This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C3E043639915CFD2CBA79424AC63DD0E672E2202404388FDA16671CD2CDAA71C/0/323830333a353330303a3a2f33322d3332203d3e20323634363337.roa
File:                     323830333a353330303a3a2f33322d3332203d3e20323634363337.roa (raw, json)
Hash identifier:          Rp6kvfiXQArD8uUOoA9lzRRMXu2d752VvSvflKLBr64=
Subject key identifier:   F2:96:75:08:45:83:B5:65:FD:F5:3F:D4:A1:53:AA:28:05:42:E9:6C
Certificate issuer:       /CN=A0AEC7E371CCB77E9F6185475032ECF66F5AF8E6
Certificate serial:       7F60A7AC2CA57152C33746432BF32F0843A22A70
Authority key identifier: A0:AE:C7:E3:71:CC:B7:7E:9F:61:85:47:50:32:EC:F6:6F:5A:F8:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0AEC7E371CCB77E9F6185475032ECF66F5AF8E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C3E043639915CFD2CBA79424AC63DD0E672E2202404388FDA16671CD2CDAA71C/0/323830333a353330303a3a2f33322d3332203d3e20323634363337.roa
Signing time:             Tue 06 Jan 2026 19:17:49 +0000
ROA not before:           Tue 06 Jan 2026 19:12:49 +0000
ROA not after:            Tue 05 Jan 2027 19:17:49 +0000
asID:                     264637
IP address blocks:        2803:5300::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C3E043639915CFD2CBA79424AC63DD0E672E2202404388FDA16671CD2CDAA71C/0/A0AEC7E371CCB77E9F6185475032ECF66F5AF8E6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C3E043639915CFD2CBA79424AC63DD0E672E2202404388FDA16671CD2CDAA71C/0/A0AEC7E371CCB77E9F6185475032ECF66F5AF8E6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0AEC7E371CCB77E9F6185475032ECF66F5AF8E6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 03:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:60:a7:ac:2c:a5:71:52:c3:37:46:43:2b:f3:2f:08:43:a2:2a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0AEC7E371CCB77E9F6185475032ECF66F5AF8E6
        Validity
            Not Before: Jan  6 19:12:49 2026 GMT
            Not After : Jan  5 19:17:49 2027 GMT
        Subject: CN=F29675084583B565FDF53FD4A153AA280542E96C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7d:ed:c7:1b:5c:8c:8f:77:a6:41:e4:93:64:
                    cd:9f:72:cc:11:4f:9f:b5:63:96:d0:7a:c7:2b:db:
                    31:e0:a9:40:f8:35:ad:e3:04:06:ad:0a:be:fb:a1:
                    77:ad:49:b2:ac:2b:10:b6:92:fa:ef:b6:72:7d:eb:
                    ba:ce:49:07:a4:79:44:1a:2f:36:3f:53:2d:6b:b3:
                    1c:66:9a:63:ef:bb:b1:4d:f7:92:ed:3c:c0:1c:08:
                    46:8e:ed:7b:90:2d:38:b2:5e:73:3a:d8:e7:33:63:
                    ea:4f:62:dc:d0:aa:1b:ba:5d:50:e8:65:ff:90:9b:
                    f8:2c:9b:b9:b0:bb:93:c5:54:ff:58:a0:a6:4c:92:
                    f0:2c:fd:1b:b8:be:c4:0d:f6:c7:ba:e0:40:82:be:
                    4f:0e:90:c6:40:f2:43:b2:92:79:a1:4b:aa:af:55:
                    80:e0:b8:b8:58:0c:d2:2a:75:77:4c:52:a9:72:33:
                    99:e0:0d:d3:3a:f2:20:5e:ae:c2:1d:d4:cc:5a:d5:
                    a1:6b:c7:0a:e7:46:e0:d9:ea:93:33:42:bd:d3:ae:
                    7c:38:cc:f2:a0:67:80:f3:94:8d:2e:25:9a:20:64:
                    e0:6b:e4:46:3a:ff:b2:da:bb:31:3b:05:cf:92:0c:
                    7f:2d:cc:cc:7c:e1:bf:66:0b:d0:70:06:b4:b4:0b:
                    ec:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:96:75:08:45:83:B5:65:FD:F5:3F:D4:A1:53:AA:28:05:42:E9:6C
            X509v3 Authority Key Identifier:
