This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/323830333a623263303a3a2f33322d3438203d3e203132393536.roa
File:                     323830333a623263303a3a2f33322d3438203d3e203132393536.roa (raw, json)
Hash identifier:          VoB7qHzFPAYZw+ajNIotyb8eR7hYKGtNYYHWhEujH6s=
Subject key identifier:   1F:5A:B4:43:F2:98:D6:40:60:64:72:1A:34:D0:4F:8A:96:9D:B4:DB
Certificate issuer:       /CN=CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F
Certificate serial:       2279AE6328A210D8352E73A77EB71F0B50B71156
Authority key identifier: CB:E7:2B:8D:81:5E:9A:3D:3D:87:C1:0B:39:ED:41:69:A8:4A:B6:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/323830333a623263303a3a2f33322d3438203d3e203132393536.roa
Signing time:             Tue 06 Jan 2026 19:13:08 +0000
ROA not before:           Tue 06 Jan 2026 19:08:08 +0000
ROA not after:            Tue 05 Jan 2027 19:13:08 +0000
asID:                     12956
IP address blocks:        2803:b2c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 13:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:79:ae:63:28:a2:10:d8:35:2e:73:a7:7e:b7:1f:0b:50:b7:11:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F
        Validity
            Not Before: Jan  6 19:08:08 2026 GMT
            Not After : Jan  5 19:13:08 2027 GMT
        Subject: CN=1F5AB443F298D6406064721A34D04F8A969DB4DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ba:92:4e:6b:88:1d:04:89:fa:90:1c:cf:d8:
                    39:26:f9:7f:4d:c9:1c:31:74:a9:5c:45:18:08:1d:
                    20:d6:9b:38:61:35:4e:dd:22:e5:2a:97:35:d1:52:
                    2e:ce:fe:e3:fe:a2:79:3e:5d:ae:f2:31:e3:d0:31:
                    83:3b:a6:57:cb:6a:d0:ae:15:2c:98:18:29:fa:6f:
                    e1:b3:fc:eb:0d:a2:13:d5:56:c3:2e:df:5f:a5:5a:
                    15:48:0e:39:1f:52:8f:38:be:00:ca:46:f4:4a:88:
                    72:b5:4b:5d:8e:5a:ba:ee:a1:69:7f:b2:86:ef:f1:
                    e1:20:bd:da:2a:55:2a:2a:56:df:c1:ec:56:b6:dc:
                    85:4b:1f:70:83:36:87:79:2e:e6:20:34:f4:ba:52:
                    38:8f:ef:aa:c7:f3:a6:73:0a:3b:ef:94:9e:c7:ba:
                    35:46:6d:aa:c2:76:4d:9f:5b:87:9a:b1:d0:ca:05:
                    6b:e7:f3:fc:74:56:c8:07:8b:ab:97:a0:9e:1f:bf:
                    64:b9:18:26:2d:4e:f2:bc:af:d8:fb:6a:e2:ac:93:
                    43:e6:e2:af:98:63:44:03:81:fa:d1:8d:97:2f:45:
                    3b:7e:7e:69:b0:c2:36:9c:ab:4e:26:b2:12:b9:1c:
                    ff:e8:29:da:bc:1d:00:d5:b8:0c:2e:08:37:40:5c:
                    50:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:5A:B4:43:F2:98:D6:40:60:64:72:1A:34:D0:4F:8A:96:9D:B4:DB
            X509v3 Authority Key Identifier:
                keyid:CB:E7:2B:8D:81:5E:9A:3D:3D:87:C1:0B:39:ED:41:69:A8:4A:B6:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/323830333a623263303a3a2f33322d3438203d3e203132393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b2c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:2e:31:cb:fe:72:6c:38:c3:2e:a2:12:ee:67:49:e4:4d:67:
