This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/323830333a363261303a3a2f33322d3332203d3e20323636383534.roa
File:                     323830333a363261303a3a2f33322d3332203d3e20323636383534.roa (raw, json)
Hash identifier:          bwdGkXrxewIDlWOf6GODS0NpeP/aeJeQrk4MOoxPN30=
Subject key identifier:   0C:A8:29:DC:56:AA:11:47:91:D9:B4:9D:2B:13:0E:80:DA:75:6E:11
Certificate issuer:       /CN=ADA207DD1F23D0467C67E6A40AD7F7359785A137
Certificate serial:       303274F41FA379FB2C87CB677D3708C7BD3568AD
Authority key identifier: AD:A2:07:DD:1F:23:D0:46:7C:67:E6:A4:0A:D7:F7:35:97:85:A1:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/323830333a363261303a3a2f33322d3332203d3e20323636383534.roa
Signing time:             Wed 31 Dec 2025 14:45:01 +0000
ROA not before:           Wed 31 Dec 2025 14:40:01 +0000
ROA not after:            Wed 30 Dec 2026 14:45:01 +0000
asID:                     266854
IP address blocks:        2803:62a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:32:74:f4:1f:a3:79:fb:2c:87:cb:67:7d:37:08:c7:bd:35:68:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADA207DD1F23D0467C67E6A40AD7F7359785A137
        Validity
            Not Before: Dec 31 14:40:01 2025 GMT
            Not After : Dec 30 14:45:01 2026 GMT
        Subject: CN=0CA829DC56AA114791D9B49D2B130E80DA756E11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:76:05:c6:4c:07:3b:ac:6c:72:a0:ed:5c:1c:
                    a4:8c:e4:bd:c0:9b:63:25:a6:00:e2:9a:b8:d6:47:
                    9b:b4:43:3e:c7:95:c2:12:7f:2e:03:02:5b:2d:d0:
                    2c:a8:06:c4:f0:51:2d:f9:0b:6b:bc:e9:b0:2d:81:
                    36:88:e1:66:7a:87:e4:53:5f:02:9d:4e:85:05:d1:
                    69:ae:9e:72:d1:ee:75:a4:33:64:14:1e:58:87:f3:
                    36:75:f2:d7:da:d4:cf:ec:87:19:13:97:b4:75:fb:
                    71:de:0b:8b:eb:f8:51:7e:4e:b1:59:e8:1d:9e:63:
                    f5:4f:31:cf:49:20:70:f2:77:0e:b6:d0:fa:d2:6e:
                    0f:22:9e:43:b8:b4:b0:3b:cc:14:ae:af:1d:f2:da:
                    2c:c6:4f:6c:28:ec:7a:fe:8e:48:0f:ae:ad:d1:bb:
                    fc:8b:25:3c:fd:aa:e9:7f:d9:56:11:98:27:0b:e3:
                    24:2a:30:6a:df:7c:3a:fd:ec:98:cd:be:bf:ad:2d:
                    ab:ba:ab:16:6f:d4:3a:6b:93:51:99:44:5d:25:8e:
                    15:4d:95:6f:94:53:c4:6a:1a:0e:db:a6:d5:3f:fc:
                    b9:ac:7c:f9:c0:ed:b9:bc:b9:0a:29:01:5e:e6:cb:
                    0d:47:b3:51:1c:86:61:f9:98:96:1c:6b:49:9a:75:
                    30:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A8:29:DC:56:AA:11:47:91:D9:B4:9D:2B:13:0E:80:DA:75:6E:11
            X509v3 Authority Key Identifier:
                keyid:AD:A2:07:DD:1F:23:D0:46:7C:67:E6:A4:0A:D7:F7:35:97:85:A1:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/323830333a363261303a3a2f33322d3332203d3e20323636383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:62a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:82:7e:bb:d7:d3:23:70:af:b5:b8:63:41:be:cb:4f:3f:32:
