This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a3a2f33322d3438203d3e203232393237.roa
File:                     323830303a6130303a3a2f33322d3438203d3e203232393237.roa (raw, json)
Hash identifier:          8dUvzhqGn2+FZgwkcuEj7qtQDSsOO2T01pEpvPwMexY=
Subject key identifier:   3C:F7:E6:9D:B4:50:14:02:D9:58:76:59:38:34:57:85:4F:C0:FC:4A
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       59E82E8FAD70F380C2186E7490B6EF59C5DBE514
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a3a2f33322d3438203d3e203232393237.roa
Signing time:             Tue 09 Dec 2025 17:54:27 +0000
ROA not before:           Tue 09 Dec 2025 17:49:27 +0000
ROA not after:            Tue 08 Dec 2026 17:54:27 +0000
asID:                     22927
IP address blocks:        2800:a00::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 04:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e8:2e:8f:ad:70:f3:80:c2:18:6e:74:90:b6:ef:59:c5:db:e5:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Dec  9 17:49:27 2025 GMT
            Not After : Dec  8 17:54:27 2026 GMT
        Subject: CN=3CF7E69DB4501402D9587659383457854FC0FC4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:17:cd:43:61:21:f5:ab:25:df:e1:65:8d:7a:
                    12:61:f3:c7:dc:ad:f3:74:9b:24:a2:d6:f3:e6:47:
                    cf:a2:55:84:9b:40:33:3b:0a:80:1d:d5:ad:03:02:
                    5a:75:3b:34:ea:da:57:b6:4f:26:b8:07:15:fb:f6:
                    22:fa:dd:2f:75:bc:81:41:c7:40:ab:63:4c:ae:f1:
                    3b:ae:29:07:05:df:fe:00:0f:bd:c7:10:4f:f8:fc:
                    f0:da:49:b2:61:28:9c:42:7e:79:c7:b1:a0:5a:a6:
                    3c:0c:41:8a:19:1d:0c:e4:a5:23:a3:40:d1:d5:0e:
                    02:56:5b:6a:77:6a:02:5d:10:a7:ca:c0:8a:72:67:
                    56:ca:5e:2b:34:f5:80:1a:09:42:0a:da:f4:ed:3f:
                    ba:59:67:40:3d:ab:d2:12:97:ae:03:b8:d9:29:63:
                    32:0d:24:ec:eb:d3:c8:79:81:e6:4c:1d:3a:58:6e:
                    9a:01:5e:1c:4c:56:68:04:ca:9c:f5:b7:b4:a0:55:
                    1d:7a:f2:af:d6:d8:92:53:2a:2b:79:65:e3:6b:c3:
                    ca:3c:81:af:ab:41:1b:b8:53:c3:d0:30:11:e2:ac:
                    25:ea:a5:44:db:e7:fd:9a:83:0c:16:3d:14:9b:95:
                    67:e8:f6:5f:f6:77:95:7f:92:33:5f:f0:60:69:b7:
                    75:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F7:E6:9D:B4:50:14:02:D9:58:76:59:38:34:57:85:4F:C0:FC:4A
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a3a2f33322d3438203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:a00::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:fc:bf:1c:6d:13:8f:4e:dc:5b:68:a6:12:a9:e8:8b:77:ea:
         06:34:77:21:2c:ed:a9:87:85:36:0b:9f:e7:e2:b0:75:07:00:
         56:b6:f5:7e:00:60:f6:34:1e:4e:e9:c5:cd:4b:fa:d7:c9:4c:
         78:2f:d0:13:c9:88:4a:1f:3b:50:f3:11:fd:39:13:0b:0d:6e:
         bd:ad:5d:f1:e9:86:7e:3b:5a:bd:c1:53:0f:a0:d8:ef:11:4a:
         b3:51:3b:1d:5e:76:16:d0:59:e4:e9:37:7c:6c:91:6f:48:95:
         64:43:11:4b:0d:2b:77:2f:9b:2d:33:1d:8f:44:92:09:e8:14:
         02:01:8b:5f:38:64:c2:fd:21:2b:e4:f8:cb:d5:b8:fd:2e:e5:
         dc:e8:da:e9:53:20:b4:e9:2e:9d:28:8a:6d:6f:c6:ee:b4:a1:
         a2:b7:73:ab:42:6a:7c:34:5a:be:38:23:e7:41:ff:c2:b8:20:
         8f:39:60:6e:0f:92:e6:74:03:f5:ae:e3:2b:eb:16:36:eb:f0:
         5d:8c:af:6b:a2:f4:b7:3a:a2:3f:dd:a7:04:6b:2f:ab:93:ea:
         77:78:d8:a0:d6:e4:d1:ea:d5:c6:60:35:b0:14:72:c5:66:77:
         57:d5:26:d5:76:1c:5b:03:d2:25:2d:90:f2:41:de:16:f4:e3:
         5f:6c:90:db
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUWeguj61w84DCGG50kLbvWcXb5RQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkI0QkMxOTZDMEU3MzE5QTE0NENDMUQzODIxRUFDQjg4
NkVDMDgyRTAeFw0yNTEyMDkxNzQ5MjdaFw0yNjEyMDgxNzU0MjdaMDMxMTAvBgNV
BAMTKDNDRjdFNjlEQjQ1MDE0MDJEOTU4NzY1OTM4MzQ1Nzg1NEZDMEZDNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKF81DYSH1qyXf4WWNehJh88fc
rfN0mySi1vPmR8+iVYSbQDM7CoAd1a0DAlp1OzTq2le2Tya4BxX79iL63S91vIFB
x0CrY0yu8TuuKQcF3/4AD73HEE/4/PDaSbJhKJxCfnnHsaBapjwMQYoZHQzkpSOj
QNHVDgJWW2p3agJdEKfKwIpyZ1bKXis09YAaCUIK2vTtP7pZZ0A9q9ISl64DuNkp
YzINJOzr08h5geZMHTpYbpoBXhxMVmgEypz1t7SgVR168q/W2JJTKit5ZeNrw8o8
ga+rQRu4U8PQMBHirCXqpUTb5/2agwwWPRSblWfo9l/2d5V/kjNf8GBpt3X/AgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUPPfmnbRQFALZWHZZODRXhU/A/EowHwYDVR0j
BBgwFoAUK0vBlsDnMZoUTMHTgh6suIbsCC4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82RTk3NDE1Rjk3QTA4MzdCMzdDNDZFRjU4NzU0N0Q5OTRG
NzE4NkE3N0I0MTMzRjdBM0MzRTZDMjY2RjlEMjQ2LzAvMkI0QkMxOTZDMEU3MzE5
QTE0NENDMUQzODIxRUFDQjg4NkVDMDgyRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQjRCQzE5NkMwRTczMTlBMTQ0
Q0MxRDM4MjFFQUNCODg2RUMwODJFLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkU5NzQxNUY5N0EwODM3QjM3QzQ2RUY1ODc1NDdEOTk0RjcxODZBNzdC
NDEzM0Y3QTNDM0U2QzI2NkY5RDI0Ni8wLzMyMzgzMDMwM2E2MTMwMzAzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzMjMyMzkzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAAKADANBgkq
hkiG9w0BAQsFAAOCAQEAZ/y/HG0Tj07cW2imEqnoi3fqBjR3ISztqYeFNguf5+Kw
dQcAVrb1fgBg9jQeTunFzUv618lMeC/QE8mISh87UPMR/TkTCw1uva1d8emGfjta
vcFTD6DY7xFKs1E7HV52FtBZ5Ok3fGyRb0iVZEMRSw0rdy+bLTMdj0SSCegUAgGL
Xzhkwv0hK+T4y9W4/S7l3Oja6VMgtOkunSiKbW/G7rShordzq0JqfDRavjgj50H/
wrggjzlgbg+S5nQD9a7jK+sWNuvwXYyva6L0tzqiP92nBGsvq5Pqd3jYoNbk0erV
xmA1sBRyxWZ3V9Um1XYcWwPSJS2Q8kHeFvTjX2yQ2w==
-----END CERTIFICATE-----
Generated at Wed Dec 17 07:40:14 2025 by rpki-client