This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ABF69EA660F6CD67DBB2178DC0B80F5234575EC14BA11DC2CABCA375D4D3B3F/0/323830333a316534303a3a2f33322d3438203d3e203634303939.roa
File:                     323830333a316534303a3a2f33322d3438203d3e203634303939.roa (raw, json)
Hash identifier:          O8MvVE8kECr2FIKfRmU4AOq0Wej3kWY3SaiPgOlnnMc=
Subject key identifier:   4E:AC:DF:3F:04:3A:00:E6:86:53:B0:9C:B8:15:56:36:EF:AC:9F:A3
Certificate issuer:       /CN=07F02D85DFAB21BF29639738FE4B73B0A3BE09D1
Certificate serial:       7B467F849BD83E2076FB001A69BAFBD1FF790EDC
Authority key identifier: 07:F0:2D:85:DF:AB:21:BF:29:63:97:38:FE:4B:73:B0:A3:BE:09:D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07F02D85DFAB21BF29639738FE4B73B0A3BE09D1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6ABF69EA660F6CD67DBB2178DC0B80F5234575EC14BA11DC2CABCA375D4D3B3F/0/323830333a316534303a3a2f33322d3438203d3e203634303939.roa
Signing time:             Tue 06 Jan 2026 19:15:25 +0000
ROA not before:           Tue 06 Jan 2026 19:10:25 +0000
ROA not after:            Tue 05 Jan 2027 19:15:25 +0000
asID:                     64099
IP address blocks:        2803:1e40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6ABF69EA660F6CD67DBB2178DC0B80F5234575EC14BA11DC2CABCA375D4D3B3F/0/07F02D85DFAB21BF29639738FE4B73B0A3BE09D1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6ABF69EA660F6CD67DBB2178DC0B80F5234575EC14BA11DC2CABCA375D4D3B3F/0/07F02D85DFAB21BF29639738FE4B73B0A3BE09D1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07F02D85DFAB21BF29639738FE4B73B0A3BE09D1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 25 Jan 2026 09:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:46:7f:84:9b:d8:3e:20:76:fb:00:1a:69:ba:fb:d1:ff:79:0e:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07F02D85DFAB21BF29639738FE4B73B0A3BE09D1
        Validity
            Not Before: Jan  6 19:10:25 2026 GMT
            Not After : Jan  5 19:15:25 2027 GMT
        Subject: CN=4EACDF3F043A00E68653B09CB8155636EFAC9FA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7f:a8:39:c0:31:ac:9f:c2:44:fd:70:0b:68:
                    1c:2b:07:e1:2a:d7:7e:1e:b4:d1:30:c6:32:6a:0a:
                    78:84:53:19:79:70:d3:5a:7f:32:89:2d:5b:f6:5b:
                    d5:a1:31:88:4e:6e:95:00:5d:cf:96:aa:bf:b3:91:
                    0a:48:c8:7f:be:58:3d:d1:6f:b7:9d:c1:7c:35:81:
                    43:0d:0d:8e:7a:2d:40:e9:2e:7d:27:62:f2:1b:a6:
                    60:ab:94:1c:c4:d8:1d:a4:cd:f1:7d:6b:f5:1f:f2:
                    ad:18:eb:2d:42:ac:b1:b1:4a:65:4a:58:47:45:1d:
                    2a:dc:c8:00:1e:90:8d:e4:d7:a3:37:c2:07:f3:c5:
                    eb:48:70:ba:49:b7:89:95:79:52:50:37:9a:24:e9:
                    ac:ed:0c:49:42:0d:a0:2f:2d:cb:a9:f3:2d:f1:f6:
                    b2:d1:43:f3:40:dc:67:b9:69:56:28:0e:56:44:b9:
                    ee:35:7a:d3:6a:7d:7c:f7:d4:97:45:1a:4c:c3:4a:
                    d8:38:84:b8:46:ab:51:08:b3:c5:bc:2e:e0:d9:f5:
                    49:05:63:22:24:36:ef:7b:6e:04:04:89:76:f4:9f:
                    4b:b4:da:3c:25:95:46:4b:96:cc:5f:bc:97:f5:31:
                    47:98:b4:f6:83:d7:51:bb:6e:44:1f:5a:21:3f:fe:
                    90:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:AC:DF:3F:04:3A:00:E6:86:53:B0:9C:B8:15:56:36:EF:AC:9F:A3
            X509v3 Authority Key Identifier:
                keyid:07:F0:2D:85:DF:AB:21:BF:29:63:97:38:FE:4B:73:B0:A3:BE:09:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6ABF69EA660F6CD67DBB2178DC0B80F5234575EC14BA11DC2CABCA375D4D3B3F/0/07F02D85DFAB21BF29639738FE4B73B0A3BE09D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07F02D85DFAB21BF29639738FE4B73B0A3BE09D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ABF69EA660F6CD67DBB2178DC0B80F5234575EC14BA11DC2CABCA375D4D3B3F/0/323830333a316534303a3a2f33322d3438203d3e203634303939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1e40::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:3a:85:cd:b1:1c:fa:3c:2b:50:3a:5c:a2:a1:3b:b1:20:63:
         2f:82:b2:42:61:d7:60:78:da:03:82:1c:b7:99:1f:16:e2:b0:
         85:c3:78:65:b6:b5:2f:3b:46:8a:1f:4b:60:72:d5:a9:19:b4:
         35:5f:ef:3c:1a:c4:24:18:af:6a:f5:e9:7a:a1:51:52:21:1d:
         1b:b3:12:9a:cd:80:5f:a9:a0:ea:83:c3:b5:76:81:1f:a7:7d:
         8a:54:1e:97:52:17:a8:20:28:49:5c:c4:e6:e1:1f:14:4c:ec:
         fd:11:99:92:30:f1:83:99:9d:b3:87:a5:5b:7b:19:52:4f:c0:
         b2:2f:96:02:7c:14:1e:72:3e:2f:30:ee:7e:8a:15:ec:ab:44:
         89:b5:ec:07:fb:cd:f1:3d:46:50:cd:11:d9:3c:bd:80:5e:09:
         d3:32:69:d6:a9:ae:c0:1f:48:11:a5:0f:45:3f:fc:6a:14:85:
         a5:55:fc:0f:10:b1:71:db:e7:bc:7a:db:48:dd:da:b3:71:0e:
         58:3a:f7:b3:dd:e4:93:52:67:0a:2d:4b:fd:04:10:be:17:72:
         c9:12:13:ab:cc:bb:39:eb:a0:74:52:05:08:36:c0:ab:d6:8b:
         5c:d1:da:87:c7:c9:c4:67:17:bd:eb:47:55:3d:b8:65:c6:96:
         8d:a8:07:06
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUe0Z/hJvYPiB2+wAaabr70f95DtwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdGMDJEODVERkFCMjFCRjI5NjM5NzM4RkU0QjczQjBB
M0JFMDlEMTAeFw0yNjAxMDYxOTEwMjVaFw0yNzAxMDUxOTE1MjVaMDMxMTAvBgNV
BAMTKDRFQUNERjNGMDQzQTAwRTY4NjUzQjA5Q0I4MTU1NjM2RUZBQzlGQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcf6g5wDGsn8JE/XALaBwrB+Eq
134etNEwxjJqCniEUxl5cNNafzKJLVv2W9WhMYhObpUAXc+Wqr+zkQpIyH++WD3R
b7edwXw1gUMNDY56LUDpLn0nYvIbpmCrlBzE2B2kzfF9a/Uf8q0Y6y1CrLGxSmVK
WEdFHSrcyAAekI3k16M3wgfzxetIcLpJt4mVeVJQN5ok6aztDElCDaAvLcup8y3x
9rLRQ/NA3Ge5aVYoDlZEue41etNqfXz31JdFGkzDStg4hLhGq1EIs8W8LuDZ9UkF
YyIkNu97bgQEiXb0n0u02jwllUZLlsxfvJf1MUeYtPaD11G7bkQfWiE//pDHAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUTqzfPwQ6AOaGU7CcuBVWNu+sn6MwHwYDVR0j
BBgwFoAUB/Athd+rIb8pY5c4/ktzsKO+CdEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82QUJGNjlFQTY2MEY2Q0Q2N0RCQjIxNzhEQzBCODBGNTIz
NDU3NUVDMTRCQTExREMyQ0FCQ0EzNzVENEQzQjNGLzAvMDdGMDJEODVERkFCMjFC
RjI5NjM5NzM4RkU0QjczQjBBM0JFMDlEMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wN0YwMkQ4NURGQUIyMUJGMjk2
Mzk3MzhGRTRCNzNCMEEzQkUwOUQxLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkFCRjY5RUE2NjBGNkNENjdEQkIyMTc4REMwQjgwRjUyMzQ1NzVFQzE0
QkExMURDMkNBQkNBMzc1RDREM0IzRi8wLzMyMzgzMDMzM2EzMTY1MzQzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDM2MzQzMDM5Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAx5AMA0G
CSqGSIb3DQEBCwUAA4IBAQBNOoXNsRz6PCtQOlyioTuxIGMvgrJCYddgeNoDghy3
mR8W4rCFw3hltrUvO0aKH0tgctWpGbQ1X+88GsQkGK9q9el6oVFSIR0bsxKazYBf
qaDqg8O1doEfp32KVB6XUheoIChJXMTm4R8UTOz9EZmSMPGDmZ2zh6VbexlST8Cy
L5YCfBQecj4vMO5+ihXsq0SJtewH+83xPUZQzRHZPL2AXgnTMmnWqa7AH0gRpQ9F
P/xqFIWlVfwPELFx2+e8ettI3dqzcQ5YOvez3eSTUmcKLUv9BBC+F3LJEhOrzLs5
66B0UgUINsCr1otc0dqHx8nEZxe960dVPbhlxpaNqAcG
-----END CERTIFICATE-----
Generated at Wed Jan 21 14:45:47 2026 by rpki-client