                keyid:A0:AE:C7:E3:71:CC:B7:7E:9F:61:85:47:50:32:EC:F6:6F:5A:F8:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C3E043639915CFD2CBA79424AC63DD0E672E2202404388FDA16671CD2CDAA71C/0/A0AEC7E371CCB77E9F6185475032ECF66F5AF8E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0AEC7E371CCB77E9F6185475032ECF66F5AF8E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C3E043639915CFD2CBA79424AC63DD0E672E2202404388FDA16671CD2CDAA71C/0/323830333a353330303a3a2f33322d3332203d3e20323634363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5300::/32

    Signature Algorithm: sha256WithRSAEncryption
         dd:8a:24:07:60:ab:a6:51:c2:31:78:d8:b1:0d:b8:74:f7:18:
         ec:7d:b0:3d:92:c7:88:74:9b:d6:f2:fd:a7:d9:dd:eb:96:39:
         cd:c0:c3:7b:94:e5:c9:99:46:14:4e:d0:4c:c1:e0:0b:52:68:
         8f:cc:d6:a7:97:fa:c3:e3:69:ab:cb:5e:6c:ab:aa:f8:ec:3a:
         f8:fb:96:0c:ff:52:15:14:83:fe:a3:1d:e2:55:26:1a:8a:a9:
         a8:06:54:64:52:e5:b5:8a:55:16:1f:17:62:03:03:8b:f3:e0:
         18:cd:81:f6:37:eb:2b:48:eb:a6:3b:cd:85:05:54:b2:70:d7:
         19:c4:78:80:21:12:54:f4:73:19:b1:1d:7f:9e:0e:71:0a:f5:
         8c:88:44:87:76:45:15:50:23:2d:89:85:b7:f7:8e:6c:2f:b9:
         3d:f8:c2:cb:99:d0:d2:09:28:74:e8:bd:62:d9:54:9c:98:4f:
         25:e2:9d:a8:b4:d6:91:a3:3f:36:2b:00:e8:2c:d8:dc:1f:89:
         ae:34:20:15:e1:ff:94:15:f7:43:c7:c4:c6:31:a8:42:52:84:
         1a:ea:bd:9f:8f:6c:15:0b:0a:31:dd:7a:f1:bf:54:3a:d5:09:
         58:d6:1b:54:70:d2:5d:f9:e7:7f:14:6c:20:10:55:7b:9e:9c:
         ed:b7:e9:58
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUf2CnrCylcVLDN0ZDK/MvCEOiKnAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTBBRUM3RTM3MUNDQjc3RTlGNjE4NTQ3NTAzMkVDRjY2
RjVBRjhFNjAeFw0yNjAxMDYxOTEyNDlaFw0yNzAxMDUxOTE3NDlaMDMxMTAvBgNV
BAMTKEYyOTY3NTA4NDU4M0I1NjVGREY1M0ZENEExNTNBQTI4MDU0MkU5NkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqfe3HG1yMj3emQeSTZM2fcswR
T5+1Y5bQescr2zHgqUD4Na3jBAatCr77oXetSbKsKxC2kvrvtnJ967rOSQekeUQa
LzY/Uy1rsxxmmmPvu7FN95LtPMAcCEaO7XuQLTiyXnM62OczY+pPYtzQqhu6XVDo
Zf+Qm/gsm7mwu5PFVP9YoKZMkvAs/Ru4vsQN9se64ECCvk8OkMZA8kOyknmhS6qv
VYDguLhYDNIqdXdMUqlyM5ngDdM68iBersId1Mxa1aFrxwrnRuDZ6pMzQr3Trnw4
zPKgZ4DzlI0uJZogZOBr5EY6/7LauzE7Bc+SDH8tzMx84b9mC9BwBrS0C+zFAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU8pZ1CEWDtWX99T/UoVOqKAVC6WwwHwYDVR0j
BBgwFoAUoK7H43HMt36fYYVHUDLs9m9a+OYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DM0UwNDM2Mzk5MTVDRkQyQ0JBNzk0MjRBQzYzREQwRTY3
MkUyMjAyNDA0Mzg4RkRBMTY2NzFDRDJDREFBNzFDLzAvQTBBRUM3RTM3MUNDQjc3
RTlGNjE4NTQ3NTAzMkVDRjY2RjVBRjhFNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMEFFQzdFMzcxQ0NCNzdFOUY2
MTg1NDc1MDMyRUNGNjZGNUFGOEU2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzNFMDQzNjM5OTE1Q0ZEMkNCQTc5NDI0QUM2M0REMEU2NzJFMjIwMjQw
NDM4OEZEQTE2NjcxQ0QyQ0RBQTcxQy8wLzMyMzgzMDMzM2EzNTMzMzAzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNDM2MzMzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDUwAw
DQYJKoZIhvcNAQELBQADggEBAN2KJAdgq6ZRwjF42LENuHT3GOx9sD2Sx4h0m9by
/afZ3euWOc3Aw3uU5cmZRhRO0EzB4AtSaI/M1qeX+sPjaavLXmyrqvjsOvj7lgz/
UhUUg/6jHeJVJhqKqagGVGRS5bWKVRYfF2IDA4vz4BjNgfY36ytI66Y7zYUFVLJw
1xnEeIAhElT0cxmxHX+eDnEK9YyIRId2RRVQIy2Jhbf3jmwvuT34wsuZ0NIJKHTo
vWLZVJyYTyXinai01pGjPzYrAOgs2Nwfia40IBXh/5QV90PHxMYxqEJShBrqvZ+P
bBULCjHdevG/VDrVCVjWG1Rw0l35538UbCAQVXuenO236Vg=
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:06:52 2026 by rpki-client