This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/323830333a313565303a3830303a3a2f34302d3430203d3e20323730303337.roa
File:                     323830333a313565303a3830303a3a2f34302d3430203d3e20323730303337.roa (raw, json)
Hash identifier:          qte/wTzzmJGPPM3YJ8d2PGN0pKZ94OHOqVHREN2MRVU=
Subject key identifier:   E0:7C:7A:C9:C2:82:42:A7:5E:C4:15:0D:F4:F3:14:12:14:6D:FD:34
Certificate issuer:       /CN=9BC7FB723211AEDC038D47F1F6A375939FD56624
Certificate serial:       17D1C4A3D39B5831DF1C8E52F12E82ABDE5576D2
Authority key identifier: 9B:C7:FB:72:32:11:AE:DC:03:8D:47:F1:F6:A3:75:93:9F:D5:66:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BC7FB723211AEDC038D47F1F6A375939FD56624.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/323830333a313565303a3830303a3a2f34302d3430203d3e20323730303337.roa
Signing time:             Tue 06 Jan 2026 19:02:05 +0000
ROA not before:           Tue 06 Jan 2026 18:57:05 +0000
ROA not after:            Tue 05 Jan 2027 19:02:05 +0000
asID:                     270037
IP address blocks:        2803:15e0:800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/9BC7FB723211AEDC038D47F1F6A375939FD56624.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/9BC7FB723211AEDC038D47F1F6A375939FD56624.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BC7FB723211AEDC038D47F1F6A375939FD56624.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:d1:c4:a3:d3:9b:58:31:df:1c:8e:52:f1:2e:82:ab:de:55:76:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BC7FB723211AEDC038D47F1F6A375939FD56624
        Validity
            Not Before: Jan  6 18:57:05 2026 GMT
            Not After : Jan  5 19:02:05 2027 GMT
        Subject: CN=E07C7AC9C28242A75EC4150DF4F31412146DFD34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:47:b5:67:7d:b5:8f:22:44:16:52:11:cb:01:
                    8a:86:f6:c2:e8:19:57:99:fd:db:8d:ca:41:88:8b:
                    51:ab:a6:6c:e0:56:63:73:57:f9:7e:01:0b:c0:31:
                    64:c1:be:b4:1b:ea:4f:c0:57:23:8e:b8:8a:81:17:
                    8d:42:5d:90:91:0b:b6:14:92:cc:02:24:eb:8d:d7:
                    27:63:30:37:f3:62:a9:fc:cb:d8:9a:ec:ee:a3:9c:
                    e5:69:5d:35:be:04:d6:93:e8:fe:a0:61:01:21:ee:
                    1e:61:78:63:0a:13:1c:6e:95:47:da:dc:56:53:dc:
                    a8:6d:df:df:51:a1:9e:d3:55:4c:96:3a:62:c6:27:
                    f4:39:e7:14:aa:fd:52:f3:b0:33:df:63:62:3f:9c:
                    78:1a:44:0e:c7:1c:28:a4:2c:9c:9c:1b:07:f8:0f:
                    1e:35:85:2e:3b:4c:33:c7:fb:1b:34:f1:3d:17:b6:
                    51:1c:97:16:92:20:a0:58:d2:23:cd:16:60:f8:b7:
                    60:c3:87:50:b3:58:b6:40:cb:87:0b:cd:3b:07:0b:
                    94:2f:41:f5:51:44:d6:f6:3e:c3:4a:32:86:5b:dd:
                    3a:c7:b9:9c:f1:f3:f0:09:ad:6a:f3:94:30:19:a8:
                    50:9c:58:8c:c3:e2:89:9a:8c:2a:3b:74:0b:89:01:
                    22:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:7C:7A:C9:C2:82:42:A7:5E:C4:15:0D:F4:F3:14:12:14:6D:FD:34
            X509v3 Authority Key Identifier:
                keyid:9B:C7:FB:72:32:11:AE:DC:03:8D:47:F1:F6:A3:75:93:9F:D5:66:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/9BC7FB723211AEDC038D47F1F6A375939FD56624.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BC7FB723211AEDC038D47F1F6A375939FD56624.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/323830333a313565303a3830303a3a2f34302d3430203d3e20323730303337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:15e0:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         7d:9b:2e:cd:a7:d2:9d:f2:e5:3c:54:c8:ae:d6:32:56:8d:46:
         2f:0e:54:be:ef:bc:00:5c:f5:df:a6:69:66:55:3b:05:ac:62:
         ae:6b:13:5d:76:b9:6a:b1:b3:e5:70:ca:7b:81:52:9e:12:cf:
         cb:81:37:0a:ef:ee:16:31:5b:49:8a:22:8f:9a:2e:ff:1f:bc:
         0a:49:a1:e9:ff:b9:e6:6c:d8:fe:98:a5:30:57:c3:ec:eb:a9:
         7c:8d:cf:0d:14:be:b6:35:a0:ad:68:88:83:6c:8e:95:40:f5:
         12:21:f7:35:cc:eb:2a:d5:58:89:b6:70:17:da:bf:0a:85:db:
         ef:55:5f:77:93:b7:e8:03:a2:ca:a0:79:0b:60:24:66:ba:b2:
         80:a9:14:c3:c6:7c:c8:d9:16:b1:9f:ea:5f:46:b9:aa:02:71:
         dc:a8:8a:62:21:a9:77:e2:87:37:07:22:42:1b:a9:2f:94:bd:
         16:98:8f:cb:91:ff:1f:f5:b7:6e:20:c8:25:0c:1f:20:0c:ad:
         e9:08:e9:cf:7a:0d:17:04:60:a6:c7:ff:55:89:58:8e:32:a8:
         72:16:dc:4f:d4:3c:1e:48:18:20:8f:40:1f:a0:0f:6d:f2:9f:
         cc:48:92:7e:8b:d1:3e:e1:78:62:5b:35:19:f5:cb:26:85:af:
         b0:9e:5e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:38:52 2026 by rpki-client