This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/323830333a646361303a3a2f33322d3936203d3e20323636383434.roa
File:                     323830333a646361303a3a2f33322d3936203d3e20323636383434.roa (raw, json)
Hash identifier:          9qbtmVEqHshY75+P7+Byn7SxOZdXu1xWgBPrrC/KAJk=
Subject key identifier:   F4:93:3C:C2:61:72:47:03:9D:11:5B:D6:C1:42:8A:7B:24:33:1F:87
Certificate issuer:       /CN=A070374834B30E4E1EAC2F337D7138EE06F6AB7A
Certificate serial:       6150B62E7C3AE2F228CB88AAFEBC34722D8F04EF
Authority key identifier: A0:70:37:48:34:B3:0E:4E:1E:AC:2F:33:7D:71:38:EE:06:F6:AB:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/323830333a646361303a3a2f33322d3936203d3e20323636383434.roa
Signing time:             Tue 06 Jan 2026 19:44:12 +0000
ROA not before:           Tue 06 Jan 2026 19:39:12 +0000
ROA not after:            Tue 05 Jan 2027 19:44:12 +0000
asID:                     266844
IP address blocks:        2803:dca0::/32 maxlen: 96
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:50:b6:2e:7c:3a:e2:f2:28:cb:88:aa:fe:bc:34:72:2d:8f:04:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A070374834B30E4E1EAC2F337D7138EE06F6AB7A
        Validity
            Not Before: Jan  6 19:39:12 2026 GMT
            Not After : Jan  5 19:44:12 2027 GMT
        Subject: CN=F4933CC2617247039D115BD6C1428A7B24331F87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:81:ba:16:d1:f5:52:cf:30:23:ef:86:34:bb:
                    3b:01:72:bb:a7:98:23:95:91:5e:80:2a:40:29:0a:
                    8c:80:0e:55:40:1b:b7:74:98:02:4a:cb:97:9a:33:
                    4f:48:37:df:c7:f6:4c:6a:ca:9d:78:13:e8:89:9e:
                    ed:d4:93:63:6d:84:59:26:ed:8c:e8:66:3f:0b:cc:
                    b7:e1:2a:73:9d:53:e5:e9:0e:f7:d4:6a:e1:27:02:
                    3c:2e:1c:f5:4e:96:39:3f:2e:6c:d1:af:af:6a:fd:
                    d6:a8:e0:56:24:46:ab:24:91:a5:94:83:52:9d:09:
                    42:76:c7:92:fb:78:cb:f3:4c:90:f7:64:ab:64:97:
                    e6:3c:ee:09:c7:2b:d1:3c:7b:dd:6a:61:80:83:9c:
                    4f:35:41:8c:20:38:ed:e3:08:43:9f:15:43:32:cf:
                    44:d9:5e:1c:77:92:9d:99:8c:09:42:9b:3b:22:02:
                    12:0c:bc:d6:4e:63:3b:97:42:16:52:30:e8:86:9c:
                    3a:7a:51:86:7c:e7:f3:40:de:56:20:50:22:97:ae:
                    1a:24:7b:b3:84:ba:9d:31:50:cc:88:97:b4:61:c0:
                    26:23:c6:31:91:29:a8:cf:ee:f6:e2:c7:7e:6d:27:
                    66:e1:29:0f:be:23:35:a1:d0:6e:8b:e0:30:62:10:
                    57:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:93:3C:C2:61:72:47:03:9D:11:5B:D6:C1:42:8A:7B:24:33:1F:87
            X509v3 Authority Key Identifier:
                keyid:A0:70:37:48:34:B3:0E:4E:1E:AC:2F:33:7D:71:38:EE:06:F6:AB:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/323830333a646361303a3a2f33322d3936203d3e20323636383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dca0::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:de:30:ea:f5:fb:63:a9:a1:d6:81:2b:3b:29:d6:47:f4:66:
         20:47:a2:d9:cf:77:aa:eb:76:e6:57:20:0d:4f:44:6f:11:8c:
         4d:78:05:70:71:bf:77:00:3e:b0:67:6a:07:69:61:ae:d2:86:
         a0:ef:40:99:0e:d8:71:c3:df:fb:1a:38:2d:e4:0b:ef:18:8c:
         bd:3b:cf:9e:bf:57:db:86:d2:3c:0a:22:c4:d9:7d:c5:9c:cd:
         94:3a:70:22:6b:ed:ed:ac:18:3b:0d:77:1d:81:5e:be:90:46:
         50:ab:4b:82:5c:1f:ff:b5:4d:eb:7d:70:4c:22:f5:e7:b0:dd:
         6b:0d:db:2d:37:c1:fe:71:f6:96:08:0d:62:7f:d6:6c:c7:c2:
         05:b8:e2:c5:43:e5:74:74:66:ee:83:41:ce:3e:a3:cf:71:d2:
         e7:cb:67:37:47:af:9c:c3:2c:8a:ba:3b:f2:20:0b:2a:33:80:
         a4:34:21:1b:33:dd:76:23:88:2e:d9:f9:c7:8d:9b:13:86:17:
         a1:ae:2f:ac:ac:4f:d0:0c:4a:29:81:60:7f:9b:08:9a:59:e8:
         0f:51:a0:2b:6c:f4:5f:9d:7d:cc:9e:4e:45:cd:75:b1:b3:be:
         40:e6:c4:b0:1c:34:88:c0:37:7f:66:3a:14:60:45:c8:a6:74:
         c3:a5:48:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:05:44 2026 by rpki-client