This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C5C6355BF8BBA02AFDEC01740418CBDA52FAFD119E16D539C11CA99768EA977F/0/323830333a373036303a3a2f33322d3332203d3e20323633373534.roa
File:                     323830333a373036303a3a2f33322d3332203d3e20323633373534.roa (raw, json)
Hash identifier:          q4um29jjtBkHwIOava/KNmI9cVxWc6BTj5fT2NfBbF0=
Subject key identifier:   A5:AB:27:D1:21:AD:D3:D3:18:BC:51:84:46:FC:F6:B3:A7:8F:03:D4
Certificate issuer:       /CN=C111E22B88AB3DF713ECEF3B43D97197F14347D7
Certificate serial:       697B098F4568DA506E81B74521AB8942CE31BF0E
Authority key identifier: C1:11:E2:2B:88:AB:3D:F7:13:EC:EF:3B:43:D9:71:97:F1:43:47:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C111E22B88AB3DF713ECEF3B43D97197F14347D7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C5C6355BF8BBA02AFDEC01740418CBDA52FAFD119E16D539C11CA99768EA977F/0/323830333a373036303a3a2f33322d3332203d3e20323633373534.roa
Signing time:             Tue 06 Jan 2026 19:43:36 +0000
ROA not before:           Tue 06 Jan 2026 19:38:36 +0000
ROA not after:            Tue 05 Jan 2027 19:43:36 +0000
asID:                     263754
IP address blocks:        2803:7060::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C5C6355BF8BBA02AFDEC01740418CBDA52FAFD119E16D539C11CA99768EA977F/0/C111E22B88AB3DF713ECEF3B43D97197F14347D7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C5C6355BF8BBA02AFDEC01740418CBDA52FAFD119E16D539C11CA99768EA977F/0/C111E22B88AB3DF713ECEF3B43D97197F14347D7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C111E22B88AB3DF713ECEF3B43D97197F14347D7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 09:31:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:7b:09:8f:45:68:da:50:6e:81:b7:45:21:ab:89:42:ce:31:bf:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C111E22B88AB3DF713ECEF3B43D97197F14347D7
        Validity
            Not Before: Jan  6 19:38:36 2026 GMT
            Not After : Jan  5 19:43:36 2027 GMT
        Subject: CN=A5AB27D121ADD3D318BC518446FCF6B3A78F03D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6e:61:e1:40:a8:9f:34:9d:fe:59:30:1d:00:
                    ad:1e:81:35:cd:4a:45:92:01:80:22:fd:9a:a8:f0:
                    d5:7f:34:87:ca:69:bf:0a:e3:22:2d:c3:0c:fc:5f:
                    8d:c3:db:df:21:cd:36:e7:75:81:7f:d5:96:f9:c0:
                    c6:30:4b:1a:b0:e9:4c:43:4a:15:d2:c0:47:97:74:
                    43:a4:7e:ed:22:cb:d0:b5:b3:97:0e:e3:00:d1:3a:
                    98:fb:d4:e4:d7:2c:f9:13:58:0f:ea:fa:3a:3e:13:
                    e4:7e:0b:a7:45:16:83:f7:e7:bc:73:eb:32:ae:3f:
                    cb:2f:97:24:e5:38:07:0c:89:a8:1a:e1:b5:4d:b3:
                    a8:0d:6c:05:c4:a9:7a:a4:73:58:7a:db:f9:a9:c9:
                    30:b4:28:ba:28:c6:0b:7f:47:d1:55:7c:d2:97:b7:
                    b4:55:46:56:85:6a:e1:de:0d:a7:40:ae:8d:fd:9a:
                    fc:b1:0b:72:6e:9b:05:89:14:dd:1b:e4:6a:75:46:
                    46:6e:ac:1b:57:9e:15:0c:a5:0f:45:0d:ae:a2:6e:
                    37:7a:d6:60:9f:04:bc:bd:bd:fa:34:ba:cd:ed:53:
                    fd:cc:28:25:fc:ff:33:df:f3:aa:c8:eb:18:d4:3d:
                    87:65:c2:a6:2e:63:9f:42:ff:03:83:29:56:56:38:
                    bb:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:AB:27:D1:21:AD:D3:D3:18:BC:51:84:46:FC:F6:B3:A7:8F:03:D4
            X509v3 Authority Key Identifier:
