This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/323830333a653130303a3a2f33322d3335203d3e203237393731.roa
File:                     323830333a653130303a3a2f33322d3335203d3e203237393731.roa (raw, json)
Hash identifier:          Ch9qDr9+r3zPw6xw4H1IluliUGHgNtTb6jNX6F8yRaM=
Subject key identifier:   E5:6D:4C:73:E3:C8:FD:C0:CA:10:7F:42:BB:AA:5D:12:B7:03:30:FB
Certificate issuer:       /CN=186D48B8C1F30720B512B1F62C673FCFD9EDFAEE
Certificate serial:       2687E2A3488C8918889727E02FCBC9B3742D949A
Authority key identifier: 18:6D:48:B8:C1:F3:07:20:B5:12:B1:F6:2C:67:3F:CF:D9:ED:FA:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/323830333a653130303a3a2f33322d3335203d3e203237393731.roa
Signing time:             Tue 06 Jan 2026 19:04:04 +0000
ROA not before:           Tue 06 Jan 2026 18:59:04 +0000
ROA not after:            Tue 05 Jan 2027 19:04:04 +0000
asID:                     27971
IP address blocks:        2803:e100::/32 maxlen: 35
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:87:e2:a3:48:8c:89:18:88:97:27:e0:2f:cb:c9:b3:74:2d:94:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=186D48B8C1F30720B512B1F62C673FCFD9EDFAEE
        Validity
            Not Before: Jan  6 18:59:04 2026 GMT
            Not After : Jan  5 19:04:04 2027 GMT
        Subject: CN=E56D4C73E3C8FDC0CA107F42BBAA5D12B70330FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:58:24:fa:27:fe:a4:13:2a:9b:77:c3:e0:c7:
                    3a:f1:39:a6:24:02:bf:e0:89:2f:bb:9f:c7:3c:40:
                    e8:2d:c7:53:b1:0a:37:e7:02:3a:5d:15:2c:11:7f:
                    d2:64:1f:05:a9:f2:e5:14:b3:d9:b0:ae:16:ba:89:
                    76:07:a9:a1:19:14:b8:4b:a8:33:08:54:54:57:ad:
                    27:22:d4:5a:45:19:6f:fe:ec:d2:a0:de:ac:1e:f9:
                    73:0e:f9:01:d0:69:07:21:25:a7:ce:66:d0:5d:9f:
                    41:b4:8b:23:ac:fa:7a:d0:7a:27:92:45:26:1e:1f:
                    25:8a:b8:47:d7:f5:12:9f:df:fa:28:40:0d:cf:17:
                    56:57:cc:b6:70:f0:24:7c:84:ba:7e:81:64:18:96:
                    6a:de:9a:bc:16:71:df:98:22:89:c4:a5:1b:d7:fb:
                    87:69:1e:2b:d4:98:b2:a4:e4:42:cf:39:d9:55:a4:
                    11:a1:66:e4:2b:60:6c:53:7c:39:b3:a3:7a:12:f0:
                    73:97:fc:70:10:ce:3a:bc:2c:93:c0:8e:7f:88:a2:
                    30:93:4f:97:c0:f4:7c:6b:1d:81:6f:b8:45:b2:eb:
                    fd:bf:df:59:02:64:9d:7a:5c:e7:9a:ac:22:75:d3:
                    14:b3:4e:99:83:26:43:b5:a4:55:3c:59:63:26:6c:
                    60:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:6D:4C:73:E3:C8:FD:C0:CA:10:7F:42:BB:AA:5D:12:B7:03:30:FB
            X509v3 Authority Key Identifier:
                keyid:18:6D:48:B8:C1:F3:07:20:B5:12:B1:F6:2C:67:3F:CF:D9:ED:FA:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/323830333a653130303a3a2f33322d3335203d3e203237393731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e100::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:ee:8e:10:1d:42:9e:27:ce:a8:d0:d2:2b:6f:1d:9f:fa:fc:
         b7:7b:6d:0f:17:00:f9:06:27:4c:aa:cc:8c:fc:aa:01:bf:07:
         57:a0:db:fd:46:f7:44:4d:8b:f3:33:4a:4f:c1:56:57:e9:9f:
         08:23:fa:33:de:76:61:e3:f0:07:33:f2:5c:fe:49:9e:07:f9:
         4f:02:83:e6:d1:f7:f0:f9:5b:06:68:68:cf:ef:ee:00:e5:13:
         eb:8f:41:15:3a:5c:7f:ff:fe:3d:b7:13:1a:a4:9f:eb:e9:f8:
         e5:8a:2e:8d:f2:b5:7f:70:ce:9c:6e:7b:c7:90:7c:a0:bc:39:
         ee:b2:2e:91:62:00:ca:9e:c4:e5:3a:d7:39:f0:3d:3d:8e:75:
         cc:c2:80:0c:b0:4e:5f:ab:dd:9f:08:26:25:01:54:12:20:5f:
         7b:ef:f7:cd:36:eb:8b:24:38:da:e4:06:77:5d:9b:dd:8e:29:
         3c:02:44:1c:f2:2c:7f:09:5e:79:58:49:f2:60:f5:b0:25:a2:
         f5:e2:ef:a9:2c:cc:27:81:80:85:da:77:b6:dc:b6:88:47:dc:
         85:01:39:d6:51:1b:9a:cb:b0:57:b3:ac:df:ce:6f:0c:c4:a8:
         9e:f1:e9:9b:9f:bf:a9:73:5b:25:24:74:4e:1a:db:00:50:5b:
         53:20:f5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:06:15 2026 by rpki-client