This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a363a3a2f36342d3634203d3e203532343538.roa
File:                     323830333a3438303a363a3a2f36342d3634203d3e203532343538.roa (raw, json)
Hash identifier:          8HJbpn8mEnbqBWWWd0VJeKKELN5l5u/HnR9pqa4kmqE=
Subject key identifier:   9D:57:05:D1:87:38:98:F2:4D:7D:33:05:4D:6A:41:9B:42:BF:D2:CC
Certificate issuer:       /CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
Certificate serial:       42BA6961073F300E775EFD51F2F9009D572BA406
Authority key identifier: 11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a363a3a2f36342d3634203d3e203532343538.roa
Signing time:             Tue 06 Jan 2026 19:19:51 +0000
ROA not before:           Tue 06 Jan 2026 19:14:51 +0000
ROA not after:            Tue 05 Jan 2027 19:19:51 +0000
asID:                     52458
IP address blocks:        2803:480:6::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Jan 2026 01:34:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:ba:69:61:07:3f:30:0e:77:5e:fd:51:f2:f9:00:9d:57:2b:a4:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
        Validity
            Not Before: Jan  6 19:14:51 2026 GMT
            Not After : Jan  5 19:19:51 2027 GMT
        Subject: CN=9D5705D1873898F24D7D33054D6A419B42BFD2CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d1:dc:a3:0f:40:c1:b3:36:a3:55:ff:d5:37:
                    99:5c:84:d8:28:26:83:d4:53:a1:59:fb:37:fb:96:
                    65:93:f6:ad:e2:ed:b8:2d:df:bf:d9:3e:ed:f9:aa:
                    35:43:fc:25:59:9c:93:c7:0f:61:e5:3c:8d:0f:2a:
                    ec:24:f9:b7:65:78:a0:a6:91:07:9d:27:1c:20:2a:
                    fb:73:34:eb:c2:72:f6:46:a4:2b:6e:f5:57:32:09:
                    7b:1f:d6:83:72:d1:01:bf:2e:ff:a9:fa:1c:a2:58:
                    fb:63:56:08:35:fb:c2:40:ef:fd:4f:13:1e:58:a6:
                    ed:75:c1:5b:f0:94:c9:03:48:88:df:6e:76:94:70:
                    0c:cc:71:b5:95:06:00:3f:5b:5e:d2:52:97:d6:20:
                    6d:24:3b:e7:10:e0:3e:cd:24:fb:8e:27:1b:a9:10:
                    e7:3c:d7:b9:11:5f:07:9a:72:99:73:e5:37:bd:7a:
                    ff:96:8f:ec:ef:ad:6c:55:12:ad:71:e1:f6:16:13:
                    c8:7a:d9:88:84:f3:d3:b8:e4:18:ce:3b:36:78:ea:
                    f9:37:6a:f2:a9:27:da:d0:27:9c:b3:09:23:10:7d:
                    ea:be:c5:ea:a0:ef:bb:6b:a7:75:b7:06:84:a7:99:
                    b1:a5:e7:3e:76:8e:24:81:e0:94:97:6b:97:45:be:
                    d9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:57:05:D1:87:38:98:F2:4D:7D:33:05:4D:6A:41:9B:42:BF:D2:CC
            X509v3 Authority Key Identifier:
                keyid:11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a363a3a2f36342d3634203d3e203532343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:480:6::/64

    Signature Algorithm: sha256WithRSAEncryption
