This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/323830333a633163303a3a2f33322d3332203d3e20323635363739.roa
File:                     323830333a633163303a3a2f33322d3332203d3e20323635363739.roa (raw, json)
Hash identifier:          afm5jY0NuCFd6RtY5P3k3HcaRfNthbbcxVUjLWtw7bo=
Subject key identifier:   0C:14:76:47:83:37:DA:39:53:6B:B9:A4:D5:52:C7:92:2B:7A:37:EB
Certificate issuer:       /CN=604B953E7CDFD156CD44C7E9BEDC37AE69B43881
Certificate serial:       6301D3EEAAE7A23A670CF714CE006F0573865DB8
Authority key identifier: 60:4B:95:3E:7C:DF:D1:56:CD:44:C7:E9:BE:DC:37:AE:69:B4:38:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/323830333a633163303a3a2f33322d3332203d3e20323635363739.roa
Signing time:             Tue 06 Jan 2026 19:15:24 +0000
ROA not before:           Tue 06 Jan 2026 19:10:24 +0000
ROA not after:            Tue 05 Jan 2027 19:15:24 +0000
asID:                     265679
IP address blocks:        2803:c1c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:01:d3:ee:aa:e7:a2:3a:67:0c:f7:14:ce:00:6f:05:73:86:5d:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=604B953E7CDFD156CD44C7E9BEDC37AE69B43881
        Validity
            Not Before: Jan  6 19:10:24 2026 GMT
            Not After : Jan  5 19:15:24 2027 GMT
        Subject: CN=0C1476478337DA39536BB9A4D552C7922B7A37EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:9f:cf:dd:7b:0e:ca:ad:ac:88:75:96:b7:78:
                    c3:f3:17:09:eb:ee:e6:5a:70:41:5a:94:0e:7c:5c:
                    1f:c2:ca:1c:f7:b9:7a:8f:a6:61:31:e3:5a:73:47:
                    b5:5a:c5:84:af:fd:da:5d:a0:05:f3:82:97:c5:2c:
                    1a:5f:ac:e5:20:30:7a:c9:53:02:41:73:a4:39:5c:
                    f8:44:9b:a2:e7:bd:e1:b1:e4:b4:7d:b8:bd:35:96:
                    12:57:20:c2:be:76:b5:c9:89:95:0c:43:13:c4:e7:
                    56:7d:03:51:da:12:78:52:5a:8e:52:d1:e1:88:d0:
                    c3:ba:c5:90:a4:21:ed:06:5c:b7:e8:25:29:71:b3:
                    ee:18:3e:b6:75:39:e6:2d:df:dc:e0:23:9b:46:fb:
                    dd:41:e9:f0:5b:eb:f3:57:5f:77:e0:41:42:c9:52:
                    e7:cb:7f:68:1c:a9:fc:9e:42:f2:7b:cc:23:30:62:
                    f1:ea:94:6f:96:93:af:00:c3:95:8e:ed:69:1b:da:
                    d3:d8:42:3b:51:dd:7c:f5:2a:bd:f4:66:c6:b1:a1:
                    3e:f0:c5:dd:57:7f:06:16:5f:f8:4b:16:1a:f3:d1:
                    92:b5:f7:1a:d1:92:37:52:26:f5:4b:d8:65:76:a0:
                    1d:f1:29:fc:31:7a:bd:fd:e2:7a:a6:16:c0:58:f3:
                    20:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:14:76:47:83:37:DA:39:53:6B:B9:A4:D5:52:C7:92:2B:7A:37:EB
            X509v3 Authority Key Identifier:
                keyid:60:4B:95:3E:7C:DF:D1:56:CD:44:C7:E9:BE:DC:37:AE:69:B4:38:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/323830333a633163303a3a2f33322d3332203d3e20323635363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c1c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c8:88:fe:ae:98:24:c2:71:d9:d5:93:ec:6c:71:67:cb:c6:e5:
         27:5b:2c:4b:b1:3b:5f:53:8c:ac:a6:18:67:8f:77:70:a9:58:
         f3:dd:2f:b9:28:c3:1a:ec:a3:3b:56:88:f7:40:27:a7:0e:d0:
         e1:25:31:8c:8a:1b:5c:fb:d7:be:9a:cc:32:84:9e:58:61:35:
         0b:ad:5e:b0:a5:4e:6a:f4:7e:db:ce:c3:f8:c3:56:52:1f:52:
         bf:7f:4d:11:99:88:96:7c:4d:06:a6:66:10:ef:4d:6c:2c:af:
         17:97:2c:f9:c5:0e:40:7c:b2:d1:b0:39:66:53:39:be:e2:9b:
         b7:04:09:22:89:f3:a4:c9:18:4a:81:09:3b:46:45:13:8f:76:
         6f:51:d9:98:ae:1f:4b:be:13:a8:5a:d0:bf:ce:4d:1c:91:b3:
         ed:e7:e9:85:52:cc:86:6e:b6:1b:df:7e:c3:cc:c7:77:6d:c8:
         50:ef:f3:13:1c:ef:01:c8:69:38:ad:01:ef:90:6c:2e:6d:6e:
         b0:34:ac:05:50:04:cc:79:f4:9b:3f:b4:7b:05:cb:f4:a5:1b:
         02:32:2e:ad:64:f9:df:23:f0:97:36:92:98:48:13:4f:0a:70:
         42:71:13:8b:f0:78:24:7a:34:88:59:37:5b:d1:8e:53:e6:53:
         f7:b4:f9:df
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUYwHT7qrnojpnDPcUzgBvBXOGXbgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA0Qjk1M0U3Q0RGRDE1NkNENDRDN0U5QkVEQzM3QUU2
OUI0Mzg4MTAeFw0yNjAxMDYxOTEwMjRaFw0yNzAxMDUxOTE1MjRaMDMxMTAvBgNV
BAMTKDBDMTQ3NjQ3ODMzN0RBMzk1MzZCQjlBNEQ1NTJDNzkyMkI3QTM3RUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsn8/dew7KrayIdZa3eMPzFwnr
7uZacEFalA58XB/Cyhz3uXqPpmEx41pzR7VaxYSv/dpdoAXzgpfFLBpfrOUgMHrJ
UwJBc6Q5XPhEm6LnveGx5LR9uL01lhJXIMK+drXJiZUMQxPE51Z9A1HaEnhSWo5S
0eGI0MO6xZCkIe0GXLfoJSlxs+4YPrZ1OeYt39zgI5tG+91B6fBb6/NXX3fgQULJ
UufLf2gcqfyeQvJ7zCMwYvHqlG+Wk68Aw5WO7Wkb2tPYQjtR3Xz1Kr30ZsaxoT7w
xd1XfwYWX/hLFhrz0ZK19xrRkjdSJvVL2GV2oB3xKfwxer394nqmFsBY8yAlAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUDBR2R4M32jlTa7mk1VLHkit6N+swHwYDVR0j
BBgwFoAUYEuVPnzf0VbNRMfpvtw3rmm0OIEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENTM3OTY3MTg5RjRCMjVBMUE3RUJFRDNBMkE5QzQ1RUJD
OTlERTlCQjY4RUNBRTZENUY2MEQxMzU0RUQ2Mzg3LzAvNjA0Qjk1M0U3Q0RGRDE1
NkNENDRDN0U5QkVEQzM3QUU2OUI0Mzg4MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82MDRCOTUzRTdDREZEMTU2Q0Q0
NEM3RTlCRURDMzdBRTY5QjQzODgxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDUzNzk2NzE4OUY0QjI1QTFBN0VCRUQzQTJBOUM0NUVCQzk5REU5QkI2
OEVDQUU2RDVGNjBEMTM1NEVENjM4Ny8wLzMyMzgzMDMzM2E2MzMxNjMzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNTM2MzczOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDwcAw
DQYJKoZIhvcNAQELBQADggEBAMiI/q6YJMJx2dWT7GxxZ8vG5SdbLEuxO19TjKym
GGePd3CpWPPdL7kowxrsoztWiPdAJ6cO0OElMYyKG1z7176azDKEnlhhNQutXrCl
Tmr0ftvOw/jDVlIfUr9/TRGZiJZ8TQamZhDvTWwsrxeXLPnFDkB8stGwOWZTOb7i
m7cECSKJ86TJGEqBCTtGRROPdm9R2ZiuH0u+E6ha0L/OTRyRs+3n6YVSzIZuthvf
fsPMx3dtyFDv8xMc7wHIaTitAe+QbC5tbrA0rAVQBMx59Js/tHsFy/SlGwIyLq1k
+d8j8Jc2kphIE08KcEJxE4vweCR6NIhZN1vRjlPmU/e0+d8=
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:30:16 2026 by rpki-client