         e0:86:c8:25:bc:22:65:28:a5:f5:aa:39:56:6b:dc:dc:12:78:
         a0:84:bf:1c:a9:7b:96:fb:32:e2:bf:77:6b:7d:07:53:1b:68:
         00:f8:73:0d:34:28:1c:f1:e8:15:fd:e8:d6:ae:de:68:81:1e:
         7b:87:45:2f:7b:a4:60:c1:29:5f:53:93:fc:a0:de:7f:dc:ff:
         71:72:75:68:83:74:ef:a2:98:94:db:ef:b1:0a:dd:10:79:2f:
         6b:d9:40:f1:36:75:46:4e:20:5a:fe:e5:dc:13:23:54:b7:17:
         49:86:d4:18:78:86:ab:b6:41:79:cb:c4:21:70:0b:ea:fe:8d:
         d5:7f:4f:97:ed:f9:5f:25:11:97:c3:6b:fa:f7:0c:44:8c:90:
         2a:36:57:f7:cc:cd:23:d5:11:af:cc:02:70:68:2e:b2:54:10:
         4c:9d:0a:29:ef:14:5a:b4:b6:5f:d3:d0:35:45:18:54:91:2b:
         14:09:e2:d5:78:a2:10:da:04:25:74:b1:72:82:23:8d:98:12:
         61:86:83:d6:a4:5f:52:5a:2d:26:08:e1:e5:81:25:85:23:2f:
         42:a2:33:18:16:f9:eb:5a:5a:37:54:e7:f2:8f:4d:61:4d:ab:
         6c:10:70:f5
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUMDJ09B+jefssh8tnfTcIx701aK0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQURBMjA3REQxRjIzRDA0NjdDNjdFNkE0MEFEN0Y3MzU5
Nzg1QTEzNzAeFw0yNTEyMzExNDQwMDFaFw0yNjEyMzAxNDQ1MDFaMDMxMTAvBgNV
BAMTKDBDQTgyOURDNTZBQTExNDc5MUQ5QjQ5RDJCMTMwRTgwREE3NTZFMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDadgXGTAc7rGxyoO1cHKSM5L3A
m2MlpgDimrjWR5u0Qz7HlcISfy4DAlst0CyoBsTwUS35C2u86bAtgTaI4WZ6h+RT
XwKdToUF0WmunnLR7nWkM2QUHliH8zZ18tfa1M/shxkTl7R1+3HeC4vr+FF+TrFZ
6B2eY/VPMc9JIHDydw620PrSbg8inkO4tLA7zBSurx3y2izGT2wo7Hr+jkgPrq3R
u/yLJTz9qul/2VYRmCcL4yQqMGrffDr97JjNvr+tLau6qxZv1Dprk1GZRF0ljhVN
lW+UU8RqGg7bptU//LmsfPnA7bm8uQopAV7myw1Hs1EchmH5mJYca0madTB3AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUDKgp3FaqEUeR2bSdKxMOgNp1bhEwHwYDVR0j
BBgwFoAUraIH3R8j0EZ8Z+akCtf3NZeFoTcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DOEM3QUJCOUI2QzIyOTc1NjE2MjQ4QzQ4QjlFODM0NjYz
M0MzMzVDMEQ2NjU4MTE2RTUyOEU2MEQ4N0RFNjYyLzAvQURBMjA3REQxRjIzRDA0
NjdDNjdFNkE0MEFEN0Y3MzU5Nzg1QTEzNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BREEyMDdERDFGMjNEMDQ2N0M2
N0U2QTQwQUQ3RjczNTk3ODVBMTM3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzhDN0FCQjlCNkMyMjk3NTYxNjI0OEM0OEI5RTgzNDY2MzNDMzM1QzBE
NjY1ODExNkU1MjhFNjBEODdERTY2Mi8wLzMyMzgzMDMzM2EzNjMyNjEzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNjM4MzUzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDYqAw
DQYJKoZIhvcNAQELBQADggEBAJWCfrvX0yNwr7W4Y0G+y08/MuCGyCW8ImUopfWq
OVZr3NwSeKCEvxype5b7MuK/d2t9B1MbaAD4cw00KBzx6BX96Nau3miBHnuHRS97
pGDBKV9Tk/yg3n/c/3FydWiDdO+imJTb77EK3RB5L2vZQPE2dUZOIFr+5dwTI1S3
F0mG1Bh4hqu2QXnLxCFwC+r+jdV/T5ft+V8lEZfDa/r3DESMkCo2V/fMzSPVEa/M
AnBoLrJUEEydCinvFFq0tl/T0DVFGFSRKxQJ4tV4ohDaBCV0sXKCI42YEmGGg9ak
X1JaLSYI4eWBJYUjL0KiMxgW+etaWjdU5/KPTWFNq2wQcPU=
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:39:28 2026 by rpki-client