This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B4C45A2CD2E40E188C0E6672D011461E60A798F3F633B4BF8E6E9AF998F200F4/0/323830333a346230303a3a2f33322d3438203d3e20323633313936.roa
File:                     323830333a346230303a3a2f33322d3438203d3e20323633313936.roa (raw, json)
Hash identifier:          UK1jdpjV6okfLxUcYo01WQOJXQ4gjbfkXvH+ek4JTEw=
Subject key identifier:   E5:5F:A0:89:69:F9:CF:CE:64:25:E6:0B:4A:74:DB:AC:C7:59:FB:D1
Certificate issuer:       /CN=1BF6A4D7C0F954D7DE94EF417CD453B8A4217860
Certificate serial:       1ED069AE78982271E6A021F46B39D9DE9EF0F593
Authority key identifier: 1B:F6:A4:D7:C0:F9:54:D7:DE:94:EF:41:7C:D4:53:B8:A4:21:78:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BF6A4D7C0F954D7DE94EF417CD453B8A4217860.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B4C45A2CD2E40E188C0E6672D011461E60A798F3F633B4BF8E6E9AF998F200F4/0/323830333a346230303a3a2f33322d3438203d3e20323633313936.roa
Signing time:             Tue 06 Jan 2026 18:58:52 +0000
ROA not before:           Tue 06 Jan 2026 18:53:52 +0000
ROA not after:            Tue 05 Jan 2027 18:58:52 +0000
asID:                     263196
IP address blocks:        2803:4b00::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B4C45A2CD2E40E188C0E6672D011461E60A798F3F633B4BF8E6E9AF998F200F4/0/1BF6A4D7C0F954D7DE94EF417CD453B8A4217860.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B4C45A2CD2E40E188C0E6672D011461E60A798F3F633B4BF8E6E9AF998F200F4/0/1BF6A4D7C0F954D7DE94EF417CD453B8A4217860.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BF6A4D7C0F954D7DE94EF417CD453B8A4217860.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:d0:69:ae:78:98:22:71:e6:a0:21:f4:6b:39:d9:de:9e:f0:f5:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BF6A4D7C0F954D7DE94EF417CD453B8A4217860
        Validity
            Not Before: Jan  6 18:53:52 2026 GMT
            Not After : Jan  5 18:58:52 2027 GMT
        Subject: CN=E55FA08969F9CFCE6425E60B4A74DBACC759FBD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c3:3f:bd:52:36:c6:ae:1c:7d:75:c7:33:2c:
                    13:b3:02:71:91:fa:96:94:b2:a9:71:aa:b5:74:92:
                    e4:41:17:6a:2a:92:53:4c:e8:de:68:5b:18:ef:67:
                    a5:fb:2f:29:45:3f:30:42:f5:c4:23:ab:f5:c4:c6:
                    37:20:e9:1d:ab:19:6e:16:f3:55:44:32:56:db:0c:
                    c8:f1:14:be:70:da:d6:b5:d0:71:ff:96:ff:89:b6:
                    16:94:a4:fa:ec:86:8c:b1:2d:f4:36:34:c1:bf:7a:
                    51:86:ed:35:39:7f:3e:26:c2:79:d6:be:3f:cd:c5:
                    9e:dc:a5:44:38:95:18:81:13:22:72:44:46:0c:cf:
                    6b:3a:a5:d2:d2:91:e7:39:74:c5:73:05:f5:ac:8c:
                    92:f8:21:28:1f:20:70:e6:ed:f9:24:d6:e8:7b:b1:
                    6f:ea:69:16:d6:d2:4f:a5:f2:75:77:9e:d5:af:c6:
                    42:5b:6c:a4:61:d4:40:7f:f0:6a:6d:5f:37:b8:85:
                    c8:66:16:94:56:01:9c:7d:a7:09:c8:31:2c:9e:af:
                    45:04:cd:0f:16:22:8f:a4:01:c6:a4:d7:34:04:f7:
                    ad:e6:1e:30:76:5f:41:75:bf:42:a3:4f:7e:21:65:
                    bb:60:30:ae:14:ba:bd:4b:e2:33:18:d9:fc:5f:1b:
                    29:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:5F:A0:89:69:F9:CF:CE:64:25:E6:0B:4A:74:DB:AC:C7:59:FB:D1
            X509v3 Authority Key Identifier:
