This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/323830333a646130303a3a2f33322d3332203d3e203532323533.roa
File:                     323830333a646130303a3a2f33322d3332203d3e203532323533.roa (raw, json)
Hash identifier:          +xs6kkynA84rtNhj4N9yFUqPNDstw9ZcY36TL2KgQgE=
Subject key identifier:   A3:4B:51:19:C4:73:F1:38:67:74:56:2D:27:8E:73:28:91:14:27:D8
Certificate issuer:       /CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
Certificate serial:       244E5E7250D4C7F6E2755C26085C9B01E328C136
Authority key identifier: 43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/323830333a646130303a3a2f33322d3332203d3e203532323533.roa
Signing time:             Tue 06 Jan 2026 19:23:32 +0000
ROA not before:           Tue 06 Jan 2026 19:18:32 +0000
ROA not after:            Tue 05 Jan 2027 19:23:32 +0000
asID:                     52253
IP address blocks:        2803:da00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:4e:5e:72:50:d4:c7:f6:e2:75:5c:26:08:5c:9b:01:e3:28:c1:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
        Validity
            Not Before: Jan  6 19:18:32 2026 GMT
            Not After : Jan  5 19:23:32 2027 GMT
        Subject: CN=A34B5119C473F1386774562D278E7328911427D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bd:71:37:30:b4:49:93:56:6a:6e:b0:c6:3f:
                    0b:fb:b6:a5:ee:31:e6:d9:ca:22:a5:36:59:b5:aa:
                    2a:df:99:e1:7d:f1:5b:5f:68:da:5b:6e:40:a1:55:
                    79:a3:90:65:ec:36:80:c9:8d:20:c3:d1:95:61:30:
                    6e:b8:fd:9e:20:ee:23:8b:ee:01:05:94:46:1f:37:
                    99:fe:3e:07:64:3c:1d:f1:3e:23:9d:a6:ef:d0:df:
                    9f:e8:fd:55:50:86:19:fa:5e:9d:ba:41:73:70:64:
                    8c:e2:df:0e:f6:3a:83:ec:0c:00:5f:b0:53:c0:a6:
                    53:b1:4a:42:e9:46:a5:a3:1e:1a:4c:10:e2:a1:75:
                    90:70:f2:35:54:a8:6e:42:19:3b:84:cb:f2:da:2f:
                    83:2e:cd:60:70:8b:75:b8:ea:b9:d6:e5:8f:6b:4f:
                    36:06:97:10:9d:98:99:38:a9:55:01:74:c1:ee:23:
                    57:40:54:3d:df:4e:49:fb:d9:78:03:57:ed:74:be:
                    b8:c9:b4:b5:48:3f:0b:64:aa:16:04:a5:7c:2a:01:
                    ea:51:f8:4b:2c:5b:27:f9:75:e3:5d:ae:c6:ff:9c:
                    a8:6a:0a:36:ae:5b:19:7c:35:eb:78:6e:0d:f5:eb:
                    a9:4d:e2:27:3a:92:71:b2:bf:de:e8:df:db:d3:70:
                    8d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:4B:51:19:C4:73:F1:38:67:74:56:2D:27:8E:73:28:91:14:27:D8
            X509v3 Authority Key Identifier:
                keyid:43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/323830333a646130303a3a2f33322d3332203d3e203532323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:da00::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:f1:e8:f5:a4:ed:a2:e9:fa:0e:5b:8b:28:df:65:e4:eb:00:
         b5:3e:94:17:0f:a5:00:2c:8c:95:1d:91:eb:44:1f:f4:25:e3:
         3c:de:49:9b:d8:ab:0f:5b:59:0a:e8:f6:d1:b4:6d:69:e3:f4:
         7b:5e:a9:dc:bd:68:1a:57:b8:fb:ec:4a:d9:2b:fa:fe:f1:49:
         d7:98:ba:75:b7:89:04:49:e3:94:ac:78:4f:e9:e2:0a:54:c1:
         ab:c9:06:62:65:cc:3b:83:07:9a:c4:ef:cf:c9:35:e8:bc:2a:
         0d:bf:ff:af:80:b2:66:8c:90:7d:c6:81:f2:4e:91:7b:66:b0:
         ee:12:92:89:b6:c1:66:c0:76:50:8f:fb:03:55:a1:d8:9f:31:
         74:8f:ac:46:a3:fd:99:2e:52:c7:37:58:66:f4:4a:d1:88:41:
         37:74:de:0c:29:a3:d8:ab:a2:1a:0f:7d:57:1d:90:6d:71:42:
         3c:82:43:56:74:88:ef:44:80:ff:11:2c:5b:af:5e:84:06:93:
         05:ff:d5:66:ca:5d:64:7c:ce:9e:50:e6:d7:cc:da:8a:74:4d:
         46:04:3d:33:73:04:7c:d7:11:f7:57:6d:4c:49:e9:70:fb:13:
         6b:c2:62:da:07:dd:ca:59:cb:a7:d9:77:03:37:17:73:11:63:
         8e:20:bc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:21:48 2026 by rpki-client