This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/323830333a336430303a3a2f33322d3332203d3e203532343439.roa
File:                     323830333a336430303a3a2f33322d3332203d3e203532343439.roa (raw, json)
Hash identifier:          92R09olB8KMX0ZGlG0LfnGFNSDd2K0iHiAl2fSjQc1k=
Subject key identifier:   EF:83:28:6F:7F:50:A7:8E:F3:EB:C8:E0:70:01:DD:02:B2:87:FE:0B
Certificate issuer:       /CN=A6092CA6DF0448374137DE890AB584D961C1028E
Certificate serial:       38DB007F6CB9FF1BC7844C0C6E9B6F646DE6483C
Authority key identifier: A6:09:2C:A6:DF:04:48:37:41:37:DE:89:0A:B5:84:D9:61:C1:02:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6092CA6DF0448374137DE890AB584D961C1028E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/323830333a336430303a3a2f33322d3332203d3e203532343439.roa
Signing time:             Tue 06 Jan 2026 19:28:18 +0000
ROA not before:           Tue 06 Jan 2026 19:23:18 +0000
ROA not after:            Tue 05 Jan 2027 19:28:18 +0000
asID:                     52449
IP address blocks:        2803:3d00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/A6092CA6DF0448374137DE890AB584D961C1028E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/A6092CA6DF0448374137DE890AB584D961C1028E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6092CA6DF0448374137DE890AB584D961C1028E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 06:31:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:db:00:7f:6c:b9:ff:1b:c7:84:4c:0c:6e:9b:6f:64:6d:e6:48:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6092CA6DF0448374137DE890AB584D961C1028E
        Validity
            Not Before: Jan  6 19:23:18 2026 GMT
            Not After : Jan  5 19:28:18 2027 GMT
        Subject: CN=EF83286F7F50A78EF3EBC8E07001DD02B287FE0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:03:8d:38:13:5c:f2:3c:a2:6a:57:7d:b3:72:
                    1d:fb:5e:05:2c:31:d5:5d:fc:d2:ae:ca:a2:e3:0d:
                    83:a8:db:8c:36:3a:9e:9b:a3:97:73:c2:6b:68:42:
                    93:6f:5b:76:fb:8d:07:66:c0:10:0f:95:b7:73:bb:
                    75:7f:0a:77:78:56:7c:00:ed:2e:40:5d:62:b5:15:
                    1a:bb:2c:26:a7:b1:30:3c:cc:b4:cc:5c:29:67:20:
                    46:67:b0:fc:e8:3a:dc:2b:e3:43:45:13:3c:50:9d:
                    e5:13:7b:36:0a:0e:2e:8d:c7:b7:d5:39:14:2d:ca:
                    a9:1e:df:9c:8e:8d:92:18:25:e8:66:87:db:0d:09:
                    43:32:db:e2:53:62:10:1e:77:b4:25:57:4e:f7:bc:
                    f1:fb:16:e7:bb:e1:17:7a:77:1a:94:c9:92:a6:3f:
                    0d:70:2c:24:c9:bf:43:18:b8:b7:7d:94:a3:f0:51:
                    93:32:26:0a:50:51:f5:1a:26:dc:12:b8:25:2b:eb:
                    6a:de:98:d5:a3:3c:d6:d6:0d:87:5d:7d:66:d6:77:
                    42:24:f5:08:ef:d0:e8:b6:e1:48:33:14:b5:b5:47:
                    e8:c8:9f:02:67:8c:34:0a:02:73:84:dc:57:d1:85:
                    80:44:ef:4b:f7:97:e9:30:57:2d:cf:40:7e:92:e3:
                    33:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:83:28:6F:7F:50:A7:8E:F3:EB:C8:E0:70:01:DD:02:B2:87:FE:0B
            X509v3 Authority Key Identifier:
