This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/323830333a343730303a3a2f33312d3337203d3e203238303733.roa
File:                     323830333a343730303a3a2f33312d3337203d3e203238303733.roa (raw, json)
Hash identifier:          tFnsiwKdtTSfy2ZuRUYAjOwglQs60rMpAZE4kVU7Hqk=
Subject key identifier:   28:36:97:AA:51:BF:2F:81:24:7C:B5:34:5E:CB:5D:3C:38:8E:E0:5F
Certificate issuer:       /CN=70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0
Certificate serial:       7CD789F11FBBDE3885B6C0F863F3BDD921C51047
Authority key identifier: 70:B8:61:6E:6A:6A:A7:F5:8E:40:97:B0:8F:A8:C0:B7:97:D5:EE:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/323830333a343730303a3a2f33312d3337203d3e203238303733.roa
Signing time:             Tue 06 Jan 2026 19:43:37 +0000
ROA not before:           Tue 06 Jan 2026 19:38:37 +0000
ROA not after:            Tue 05 Jan 2027 19:43:37 +0000
asID:                     28073
IP address blocks:        2803:4700::/31 maxlen: 37
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 07:59:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d7:89:f1:1f:bb:de:38:85:b6:c0:f8:63:f3:bd:d9:21:c5:10:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0
        Validity
            Not Before: Jan  6 19:38:37 2026 GMT
            Not After : Jan  5 19:43:37 2027 GMT
        Subject: CN=283697AA51BF2F81247CB5345ECB5D3C388EE05F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e6:b7:8f:f5:07:09:05:be:f7:c8:8d:76:0e:
                    b7:38:8e:60:66:5b:f5:5f:dc:31:ed:a9:5c:e4:a9:
                    8a:5a:49:45:3c:c8:4f:18:da:e0:15:a9:c8:e2:26:
                    bb:5c:09:2b:f6:5b:c7:d8:7f:3e:c1:0d:e3:1b:17:
                    ff:b9:ba:af:25:83:3b:1a:df:3e:0a:8d:a5:ef:7c:
                    26:1b:dd:17:b7:da:6a:0d:26:93:03:1b:06:a1:30:
                    a3:28:0c:63:d9:1b:43:19:d0:33:bf:f3:ea:f4:d2:
                    bf:05:0d:b0:40:6f:b1:c3:57:5a:71:47:66:32:0c:
                    99:5e:69:8a:7f:d7:0f:17:25:01:db:8c:68:60:39:
                    7c:e6:1e:68:79:c9:d0:85:f2:a0:95:e1:2e:61:38:
                    9e:a9:1d:04:22:ed:20:a3:c6:81:15:44:65:86:90:
                    21:8a:8c:fb:f4:f6:f8:73:12:df:bd:c4:50:9c:00:
                    fc:bf:44:5d:17:82:0f:d5:06:ac:c5:81:4f:f5:71:
                    b1:41:93:35:5d:28:22:11:3a:e2:42:d4:0e:3f:4a:
                    2d:fb:e9:5b:f2:b7:2b:f3:9f:62:c1:5f:3b:53:1d:
                    91:fc:c5:c6:53:b6:be:cf:df:74:58:93:30:44:f4:
                    41:7c:ee:dd:af:6a:78:20:a3:eb:04:02:a7:11:b7:
                    68:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:36:97:AA:51:BF:2F:81:24:7C:B5:34:5E:CB:5D:3C:38:8E:E0:5F
            X509v3 Authority Key Identifier:
                keyid:70:B8:61:6E:6A:6A:A7:F5:8E:40:97:B0:8F:A8:C0:B7:97:D5:EE:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/323830333a343730303a3a2f33312d3337203d3e203238303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4700::/31

    Signature Algorithm: sha256WithRSAEncryption
         19:1e:88:0b:b6:cf:09:04:bd:25:57:10:01:09:b4:94:cc:3d:
         ce:b7:20:37:f1:a6:ab:ec:74:5d:5a:3e:53:0a:00:b0:d3:db:
         21:22:fb:c3:e9:d6:e6:50:fa:0f:ff:1f:e8:22:2c:4f:10:26:
         c4:c2:a2:44:1a:6a:27:3f:65:0d:de:27:b2:fc:ef:e6:d1:ec:
         fb:94:1c:e1:c1:5d:85:e3:8d:c0:e6:ba:6e:b9:16:ad:47:76:
         bf:ea:f8:91:85:97:ae:48:c0:4c:e0:cc:10:91:e8:2f:ee:4d:
         61:09:94:51:8c:5e:2a:03:93:57:2c:17:d8:c2:e2:eb:cb:a6:
         fc:24:ff:7b:58:e7:08:a0:d1:87:46:e0:4c:39:40:12:8f:02:
         75:02:34:28:71:50:d7:ba:af:f8:a3:7a:a5:ef:d8:1d:62:ca:
         f5:fe:bf:0e:63:ed:a1:16:ee:88:9a:96:b8:17:39:4e:9d:07:
         81:61:15:a6:1b:83:42:03:8a:ee:fd:be:ca:d4:b5:f0:f9:2c:
         17:21:90:57:9b:62:95:b3:4d:25:b8:a3:8b:40:c3:78:7c:26:
         13:d2:ba:dd:9c:3b:99:12:86:0a:5e:c9:6b:4c:5a:2f:30:1c:
         24:d7:5f:a3:dc:23:87:bd:ef:3f:90:45:96:a6:a4:24:d5:2a:
         09:9a:d7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:19:12 2026 by rpki-client