This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A9518EA609642D3F666D638B6D0325EFAC29FD0863FD28ED6AD19489CEF42EC7/0/323830333a3430303a3a2f33322d3332203d3e203532333637.roa
File:                     323830333a3430303a3a2f33322d3332203d3e203532333637.roa (raw, json)
Hash identifier:          n6IdpXX6Ery1JijwkqC7omcvkSIJcE2Lkn5DxNQiHB8=
Subject key identifier:   E4:F7:0B:0E:98:31:4A:3F:4C:20:7A:A7:79:29:D7:F7:14:4F:8A:C8
Certificate issuer:       /CN=1FDF2DE08054C55BA3B5B59C734302F868234F58
Certificate serial:       67932BB2B5B2A45F97E2D83DA326E22334FB6A9D
Authority key identifier: 1F:DF:2D:E0:80:54:C5:5B:A3:B5:B5:9C:73:43:02:F8:68:23:4F:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FDF2DE08054C55BA3B5B59C734302F868234F58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A9518EA609642D3F666D638B6D0325EFAC29FD0863FD28ED6AD19489CEF42EC7/0/323830333a3430303a3a2f33322d3332203d3e203532333637.roa
Signing time:             Tue 06 Jan 2026 20:51:20 +0000
ROA not before:           Tue 06 Jan 2026 20:46:20 +0000
ROA not after:            Tue 05 Jan 2027 20:51:20 +0000
asID:                     52367
IP address blocks:        2803:400::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A9518EA609642D3F666D638B6D0325EFAC29FD0863FD28ED6AD19489CEF42EC7/0/1FDF2DE08054C55BA3B5B59C734302F868234F58.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A9518EA609642D3F666D638B6D0325EFAC29FD0863FD28ED6AD19489CEF42EC7/0/1FDF2DE08054C55BA3B5B59C734302F868234F58.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FDF2DE08054C55BA3B5B59C734302F868234F58.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:93:2b:b2:b5:b2:a4:5f:97:e2:d8:3d:a3:26:e2:23:34:fb:6a:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FDF2DE08054C55BA3B5B59C734302F868234F58
        Validity
            Not Before: Jan  6 20:46:20 2026 GMT
            Not After : Jan  5 20:51:20 2027 GMT
        Subject: CN=E4F70B0E98314A3F4C207AA77929D7F7144F8AC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:24:d1:1f:5d:e9:6a:0a:ff:d1:c6:34:60:2c:
                    44:96:0f:d2:08:c5:c6:c4:78:58:b5:bc:27:73:e5:
                    15:47:9d:75:fc:4f:3f:9b:92:c0:96:d3:82:74:0d:
                    62:6a:f4:1e:56:e2:37:59:2f:7a:43:71:ad:4e:fa:
                    14:cc:80:10:9e:5a:55:30:3d:56:b1:29:16:45:ee:
                    a0:1d:75:97:e8:f6:f0:1c:6b:37:57:71:db:1b:f7:
                    5c:59:a7:50:40:b4:50:4e:43:80:d6:76:46:c7:5a:
                    99:5b:dd:02:4f:bc:ee:43:d4:b0:5b:be:4c:a7:a0:
                    aa:0c:2e:8f:e4:83:9f:8c:c3:74:60:d8:74:0a:42:
                    29:15:7e:30:40:7f:a3:26:37:0b:55:da:99:28:56:
                    25:7b:97:07:22:2a:21:ed:ab:ce:7b:82:c7:03:35:
                    38:9c:26:f6:45:6c:c7:34:aa:96:af:37:8d:8e:b8:
                    0d:87:89:ad:ba:f5:b7:7a:28:05:5d:8c:13:1e:a5:
                    6e:15:b9:32:91:cb:77:8f:36:61:b9:fa:9e:1c:c1:
                    db:3b:5c:50:18:22:e9:a3:f8:c3:58:0c:95:42:e3:
                    51:a7:4a:2e:c9:33:dc:82:cd:c8:a2:a5:18:08:41:
                    61:97:64:ea:b2:6c:68:90:8f:a4:5d:63:af:0e:6c:
                    fd:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F7:0B:0E:98:31:4A:3F:4C:20:7A:A7:79:29:D7:F7:14:4F:8A:C8
            X509v3 Authority Key Identifier:
