This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/323830333a336138303a3a2f33322d3332203d3e203233333833.roa
File:                     323830333a336138303a3a2f33322d3332203d3e203233333833.roa (raw, json)
Hash identifier:          2n4mxGEAzMl7OsiBLkMRFcJCO6EPEEs+5u6Lic37gXI=
Subject key identifier:   0C:2B:60:49:B4:4B:FC:E2:D6:63:74:32:32:4E:FC:2F:48:DB:44:D1
Certificate issuer:       /CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
Certificate serial:       651878169D42C8CE7513B3D2C4F6EED315E1E72E
Authority key identifier: 13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/323830333a336138303a3a2f33322d3332203d3e203233333833.roa
Signing time:             Tue 06 Jan 2026 19:19:35 +0000
ROA not before:           Tue 06 Jan 2026 19:14:35 +0000
ROA not after:            Tue 05 Jan 2027 19:19:35 +0000
asID:                     23383
IP address blocks:        2803:3a80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 13:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:18:78:16:9d:42:c8:ce:75:13:b3:d2:c4:f6:ee:d3:15:e1:e7:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
        Validity
            Not Before: Jan  6 19:14:35 2026 GMT
            Not After : Jan  5 19:19:35 2027 GMT
        Subject: CN=0C2B6049B44BFCE2D6637432324EFC2F48DB44D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:dd:66:4e:a8:cc:fe:84:ad:2b:61:58:31:f8:
                    b6:e1:6f:1f:ca:2a:0a:d5:ad:92:5c:c9:00:59:fa:
                    2f:c7:94:4b:ca:58:d2:45:21:8b:c1:43:8c:74:d6:
                    9a:22:8f:f0:53:ed:c1:6f:ed:e8:79:e7:aa:8b:f9:
                    37:8a:b0:21:b2:ed:34:a5:d1:db:ba:3a:cb:aa:52:
                    35:0e:02:c9:6f:08:89:c9:d1:0f:18:38:89:61:8a:
                    bd:07:01:57:73:77:51:12:ac:f3:00:53:11:86:df:
                    50:d3:4b:b7:5c:26:f9:0b:6a:50:b8:90:ee:63:fa:
                    35:e2:8d:bd:ac:a5:62:de:ec:dc:50:4e:3d:00:77:
                    2e:f8:1b:f7:db:80:e7:49:2d:30:1c:eb:e7:5e:86:
                    d3:ca:ca:d5:b9:9e:2e:1d:0a:d1:21:56:f8:ca:68:
                    cb:ac:ae:a4:30:e0:ed:61:6e:a4:32:aa:8b:df:d8:
                    14:c2:b4:70:26:45:f6:39:39:b6:4a:a6:df:71:b0:
                    d0:fe:d3:4b:d4:4d:e4:ed:40:82:06:6c:90:c4:0a:
                    3f:82:29:30:0f:b9:2f:63:f0:8e:52:1e:20:bb:c3:
                    b4:20:76:2f:db:7f:b8:81:b6:77:81:3c:b0:38:13:
                    0b:84:96:36:39:6f:5f:d5:cd:02:fc:8d:68:24:02:
                    ad:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:2B:60:49:B4:4B:FC:E2:D6:63:74:32:32:4E:FC:2F:48:DB:44:D1
            X509v3 Authority Key Identifier:
                keyid:13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/323830333a336138303a3a2f33322d3332203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3a80::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:23:34:7e:39:96:6e:c9:5e:70:22:7c:06:5c:1b:ad:f1:cf:
