:47:6A:55:0C:29:1A
Certificate issuer:       /CN=B2AB77730D91278D656A9B35B1E5343F359802A4
Certificate serial:       665A141BCBC8C87E7C6353E0B68A93B46EEB40B8
Authority key identifier: B2:AB:77:73:0D:91:27:8D:65:6A:9B:35:B1:E5:34:3F:35:98:02:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2AB77730D91278D656A9B35B1E5343F359802A4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/323830333a643138303a3a2f33322d3438203d3e20323633323435.roa
Signing time:             Tue 06 Jan 2026 19:43:31 +0000
ROA not before:           Tue 06 Jan 2026 19:38:31 +0000
ROA not after:            Tue 05 Jan 2027 19:43:31 +0000
asID:                     263245
IP address blocks:        2803:d180::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/B2AB77730D91278D656A9B35B1E5343F359802A4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/B2AB77730D91278D656A9B35B1E5343F359802A4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2AB77730D91278D656A9B35B1E5343F359802A4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 05:50:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:5a:14:1b:cb:c8:c8:7e:7c:63:53:e0:b6:8a:93:b4:6e:eb:40:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2AB77730D91278D656A9B35B1E5343F359802A4
        Validity
            Not Before: Jan  6 19:38:31 2026 GMT
            Not After : Jan  5 19:43:31 2027 GMT
        Subject: CN=0CC7DD3EC60EAED5586F71253AAB476A550C291A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c0:17:ca:90:c8:e7:ce:c2:ad:f4:ac:92:96:
                    6b:74:ec:0b:6a:10:9a:d5:23:13:42:b2:53:7d:e1:
                    22:db:29:16:9b:ac:5b:cc:67:7d:08:12:a6:48:9c:
                    5d:d8:b9:f2:ed:a9:52:50:0f:d6:26:9e:4e:82:a2:
                    b4:4b:a2:96:f4:d6:72:e1:16:f6:35:85:26:05:d6:
                    77:08:4b:19:27:21:71:4f:d9:34:33:6c:ee:f6:0b:
                    2f:ee:c0:40:18:59:69:bc:f3:64:d6:fc:ed:30:60:
                    9a:5a:11:41:53:e8:5e:98:d9:e9:32:2f:f6:8b:6e:
                    00:39:24:2f:1d:1d:c6:58:1d:cf:0a:61:51:72:44:
                    8f:08:96:86:fa:3d:c2:86:7a:b5:07:eb:68:cd:ab:
                    87:6b:9d:fb:1e:6a:fb:41:d7:e1:2e:a1:42:e0:b0:
                    df:3d:f4:d9:bd:10:83:3a:e9:e7:ab:83:82:70:8e:
                    55:a3:f1:b3:6b:20:a5:aa:57:8b:36:37:2f:7a:7f:
                    dd:35:2a:12:3a:45:d3:62:98:48:1f:31:4c:c4:08:
                    57:21:98:de:f8:03:91:dd:5d:aa:ed:07:d8:9a:64:
                    77:13:89:a3:71:8c:c8:91:13:1b:66:23:ca:29:a3:
                    ad:c7:ec:47:cd:c9:87:1e:e2:6a:c3:dc:fd:a3:5c:
                    b8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C7:DD:3E:C6:0E:AE:D5:58:6F:71:25:3A:AB:47:6A:55:0C:29:1A
            X509v3 Authority Key Identifier:
                keyid:B2:AB:77:73:0D:91:27:8D:65:6A:9B:35:B1:E5:34:3F:35:98:02:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/B2AB77730D91278D656A9B35B1E5343F359802A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2AB77730D91278D656A9B35B1E5343F359802A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/323830333a643138303a3a2f33322d3438203d3e20323633323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d180::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:db:fa:f7:0c:52:ea:a9:2a:9b:ec:76:f8:77:33:7f:72:37:
         f1:8f:d8:f2:22:b5:e4:28:c6:73:88:24:e4:02:fe:f6:fb:e4:
         a7:27:b9:35:ca:4b:c4:a2:2f:fa:fb:8e:50:c7:d9:13:3f:b4:
         82:af:e1:5f:9e:f0:bb:e6:d4:fc:4e:2f:90:d5:32:5f:40:ad:
         7c:90:62:ac:4b:88:23:99:cc:c2:d7:ae:7b:d4:00:d8:04:28:
         92:c0:3e:31:c7:a0:6f:8d:ce:05:15:60:4c:60:d2:c7:ee:9d:
         98:66:ab:cc:db:d7:14:bb:94:84:96:f6:ce:54:58:06:9c:cc:
         25:83:ec:fa:dc:72:4c:fc:bc:4e:7f:5b:1c:cf:c8:aa:31:1a:
         da:07:dd:4f:d0:76:7f:db:47:43:7e:e6:4c:a1:43:73:25:2e:
         48:d6:85:d3:f1:3a:c1:6b:0e:c0:73:d7:9a:ff:a5:d4:08:6b:
         e0:ca:da:68:01:82:8b:7e:0e:6e:16:8f:0d:bc:86:33:51:ba:
         77:39:e0:e2:0a:3b:bf:c4:59:af:e2:2e:5b:c5:9d:56:b1:f6:
         b0:e0:24:0b:89:79:eb:b4:a7:7d:35:57:fe:17:c1:e7:0c:46:
         96:f2:87:77:d1:0c:0f:d1:e2:0a:68:a0:f9:5f:20:0a:96:69:
         cc:26:ba:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:19:23 2026 by rpki-client