         74:cf:e3:1d:37:46:39:e2:e3:1c:f0:1c:6f:ba:7b:99:f3:04:
         8e:43:29:85:00:ff:b3:80:3e:e7:8e:f8:00:aa:80:d6:0f:f9:
         30:e9:c6:ae:df:0b:58:7c:4d:d8:a9:fb:c4:a5:85:08:5f:05:
         c2:82:f0:27:89:5a:17:ee:b5:17:1a:91:8f:38:c4:76:83:f9:
         f5:67:4b:c0:64:48:69:83:d4:c6:04:15:ed:04:7c:5a:07:e9:
         78:21:8a:2d:aa:86:9a:c9:d7:10:37:30:95:88:5e:d1:32:0e:
         ec:34:ff:73:4f:ea:af:cb:50:d1:59:d1:e5:e5:05:33:a0:17:
         32:37:f2:11:ca:bb:f9:16:cb:e3:77:1a:07:d0:69:59:2b:c0:
         79:79:a2:0e:58:6d:5c:a5:fc:f3:8b:83:23:b0:8e:60:ec:bf:
         63:07:5e:a7:ae:d6:2e:e0:a9:45:fe:ff:2c:a5:70:f6:14:f2:
         6f:c2:04:4f:65:33:d4:55:77:c3:56:e1:b1:e5:c6:9f:9e:2e:
         a8:c7:e8:c7:41:5d:d4:75:b6:66:02:ca:63:ee:9e:98:2d:72:
         bf:1e:15:c4:61:24:0d:51:41:ef:b6:31:5c:36:a6:7a:4a:63:
         b0:e4:ab:94
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUInmuYyiiENg1LnOnfrcfC1C3EVYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JFNzJCOEQ4MTVFOUEzRDNEODdDMTBCMzlFRDQxNjlB
ODRBQjY4RjAeFw0yNjAxMDYxOTA4MDhaFw0yNzAxMDUxOTEzMDhaMDMxMTAvBgNV
BAMTKDFGNUFCNDQzRjI5OEQ2NDA2MDY0NzIxQTM0RDA0RjhBOTY5REI0REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6upJOa4gdBIn6kBzP2Dkm+X9N
yRwxdKlcRRgIHSDWmzhhNU7dIuUqlzXRUi7O/uP+onk+Xa7yMePQMYM7plfLatCu
FSyYGCn6b+Gz/OsNohPVVsMu31+lWhVIDjkfUo84vgDKRvRKiHK1S12OWrruoWl/
sobv8eEgvdoqVSoqVt/B7Fa23IVLH3CDNod5LuYgNPS6UjiP76rH86ZzCjvvlJ7H
ujVGbarCdk2fW4easdDKBWvn8/x0VsgHi6uXoJ4fv2S5GCYtTvK8r9j7auKsk0Pm
4q+YY0QDgfrRjZcvRTt+fmmwwjacq04mshK5HP/oKdq8HQDVuAwuCDdAXFA5AgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUH1q0Q/KY1kBgZHIaNNBPipadtNswHwYDVR0j
BBgwFoAUy+crjYFemj09h8ELOe1BaahKto8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMTdFMEYyOEQ3QjEwOTY0MzM4MjEzNEE5MjhBREI3RDhD
MTMxOTcyNzAyRUE0MkEwNDhDMjc2NEM4MERDN0MxLzAvQ0JFNzJCOEQ4MTVFOUEz
RDNEODdDMTBCMzlFRDQxNjlBODRBQjY4Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkU3MkI4RDgxNUU5QTNEM0Q4
N0MxMEIzOUVENDE2OUE4NEFCNjhGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTE3RTBGMjhEN0IxMDk2NDMzODIxMzRBOTI4QURCN0Q4QzEzMTk3Mjcw
MkVBNDJBMDQ4QzI3NjRDODBEQzdDMS8wLzMyMzgzMDMzM2E2MjMyNjMzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMxMzIzOTM1MzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA7LAMA0G
CSqGSIb3DQEBCwUAA4IBAQAZLjHL/nJsOMMuohLuZ0nkTWd0z+MdN0Y54uMc8Bxv
unuZ8wSOQymFAP+zgD7njvgAqoDWD/kw6cau3wtYfE3YqfvEpYUIXwXCgvAniVoX
7rUXGpGPOMR2g/n1Z0vAZEhpg9TGBBXtBHxaB+l4IYotqoaaydcQNzCViF7RMg7s
NP9zT+qvy1DRWdHl5QUzoBcyN/IRyrv5FsvjdxoH0GlZK8B5eaIOWG1cpfzzi4Mj
sI5g7L9jB16nrtYu4KlF/v8spXD2FPJvwgRPZTPUVXfDVuGx5cafni6ox+jHQV3U
dbZmAspj7p6YLXK/HhXEYSQNUUHvtjFcNqZ6SmOw5KuU
-----END CERTIFICATE-----
Generated at Fri Jan 23 14:02:41 2026 by rpki-client