                keyid:A6:09:2C:A6:DF:04:48:37:41:37:DE:89:0A:B5:84:D9:61:C1:02:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/A6092CA6DF0448374137DE890AB584D961C1028E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6092CA6DF0448374137DE890AB584D961C1028E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/323830333a336430303a3a2f33322d3332203d3e203532343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:e4:a5:04:6a:f4:06:79:c6:9d:79:7d:98:ea:c4:15:0f:7f:
         e9:f2:7c:8f:73:70:bf:08:83:ca:15:dc:7d:99:42:e8:fb:b2:
         84:f7:58:1d:25:2a:45:c6:9e:34:8f:2c:9d:c2:37:b1:2f:2e:
         67:9f:54:81:11:63:5d:56:fb:49:66:71:c9:3b:84:d8:95:c0:
         1c:ea:4f:17:ed:79:fc:c5:33:5f:7f:6b:f8:a6:48:d9:10:d9:
         52:0f:b7:5a:bf:2f:ea:c1:c5:69:b1:68:3c:6e:5c:7b:39:63:
         0d:bf:df:d9:83:a6:9e:17:de:72:88:a2:5c:b5:71:72:e2:42:
         0c:cb:ea:91:3b:fb:8a:48:f8:20:9c:44:9e:93:41:e8:af:26:
         a5:97:1f:13:1f:25:97:45:41:cc:96:01:bb:4f:42:3c:cf:96:
         9d:1e:2b:a3:85:2d:49:5e:23:36:ff:e2:e7:82:54:8c:05:3c:
         86:fd:d5:d3:92:27:a7:8f:4a:1d:3c:76:cc:cf:46:0c:1d:b5:
         cd:a0:fb:4b:35:b1:14:51:11:ad:83:78:ac:d8:00:5d:c6:e7:
         af:78:ee:b9:08:a9:24:8c:6f:51:07:95:13:f3:6e:e7:11:13:
         8c:fc:e5:57:61:ce:c7:04:d5:42:af:80:f3:35:51:cd:f6:26:
         0c:57:39:7d
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUONsAf2y5/xvHhEwMbptvZG3mSDwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYwOTJDQTZERjA0NDgzNzQxMzdERTg5MEFCNTg0RDk2
MUMxMDI4RTAeFw0yNjAxMDYxOTIzMThaFw0yNzAxMDUxOTI4MThaMDMxMTAvBgNV
BAMTKEVGODMyODZGN0Y1MEE3OEVGM0VCQzhFMDcwMDFERDAyQjI4N0ZFMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxA404E1zyPKJqV32zch37XgUs
MdVd/NKuyqLjDYOo24w2Op6bo5dzwmtoQpNvW3b7jQdmwBAPlbdzu3V/Cnd4VnwA
7S5AXWK1FRq7LCansTA8zLTMXClnIEZnsPzoOtwr40NFEzxQneUTezYKDi6Nx7fV
ORQtyqke35yOjZIYJehmh9sNCUMy2+JTYhAed7QlV073vPH7Fue74Rd6dxqUyZKm
Pw1wLCTJv0MYuLd9lKPwUZMyJgpQUfUaJtwSuCUr62remNWjPNbWDYddfWbWd0Ik
9Qjv0Oi24UgzFLW1R+jInwJnjDQKAnOE3FfRhYBE70v3l+kwVy3PQH6S4zN5AgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQU74Mob39Qp47z68jgcAHdArKH/gswHwYDVR0j
BBgwFoAUpgkspt8ESDdBN96JCrWE2WHBAo4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMTI1RjgwOUE2REVEREU2RDEwQUIwNkFGQTNEMzZFNzlB
NzM3OTU5MTJDOTBGNDdGQ0U3ODE3QTU0Q0E0MUM5LzAvQTYwOTJDQTZERjA0NDgz
NzQxMzdERTg5MEFCNTg0RDk2MUMxMDI4RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNjA5MkNBNkRGMDQ0ODM3NDEz
N0RFODkwQUI1ODREOTYxQzEwMjhFLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTEyNUY4MDlBNkRFRERFNkQxMEFCMDZBRkEzRDM2RTc5QTczNzk1OTEy
QzkwRjQ3RkNFNzgxN0E1NENBNDFDOS8wLzMyMzgzMDMzM2EzMzY0MzAzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDM1MzIzNDM0Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAz0AMA0G
CSqGSIb3DQEBCwUAA4IBAQCm5KUEavQGecadeX2Y6sQVD3/p8nyPc3C/CIPKFdx9
mULo+7KE91gdJSpFxp40jyydwjexLy5nn1SBEWNdVvtJZnHJO4TYlcAc6k8X7Xn8
xTNff2v4pkjZENlSD7davy/qwcVpsWg8blx7OWMNv9/Zg6aeF95yiKJctXFy4kIM
y+qRO/uKSPggnESek0Horyallx8THyWXRUHMlgG7T0I8z5adHiujhS1JXiM2/+Ln
glSMBTyG/dXTkienj0odPHbMz0YMHbXNoPtLNbEUURGtg3is2ABdxueveO65CKkk
jG9RB5UT827nEROM/OVXYc7HBNVCr4DzNVHN9iYMVzl9
-----END CERTIFICATE-----
Generated at Mon Jan 12 13:52:29 2026 by rpki-client