This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/323830333a613634303a3a2f33322d3536203d3e203436313938.roa
File:                     323830333a613634303a3a2f33322d3536203d3e203436313938.roa (raw, json)
Hash identifier:          ZEe/Z1WlMNI59z7XpszcYJdGwNpcIEryEmUTiHPVg40=
Subject key identifier:   62:72:35:F2:EB:0B:CF:0A:84:69:D0:F9:BD:05:5F:72:1F:E8:0C:FD
Certificate issuer:       /CN=70B51DCC347573651055FC72DB19C170524018CC
Certificate serial:       4DD19EBB719E4EC386951F438DF889F42D01C7B1
Authority key identifier: 70:B5:1D:CC:34:75:73:65:10:55:FC:72:DB:19:C1:70:52:40:18:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B51DCC347573651055FC72DB19C170524018CC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/323830333a613634303a3a2f33322d3536203d3e203436313938.roa
Signing time:             Tue 06 Jan 2026 19:12:19 +0000
ROA not before:           Tue 06 Jan 2026 19:07:19 +0000
ROA not after:            Tue 05 Jan 2027 19:12:19 +0000
asID:                     46198
IP address blocks:        2803:a640::/32 maxlen: 56
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/70B51DCC347573651055FC72DB19C170524018CC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/70B51DCC347573651055FC72DB19C170524018CC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B51DCC347573651055FC72DB19C170524018CC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:d1:9e:bb:71:9e:4e:c3:86:95:1f:43:8d:f8:89:f4:2d:01:c7:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70B51DCC347573651055FC72DB19C170524018CC
        Validity
            Not Before: Jan  6 19:07:19 2026 GMT
            Not After : Jan  5 19:12:19 2027 GMT
        Subject: CN=627235F2EB0BCF0A8469D0F9BD055F721FE80CFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b8:29:10:29:67:1e:62:bc:15:75:f1:72:76:
                    e9:16:4b:6b:d3:fd:f0:7e:6c:18:ad:f6:7c:c0:e3:
                    7c:49:4f:99:f1:26:a2:13:5d:5b:1d:86:68:b2:71:
                    13:24:9a:5f:81:84:89:0b:6e:ba:9b:0b:98:b2:a8:
                    2c:a7:bd:47:3b:53:61:09:08:8e:05:54:72:3d:7f:
                    2b:06:d3:af:60:0f:26:96:58:9b:e2:dc:0c:9d:73:
                    9b:53:02:01:11:d0:a3:05:a8:5d:9e:19:fd:2c:5a:
                    87:03:f9:57:bd:04:81:9f:a3:39:b0:f6:10:cc:87:
                    5b:7d:5c:08:85:83:f8:92:ee:50:28:e8:ff:5f:d6:
                    29:07:7e:f2:f8:4a:a9:5a:2a:a0:8d:46:96:f2:dd:
                    e2:91:29:ac:e9:cc:d8:26:c8:82:62:02:d2:d3:2a:
                    13:bb:7c:7c:28:3d:66:50:7c:54:a9:27:f5:e4:2b:
                    a9:69:f7:2a:b2:65:8b:7c:2d:72:2a:ef:d7:a0:96:
                    9a:8e:9e:97:13:0c:a5:bb:1d:f9:a1:6f:bf:fa:01:
                    a3:b5:87:b5:02:3b:ff:9c:7f:45:5f:05:fa:80:f3:
                    7b:55:73:bf:65:26:d8:41:3b:47:58:48:60:01:13:
                    1a:47:f5:e9:19:88:dd:68:92:76:84:ba:35:58:45:
                    cd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:72:35:F2:EB:0B:CF:0A:84:69:D0:F9:BD:05:5F:72:1F:E8:0C:FD
            X509v3 Authority Key Identifier:
                keyid:70:B5:1D:CC:34:75:73:65:10:55:FC:72:DB:19:C1:70:52:40:18:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/70B51DCC347573651055FC72DB19C170524018CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B51DCC347573651055FC72DB19C170524018CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/323830333a613634303a3a2f33322d3536203d3e203436313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a640::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:8e:62:34:a1:14:be:29:2d:2a:14:ab:df:e2:c6:32:68:04:
         cb:83:5e:04:83:26:75:b3:ba:be:d5:f2:e0:9a:af:c9:a6:d9:
         d1:6c:12:f7:47:5c:25:fa:ab:b1:6e:76:4d:48:4b:b6:a2:02:
         77:a7:12:23:9c:fc:cb:9b:30:59:a7:b9:63:8f:3a:2c:23:6d:
         34:cf:29:8f:0e:ca:91:84:01:01:6e:a9:7c:4b:b1:f3:85:0b:
         3b:a1:54:af:22:60:48:3e:ee:1e:3e:36:ee:03:11:65:6a:34:
         8a:06:0a:92:48:46:56:af:19:a7:4a:d8:da:ee:50:94:5c:a0:
         17:b7:72:10:04:af:69:b7:69:a5:92:50:52:bc:c7:21:d0:47:
         36:9f:bd:b9:5a:24:b8:5f:3f:82:3a:44:16:69:f6:3f:cb:81:
         8f:30:a8:4b:ff:bd:84:62:89:21:13:10:b3:22:59:67:2a:01:
         0b:74:26:86:81:99:c3:21:94:aa:b0:bb:97:8f:12:6f:3a:40:
         07:59:1c:00:0f:58:3e:c2:3d:e7:96:fb:10:78:b7:6d:1f:ae:
         5e:10:f2:49:d9:a1:56:7a:09:35:dd:b8:aa:79:2e:06:22:1e:
         72:47:7d:c1:c7:d5:4f:40:15:cc:f3:70:d2:13:a1:cd:5a:e7:
         56:e8:d3:84
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUTdGeu3GeTsOGlR9DjfiJ9C0Bx7EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBCNTFEQ0MzNDc1NzM2NTEwNTVGQzcyREIxOUMxNzA1
MjQwMThDQzAeFw0yNjAxMDYxOTA3MTlaFw0yNzAxMDUxOTEyMTlaMDMxMTAvBgNV
BAMTKDYyNzIzNUYyRUIwQkNGMEE4NDY5RDBGOUJEMDU1RjcyMUZFODBDRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZuCkQKWceYrwVdfFydukWS2vT
/fB+bBit9nzA43xJT5nxJqITXVsdhmiycRMkml+BhIkLbrqbC5iyqCynvUc7U2EJ
CI4FVHI9fysG069gDyaWWJvi3Aydc5tTAgER0KMFqF2eGf0sWocD+Ve9BIGfozmw
9hDMh1t9XAiFg/iS7lAo6P9f1ikHfvL4SqlaKqCNRpby3eKRKazpzNgmyIJiAtLT
KhO7fHwoPWZQfFSpJ/XkK6lp9yqyZYt8LXIq79eglpqOnpcTDKW7Hfmhb7/6AaO1
h7UCO/+cf0VfBfqA83tVc79lJthBO0dYSGABExpH9ekZiN1oknaEujVYRc1FAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUYnI18usLzwqEadD5vQVfch/oDP0wHwYDVR0j
BBgwFoAUcLUdzDR1c2UQVfxy2xnBcFJAGMwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMENERTcyM0Q4MkZBOTIwQjg4RUFBRkRDQzYxMkExNzI4
QUFFNzZGNkVDQ0JEQUE1MkMzRDY5OUZGNzhEMDY5LzAvNzBCNTFEQ0MzNDc1NzM2
NTEwNTVGQzcyREIxOUMxNzA1MjQwMThDQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83MEI1MURDQzM0NzU3MzY1MTA1
NUZDNzJEQjE5QzE3MDUyNDAxOENDLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjBDREU3MjNEODJGQTkyMEI4OEVBQUZEQ0M2MTJBMTcyOEFBRTc2RjZF
Q0NCREFBNTJDM0Q2OTlGRjc4RDA2OS8wLzMyMzgzMDMzM2E2MTM2MzQzMDNhM2Ey
ZjMzMzIyZDM1MzYyMDNkM2UyMDM0MzYzMTM5Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA6ZAMA0G
CSqGSIb3DQEBCwUAA4IBAQA1jmI0oRS+KS0qFKvf4sYyaATLg14EgyZ1s7q+1fLg
mq/JptnRbBL3R1wl+quxbnZNSEu2ogJ3pxIjnPzLmzBZp7ljjzosI200zymPDsqR
hAEBbql8S7HzhQs7oVSvImBIPu4ePjbuAxFlajSKBgqSSEZWrxmnStja7lCUXKAX
t3IQBK9pt2mlklBSvMch0Ec2n725WiS4Xz+COkQWafY/y4GPMKhL/72EYokhExCz
IllnKgELdCaGgZnDIZSqsLuXjxJvOkAHWRwAD1g+wj3nlvsQeLdtH65eEPJJ2aFW
egk13biqeS4GIh5yR33Bx9VPQBXM83DSE6HNWudW6NOE
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:50 2026 by rpki-client