                keyid:1B:F6:A4:D7:C0:F9:54:D7:DE:94:EF:41:7C:D4:53:B8:A4:21:78:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B4C45A2CD2E40E188C0E6672D011461E60A798F3F633B4BF8E6E9AF998F200F4/0/1BF6A4D7C0F954D7DE94EF417CD453B8A4217860.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BF6A4D7C0F954D7DE94EF417CD453B8A4217860.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B4C45A2CD2E40E188C0E6672D011461E60A798F3F633B4BF8E6E9AF998F200F4/0/323830333a346230303a3a2f33322d3438203d3e20323633313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4b00::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:2e:d2:d9:13:cd:67:1a:b4:c9:1f:1d:84:fb:ae:ad:4a:b0:
         60:b6:22:9b:c8:43:2d:c8:62:b9:bd:4d:9d:2b:fe:0e:90:4f:
         db:b6:b2:b4:af:6b:d4:23:b0:cf:c8:60:9f:93:62:49:b1:1b:
         c6:d5:ab:31:f8:d9:5e:62:e7:2f:10:e6:f0:27:74:67:a6:fe:
         94:a3:89:ab:86:9d:35:71:a5:39:07:45:40:42:50:49:b4:c3:
         ae:e3:1a:63:f8:df:a5:1f:b5:d5:21:fe:98:e2:5d:e2:3f:a3:
         f1:3e:89:5b:da:d5:33:e7:5d:88:cf:10:46:d0:87:6f:38:95:
         6c:23:d4:34:2d:40:e6:55:1d:dd:cb:f5:cb:61:d9:6e:aa:8b:
         81:30:b9:18:4a:3e:24:c0:1d:98:c2:0f:41:c4:c8:aa:73:b2:
         31:b2:89:ad:cc:0d:36:70:e3:e8:5e:7a:e2:ab:62:7f:7d:03:
         35:17:f7:32:35:e3:50:9e:df:3d:cd:00:4f:3b:b2:8a:44:dc:
         96:15:28:6b:f4:4a:21:a4:0e:28:4e:81:b3:da:64:d3:95:77:
         41:7c:9e:d5:43:08:62:f1:d8:58:99:a9:a3:f0:76:66:b3:8f:
         89:bb:f0:a0:80:4a:a7:92:22:38:bb:40:2b:f6:8f:fb:ac:1e:
         0f:d7:5a:1e
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUHtBprniYInHmoCH0aznZ3p7w9ZMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUJGNkE0RDdDMEY5NTREN0RFOTRFRjQxN0NENDUzQjhB
NDIxNzg2MDAeFw0yNjAxMDYxODUzNTJaFw0yNzAxMDUxODU4NTJaMDMxMTAvBgNV
BAMTKEU1NUZBMDg5NjlGOUNGQ0U2NDI1RTYwQjRBNzREQkFDQzc1OUZCRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0wz+9UjbGrhx9dcczLBOzAnGR
+paUsqlxqrV0kuRBF2oqklNM6N5oWxjvZ6X7LylFPzBC9cQjq/XExjcg6R2rGW4W
81VEMlbbDMjxFL5w2ta10HH/lv+JthaUpPrshoyxLfQ2NMG/elGG7TU5fz4mwnnW
vj/NxZ7cpUQ4lRiBEyJyREYMz2s6pdLSkec5dMVzBfWsjJL4ISgfIHDm7fkk1uh7
sW/qaRbW0k+l8nV3ntWvxkJbbKRh1EB/8GptXze4hchmFpRWAZx9pwnIMSyer0UE
zQ8WIo+kAcak1zQE963mHjB2X0F1v0KjT34hZbtgMK4Uur1L4jMY2fxfGynRAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU5V+giWn5z85kJeYLSnTbrMdZ+9EwHwYDVR0j
BBgwFoAUG/ak18D5VNfelO9BfNRTuKQheGAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CNEM0NUEyQ0QyRTQwRTE4OEMwRTY2NzJEMDExNDYxRTYw
QTc5OEYzRjYzM0I0QkY4RTZFOUFGOTk4RjIwMEY0LzAvMUJGNkE0RDdDMEY5NTRE
N0RFOTRFRjQxN0NENDUzQjhBNDIxNzg2MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQkY2QTREN0MwRjk1NEQ3REU5
NEVGNDE3Q0Q0NTNCOEE0MjE3ODYwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjRDNDVBMkNEMkU0MEUxODhDMEU2NjcyRDAxMTQ2MUU2MEE3OThGM0Y2
MzNCNEJGOEU2RTlBRjk5OEYyMDBGNC8wLzMyMzgzMDMzM2EzNDYyMzAzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMzMxMzkzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDSwAw
DQYJKoZIhvcNAQELBQADggEBAI4u0tkTzWcatMkfHYT7rq1KsGC2IpvIQy3IYrm9
TZ0r/g6QT9u2srSva9QjsM/IYJ+TYkmxG8bVqzH42V5i5y8Q5vAndGem/pSjiauG
nTVxpTkHRUBCUEm0w67jGmP436UftdUh/pjiXeI/o/E+iVva1TPnXYjPEEbQh284
lWwj1DQtQOZVHd3L9cth2W6qi4EwuRhKPiTAHZjCD0HEyKpzsjGyia3MDTZw4+he
euKrYn99AzUX9zI141Ce3z3NAE87sopE3JYVKGv0SiGkDihOgbPaZNOVd0F8ntVD
CGLx2FiZqaPwdmazj4m78KCASqeSIji7QCv2j/usHg/XWh4=
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:52:37 2026 by rpki-client