                keyid:C1:11:E2:2B:88:AB:3D:F7:13:EC:EF:3B:43:D9:71:97:F1:43:47:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C5C6355BF8BBA02AFDEC01740418CBDA52FAFD119E16D539C11CA99768EA977F/0/C111E22B88AB3DF713ECEF3B43D97197F14347D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C111E22B88AB3DF713ECEF3B43D97197F14347D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C5C6355BF8BBA02AFDEC01740418CBDA52FAFD119E16D539C11CA99768EA977F/0/323830333a373036303a3a2f33322d3332203d3e20323633373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7060::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:7c:b7:6d:90:13:8f:66:2d:17:ec:59:30:0b:26:88:40:f1:
         07:69:a5:ca:fc:e3:1e:ff:3f:3b:08:c6:16:b5:59:f2:dd:41:
         e6:a8:9b:89:5b:d7:58:14:cb:21:95:77:a7:c0:4e:9f:0a:ed:
         d5:c9:23:66:65:67:24:f8:37:b8:a3:48:7c:5a:8e:dc:0b:51:
         c4:b2:89:69:4e:14:55:1c:2f:96:48:8b:fd:23:7a:1d:a3:2c:
         60:62:13:04:5b:4f:2a:f7:ec:3a:53:48:ea:83:56:8e:38:68:
         f2:b9:ed:f8:eb:8b:dd:b3:49:30:5a:22:28:ff:cf:f1:43:4e:
         76:b5:b3:8e:59:0a:60:5f:9b:fc:26:fb:6c:21:0d:d7:88:ba:
         2a:22:36:eb:63:34:86:70:a4:2c:b5:eb:52:79:cc:13:ca:a4:
         8a:f0:17:e9:8b:23:d8:7f:c5:64:c8:f4:a3:36:09:5f:76:0b:
         41:51:74:87:57:92:d9:ed:85:57:1e:c1:f9:ec:87:e6:a3:61:
         04:90:a1:be:18:53:47:83:d3:2c:59:7f:e8:20:0c:64:ca:1e:
         a2:6b:3e:25:b4:3d:41:ae:bf:67:78:80:0b:68:2a:e7:52:cb:
         74:a1:79:c5:bd:93:67:e8:25:24:6d:0a:76:cd:b3:84:9b:fc:
         2a:d4:39:dc
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUaXsJj0Vo2lBugbdFIauJQs4xvw4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzExMUUyMkI4OEFCM0RGNzEzRUNFRjNCNDNEOTcxOTdG
MTQzNDdENzAeFw0yNjAxMDYxOTM4MzZaFw0yNzAxMDUxOTQzMzZaMDMxMTAvBgNV
BAMTKEE1QUIyN0QxMjFBREQzRDMxOEJDNTE4NDQ2RkNGNkIzQTc4RjAzRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHbmHhQKifNJ3+WTAdAK0egTXN
SkWSAYAi/Zqo8NV/NIfKab8K4yItwwz8X43D298hzTbndYF/1Zb5wMYwSxqw6UxD
ShXSwEeXdEOkfu0iy9C1s5cO4wDROpj71OTXLPkTWA/q+jo+E+R+C6dFFoP357xz
6zKuP8svlyTlOAcMiaga4bVNs6gNbAXEqXqkc1h62/mpyTC0KLooxgt/R9FVfNKX
t7RVRlaFauHeDadAro39mvyxC3JumwWJFN0b5Gp1RkZurBtXnhUMpQ9FDa6ibjd6
1mCfBLy9vfo0us3tU/3MKCX8/zPf86rI6xjUPYdlwqYuY59C/wODKVZWOLvpAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUpasn0SGt09MYvFGERvz2s6ePA9QwHwYDVR0j
BBgwFoAUwRHiK4irPfcT7O87Q9lxl/FDR9cwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DNUM2MzU1QkY4QkJBMDJBRkRFQzAxNzQwNDE4Q0JEQTUy
RkFGRDExOUUxNkQ1MzlDMTFDQTk5NzY4RUE5NzdGLzAvQzExMUUyMkI4OEFCM0RG
NzEzRUNFRjNCNDNEOTcxOTdGMTQzNDdENy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMTExRTIyQjg4QUIzREY3MTNF
Q0VGM0I0M0Q5NzE5N0YxNDM0N0Q3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzVDNjM1NUJGOEJCQTAyQUZERUMwMTc0MDQxOENCREE1MkZBRkQxMTlF
MTZENTM5QzExQ0E5OTc2OEVBOTc3Ri8wLzMyMzgzMDMzM2EzNzMwMzYzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMzM3MzUzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDcGAw
DQYJKoZIhvcNAQELBQADggEBAAh8t22QE49mLRfsWTALJohA8Qdppcr84x7/PzsI
xha1WfLdQeaom4lb11gUyyGVd6fATp8K7dXJI2ZlZyT4N7ijSHxajtwLUcSyiWlO
FFUcL5ZIi/0jeh2jLGBiEwRbTyr37DpTSOqDVo44aPK57fjri92zSTBaIij/z/FD
Tna1s45ZCmBfm/wm+2whDdeIuioiNutjNIZwpCy161J5zBPKpIrwF+mLI9h/xWTI
9KM2CV92C0FRdIdXktnthVcewfnsh+ajYQSQob4YU0eD0yxZf+ggDGTKHqJrPiW0
PUGuv2d4gAtoKudSy3ShecW9k2foJSRtCnbNs4Sb/CrUOdw=
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:17:13 2026 by rpki-client