This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CBE3E0AD30E658C291B2B4AFEAC3EAC3A222F1BF9DCA8641457CB8D81A34B669/0/323830333a383330303a3a2f33322d3438203d3e203139353832.roa
File:                     323830333a383330303a3a2f33322d3438203d3e203139353832.roa (raw, json)
Hash identifier:          oqZhzIqfOUo1hoel/qwlEVInlxprowpOYE/Q7in2Y+Y=
Subject key identifier:   BE:F4:9C:1C:11:0C:5A:40:53:B1:29:D9:1A:F4:DB:D5:6D:30:7D:FD
Certificate issuer:       /CN=37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E
Certificate serial:       439747E2564B83EAE2955B04F12D7EA94B40C2C2
Authority key identifier: 37:D2:C6:C6:B6:FD:FA:40:03:FD:3E:FD:D2:AE:F4:0B:FA:93:CB:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CBE3E0AD30E658C291B2B4AFEAC3EAC3A222F1BF9DCA8641457CB8D81A34B669/0/323830333a383330303a3a2f33322d3438203d3e203139353832.roa
Signing time:             Tue 06 Jan 2026 20:56:11 +0000
ROA not before:           Tue 06 Jan 2026 20:51:11 +0000
ROA not after:            Tue 05 Jan 2027 20:56:11 +0000
asID:                     19582
IP address blocks:        2803:8300::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CBE3E0AD30E658C291B2B4AFEAC3EAC3A222F1BF9DCA8641457CB8D81A34B669/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CBE3E0AD30E658C291B2B4AFEAC3EAC3A222F1BF9DCA8641457CB8D81A34B669/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 25 Jan 2026 08:43:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:97:47:e2:56:4b:83:ea:e2:95:5b:04:f1:2d:7e:a9:4b:40:c2:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E
        Validity
            Not Before: Jan  6 20:51:11 2026 GMT
            Not After : Jan  5 20:56:11 2027 GMT
        Subject: CN=BEF49C1C110C5A4053B129D91AF4DBD56D307DFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7c:46:6e:bd:94:87:16:12:cf:78:62:ef:fb:
                    97:b1:ca:5f:1b:3a:61:ff:d6:9b:fa:03:f4:6a:e8:
                    cb:24:fd:f0:5c:ae:ee:c8:7d:2f:1e:4e:d7:50:4c:
                    7f:ad:6f:78:e6:fe:20:d4:49:8f:82:cd:82:65:c1:
                    81:b7:d9:4e:a6:54:21:39:97:fd:1a:6a:9a:9f:c9:
                    5b:92:62:1d:bc:e3:63:9c:63:f9:97:c8:43:d9:82:
                    74:9f:63:34:5e:81:4c:74:9c:43:6c:f0:4d:68:2b:
                    b2:ad:c0:42:f0:c6:5e:f4:e9:16:07:ae:e3:01:b2:
                    66:51:83:10:b4:14:7f:ae:55:ba:6f:37:cd:3c:62:
                    03:4e:c5:db:89:b6:de:05:d1:94:15:81:c6:fc:44:
                    b3:dc:83:f9:f4:ce:07:96:ba:a2:7e:f2:70:9a:1a:
                    37:9c:97:8e:34:a9:00:1d:a4:57:13:1f:b6:93:5f:
                    2a:c9:60:aa:62:7f:6a:8c:5b:d5:47:0e:5c:85:5f:
                    f2:d3:d3:80:4c:39:78:68:59:78:ae:92:b1:b8:43:
                    de:fd:17:72:e9:a5:cd:7b:37:6d:18:09:4d:79:e8:
                    7e:2c:2f:2a:f6:e4:4a:20:89:fd:61:d6:71:24:ac:
                    39:76:11:00:4e:d5:5a:01:4b:69:fe:8c:19:b8:dc:
                    24:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F4:9C:1C:11:0C:5A:40:53:B1:29:D9:1A:F4:DB:D5:6D:30:7D:FD
            X509v3 Authority Key Identifier:
                keyid:37:D2:C6:C6:B6:FD:FA:40:03:FD:3E:FD:D2:AE:F4:0B:FA:93:CB:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CBE3E0AD30E658C291B2B4AFEAC3EAC3A222F1BF9DCA8641457CB8D81A34B669/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CBE3E0AD30E658C291B2B4AFEAC3EAC3A222F1BF9DCA8641457CB8D81A34B669/0/323830333a383330303a3a2f33322d3438203d3e203139353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8300::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:a2:0c:4d:b6:fb:bc:ce:64:fa:41:53:97:a4:50:4f:50:cb:
         ea:7a:af:aa:73:5b:2a:2d:30:58:d3:1f:88:0c:b8:8e:21:e7:
         2d:14:83:2a:6c:7e:58:16:2d:34:25:26:80:c8:cb:af:b0:8f:
         4e:9c:d4:6b:4e:c9:3f:91:00:7e:64:90:ba:d5:24:21:e8:f3:
         f8:b1:71:48:26:e2:5b:f1:c1:8a:81:87:da:b9:3e:83:77:cb:
         78:cb:94:77:b4:bc:dc:68:4a:2a:8f:b9:bc:2b:cc:46:01:1d:
         06:87:7f:91:5f:db:32:4a:ec:66:b3:bd:fa:3c:89:75:d8:6f:
         10:39:32:a7:d0:83:aa:4f:cb:6d:2a:5c:f9:ba:28:d8:21:12:
         95:75:46:97:a4:d9:0e:2d:e6:50:ac:de:93:39:11:24:15:06:
         df:f1:ae:5e:03:0f:a3:dc:d2:1d:2d:9b:0f:ab:2d:a8:60:d4:
         a2:9f:55:96:bb:10:ad:17:42:cc:9e:85:77:06:a5:65:bf:d6:
         eb:d8:c0:43:fd:56:b4:6a:2a:6b:65:dd:d2:94:7b:4d:01:81:
         09:19:6c:fc:bd:42:df:35:3e:dd:8e:88:f8:53:33:5c:56:0a:
         bf:ff:83:4f:4c:4e:bc:1e:ca:6a:d9:85:fb:99:9e:d0:e8:7d:
         fb:09:a3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 09:08:18 2026 by rpki-client