This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/323830333a613138303a3a2f33322d3332203d3e203238313138.roa
File:                     323830333a613138303a3a2f33322d3332203d3e203238313138.roa (raw, json)
Hash identifier:          Vix/zteRs1tgM9u/nftoaLH8VTbdR1gk5+dw95qDUpI=
Subject key identifier:   A4:E2:23:E0:EB:F8:A9:54:B7:84:F2:93:6E:1E:70:B0:94:2D:1F:7E
Certificate issuer:       /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial:       13D8A3F2DFB3D2241061017AFE8D3382EFF07116
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/323830333a613138303a3a2f33322d3332203d3e203238313138.roa
Signing time:             Tue 06 Jan 2026 19:39:49 +0000
ROA not before:           Tue 06 Jan 2026 19:34:49 +0000
ROA not after:            Tue 05 Jan 2027 19:39:49 +0000
asID:                     28118
IP address blocks:        2803:a180::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:d8:a3:f2:df:b3:d2:24:10:61:01:7a:fe:8d:33:82:ef:f0:71:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
        Validity
            Not Before: Jan  6 19:34:49 2026 GMT
            Not After : Jan  5 19:39:49 2027 GMT
        Subject: CN=A4E223E0EBF8A954B784F2936E1E70B0942D1F7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:76:f6:e0:6b:c8:03:b9:de:4a:09:b8:dd:f9:
                    a2:80:7c:92:1b:64:04:51:6d:a9:fb:b9:9e:a1:84:
                    af:46:4e:70:9a:05:66:d2:c4:7e:2b:47:07:76:6d:
                    a3:ec:5f:a9:65:9d:52:ac:c2:4e:7d:2c:c0:d1:82:
                    b2:c7:32:9e:fb:a5:0c:f3:b5:5c:d3:0f:79:42:f6:
                    9a:9d:02:8f:fb:33:9b:48:73:49:14:e0:4b:12:0c:
                    a1:23:93:44:a7:77:e9:08:2d:53:6b:a4:df:d3:82:
                    8c:65:ca:8d:ee:60:95:37:69:82:df:d2:39:8b:21:
                    d1:2d:d9:4c:33:94:f8:28:e4:01:63:fd:82:f8:80:
                    c2:61:0f:de:94:23:0e:08:c6:d2:04:be:0f:5e:4f:
                    f1:62:47:56:ec:15:bf:33:0f:99:12:59:fb:2f:40:
                    39:25:ea:f2:23:73:28:d4:ec:b0:ac:07:c9:fb:fb:
                    f8:f6:46:74:b1:6a:2c:12:18:bd:80:65:4c:24:16:
                    fb:fe:f5:97:03:b9:99:14:a8:85:7a:77:ec:24:07:
                    64:32:82:f8:de:44:ee:c0:1d:f1:83:b9:2b:23:69:
                    21:5b:41:70:07:5f:62:38:c8:78:2e:4b:d7:20:db:
                    9d:60:a5:4e:13:48:47:31:76:6e:04:55:eb:dc:00:
                    0d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E2:23:E0:EB:F8:A9:54:B7:84:F2:93:6E:1E:70:B0:94:2D:1F:7E
            X509v3 Authority Key Identifier:
                keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/323830333a613138303a3a2f33322d3332203d3e203238313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a180::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:68:78:ad:40:ab:aa:9a:c4:94:77:0d:8f:58:ee:23:e2:32:
         09:4e:23:b1:79:ec:b9:a7:16:a1:35:54:d3:b9:37:d7:68:9a:
         a9:a3:54:49:2c:73:0c:46:37:59:b5:0f:15:23:c2:e6:ae:dc:
         6c:57:24:2c:12:3d:00:fc:ac:0f:35:f7:ee:66:cf:b1:a4:83:
         14:66:22:5e:28:3f:68:15:7e:53:eb:e8:7c:a9:3e:8f:b5:b1:
         56:79:9f:ee:00:30:85:a6:5d:4a:4a:19:d8:e3:20:34:ef:54:
         6c:5f:57:8f:41:8e:b4:be:f6:13:85:eb:8b:de:dd:79:6b:fd:
         45:7f:de:41:7f:c3:78:67:ca:93:e2:01:33:09:ef:ea:cb:f8:
         39:fb:7e:4f:31:7d:6b:62:83:d7:aa:27:1e:ec:a8:d3:62:00:
         4d:47:2f:04:03:3d:8f:3a:c5:2e:52:a7:61:c6:6b:a2:fb:79:
         61:7e:bd:26:52:ab:9d:09:4d:c9:8d:5f:54:9b:a0:ad:e5:d5:
         da:2f:9f:ba:7f:ef:03:0d:d0:c7:df:f5:3e:9c:e4:cd:f2:db:
         17:8a:5f:9b:ab:98:bf:39:4e:e6:b1:37:d3:ad:7a:e9:21:43:
         c3:40:a6:ac:5c:3c:a4:59:2a:71:b9:d4:93:92:52:1b:62:b5:
         b9:fa:d6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:57:40 2026 by rpki-client