This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a323030303a3a2f33362d3634203d3e20323733313134.roa
File:                     323830333a3739303a323030303a3a2f33362d3634203d3e20323733313134.roa (raw, json)
Hash identifier:          bqiwlSbAiSMgJW3xvseyIDa3yBzGF7k6yoeam55C4EM=
Subject key identifier:   F2:E2:56:8A:BC:D7:C3:68:63:5B:7B:1C:11:1D:1C:01:1D:DB:CF:21
Certificate issuer:       /CN=9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA
Certificate serial:       1084B0F17C0A2720877A795094FEE7F7B18AEF3F
Authority key identifier: 9C:BA:EF:DC:63:E7:4F:3F:18:26:B3:BB:A5:DF:B4:1D:44:A9:7B:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a323030303a3a2f33362d3634203d3e20323733313134.roa
Signing time:             Tue 06 Jan 2026 19:25:00 +0000
ROA not before:           Tue 06 Jan 2026 19:20:00 +0000
ROA not after:            Tue 05 Jan 2027 19:25:00 +0000
asID:                     273114
IP address blocks:        2803:790:2000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:84:b0:f1:7c:0a:27:20:87:7a:79:50:94:fe:e7:f7:b1:8a:ef:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA
        Validity
            Not Before: Jan  6 19:20:00 2026 GMT
            Not After : Jan  5 19:25:00 2027 GMT
        Subject: CN=F2E2568ABCD7C368635B7B1C111D1C011DDBCF21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:be:7c:55:3a:7b:ed:9c:29:d5:74:19:3e:74:
                    95:6d:f1:d5:5c:b9:da:d4:a2:82:74:c6:ab:a8:05:
                    d4:96:f4:f8:59:3a:f1:27:b1:4c:f5:12:37:49:f2:
                    71:90:10:cc:6c:dd:8a:3b:40:f0:d9:0f:65:d7:53:
                    6c:48:a3:5b:b4:65:76:7f:55:0e:b3:be:95:fb:6b:
                    f7:65:7f:a0:8d:d4:bf:52:aa:b7:c4:f5:9e:2e:67:
                    23:ea:07:5a:25:85:2f:0b:1e:6c:91:9b:1a:e7:e6:
                    ca:f0:8f:02:50:e7:94:71:50:ed:c7:02:fe:d9:24:
                    41:c9:be:63:73:f0:91:05:3d:ea:dd:6f:5f:6c:d0:
                    a3:d5:8f:ed:4a:58:0a:75:03:f8:c3:f5:ac:65:ef:
                    b7:c9:2c:32:f1:f0:27:db:ac:86:dd:a0:3f:2d:71:
                    ea:21:b2:68:49:10:a0:78:94:dd:d2:e9:30:1f:8d:
                    d4:cc:de:77:aa:53:76:c2:e3:0e:af:31:5a:a8:b2:
                    f4:5f:12:84:34:9d:90:31:9c:a7:79:3c:69:7a:e8:
                    e6:5c:05:ee:f0:6f:d8:22:16:2b:fa:75:e2:a2:47:
                    82:f7:dd:2a:75:38:08:76:e3:54:2f:4c:5d:2f:87:
                    50:7d:7c:60:21:e9:7a:34:db:26:df:65:2c:0c:4d:
                    78:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E2:56:8A:BC:D7:C3:68:63:5B:7B:1C:11:1D:1C:01:1D:DB:CF:21
            X509v3 Authority Key Identifier:
                keyid:9C:BA:EF:DC:63:E7:4F:3F:18:26:B3:BB:A5:DF:B4:1D:44:A9:7B:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a323030303a3a2f33362d3634203d3e20323733313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:790:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1d:09:02:8a:d3:61:16:91:4c:2a:76:aa:cb:13:0d:5a:d7:54:
