This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C9A64611A248C351E224B4309AD36E950C94FBDEAF1044FB52D1AC9322E53924/0/323830333a653438303a3a2f33322d3438203d3e203532333532.roa
File:                     323830333a653438303a3a2f33322d3438203d3e203532333532.roa (raw, json)
Hash identifier:          HMDKFo6MzraLXec8izlw/jd0zK/Np7avJXvNZk+3La0=
Subject key identifier:   A5:85:BA:89:55:4F:50:E0:B3:D2:69:E3:FA:FF:D7:B3:9C:EB:41:73
Certificate issuer:       /CN=A61B23F86A21FE9CCB4CE1E9BC92C2B210FE7FC8
Certificate serial:       7A4F1FB94A5670529B2453983F2DB46D4BFB94C6
Authority key identifier: A6:1B:23:F8:6A:21:FE:9C:CB:4C:E1:E9:BC:92:C2:B2:10:FE:7F:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A61B23F86A21FE9CCB4CE1E9BC92C2B210FE7FC8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C9A64611A248C351E224B4309AD36E950C94FBDEAF1044FB52D1AC9322E53924/0/323830333a653438303a3a2f33322d3438203d3e203532333532.roa
Signing time:             Tue 06 Jan 2026 19:40:27 +0000
ROA not before:           Tue 06 Jan 2026 19:35:27 +0000
ROA not after:            Tue 05 Jan 2027 19:40:27 +0000
asID:                     52352
IP address blocks:        2803:e480::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C9A64611A248C351E224B4309AD36E950C94FBDEAF1044FB52D1AC9322E53924/0/A61B23F86A21FE9CCB4CE1E9BC92C2B210FE7FC8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C9A64611A248C351E224B4309AD36E950C94FBDEAF1044FB52D1AC9322E53924/0/A61B23F86A21FE9CCB4CE1E9BC92C2B210FE7FC8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A61B23F86A21FE9CCB4CE1E9BC92C2B210FE7FC8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:4f:1f:b9:4a:56:70:52:9b:24:53:98:3f:2d:b4:6d:4b:fb:94:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61B23F86A21FE9CCB4CE1E9BC92C2B210FE7FC8
        Validity
            Not Before: Jan  6 19:35:27 2026 GMT
            Not After : Jan  5 19:40:27 2027 GMT
        Subject: CN=A585BA89554F50E0B3D269E3FAFFD7B39CEB4173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ff:75:7b:77:e9:a3:a7:ab:21:e2:36:09:9d:3a:
                    c8:d9:37:f0:6c:54:94:35:26:2d:63:4b:6e:c8:18:
                    ef:62:23:54:79:cd:69:cc:83:7d:32:13:f2:c5:83:
                    a3:e8:e9:65:2a:f6:b9:22:1c:de:25:6f:94:61:a9:
                    6a:1a:e5:5f:4c:88:b2:90:fd:23:02:01:17:26:97:
                    d4:fb:d4:7a:a4:98:70:c4:a9:21:fb:0e:8d:77:43:
                    0d:43:b6:fa:cb:a6:6d:cd:7e:2d:a5:f7:58:10:93:
                    54:00:01:ba:37:04:1b:30:97:c8:e3:f3:b1:03:7e:
                    d1:94:37:29:e8:f6:52:6d:49:69:be:81:13:5f:ee:
                    08:f1:73:a5:8b:aa:53:c7:1a:06:3e:38:3a:d5:24:
                    e7:5d:fc:9c:d5:90:04:a9:ff:aa:e2:47:ef:2e:56:
                    c2:7d:2a:9a:62:fb:c5:24:12:90:4b:50:a3:6b:67:
                    62:1e:9e:97:f3:37:e6:50:92:46:4b:2e:2d:c1:b0:
                    e3:e3:32:1d:4f:54:e7:81:16:a7:84:02:42:c7:41:
                    d1:11:64:e2:15:24:4a:ed:2d:04:31:9c:70:2a:81:
                    3b:8e:51:3a:73:d9:03:f9:5a:02:97:84:b7:0c:06:
                    03:0d:f2:56:e6:9c:7e:f5:f3:0a:5c:61:b4:70:85:
                    04:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:85:BA:89:55:4F:50:E0:B3:D2:69:E3:FA:FF:D7:B3:9C:EB:41:73
            X509v3 Authority Key Identifier:
                keyid:A6:1B:23:F8:6A:21:FE:9C:CB:4C:E1:E9:BC:92:C2:B2:10:FE:7F:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C9A64611A248C351E224B4309AD36E950C94FBDEAF1044FB52D1AC9322E53924/0/A61B23F86A21FE9CCB4CE1E9BC92C2B210FE7FC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A61B23F86A21FE9CCB4CE1E9BC92C2B210FE7FC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C9A64611A248C351E224B4309AD36E950C94FBDEAF1044FB52D1AC9322E53924/0/323830333a653438303a3a2f33322d3438203d3e203532333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e480::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:bf:fc:ce:65:7a:04:a1:bc:a4:44:e9:ec:43:0e:e0:08:e5:
         06:bb:2e:57:66:63:42:c5:4b:39:35:12:4b:00:43:3c:42:ff:
         9f:e2:d2:bf:b7:c1:84:31:cf:5b:8e:c2:f8:61:14:73:bc:4c:
         0e:f7:f1:4e:9f:ea:17:92:52:8c:e9:7b:ea:9c:33:69:5b:c3:
         ee:19:1d:39:55:21:d8:0a:b3:fd:8e:45:2d:f1:5a:62:d8:a1:
         38:08:38:1a:51:38:52:70:a2:0e:6c:ea:94:20:60:29:a4:4e:
         75:81:ff:21:51:a0:bd:5a:57:bc:87:c1:03:cc:48:aa:9b:c1:
         b3:b6:2a:f7:f5:ed:27:b7:92:9f:3c:68:ef:c8:8d:ba:cc:96:
         a4:d6:f6:35:ec:7e:e4:0a:ae:cc:b2:9b:f9:84:b3:fb:4b:7c:
         07:43:12:25:11:0f:6e:57:2a:c6:55:dd:ad:d6:ff:02:42:38:
         40:9e:ed:92:45:8a:5f:21:12:35:04:c4:f3:f2:8e:66:04:d2:
         f4:5e:9d:ff:fb:9c:8f:c8:6f:9f:ef:77:30:88:cf:db:e9:44:
         8b:73:17:fb:19:0a:bf:19:1f:13:43:1a:15:87:38:ff:85:88:
         7a:f1:55:0b:01:29:6e:bc:c0:51:ab:3f:eb:51:fa:5e:86:e3:
         b1:5c:8b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:30:13 2026 by rpki-client