This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/035AE87F0F53727F69EE2BDF44AAE7E4E8A1498D3032349D39B8FA70E245663E/0/323830333a3338303a3a2f33322d3332203d3e20323633373238.roa
File:                     323830333a3338303a3a2f33322d3332203d3e20323633373238.roa (raw, json)
Hash identifier:          VeA6LAC183j6g8ksLd/j5rkavBGc5PAn5hLKuMHEMsI=
Subject key identifier:   38:79:91:15:D1:B7:F2:D1:9C:42:D3:39:75:1D:37:35:52:4F:50:01
Certificate issuer:       /CN=A046A17FBDC23F220B11EE08ACA1DECE39FE81D8
Certificate serial:       0C890B30DB9D04A7848D5E4078E9A08C03E9207F
Authority key identifier: A0:46:A1:7F:BD:C2:3F:22:0B:11:EE:08:AC:A1:DE:CE:39:FE:81:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A046A17FBDC23F220B11EE08ACA1DECE39FE81D8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/035AE87F0F53727F69EE2BDF44AAE7E4E8A1498D3032349D39B8FA70E245663E/0/323830333a3338303a3a2f33322d3332203d3e20323633373238.roa
Signing time:             Tue 06 Jan 2026 19:25:11 +0000
ROA not before:           Tue 06 Jan 2026 19:20:11 +0000
ROA not after:            Tue 05 Jan 2027 19:25:11 +0000
asID:                     263728
IP address blocks:        2803:380::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/035AE87F0F53727F69EE2BDF44AAE7E4E8A1498D3032349D39B8FA70E245663E/0/A046A17FBDC23F220B11EE08ACA1DECE39FE81D8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/035AE87F0F53727F69EE2BDF44AAE7E4E8A1498D3032349D39B8FA70E245663E/0/A046A17FBDC23F220B11EE08ACA1DECE39FE81D8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A046A17FBDC23F220B11EE08ACA1DECE39FE81D8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 05:40:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:89:0b:30:db:9d:04:a7:84:8d:5e:40:78:e9:a0:8c:03:e9:20:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A046A17FBDC23F220B11EE08ACA1DECE39FE81D8
        Validity
            Not Before: Jan  6 19:20:11 2026 GMT
            Not After : Jan  5 19:25:11 2027 GMT
        Subject: CN=38799115D1B7F2D19C42D339751D3735524F5001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6e:da:c7:42:fd:92:14:07:e8:77:c5:4c:94:
                    66:24:96:1b:9b:e1:d4:ff:54:49:3d:b7:62:d7:6c:
                    36:da:16:3d:c8:ec:64:d2:83:48:48:43:fb:2b:65:
                    65:5a:f9:6c:39:96:5d:2c:af:df:d9:ee:16:ca:6f:
                    84:81:05:42:f9:6f:a2:ef:ac:6e:f2:8d:66:da:06:
                    19:3c:6b:61:f6:04:95:51:45:dc:98:fd:5b:a6:c0:
                    1e:f5:65:fe:1a:64:9c:25:d3:13:2b:c6:fa:b1:5e:
                    66:9b:7b:93:79:03:7d:17:b6:b6:64:04:13:f6:d2:
                    8d:64:ec:53:9f:c5:a3:f1:e4:b7:6c:f4:22:b6:df:
                    b4:36:71:86:de:cf:db:5a:73:2c:0f:36:dc:e9:0f:
                    7a:d3:bf:cd:e3:94:24:c1:ae:b7:5e:bc:ac:6f:b1:
                    8f:5a:34:df:c4:2f:df:ee:ce:d5:21:40:40:fb:8a:
                    39:b1:a1:ed:0a:b3:d4:de:a4:2c:e6:c7:82:34:f0:
                    0b:36:f8:fa:01:12:cc:c3:86:13:73:23:8e:3e:6d:
                    3c:40:dd:68:77:19:47:22:f5:98:af:9b:c9:e6:9e:
                    aa:9d:33:3a:13:59:e3:0b:30:64:08:ad:6e:b1:af:
                    f6:91:9d:6c:98:e5:28:4d:b9:d0:ce:52:7e:b6:ca:
                    bb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:79:91:15:D1:B7:F2:D1:9C:42:D3:39:75:1D:37:35:52:4F:50:01
            X509v3 Authority Key Identifier:
                keyid:A0:46:A1:7F:BD:C2:3F:22:0B:11:EE:08:AC:A1:DE:CE:39:FE:81:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/035AE87F0F53727F69EE2BDF44AAE7E4E8A1498D3032349D39B8FA70E245663E/0/A046A17FBDC23F220B11EE08ACA1DECE39FE81D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A046A17FBDC23F220B11EE08ACA1DECE39FE81D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/035AE87F0F53727F69EE2BDF44AAE7E4E8A1498D3032349D39B8FA70E245663E/0/323830333a3338303a3a2f33322d3332203d3e20323633373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:380::/32

    Signature Algorithm: sha256WithRSAEncryption
         d3:08:1d:17:64:5c:9f:d9:62:41:3e:b0:1d:65:40:b2:a5:8a:
         e5:0b:25:9b:70:28:8e:68:dc:88:7a:41:83:16:99:c0:29:d3:
         cd:e9:4b:2f:02:71:c2:85:db:0b:50:c1:77:0d:48:c7:58:f0:
         fe:9e:5c:28:1b:c2:ab:c0:23:b1:1f:f9:2f:0e:56:87:2c:88:
         fe:c8:6a:3e:9b:7f:66:70:1e:0d:02:fb:5b:79:43:80:09:95:
         33:8c:7d:7e:d2:7d:c8:3a:e6:10:f8:a1:40:93:7b:4d:ab:4a:
         c5:03:07:47:5a:fb:b5:9a:ce:3c:68:c1:9c:0c:7c:ed:5d:84:
         0a:9b:05:2e:a8:4b:15:f4:93:6b:a2:df:d3:7e:08:be:33:d7:
         e6:9f:9c:86:6f:ef:b1:76:d8:2e:7a:8d:a9:85:44:c7:44:46:
         51:85:5a:37:de:64:83:7a:73:76:db:9b:80:15:83:0a:37:0e:
         c4:75:b0:30:5b:77:f3:d6:b8:02:2f:b1:df:6a:e2:80:5c:a5:
         c7:cd:b3:a3:8b:f8:2a:9b:26:b6:d9:f5:17:61:2a:11:26:20:
         7e:0b:86:e0:91:24:ce:04:0c:48:9c:01:5a:9d:42:48:bb:73:
         4c:e6:09:bc:ec:02:16:c6:60:4a:8a:d7:80:35:ca:5e:77:0e:
         70:cf:4d:27
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUDIkLMNudBKeEjV5AeOmgjAPpIH8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTA0NkExN0ZCREMyM0YyMjBCMTFFRTA4QUNBMURFQ0Uz
OUZFODFEODAeFw0yNjAxMDYxOTIwMTFaFw0yNzAxMDUxOTI1MTFaMDMxMTAvBgNV
BAMTKDM4Nzk5MTE1RDFCN0YyRDE5QzQyRDMzOTc1MUQzNzM1NTI0RjUwMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFbtrHQv2SFAfod8VMlGYklhub
4dT/VEk9t2LXbDbaFj3I7GTSg0hIQ/srZWVa+Ww5ll0sr9/Z7hbKb4SBBUL5b6Lv
rG7yjWbaBhk8a2H2BJVRRdyY/VumwB71Zf4aZJwl0xMrxvqxXmabe5N5A30XtrZk
BBP20o1k7FOfxaPx5Lds9CK237Q2cYbez9tacywPNtzpD3rTv83jlCTBrrdevKxv
sY9aNN/EL9/uztUhQED7ijmxoe0Ks9TepCzmx4I08As2+PoBEszDhhNzI44+bTxA
3Wh3GUci9Zivm8nmnqqdMzoTWeMLMGQIrW6xr/aRnWyY5ShNudDOUn62yruTAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUOHmRFdG38tGcQtM5dR03NVJPUAEwHwYDVR0j
BBgwFoAUoEahf73CPyILEe4IrKHezjn+gdgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMzVBRTg3RjBGNTM3MjdGNjlFRTJCREY0NEFBRTdFNEU4
QTE0OThEMzAzMjM0OUQzOUI4RkE3MEUyNDU2NjNFLzAvQTA0NkExN0ZCREMyM0Yy
MjBCMTFFRTA4QUNBMURFQ0UzOUZFODFEOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMDQ2QTE3RkJEQzIzRjIyMEIx
MUVFMDhBQ0ExREVDRTM5RkU4MUQ4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDM1QUU4N0YwRjUzNzI3RjY5RUUyQkRGNDRBQUU3RTRFOEExNDk4RDMw
MzIzNDlEMzlCOEZBNzBFMjQ1NjYzRS8wLzMyMzgzMDMzM2EzMzM4MzAzYTNhMmYz
MzMyMmQzMzMyMjAzZDNlMjAzMjM2MzMzNzMyMzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAwOAMA0G
CSqGSIb3DQEBCwUAA4IBAQDTCB0XZFyf2WJBPrAdZUCypYrlCyWbcCiOaNyIekGD
FpnAKdPN6UsvAnHChdsLUMF3DUjHWPD+nlwoG8KrwCOxH/kvDlaHLIj+yGo+m39m
cB4NAvtbeUOACZUzjH1+0n3IOuYQ+KFAk3tNq0rFAwdHWvu1ms48aMGcDHztXYQK
mwUuqEsV9JNrot/Tfgi+M9fmn5yGb++xdtgueo2phUTHREZRhVo33mSDenN225uA
FYMKNw7EdbAwW3fz1rgCL7HfauKAXKXHzbOji/gqmya22fUXYSoRJiB+C4bgkSTO
BAxInAFanUJIu3NM5gm87AIWxmBKiteANcpedw5wz00n
-----END CERTIFICATE-----
Generated at Mon Jan 12 01:53:52 2026 by rpki-client