This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/085BDDDF5F7A9600FE9C41871A2EB67C1F6DA1BE7DFA6E71EE3A62128E734133/0/323830333a313130303a3a2f33322d3332203d3e203630303232.roa
File:                     323830333a313130303a3a2f33322d3332203d3e203630303232.roa (raw, json)
Hash identifier:          1QYF1gd7EtQTiZYNo99NbpZ2/Hz61PflT5ZDSx6bVls=
Subject key identifier:   29:0C:4B:83:4A:A3:48:26:69:8F:B9:7D:71:F0:54:24:4A:A9:71:84
Certificate issuer:       /CN=32DACDC930712AC6C14A51E11EE334A3F6C82286
Certificate serial:       652F4C5E4936755C5CD658E7B52968385A94B651
Authority key identifier: 32:DA:CD:C9:30:71:2A:C6:C1:4A:51:E1:1E:E3:34:A3:F6:C8:22:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32DACDC930712AC6C14A51E11EE334A3F6C82286.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/085BDDDF5F7A9600FE9C41871A2EB67C1F6DA1BE7DFA6E71EE3A62128E734133/0/323830333a313130303a3a2f33322d3332203d3e203630303232.roa
Signing time:             Tue 06 Jan 2026 19:22:28 +0000
ROA not before:           Tue 06 Jan 2026 19:17:28 +0000
ROA not after:            Tue 05 Jan 2027 19:22:28 +0000
asID:                     60022
IP address blocks:        2803:1100::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/085BDDDF5F7A9600FE9C41871A2EB67C1F6DA1BE7DFA6E71EE3A62128E734133/0/32DACDC930712AC6C14A51E11EE334A3F6C82286.crl
                          rsync://repository.lacnic.net/rpki/lacnic/085BDDDF5F7A9600FE9C41871A2EB67C1F6DA1BE7DFA6E71EE3A62128E734133/0/32DACDC930712AC6C14A51E11EE334A3F6C82286.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32DACDC930712AC6C14A51E11EE334A3F6C82286.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 00:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:2f:4c:5e:49:36:75:5c:5c:d6:58:e7:b5:29:68:38:5a:94:b6:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32DACDC930712AC6C14A51E11EE334A3F6C82286
        Validity
            Not Before: Jan  6 19:17:28 2026 GMT
            Not After : Jan  5 19:22:28 2027 GMT
        Subject: CN=290C4B834AA34826698FB97D71F054244AA97184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:69:e0:3d:4b:bb:db:ab:30:57:2c:08:ac:b4:
                    5a:9c:be:dc:e1:01:d3:55:3d:af:17:c0:e1:9e:5a:
                    1d:a9:3e:d3:9a:09:ef:89:e1:61:32:d6:be:e2:97:
                    79:5a:43:25:91:ff:3c:43:0d:ba:60:8f:7b:70:3e:
                    82:b8:5a:4b:e4:b2:d9:ee:ce:53:fa:5e:ab:97:a0:
                    05:48:69:9f:f4:ab:30:7b:d3:c4:3e:4d:17:0d:a5:
                    00:fc:b6:09:8b:58:c8:1d:bf:87:e7:a6:9d:22:96:
                    ce:4a:f8:6d:4a:ef:6d:fb:e3:52:84:6d:aa:47:43:
                    d2:b2:95:77:c5:9d:3f:fe:8a:ff:a6:f1:39:6b:2f:
                    57:d4:b8:36:cf:96:91:14:22:b9:b6:6f:6c:09:c2:
                    b6:69:94:c5:da:4a:59:2b:5d:92:d2:d8:eb:42:a7:
                    1b:04:8f:7a:94:3c:01:62:1c:8b:de:5d:d5:dd:17:
                    b7:4e:c9:33:40:09:f3:37:fe:b3:70:9e:b4:89:83:
                    6f:c6:3d:b1:52:2e:a7:8d:8d:66:89:f0:d5:e2:95:
                    73:8c:8c:1e:f5:22:6d:bf:e1:1f:2a:1d:40:c6:ed:
                    cf:98:4a:f6:4a:cd:70:b7:75:fa:3c:7d:13:b6:f0:
                    9c:6c:bc:26:40:d7:bd:13:e9:06:ec:02:3a:25:da:
                    fa:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:0C:4B:83:4A:A3:48:26:69:8F:B9:7D:71:F0:54:24:4A:A9:71:84
            X509v3 Authority Key Identifier:
                keyid:32:DA:CD:C9:30:71:2A:C6:C1:4A:51:E1:1E:E3:34:A3:F6:C8:22:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/085BDDDF5F7A9600FE9C41871A2EB67C1F6DA1BE7DFA6E71EE3A62128E734133/0/32DACDC930712AC6C14A51E11EE334A3F6C82286.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32DACDC930712AC6C14A51E11EE334A3F6C82286.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/085BDDDF5F7A9600FE9C41871A2EB67C1F6DA1BE7DFA6E71EE3A62128E734133/0/323830333a313130303a3a2f33322d3332203d3e203630303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1100::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:05:70:94:72:96:83:b2:c9:3c:0a:49:51:b6:52:ba:49:72:
         4f:37:16:63:b3:29:e9:f3:b1:1c:3e:32:ee:59:17:ac:c4:70:
         90:0e:32:f7:91:39:b9:0a:7c:87:72:01:ae:65:09:d9:f6:ed:
         4a:30:3e:54:13:0e:37:d5:14:37:7b:03:76:5c:97:8b:26:35:
         12:31:3d:40:4d:58:3c:a7:28:62:b0:b3:a4:02:9c:98:18:43:
         78:fc:64:47:70:e4:43:ad:e3:10:46:bf:12:70:5e:e7:32:2b:
         5b:31:a2:7f:71:79:57:35:b8:77:0d:53:3b:07:a8:41:27:4c:
         9b:df:3f:a3:4f:0f:6d:ba:19:6e:cb:ac:0f:20:b7:71:41:d9:
         2f:2f:04:62:e4:e3:14:45:61:b1:11:f2:f0:bc:ed:a5:5a:86:
         24:c4:53:f5:a2:ef:34:8b:06:ab:78:3d:13:0e:5c:cf:ec:b6:
         a4:67:1a:ba:46:b2:2f:65:bc:d8:9f:39:0d:67:fd:cc:05:e2:
         87:1c:ce:f9:b9:89:d9:a8:a2:5c:3e:5b:ee:70:fa:bf:13:30:
         b9:cb:64:c2:18:f5:fb:32:83:43:d1:a0:bd:c5:46:0a:d6:d0:
         ec:e3:5d:f1:14:4c:0b:fd:d3:c3:0f:98:84:64:66:e3:02:21:
         04:e7:1a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 15:12:57 2026 by rpki-client