This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C6C728C472385302417E92E3B1F802FD46DA0D86959297AE3D1C8E7D122CF458/0/323830333a313131303a3a2f33322d3332203d3e20323731393931.roa
File:                     323830333a313131303a3a2f33322d3332203d3e20323731393931.roa (raw, json)
Hash identifier:          C/VZs4hGKwITYjshs9E2Ll6Tb0d5Ir+WaqRctwQP9ow=
Subject key identifier:   2A:63:C3:3B:C2:76:8A:C0:60:27:C9:E2:DC:9C:53:CA:0D:A0:D6:7E
Certificate issuer:       /CN=5A49C6037E001719BFB9F4904E8C15D622CF0402
Certificate serial:       68AC02B3F57706A1AEBDF8FA6E26ED0691B7FC58
Authority key identifier: 5A:49:C6:03:7E:00:17:19:BF:B9:F4:90:4E:8C:15:D6:22:CF:04:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5A49C6037E001719BFB9F4904E8C15D622CF0402.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C6C728C472385302417E92E3B1F802FD46DA0D86959297AE3D1C8E7D122CF458/0/323830333a313131303a3a2f33322d3332203d3e20323731393931.roa
Signing time:             Tue 06 Jan 2026 19:22:30 +0000
ROA not before:           Tue 06 Jan 2026 19:17:30 +0000
ROA not after:            Tue 05 Jan 2027 19:22:30 +0000
asID:                     271991
IP address blocks:        2803:1110::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C6C728C472385302417E92E3B1F802FD46DA0D86959297AE3D1C8E7D122CF458/0/5A49C6037E001719BFB9F4904E8C15D622CF0402.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C6C728C472385302417E92E3B1F802FD46DA0D86959297AE3D1C8E7D122CF458/0/5A49C6037E001719BFB9F4904E8C15D622CF0402.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5A49C6037E001719BFB9F4904E8C15D622CF0402.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ac:02:b3:f5:77:06:a1:ae:bd:f8:fa:6e:26:ed:06:91:b7:fc:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A49C6037E001719BFB9F4904E8C15D622CF0402
        Validity
            Not Before: Jan  6 19:17:30 2026 GMT
            Not After : Jan  5 19:22:30 2027 GMT
        Subject: CN=2A63C33BC2768AC06027C9E2DC9C53CA0DA0D67E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c9:5c:df:ab:7f:98:1c:86:88:7f:38:78:b6:
                    11:41:6c:cb:b7:e1:4a:8b:3f:eb:f0:7c:4d:85:5d:
                    0d:b7:e1:1a:d3:2f:14:b9:8e:e5:1f:55:62:47:d8:
                    c8:81:28:99:d8:20:35:2d:fc:a0:09:32:66:c0:d0:
                    f8:47:03:90:b0:db:0c:6f:aa:5c:eb:a0:bc:57:75:
                    71:01:16:f3:6e:58:25:14:0c:38:62:03:dc:88:be:
                    65:66:01:a4:64:70:c7:71:c8:16:af:73:e9:3a:6d:
                    0c:0e:82:67:fd:b4:ca:6a:14:a8:09:12:51:ba:f7:
                    ca:23:70:79:45:98:04:de:bb:5a:bf:a2:43:0c:67:
                    26:a7:f2:fd:03:db:79:b7:0b:17:2f:76:48:82:1c:
                    f0:5a:96:94:bf:9f:36:a0:c8:e7:41:fb:41:3d:06:
                    23:2f:6f:6b:08:d4:ec:9f:d4:08:4b:86:14:c2:ea:
                    b7:b9:d1:2e:89:db:fc:f9:03:57:8a:d3:5d:ca:3d:
                    6f:c2:42:25:f8:a2:f1:32:79:90:20:a0:f3:cc:21:
                    76:89:b6:f5:98:d5:10:4e:35:29:36:53:34:83:a1:
                    de:91:95:ff:fd:7d:46:24:a9:7d:18:09:bf:0f:28:
                    9d:eb:6d:60:68:e7:e1:e4:e4:81:ba:5e:4d:75:74:
                    1e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:63:C3:3B:C2:76:8A:C0:60:27:C9:E2:DC:9C:53:CA:0D:A0:D6:7E
            X509v3 Authority Key Identifier:
                keyid:5A:49:C6:03:7E:00:17:19:BF:B9:F4:90:4E:8C:15:D6:22:CF:04:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C6C728C472385302417E92E3B1F802FD46DA0D86959297AE3D1C8E7D122CF458/0/5A49C6037E001719BFB9F4904E8C15D622CF0402.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5A49C6037E001719BFB9F4904E8C15D622CF0402.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C6C728C472385302417E92E3B1F802FD46DA0D86959297AE3D1C8E7D122CF458/0/323830333a313131303a3a2f33322d3332203d3e20323731393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1110::/32

    Signature Algorithm: sha256WithRSAEncryption
         bd:c6:be:cb:10:d8:7d:40:d0:f7:fa:dd:76:91:6b:7a:3c:4f:
         1e:ed:50:e0:eb:8f:7f:9c:69:9b:b2:16:89:20:22:07:a8:ac:
         1f:ed:aa:e6:e3:7c:bc:11:93:2b:75:34:c0:35:ae:7b:8d:5f:
         cd:b3:b5:f1:34:e5:53:dd:9e:dc:b8:67:6c:8c:c7:ef:88:00:
         b5:da:a2:46:7b:37:b5:67:ef:76:29:f3:9c:70:50:da:78:71:
         bb:93:b1:75:87:2d:6e:fa:d8:3f:ac:5e:c5:05:d4:c5:d8:65:
         68:a0:7a:cc:03:ea:ae:53:29:e2:b7:90:cf:0e:c8:60:e3:af:
         28:02:4e:5f:94:8d:f5:ae:b4:a0:4d:3a:a0:db:26:09:4d:f2:
         5b:23:c4:c9:4a:ba:f5:74:b7:4e:14:e3:48:59:a7:e0:98:d4:
         0f:ae:a0:40:00:d6:40:1f:5c:0d:8e:28:f4:45:c2:0c:df:5e:
         f8:e5:d0:e2:de:02:c9:c7:36:c9:a7:86:0c:2c:ab:4a:4e:a5:
         85:0e:9d:7f:e4:fa:63:99:ad:a8:d2:5e:ed:7f:1d:de:e3:dc:
         2f:f4:97:cd:59:8a:5a:b5:10:9d:59:13:90:f6:c8:e5:db:4e:
         0c:ff:d0:56:c8:68:c7:6d:b7:91:7c:d2:d5:6d:79:1b:44:8d:
         49:df:0b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:58:07 2026 by rpki-client