This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3C7A9AA3F02FFF6B22D4B70A499C720A46B6717BB87139CAA8EFFCD3E2F024D/0/323830333a393963303a3a2f33322d3332203d3e20323635373032.roa
File:                     323830333a393963303a3a2f33322d3332203d3e20323635373032.roa (raw, json)
Hash identifier:          GFpDCKsQbO/iwftMNq5hI03vYwWGeBmlUWFYOuxqvCc=
Subject key identifier:   9F:64:B4:6E:3A:4F:6E:CC:F9:56:3C:12:30:66:3B:69:43:19:E3:E8
Certificate issuer:       /CN=5B7B05FE5B34A73FA971BA2BFE7E6D247019784B
Certificate serial:       7F3A284E0237C48D94DFA36E7E6123BAB8CA5BEE
Authority key identifier: 5B:7B:05:FE:5B:34:A7:3F:A9:71:BA:2B:FE:7E:6D:24:70:19:78:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B7B05FE5B34A73FA971BA2BFE7E6D247019784B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F3C7A9AA3F02FFF6B22D4B70A499C720A46B6717BB87139CAA8EFFCD3E2F024D/0/323830333a393963303a3a2f33322d3332203d3e20323635373032.roa
Signing time:             Tue 06 Jan 2026 19:36:37 +0000
ROA not before:           Tue 06 Jan 2026 19:31:37 +0000
ROA not after:            Tue 05 Jan 2027 19:36:37 +0000
asID:                     265702
IP address blocks:        2803:99c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F3C7A9AA3F02FFF6B22D4B70A499C720A46B6717BB87139CAA8EFFCD3E2F024D/0/5B7B05FE5B34A73FA971BA2BFE7E6D247019784B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F3C7A9AA3F02FFF6B22D4B70A499C720A46B6717BB87139CAA8EFFCD3E2F024D/0/5B7B05FE5B34A73FA971BA2BFE7E6D247019784B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B7B05FE5B34A73FA971BA2BFE7E6D247019784B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:3a:28:4e:02:37:c4:8d:94:df:a3:6e:7e:61:23:ba:b8:ca:5b:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B7B05FE5B34A73FA971BA2BFE7E6D247019784B
        Validity
            Not Before: Jan  6 19:31:37 2026 GMT
            Not After : Jan  5 19:36:37 2027 GMT
        Subject: CN=9F64B46E3A4F6ECCF9563C1230663B694319E3E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7f:34:09:0a:4b:23:9e:32:47:5b:d1:e3:7f:
                    98:d1:6b:28:3b:81:17:13:64:fd:85:30:8e:d8:a1:
                    cf:ab:aa:d7:be:a1:93:dc:23:71:34:ee:bc:d4:fe:
                    a4:5b:95:11:23:24:63:aa:28:de:d5:2b:1d:55:40:
                    46:8e:76:c3:fa:a4:ef:9d:db:6e:2d:9e:95:a7:6d:
                    e1:6d:19:6f:b3:9d:46:bb:2b:3c:e6:7a:12:ae:91:
                    1f:35:fb:9b:6f:cc:76:2f:83:a3:6b:b2:17:46:23:
                    ad:41:98:25:37:b6:69:01:ac:71:c8:48:b4:7a:3d:
                    e4:0f:26:a4:52:6d:5b:29:3d:26:ac:9c:4a:d9:ef:
                    0e:03:ba:70:b4:b1:16:36:61:9f:2f:16:7a:d8:71:
                    d1:8f:9f:a4:6c:4f:50:98:46:8b:cf:2f:72:f4:67:
                    c0:fb:53:26:f2:ef:d7:ed:59:d0:f4:76:c0:9c:31:
                    c3:fa:26:04:a4:ce:c6:b6:1a:08:ad:cb:b6:55:b1:
                    4d:3e:1d:ed:00:e5:88:1d:a3:68:36:f2:63:7c:1e:
                    6f:42:1e:3e:c9:13:55:8c:df:b5:ab:c9:45:4f:9b:
                    8e:7f:6f:79:2d:96:e5:59:83:bf:ea:e4:8f:34:7f:
                    b9:ad:05:7d:c8:38:0b:75:04:d5:5d:78:82:29:f3:
                    4a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:64:B4:6E:3A:4F:6E:CC:F9:56:3C:12:30:66:3B:69:43:19:E3:E8
            X509v3 Authority Key Identifier:
                keyid:5B:7B:05:FE:5B:34:A7:3F:A9:71:BA:2B:FE:7E:6D:24:70:19:78:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F3C7A9AA3F02FFF6B22D4B70A499C720A46B6717BB87139CAA8EFFCD3E2F024D/0/5B7B05FE5B34A73FA971BA2BFE7E6D247019784B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B7B05FE5B34A73FA971BA2BFE7E6D247019784B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3C7A9AA3F02FFF6B22D4B70A499C720A46B6717BB87139CAA8EFFCD3E2F024D/0/323830333a393963303a3a2f33322d3332203d3e20323635373032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:99c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:26:56:6b:f6:9c:a4:0d:4d:ce:51:69:de:a7:09:d3:b8:b5:
         7e:3b:35:ff:79:3e:19:1f:97:35:69:d1:0e:7a:6d:7f:45:c4:
         4a:67:ac:9c:45:fe:47:86:f0:91:fc:4a:d7:25:17:ca:69:b5:
         7d:3d:a1:7c:f5:cc:e6:10:ef:e1:94:2d:91:1b:02:47:0e:78:
         33:2b:96:f0:5d:ed:ce:bf:fe:2a:3e:18:24:18:01:3a:5e:93:
         fd:5b:a8:db:27:3c:62:b3:5c:c6:27:41:78:f5:21:bb:dc:77:
         d2:68:d2:42:99:b4:8b:7e:31:02:05:5c:66:ce:9e:9f:23:b6:
         53:90:66:be:72:db:31:d6:b7:81:7b:db:fa:11:fd:9f:4f:20:
         a1:81:35:8e:44:ac:28:00:c0:d0:f1:4d:01:07:f6:17:01:e4:
         81:d6:2c:79:a9:04:6c:e4:b4:db:ea:6e:9b:78:61:f2:12:8a:
         f3:7e:12:6a:22:21:cd:42:cb:fc:4b:77:82:17:55:04:e3:68:
         50:77:5d:91:53:8c:dc:cb:11:54:b3:52:74:1b:b4:4e:93:0f:
         b2:af:a7:02:52:6d:07:85:5f:6a:0f:f5:40:d1:87:ef:b8:5e:
         07:73:90:5b:a7:03:31:35:83:98:8e:88:5f:15:30:d1:fd:c9:
         ea:56:85:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:08 2026 by rpki-client