This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/01BB6E0FC87B834BAF2BA2E1225203397532F5ACA15D9122BB347346F7D6E288/0/323830333a373836303a3a2f33322d3334203d3e20323637383239.roa
File:                     323830333a373836303a3a2f33322d3334203d3e20323637383239.roa (raw, json)
Hash identifier:          cum9I1sbm/DcB4b1uXim2FF0o9V1A73EyldBSLxi+jQ=
Subject key identifier:   26:38:8E:05:55:B3:3B:6B:EB:31:8A:B9:4A:F9:89:A4:FB:00:36:0D
Certificate issuer:       /CN=38BB77D54066782A688F0637FD2B6B6CEF74FC3E
Certificate serial:       4212BBD4344F823BAF45D6A3F633FFCC17F1CA1D
Authority key identifier: 38:BB:77:D5:40:66:78:2A:68:8F:06:37:FD:2B:6B:6C:EF:74:FC:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38BB77D54066782A688F0637FD2B6B6CEF74FC3E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/01BB6E0FC87B834BAF2BA2E1225203397532F5ACA15D9122BB347346F7D6E288/0/323830333a373836303a3a2f33322d3334203d3e20323637383239.roa
Signing time:             Tue 06 Jan 2026 19:30:53 +0000
ROA not before:           Tue 06 Jan 2026 19:25:53 +0000
ROA not after:            Tue 05 Jan 2027 19:30:53 +0000
asID:                     267829
IP address blocks:        2803:7860::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/01BB6E0FC87B834BAF2BA2E1225203397532F5ACA15D9122BB347346F7D6E288/0/38BB77D54066782A688F0637FD2B6B6CEF74FC3E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/01BB6E0FC87B834BAF2BA2E1225203397532F5ACA15D9122BB347346F7D6E288/0/38BB77D54066782A688F0637FD2B6B6CEF74FC3E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38BB77D54066782A688F0637FD2B6B6CEF74FC3E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 09:33:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:12:bb:d4:34:4f:82:3b:af:45:d6:a3:f6:33:ff:cc:17:f1:ca:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38BB77D54066782A688F0637FD2B6B6CEF74FC3E
        Validity
            Not Before: Jan  6 19:25:53 2026 GMT
            Not After : Jan  5 19:30:53 2027 GMT
        Subject: CN=26388E0555B33B6BEB318AB94AF989A4FB00360D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:47:1b:ad:00:ec:a2:4a:40:3d:16:c9:8e:7b:
                    99:06:e7:df:28:62:61:33:4f:63:22:a2:38:58:b0:
                    82:b5:49:bb:eb:a7:44:4b:d9:9e:2f:82:01:82:3f:
                    11:55:c6:51:b4:26:90:1d:7b:82:18:01:f7:de:67:
                    96:ba:3d:af:29:64:fe:f5:4c:b1:88:05:31:21:23:
                    fc:5a:70:81:13:6f:7b:f5:2f:04:e5:64:1f:32:c1:
                    58:01:bf:4b:4f:16:b1:b4:6a:f2:16:23:0e:43:79:
                    c5:31:e2:75:89:bf:03:e3:f7:51:8d:76:0d:7a:d1:
                    e3:20:26:76:97:f9:44:f8:26:28:0f:ad:bc:10:60:
                    4c:b5:2a:d2:93:dd:ff:04:75:f3:2e:ea:ca:2c:a3:
                    38:e0:25:1a:f7:f2:25:98:81:ae:ce:86:d6:25:56:
                    3a:32:96:e8:90:22:8e:38:e0:87:9c:c0:25:38:b4:
                    21:fa:c9:a9:eb:ef:b9:ef:59:b0:39:b4:ba:b1:28:
                    79:ce:e3:c7:7c:01:20:72:25:1a:cb:bf:4d:25:b5:
                    29:f7:3c:90:5f:30:94:b6:38:72:d5:32:70:98:66:
                    33:6e:b6:f5:cf:33:a2:b2:58:09:d5:cb:30:a7:5f:
                    26:89:0e:d8:ed:03:30:ae:e7:08:45:3d:b6:32:f8:
                    ad:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:38:8E:05:55:B3:3B:6B:EB:31:8A:B9:4A:F9:89:A4:FB:00:36:0D
            X509v3 Authority Key Identifier:
                keyid:38:BB:77:D5:40:66:78:2A:68:8F:06:37:FD:2B:6B:6C:EF:74:FC:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/01BB6E0FC87B834BAF2BA2E1225203397532F5ACA15D9122BB347346F7D6E288/0/38BB77D54066782A688F0637FD2B6B6CEF74FC3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38BB77D54066782A688F0637FD2B6B6CEF74FC3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/01BB6E0FC87B834BAF2BA2E1225203397532F5ACA15D9122BB347346F7D6E288/0/323830333a373836303a3a2f33322d3334203d3e20323637383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7860::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:a1:72:e7:9e:43:a6:9e:e6:ec:c1:15:1f:73:b6:3b:48:5c:
         83:55:0d:49:07:7b:09:34:53:d0:20:36:69:10:15:e8:37:f5:
         57:8a:3a:45:d9:4a:2d:a2:e6:7f:78:2d:2c:4d:dc:08:59:ef:
         99:d2:e7:76:4b:84:c5:06:fb:30:94:ac:da:c4:a5:09:9f:8b:
         9a:db:9d:92:5a:8d:96:b9:25:b5:af:00:b6:04:fb:7a:e0:ad:
         35:d7:79:fa:b3:3e:98:04:ec:2f:13:32:6d:50:3a:f6:62:1b:
         f2:62:7b:77:f8:0e:12:76:0e:b5:d3:14:ad:1e:45:cf:ea:be:
         1c:64:4e:73:d0:c5:43:30:56:db:34:da:7d:6f:e0:28:71:7e:
         c9:3c:b0:82:17:37:0d:6e:5b:b9:fb:3d:06:89:b4:80:75:86:
         34:6b:a6:f0:c0:63:a0:a2:ca:20:3b:64:13:be:4e:04:30:95:
         fa:20:af:27:03:74:99:42:a1:0c:27:aa:5c:02:a3:84:f7:a0:
         68:6a:1b:49:a5:fb:45:75:55:98:2e:be:12:53:70:b3:35:14:
         db:a1:cb:71:56:83:94:97:79:4a:84:2f:71:fd:03:27:35:1a:
         6c:ed:37:f5:27:5c:d3:63:38:dc:fd:ae:99:1b:c2:78:d3:30:
         bc:39:83:5d
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUQhK71DRPgjuvRdaj9jP/zBfxyh0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhCQjc3RDU0MDY2NzgyQTY4OEYwNjM3RkQyQjZCNkNF
Rjc0RkMzRTAeFw0yNjAxMDYxOTI1NTNaFw0yNzAxMDUxOTMwNTNaMDMxMTAvBgNV
BAMTKDI2Mzg4RTA1NTVCMzNCNkJFQjMxOEFCOTRBRjk4OUE0RkIwMDM2MEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVRxutAOyiSkA9FsmOe5kG598o
YmEzT2MiojhYsIK1Sbvrp0RL2Z4vggGCPxFVxlG0JpAde4IYAffeZ5a6Pa8pZP71
TLGIBTEhI/xacIETb3v1LwTlZB8ywVgBv0tPFrG0avIWIw5DecUx4nWJvwPj91GN
dg160eMgJnaX+UT4JigPrbwQYEy1KtKT3f8EdfMu6sosozjgJRr38iWYga7OhtYl
VjoyluiQIo444IecwCU4tCH6yanr77nvWbA5tLqxKHnO48d8ASByJRrLv00ltSn3
PJBfMJS2OHLVMnCYZjNutvXPM6KyWAnVyzCnXyaJDtjtAzCu5whFPbYy+K2fAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUJjiOBVWzO2vrMYq5SvmJpPsANg0wHwYDVR0j
BBgwFoAUOLt31UBmeCpojwY3/StrbO90/D4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMUJCNkUwRkM4N0I4MzRCQUYyQkEyRTEyMjUyMDMzOTc1
MzJGNUFDQTE1RDkxMjJCQjM0NzM0NkY3RDZFMjg4LzAvMzhCQjc3RDU0MDY2Nzgy
QTY4OEYwNjM3RkQyQjZCNkNFRjc0RkMzRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zOEJCNzdENTQwNjY3ODJBNjg4
RjA2MzdGRDJCNkI2Q0VGNzRGQzNFLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDFCQjZFMEZDODdCODM0QkFGMkJBMkUxMjI1MjAzMzk3NTMyRjVBQ0Ex
NUQ5MTIyQkIzNDczNDZGN0Q2RTI4OC8wLzMyMzgzMDMzM2EzNzM4MzYzMDNhM2Ey
ZjMzMzIyZDMzMzQyMDNkM2UyMDMyMzYzNzM4MzIzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDeGAw
DQYJKoZIhvcNAQELBQADggEBAHqhcueeQ6ae5uzBFR9ztjtIXINVDUkHewk0U9Ag
NmkQFeg39VeKOkXZSi2i5n94LSxN3AhZ75nS53ZLhMUG+zCUrNrEpQmfi5rbnZJa
jZa5JbWvALYE+3rgrTXXefqzPpgE7C8TMm1QOvZiG/Jie3f4DhJ2DrXTFK0eRc/q
vhxkTnPQxUMwVts02n1v4Chxfsk8sIIXNw1uW7n7PQaJtIB1hjRrpvDAY6CiyiA7
ZBO+TgQwlfogrycDdJlCoQwnqlwCo4T3oGhqG0ml+0V1VZguvhJTcLM1FNuhy3FW
g5SXeUqEL3H9Ayc1GmztN/UnXNNjONz9rpkbwnjTMLw5g10=
-----END CERTIFICATE-----
Generated at Tue Jan 13 09:26:20 2026 by rpki-client