This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a3a2f33322d3332203d3e20323639383039.roa
File:                     323830333a633465303a3a2f33322d3332203d3e20323639383039.roa (raw, json)
Hash identifier:          3DjvPxpGUwevCbrHrhyVAD1IEhuS23jLJ653aIjXalM=
Subject key identifier:   C8:27:AE:EE:86:B4:3A:CA:42:59:77:F5:0B:76:00:4F:7C:48:DD:D7
Certificate issuer:       /CN=3D77237A7C9B2196D17146B7FDD8C031BE81DBF4
Certificate serial:       5987E18726DC268CF2A03DC893910C4B109ECD00
Authority key identifier: 3D:77:23:7A:7C:9B:21:96:D1:71:46:B7:FD:D8:C0:31:BE:81:DB:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a3a2f33322d3332203d3e20323639383039.roa
Signing time:             Tue 06 Jan 2026 20:53:47 +0000
ROA not before:           Tue 06 Jan 2026 20:48:47 +0000
ROA not after:            Tue 05 Jan 2027 20:53:47 +0000
asID:                     269809
IP address blocks:        2803:c4e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:87:e1:87:26:dc:26:8c:f2:a0:3d:c8:93:91:0c:4b:10:9e:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D77237A7C9B2196D17146B7FDD8C031BE81DBF4
        Validity
            Not Before: Jan  6 20:48:47 2026 GMT
            Not After : Jan  5 20:53:47 2027 GMT
        Subject: CN=C827AEEE86B43ACA425977F50B76004F7C48DDD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:23:1c:9f:b0:94:1a:9d:46:50:99:18:37:95:
                    55:3b:0d:e9:c0:49:95:57:b4:60:f2:8d:6b:cb:05:
                    38:aa:22:9d:cc:3a:e3:0a:08:37:42:5d:92:c5:9e:
                    3f:ae:72:d8:cc:e2:9e:65:b4:6c:c8:df:3a:8c:2e:
                    ee:10:99:a5:fa:24:b3:13:b3:1d:3d:d6:90:50:95:
                    6b:3e:1d:0c:69:35:65:57:05:6a:0b:0a:3c:b2:d5:
                    53:e8:8b:5b:79:20:a4:35:a1:62:30:c2:00:c0:81:
                    7d:32:6f:c4:16:cf:fc:ef:25:d8:2f:cc:cb:c4:63:
                    9a:bf:ff:6e:bb:f5:4e:3d:ca:1c:01:bc:c7:07:da:
                    95:21:4e:8d:65:da:18:b0:1c:64:ab:83:23:36:f7:
                    00:38:e0:0f:aa:cc:d3:70:c3:b0:30:b5:22:e5:ce:
                    f4:e6:52:71:b3:a6:36:54:f9:a8:d2:89:75:a3:5b:
                    8c:f9:7d:f8:f4:67:ca:19:81:df:fe:cb:3c:80:e7:
                    3f:c0:85:c2:37:a4:94:0e:33:13:eb:12:57:e9:68:
                    50:9d:11:24:69:f5:1d:8b:03:d9:8d:f5:df:eb:3f:
                    a1:19:5a:74:c8:e4:c0:cd:00:32:64:c7:12:ca:4f:
                    01:a9:de:e1:dc:04:9c:90:b7:73:99:dd:39:8f:a6:
                    2e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:27:AE:EE:86:B4:3A:CA:42:59:77:F5:0B:76:00:4F:7C:48:DD:D7
            X509v3 Authority Key Identifier:
                keyid:3D:77:23:7A:7C:9B:21:96:D1:71:46:B7:FD:D8:C0:31:BE:81:DB:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a3a2f33322d3332203d3e20323639383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c4e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:0d:62:3a:cf:4a:37:2a:1a:d2:7e:2e:21:12:be:89:48:ec:
         e2:51:21:97:ef:be:7d:fe:28:7d:4e:83:78:9b:94:f7:4b:db:
         5a:af:59:2d:b6:ee:72:29:fd:96:bc:9f:f7:75:29:6e:26:31:
         4e:75:fc:26:42:13:df:66:9e:33:98:56:8b:2b:45:e0:c4:0b:
         ec:23:35:f7:37:21:9c:df:40:5c:22:0b:78:b5:2f:b9:da:cb:
         3f:72:61:9d:9e:77:ec:d0:b3:6d:f6:c6:7b:29:cf:8f:3b:a6:
         80:29:22:4f:3e:48:b9:c9:bc:76:05:46:06:d3:ee:cf:35:76:
         3d:33:3d:99:8e:b3:39:6f:04:06:8e:e5:25:ee:bc:1b:11:dc:
         45:4d:33:a2:ea:26:4d:8b:a8:17:b8:39:8e:98:ca:b2:bf:9f:
         56:d2:35:87:6b:4b:8e:76:a6:15:33:86:cb:91:02:c5:a2:88:
         b8:a0:62:09:bf:d8:13:7e:81:c9:22:85:a4:74:8b:f5:91:bc:
         34:8e:1a:d0:77:f8:62:cb:47:9a:bc:14:31:00:d7:d8:82:f4:
         91:46:a9:f2:e5:f7:18:70:b1:2f:da:39:68:6a:aa:40:f5:f0:
         e6:ff:53:d8:b7:8d:fb:1c:ce:1c:c0:61:bd:d2:25:9b:65:58:
         ec:02:f9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:04:15 2026 by rpki-client