This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F33622924E5F8D4BD0F1A61FAF7716DAD8DBE66FE9AEBDA179D95AED56B2B697/0/323830333a323234303a3a2f33322d3438203d3e20323633373737.roa
File:                     323830333a323234303a3a2f33322d3438203d3e20323633373737.roa (raw, json)
Hash identifier:          rtofUqL2+IMglpc+LRoxwCnoit2rtNxIUd1bNh5VyG0=
Subject key identifier:   36:3F:FB:BF:B8:D5:1A:C6:53:3A:33:85:73:8D:2F:33:B1:41:C9:FE
Certificate issuer:       /CN=765D05128298873F41D1D65632AB25BDBE113398
Certificate serial:       2CBC9D29F85461399AC1BD41B8A48232353784FE
Authority key identifier: 76:5D:05:12:82:98:87:3F:41:D1:D6:56:32:AB:25:BD:BE:11:33:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/765D05128298873F41D1D65632AB25BDBE113398.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F33622924E5F8D4BD0F1A61FAF7716DAD8DBE66FE9AEBDA179D95AED56B2B697/0/323830333a323234303a3a2f33322d3438203d3e20323633373737.roa
Signing time:             Tue 06 Jan 2026 19:09:07 +0000
ROA not before:           Tue 06 Jan 2026 19:04:07 +0000
ROA not after:            Tue 05 Jan 2027 19:09:07 +0000
asID:                     263777
IP address blocks:        2803:2240::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F33622924E5F8D4BD0F1A61FAF7716DAD8DBE66FE9AEBDA179D95AED56B2B697/0/765D05128298873F41D1D65632AB25BDBE113398.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F33622924E5F8D4BD0F1A61FAF7716DAD8DBE66FE9AEBDA179D95AED56B2B697/0/765D05128298873F41D1D65632AB25BDBE113398.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/765D05128298873F41D1D65632AB25BDBE113398.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:bc:9d:29:f8:54:61:39:9a:c1:bd:41:b8:a4:82:32:35:37:84:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765D05128298873F41D1D65632AB25BDBE113398
        Validity
            Not Before: Jan  6 19:04:07 2026 GMT
            Not After : Jan  5 19:09:07 2027 GMT
        Subject: CN=363FFBBFB8D51AC6533A3385738D2F33B141C9FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:db:67:26:ca:19:c2:3c:8c:fe:e8:bf:09:e7:
                    a1:72:48:86:e2:f6:99:5a:00:d1:f9:1e:dd:58:52:
                    48:63:c0:0a:18:18:cf:aa:46:4c:e1:1f:d9:32:78:
                    bf:fc:ce:c2:69:1f:f8:fc:df:a9:1f:77:0d:60:fb:
                    ac:86:1a:5e:f3:66:d6:49:3c:d5:c0:3a:98:86:70:
                    65:64:7e:e8:f3:09:b2:cf:4d:2e:43:05:f9:e7:cc:
                    87:b6:6a:c4:aa:2d:c3:2e:92:cc:1e:58:38:95:13:
                    b4:7d:78:39:40:7b:5a:46:80:d4:e5:39:30:31:9d:
                    3a:d3:6f:4e:2b:2a:bd:83:51:d5:d4:db:71:d1:7b:
                    8b:8e:1c:0f:5a:14:ee:f5:9f:9e:2f:b8:92:7a:13:
                    3e:ab:92:17:b9:cf:93:e5:b9:57:c9:5d:71:8b:21:
                    37:25:c8:52:14:db:e6:45:ff:c3:f7:b8:a3:52:2d:
                    83:6c:b0:9c:41:de:d7:1f:7e:60:0a:64:69:d1:5c:
                    f4:9d:eb:65:6e:ee:eb:df:c4:a7:a7:7a:ec:c4:ce:
                    18:58:ce:f6:7a:e3:5b:a7:62:b4:ee:46:cd:83:e9:
                    19:8e:98:51:22:40:8e:12:a8:e1:21:fc:16:70:fe:
                    30:7d:b2:ea:d3:5b:fd:bf:22:04:47:09:94:55:d3:
                    35:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:3F:FB:BF:B8:D5:1A:C6:53:3A:33:85:73:8D:2F:33:B1:41:C9:FE
            X509v3 Authority Key Identifier:
                keyid:76:5D:05:12:82:98:87:3F:41:D1:D6:56:32:AB:25:BD:BE:11:33:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F33622924E5F8D4BD0F1A61FAF7716DAD8DBE66FE9AEBDA179D95AED56B2B697/0/765D05128298873F41D1D65632AB25BDBE113398.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/765D05128298873F41D1D65632AB25BDBE113398.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F33622924E5F8D4BD0F1A61FAF7716DAD8DBE66FE9AEBDA179D95AED56B2B697/0/323830333a323234303a3a2f33322d3438203d3e20323633373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2240::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:ae:49:4b:85:6b:ad:62:52:cd:22:b7:00:33:b9:0e:ef:5e:
         53:21:4f:21:60:d5:c3:a8:b2:4a:97:f2:05:fc:90:5d:09:89:
         cf:8f:6d:5d:fc:d8:6f:99:67:9e:1a:ef:46:cc:9d:71:25:9d:
         77:98:4e:ba:34:b0:8d:a5:f3:53:b5:52:d3:9b:e7:d5:c0:66:
         a4:5d:e3:7e:c3:2b:a9:14:7e:d5:0d:47:ff:5b:9e:fa:15:0d:
         f3:b0:65:74:f0:14:a2:cc:eb:69:4b:52:1f:c6:89:b2:ba:17:
         70:b3:a1:f4:d0:b1:a1:f1:bf:b0:b7:5f:4d:8c:67:65:5b:d4:
         57:5e:ef:4e:1b:6b:eb:8c:bf:b0:1c:86:0d:e7:18:dd:54:5d:
         70:16:2c:d8:c3:a7:1e:07:2b:de:b9:04:41:bb:71:d3:91:1d:
         39:05:38:8f:a1:ac:03:ec:0b:2b:ae:d3:0b:b2:9d:00:8c:d0:
         c6:df:a5:f8:cf:85:6a:63:f7:0e:28:c5:2a:51:b3:8c:72:f2:
         f5:f0:17:c2:17:25:9a:86:c5:ee:e2:d4:89:50:ee:51:af:a1:
         e6:ca:26:6e:30:5b:2c:23:b8:6f:fc:13:90:7d:f0:d0:2a:76:
         b2:70:59:61:4e:7c:45:b1:5c:f8:2c:d1:ef:eb:cf:ef:fe:d3:
         7e:39:aa:a2
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIULLydKfhUYTmawb1BuKSCMjU3hP4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY1RDA1MTI4Mjk4ODczRjQxRDFENjU2MzJBQjI1QkRC
RTExMzM5ODAeFw0yNjAxMDYxOTA0MDdaFw0yNzAxMDUxOTA5MDdaMDMxMTAvBgNV
BAMTKDM2M0ZGQkJGQjhENTFBQzY1MzNBMzM4NTczOEQyRjMzQjE0MUM5RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV22cmyhnCPIz+6L8J56FySIbi
9plaANH5Ht1YUkhjwAoYGM+qRkzhH9kyeL/8zsJpH/j836kfdw1g+6yGGl7zZtZJ
PNXAOpiGcGVkfujzCbLPTS5DBfnnzIe2asSqLcMuksweWDiVE7R9eDlAe1pGgNTl
OTAxnTrTb04rKr2DUdXU23HRe4uOHA9aFO71n54vuJJ6Ez6rkhe5z5PluVfJXXGL
ITclyFIU2+ZF/8P3uKNSLYNssJxB3tcffmAKZGnRXPSd62Vu7uvfxKeneuzEzhhY
zvZ641unYrTuRs2D6RmOmFEiQI4SqOEh/BZw/jB9surTW/2/IgRHCZRV0zUxAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUNj/7v7jVGsZTOjOFc40vM7FByf4wHwYDVR0j
BBgwFoAUdl0FEoKYhz9B0dZWMqslvb4RM5gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMzM2MjI5MjRFNUY4RDRCRDBGMUE2MUZBRjc3MTZEQUQ4
REJFNjZGRTlBRUJEQTE3OUQ5NUFFRDU2QjJCNjk3LzAvNzY1RDA1MTI4Mjk4ODcz
RjQxRDFENjU2MzJBQjI1QkRCRTExMzM5OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83NjVEMDUxMjgyOTg4NzNGNDFE
MUQ2NTYzMkFCMjVCREJFMTEzMzk4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjMzNjIyOTI0RTVGOEQ0QkQwRjFBNjFGQUY3NzE2REFEOERCRTY2RkU5
QUVCREExNzlEOTVBRUQ1NkIyQjY5Ny8wLzMyMzgzMDMzM2EzMjMyMzQzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMzM3MzczNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDIkAw
DQYJKoZIhvcNAQELBQADggEBAGauSUuFa61iUs0itwAzuQ7vXlMhTyFg1cOoskqX
8gX8kF0Jic+PbV382G+ZZ54a70bMnXElnXeYTro0sI2l81O1UtOb59XAZqRd437D
K6kUftUNR/9bnvoVDfOwZXTwFKLM62lLUh/GibK6F3CzofTQsaHxv7C3X02MZ2Vb
1Fde704ba+uMv7Achg3nGN1UXXAWLNjDpx4HK965BEG7cdORHTkFOI+hrAPsCyuu
0wuynQCM0MbfpfjPhWpj9w4oxSpRs4xy8vXwF8IXJZqGxe7i1IlQ7lGvoebKJm4w
WywjuG/8E5B98NAqdrJwWWFOfEWxXPgs0e/rz+/+0345qqI=
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:56 2026 by rpki-client