         f0:81:21:dc:aa:74:42:06:0e:5f:ab:5b:43:0b:71:7e:1b:dd:
         40:ca:df:74:82:88:9d:4b:a1:33:c1:b8:f6:45:92:14:7c:4f:
         5b:ad:c4:ef:99:84:91:32:9c:31:58:e0:d9:41:3e:f6:5f:ed:
         e8:20:c3:8b:91:c7:12:0a:62:ed:89:96:f2:7e:53:3f:a0:98:
         2e:d3:5b:a6:1a:0e:b5:5e:9d:6c:76:b1:f5:47:2c:fa:53:fe:
         6f:6d:28:35:98:c0:72:8c:fe:ee:01:df:26:5e:45:5c:a6:00:
         c0:94:1c:b5:35:7a:37:1a:a7:9d:d7:3e:b0:7b:d2:15:9f:0b:
         b0:ee:18:d5:64:89:21:96:71:32:c8:32:0c:e8:01:5b:21:e2:
         d7:f8:c3:2c:f9:60:9d:be:5f:e1:2b:7c:86:0b:ee:23:89:03:
         d7:8f:bf:51:af:a3:06:22:23:45:36:43:5b:a5:74:20:c4:0c:
         df:82:8e:7e:67:97:b9:cf:e9:44:1f:00:aa:89:40:be:ae:16:
         c5:3d:b5:ca:0f:a6:f7:82:1f:94:a7:4e:82:37:f1:1b:37:12:
         6e:4b:db:fd:6c:54:be:b5:51:3b:06:07:ff:15:c7:3b:13:a4:
         07:3e:21:9c
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUEISw8XwKJyCHenlQlP7n97GK7z8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNCQUVGREM2M0U3NEYzRjE4MjZCM0JCQTVERkI0MUQ0
NEE5N0JBQTAeFw0yNjAxMDYxOTIwMDBaFw0yNzAxMDUxOTI1MDBaMDMxMTAvBgNV
BAMTKEYyRTI1NjhBQkNEN0MzNjg2MzVCN0IxQzExMUQxQzAxMUREQkNGMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkvnxVOnvtnCnVdBk+dJVt8dVc
udrUooJ0xquoBdSW9PhZOvEnsUz1EjdJ8nGQEMxs3Yo7QPDZD2XXU2xIo1u0ZXZ/
VQ6zvpX7a/dlf6CN1L9SqrfE9Z4uZyPqB1olhS8LHmyRmxrn5srwjwJQ55RxUO3H
Av7ZJEHJvmNz8JEFPerdb19s0KPVj+1KWAp1A/jD9axl77fJLDLx8CfbrIbdoD8t
ceohsmhJEKB4lN3S6TAfjdTM3neqU3bC4w6vMVqosvRfEoQ0nZAxnKd5PGl66OZc
Be7wb9giFiv6deKiR4L33Sp1OAh241QvTF0vh1B9fGAh6Xo02ybfZSwMTXi7AgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQU8uJWirzXw2hjW3scER0cAR3bzyEwHwYDVR0j
BBgwFoAUnLrv3GPnTz8YJrO7pd+0HUSpe6owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wOEVGNjQ3RDI0MzkzNTM5MjIyMDRGNjVCNDY5OTM0NzdF
Njg2QTlENzMzQzk1OEY3MUFDMTMzMkI3MjA4MEFDLzAvOUNCQUVGREM2M0U3NEYz
RjE4MjZCM0JCQTVERkI0MUQ0NEE5N0JBQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85Q0JBRUZEQzYzRTc0RjNGMTgy
NkIzQkJBNURGQjQxRDQ0QTk3QkFBLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDhFRjY0N0QyNDM5MzUzOTIyMjA0RjY1QjQ2OTkzNDc3RTY4NkE5RDcz
M0M5NThGNzFBQzEzMzJCNzIwODBBQy8wLzMyMzgzMDMzM2EzNzM5MzAzYTMyMzAz
MDMwM2EzYTJmMzMzNjJkMzYzNDIwM2QzZTIwMzIzNzMzMzEzMTM0LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYEKAMHkCAwDQYJKoZIhvcNAQELBQADggEBAB0JAorTYRaRTCp2qssTDVrXVPCB
IdyqdEIGDl+rW0MLcX4b3UDK33SCiJ1LoTPBuPZFkhR8T1utxO+ZhJEynDFY4NlB
PvZf7eggw4uRxxIKYu2JlvJ+Uz+gmC7TW6YaDrVenWx2sfVHLPpT/m9tKDWYwHKM
/u4B3yZeRVymAMCUHLU1ejcap53XPrB70hWfC7DuGNVkiSGWcTLIMgzoAVsh4tf4
wyz5YJ2+X+ErfIYL7iOJA9ePv1GvowYiI0U2Q1uldCDEDN+Cjn5nl7nP6UQfAKqJ
QL6uFsU9tcoPpveCH5SnToI38Rs3Em5L2/1sVL61UTsGB/8VxzsTpAc+IZw=
-----END CERTIFICATE-----
Generated at Thu Jan 29 05:05:29 2026 by rpki-client