This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/323830333a613061303a3a2f34302d3438203d3e20323636373930.roa
File:                     323830333a613061303a3a2f34302d3438203d3e20323636373930.roa (raw, json)
Hash identifier:          ck7WtleH3807wwxOigaXURnjysCAP5kHL7K++S1nDIc=
Subject key identifier:   63:F8:E2:2A:E9:50:39:0A:BE:70:D8:30:33:87:CE:23:2F:64:B4:E6
Certificate issuer:       /CN=69B942F2442A4B878DCF7E43089B60B94955608D
Certificate serial:       454D9E3D815A915F0ACF3E8B4D4F73B7F542A5C9
Authority key identifier: 69:B9:42:F2:44:2A:4B:87:8D:CF:7E:43:08:9B:60:B9:49:55:60:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/323830333a613061303a3a2f34302d3438203d3e20323636373930.roa
Signing time:             Tue 06 Jan 2026 18:59:30 +0000
ROA not before:           Tue 06 Jan 2026 18:54:30 +0000
ROA not after:            Tue 05 Jan 2027 18:59:30 +0000
asID:                     266790
IP address blocks:        2803:a0a0::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 03:52:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:4d:9e:3d:81:5a:91:5f:0a:cf:3e:8b:4d:4f:73:b7:f5:42:a5:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69B942F2442A4B878DCF7E43089B60B94955608D
        Validity
            Not Before: Jan  6 18:54:30 2026 GMT
            Not After : Jan  5 18:59:30 2027 GMT
        Subject: CN=63F8E22AE950390ABE70D8303387CE232F64B4E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b0:77:8a:5a:3e:80:49:e1:e3:b9:64:1e:3a:
                    6f:50:a0:7c:96:54:c6:db:f7:53:b4:9f:b0:2e:25:
                    55:24:18:f3:53:2e:db:25:6b:b2:8c:15:02:ae:f2:
                    21:3f:e3:25:71:b7:42:8b:2d:ac:39:dc:27:2d:d2:
                    db:f1:30:21:9c:97:3c:92:6b:ef:2c:93:8c:18:75:
                    c8:72:3f:57:47:15:b1:75:ea:d2:a1:e6:0d:9f:c7:
                    77:8b:3b:2b:6f:ec:e1:58:18:a9:9e:17:36:e0:45:
                    c7:cb:57:f5:a9:67:e1:70:df:f5:65:e1:54:88:69:
                    73:46:0e:a5:4d:69:6b:e4:9a:f2:5e:d1:7f:09:ca:
                    11:f0:9e:c0:cf:33:53:ef:24:30:9d:c4:29:a8:3d:
                    c5:0d:5f:d8:80:91:33:3e:00:b8:e6:8b:62:f2:0e:
                    01:bd:6d:1c:82:f2:da:c9:01:9a:ef:57:c8:4e:7c:
                    3c:ca:47:c0:15:81:59:49:a4:2f:56:17:54:d4:39:
                    2a:c3:d6:e5:f2:0c:f1:0b:af:49:32:2e:70:5e:b6:
                    52:5e:76:af:eb:87:57:ee:cc:32:58:50:94:92:cc:
                    09:bb:d7:87:9d:51:29:94:15:e4:74:bb:d7:23:05:
                    81:74:85:b1:be:1f:f5:8f:53:ab:84:be:5c:db:6c:
                    f0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F8:E2:2A:E9:50:39:0A:BE:70:D8:30:33:87:CE:23:2F:64:B4:E6
            X509v3 Authority Key Identifier:
                keyid:69:B9:42:F2:44:2A:4B:87:8D:CF:7E:43:08:9B:60:B9:49:55:60:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/323830333a613061303a3a2f34302d3438203d3e20323636373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a0a0::/40

    Signature Algorithm: sha256WithRSAEncryption
         6c:be:7b:ee:79:ff:b2:49:6e:51:86:24:37:51:48:ab:84:26:
         c3:c8:1a:72:17:e4:b0:c8:58:e4:8e:fd:50:6f:7a:6c:70:93:
         0f:b1:df:79:f6:fb:45:e8:3d:62:bd:f8:28:b1:c0:96:4b:34:
         02:cf:9d:ec:99:6e:46:b3:9c:1c:dc:0d:06:00:a1:b6:23:de:
         e7:99:ad:dd:ba:7a:19:e2:0d:79:4a:e6:5a:08:4a:d4:31:c5:
         51:e5:f5:e8:45:f5:f2:2c:44:01:5d:53:7c:8a:58:38:b8:37:
         59:8e:ce:5a:27:9a:31:7a:f9:db:61:e7:5a:f8:53:83:88:b5:
         76:3f:23:c6:7b:33:e9:43:0c:da:5c:cc:b1:b0:ca:bb:08:69:
         6b:8f:5c:7b:05:98:a7:8c:cd:8b:0b:76:61:32:2a:2b:79:a8:
         26:0c:d8:32:a9:6c:8b:c6:ee:ff:00:b3:b0:3e:d1:58:db:40:
         50:9c:df:b2:66:57:65:24:77:5d:99:a7:ac:ff:34:e1:d2:a2:
         fc:0a:a1:92:59:ba:ad:81:70:b4:4c:bc:91:53:48:3a:4c:da:
         18:0b:ab:78:b8:e4:56:35:5b:dd:76:e4:c3:ea:93:42:f9:ab:
         1e:fd:bd:67:e9:5d:31:5b:2a:cf:0a:d4:e1:fd:c0:18:d2:b2:
         ca:75:1c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:08:40 2026 by rpki-client