         21:4a:91:26:1b:80:c1:44:8e:53:18:b8:fd:a0:97:38:b7:4f:
         b9:4f:bc:e1:b7:6a:05:7b:e4:38:90:0c:34:5d:a6:35:23:c4:
         65:4e:e7:fc:5f:de:8c:e0:ab:14:3c:a7:ce:e6:26:f4:06:70:
         ff:1d:01:f7:eb:3c:23:7a:79:e3:56:66:1d:29:34:e9:ba:41:
         39:9b:57:5a:d9:db:a1:e4:60:b6:95:5a:cb:48:75:f4:2a:2d:
         98:3a:84:e7:4b:a1:6f:02:a2:aa:52:2d:63:7a:10:f2:be:f4:
         bf:c3:6f:78:29:a4:80:8a:6c:c1:74:88:11:23:9e:eb:d5:71:
         e8:35:6f:ad:26:5c:04:3f:cc:8b:d3:1e:67:4e:d7:b0:de:56:
         73:34:48:36:b2:aa:4c:52:2b:89:26:28:2f:ad:3d:fb:23:f8:
         21:13:59:c3:ac:60:c8:ea:d8:22:63:01:17:bb:53:8e:24:1e:
         b4:6a:0e:bb:6f:c5:09:49:a9:17:76:8b:de:7d:1b:ee:00:6b:
         4a:89:cb:aa:5d:26:bf:96:2b:ed:93:4a:09:12:9d:f1:2b:4d:
         3b:73:ff:e4:37:a8:ef:b3:09:7f:31:a7:31:9c:87:bf:fb:ec:
         37:ec:40:6a:14:ff:30:b0:9c:30:56:72:1c:f8:74:ca:58:cf:
         01:02:38:dc
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUQrppYQc/MA53Xv1R8vkAnVcrpAYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFGNjg1MThCMTE2MkE0RkJGMjlCNTdDMUE4MEY4N0ZG
RjQ3NzAyODAeFw0yNjAxMDYxOTE0NTFaFw0yNzAxMDUxOTE5NTFaMDMxMTAvBgNV
BAMTKDlENTcwNUQxODczODk4RjI0RDdEMzMwNTRENkE0MTlCNDJCRkQyQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ0dyjD0DBszajVf/VN5lchNgo
JoPUU6FZ+zf7lmWT9q3i7bgt37/ZPu35qjVD/CVZnJPHD2HlPI0PKuwk+bdleKCm
kQedJxwgKvtzNOvCcvZGpCtu9VcyCXsf1oNy0QG/Lv+p+hyiWPtjVgg1+8JA7/1P
Ex5Ypu11wVvwlMkDSIjfbnaUcAzMcbWVBgA/W17SUpfWIG0kO+cQ4D7NJPuOJxup
EOc817kRXweacplz5Te9ev+Wj+zvrWxVEq1x4fYWE8h62YiE89O45BjOOzZ46vk3
avKpJ9rQJ5yzCSMQfeq+xeqg77trp3W3BoSnmbGl5z52jiSB4JSXa5dFvtnbAgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQUnVcF0Yc4mPJNfTMFTWpBm0K/0swwHwYDVR0j
BBgwFoAUEfaFGLEWKk+/KbV8GoD4f/9HcCgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRDM1QzlBNzk4MDUyM0FCN0VCMDQ3RTE2NUMyQUJFQjM4
OUEwNzk0MjNBRkU1MjgwOEQzMTlEQUI5MjFDNTAzLzAvMTFGNjg1MThCMTE2MkE0
RkJGMjlCNTdDMUE4MEY4N0ZGRjQ3NzAyOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMUY2ODUxOEIxMTYyQTRGQkYy
OUI1N0MxQTgwRjg3RkZGNDc3MDI4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEQzNUM5QTc5ODA1MjNBQjdFQjA0N0UxNjVDMkFCRUIzODlBMDc5NDIz
QUZFNTI4MDhEMzE5REFCOTIxQzUwMy8wLzMyMzgzMDMzM2EzNDM4MzAzYTM2M2Ez
YTJmMzYzNDJkMzYzNDIwM2QzZTIwMzUzMjM0MzUzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAkBggrBgEFBQcBBwEB/wQVMBMwEQQCAAIwCwMJACgDBIAA
BgAAMA0GCSqGSIb3DQEBCwUAA4IBAQAhSpEmG4DBRI5TGLj9oJc4t0+5T7zht2oF
e+Q4kAw0XaY1I8RlTuf8X96M4KsUPKfO5ib0BnD/HQH36zwjennjVmYdKTTpukE5
m1da2duh5GC2lVrLSHX0Ki2YOoTnS6FvAqKqUi1jehDyvvS/w294KaSAimzBdIgR
I57r1XHoNW+tJlwEP8yL0x5nTtew3lZzNEg2sqpMUiuJJigvrT37I/ghE1nDrGDI
6tgiYwEXu1OOJB60ag67b8UJSakXdovefRvuAGtKicuqXSa/livtk0oJEp3xK007
c//kN6jvswl/MacxnIe/++w37EBqFP8wsJwwVnIc+HTKWM8BAjjc
-----END CERTIFICATE-----
Generated at Sat Jan 10 18:10:10 2026 by rpki-client