         82:85:89:c4:c5:ff:21:8f:0f:65:c3:81:fd:d9:e6:ba:51:1c:
         cd:c9:5e:bf:54:72:6a:ce:00:31:d8:78:df:94:ac:31:7b:8a:
         c1:9d:78:d8:e4:a7:48:65:81:9f:75:bc:56:9d:b0:3f:04:dc:
         f0:61:63:08:3b:ca:ee:46:82:24:43:96:8c:64:05:2b:88:99:
         8b:b1:87:66:98:2b:4b:bf:9a:ad:51:ae:cf:dc:d5:ee:e0:8a:
         e3:12:22:e7:dd:60:7b:eb:a4:e1:5f:39:28:2d:ab:91:af:dc:
         1f:01:ba:72:fb:df:87:be:3d:17:c7:5f:43:36:e1:46:a0:84:
         b3:19:61:6d:cc:38:4e:e5:9e:1d:95:a0:0b:dd:18:9f:09:03:
         85:0b:44:71:8d:00:f3:b4:ae:bf:4f:55:31:b2:2e:78:06:29:
         46:9d:68:f2:60:b9:ed:a1:b2:78:dc:f5:86:16:25:bf:0d:30:
         e1:10:06:5a:7d:ec:40:cd:1a:0c:bf:9b:b2:0b:c8:3f:c4:cd:
         16:9b:ed:0f:30:07:99:7a:a8:eb:2c:04:3c:f3:29:10:29:cc:
         17:6e:98:c3:a3:05:c3:32:d3:f7:99:96:1a:38:ad:2a:bf:4b:
         23:c0:a9:86
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUZRh4Fp1CyM51E7PSxPbu0xXh5y4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTM0N0JERDdGNjE5RUNBRDdBOTFDRkRBMjczRTgxRUQ4
ODM2RjdFODAeFw0yNjAxMDYxOTE0MzVaFw0yNzAxMDUxOTE5MzVaMDMxMTAvBgNV
BAMTKDBDMkI2MDQ5QjQ0QkZDRTJENjYzNzQzMjMyNEVGQzJGNDhEQjQ0RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe3WZOqMz+hK0rYVgx+Lbhbx/K
KgrVrZJcyQBZ+i/HlEvKWNJFIYvBQ4x01poij/BT7cFv7eh556qL+TeKsCGy7TSl
0du6OsuqUjUOAslvCInJ0Q8YOIlhir0HAVdzd1ESrPMAUxGG31DTS7dcJvkLalC4
kO5j+jXijb2spWLe7NxQTj0Ady74G/fbgOdJLTAc6+dehtPKytW5ni4dCtEhVvjK
aMusrqQw4O1hbqQyqovf2BTCtHAmRfY5ObZKpt9xsND+00vUTeTtQIIGbJDECj+C
KTAPuS9j8I5SHiC7w7Qgdi/bf7iBtneBPLA4EwuEljY5b1/VzQL8jWgkAq2FAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUDCtgSbRL/OLWY3QyMk78L0jbRNEwHwYDVR0j
BBgwFoAUE0e91/YZ7K16kc/aJz6B7Yg29+gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNUM4NUI2OTcxRDhEODkwMkI3MDVDNTY0RDE2NjBEMzcw
MDFDMTQwQkYzRUQ2NzVGMUIyOEMyNDAyQUQyQzg3LzAvMTM0N0JERDdGNjE5RUNB
RDdBOTFDRkRBMjczRTgxRUQ4ODM2RjdFOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMzQ3QkREN0Y2MTlFQ0FEN0E5
MUNGREEyNzNFODFFRDg4MzZGN0U4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTVDODVCNjk3MUQ4RDg5MDJCNzA1QzU2NEQxNjYwRDM3MDAxQzE0MEJG
M0VENjc1RjFCMjhDMjQwMkFEMkM4Ny8wLzMyMzgzMDMzM2EzMzYxMzgzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzMzMzM4MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAzqAMA0G
CSqGSIb3DQEBCwUAA4IBAQCdIzR+OZZuyV5wInwGXBut8c+ChYnExf8hjw9lw4H9
2ea6URzNyV6/VHJqzgAx2HjflKwxe4rBnXjY5KdIZYGfdbxWnbA/BNzwYWMIO8ru
RoIkQ5aMZAUriJmLsYdmmCtLv5qtUa7P3NXu4IrjEiLn3WB766ThXzkoLauRr9wf
Abpy+9+Hvj0Xx19DNuFGoISzGWFtzDhO5Z4dlaAL3RifCQOFC0RxjQDztK6/T1Ux
si54BilGnWjyYLntobJ43PWGFiW/DTDhEAZafexAzRoMv5uyC8g/xM0Wm+0PMAeZ
eqjrLAQ88ykQKcwXbpjDowXDMtP3mZYaOK0qv0sjwKmG
-----END CERTIFICATE-----
Generated at Fri Jan 23 18:56:36 2026 by rpki-client