                keyid:1F:DF:2D:E0:80:54:C5:5B:A3:B5:B5:9C:73:43:02:F8:68:23:4F:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A9518EA609642D3F666D638B6D0325EFAC29FD0863FD28ED6AD19489CEF42EC7/0/1FDF2DE08054C55BA3B5B59C734302F868234F58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FDF2DE08054C55BA3B5B59C734302F868234F58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A9518EA609642D3F666D638B6D0325EFAC29FD0863FD28ED6AD19489CEF42EC7/0/323830333a3430303a3a2f33322d3332203d3e203532333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:400::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:37:eb:69:bd:75:a2:91:bd:c0:4d:2c:e1:3f:45:c3:c4:21:
         c5:9b:89:75:3d:dc:6d:47:b6:f4:bc:fb:b5:ae:34:87:ed:5a:
         57:78:75:9e:81:68:8b:08:6e:80:50:53:02:a7:a3:ac:b8:75:
         e3:c2:20:0e:6e:77:a2:e3:89:7d:fc:19:72:ec:77:2a:3c:81:
         74:72:cc:85:16:42:1f:fa:6f:16:8d:d0:9d:99:56:24:05:aa:
         9a:26:0d:78:d4:37:4a:84:c6:a6:3f:9b:27:bd:64:2b:57:c2:
         37:3d:e4:a2:6e:36:e8:49:94:78:66:9f:3d:b6:99:48:bd:f6:
         e1:5c:cf:70:e5:c7:f1:57:b0:55:c8:19:80:14:2c:e0:b2:1f:
         33:a8:94:e3:a0:bb:9a:3a:50:8d:7f:19:08:15:82:0d:5e:78:
         d4:30:4a:62:1a:7f:1f:1b:ee:54:59:cf:08:ca:b6:14:41:4c:
         c8:f8:96:17:1d:9a:de:ab:60:28:5e:d5:cb:f9:d6:e0:0c:06:
         82:9c:0a:fc:8c:bf:07:68:c6:60:81:62:d5:8d:db:66:e7:e8:
         05:89:c5:bd:b4:47:3f:88:06:74:89:2f:45:51:11:aa:87:a3:
         d8:c1:be:2a:f6:83:e9:10:4a:57:18:46:6c:43:89:f8:b7:d2:
         52:e3:2b:d1
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUZ5MrsrWypF+X4tg9oybiIzT7ap0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUZERjJERTA4MDU0QzU1QkEzQjVCNTlDNzM0MzAyRjg2
ODIzNEY1ODAeFw0yNjAxMDYyMDQ2MjBaFw0yNzAxMDUyMDUxMjBaMDMxMTAvBgNV
BAMTKEU0RjcwQjBFOTgzMTRBM0Y0QzIwN0FBNzc5MjlEN0Y3MTQ0RjhBQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDJNEfXelqCv/RxjRgLESWD9II
xcbEeFi1vCdz5RVHnXX8Tz+bksCW04J0DWJq9B5W4jdZL3pDca1O+hTMgBCeWlUw
PVaxKRZF7qAddZfo9vAcazdXcdsb91xZp1BAtFBOQ4DWdkbHWplb3QJPvO5D1LBb
vkynoKoMLo/kg5+Mw3Rg2HQKQikVfjBAf6MmNwtV2pkoViV7lwciKiHtq857gscD
NTicJvZFbMc0qpavN42OuA2Hia269bd6KAVdjBMepW4VuTKRy3ePNmG5+p4cwds7
XFAYIumj+MNYDJVC41GnSi7JM9yCzciipRgIQWGXZOqybGiQj6RdY68ObP0HAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQU5PcLDpgxSj9MIHqneSnX9xRPisgwHwYDVR0j
BBgwFoAUH98t4IBUxVujtbWcc0MC+GgjT1gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BOTUxOEVBNjA5NjQyRDNGNjY2RDYzOEI2RDAzMjVFRkFD
MjlGRDA4NjNGRDI4RUQ2QUQxOTQ4OUNFRjQyRUM3LzAvMUZERjJERTA4MDU0QzU1
QkEzQjVCNTlDNzM0MzAyRjg2ODIzNEY1OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRkRGMkRFMDgwNTRDNTVCQTNC
NUI1OUM3MzQzMDJGODY4MjM0RjU4LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTk1MThFQTYwOTY0MkQzRjY2NkQ2MzhCNkQwMzI1RUZBQzI5RkQwODYz
RkQyOEVENkFEMTk0ODlDRUY0MkVDNy8wLzMyMzgzMDMzM2EzNDMwMzAzYTNhMmYz
MzMyMmQzMzMyMjAzZDNlMjAzNTMyMzMzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMEADANBgkq
hkiG9w0BAQsFAAOCAQEAjTfrab11opG9wE0s4T9Fw8QhxZuJdT3cbUe29Lz7ta40
h+1aV3h1noFoiwhugFBTAqejrLh148IgDm53ouOJffwZcux3KjyBdHLMhRZCH/pv
Fo3QnZlWJAWqmiYNeNQ3SoTGpj+bJ71kK1fCNz3kom426EmUeGafPbaZSL324VzP
cOXH8VewVcgZgBQs4LIfM6iU46C7mjpQjX8ZCBWCDV541DBKYhp/HxvuVFnPCMq2
FEFMyPiWFx2a3qtgKF7Vy/nW4AwGgpwK/Iy/B2jGYIFi1Y3bZufoBYnFvbRHP4gG
dIkvRVERqoej2MG+KvaD6RBKVxhGbEOJ+LfSUuMr0Q==
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:25:38 2026 by rpki-client