This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/20F4550334253ADAB7087063EE2084C8DFB90F6C4549E9DCD707455A76FE94FE/0/323830333a343030303a3a2f33322d3438203d3e20323635383031.roa
File:                     323830333a343030303a3a2f33322d3438203d3e20323635383031.roa (raw, json)
Hash identifier:          aARFO44+XiudYGYUsjyL4nPkY4u94qm0zLhUm4Rcfxc=
Subject key identifier:   F4:C4:FC:CC:81:6F:BC:3B:10:1E:65:84:3E:E2:31:4B:CF:63:22:70
Certificate issuer:       /CN=76B68D726059BE54F917099E654DC13D12330EF6
Certificate serial:       7B651A895986DA3301CF38B4A4387B4F7D5462D1
Authority key identifier: 76:B6:8D:72:60:59:BE:54:F9:17:09:9E:65:4D:C1:3D:12:33:0E:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76B68D726059BE54F917099E654DC13D12330EF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/20F4550334253ADAB7087063EE2084C8DFB90F6C4549E9DCD707455A76FE94FE/0/323830333a343030303a3a2f33322d3438203d3e20323635383031.roa
Signing time:             Tue 06 Jan 2026 19:47:01 +0000
ROA not before:           Tue 06 Jan 2026 19:42:01 +0000
ROA not after:            Tue 05 Jan 2027 19:47:01 +0000
asID:                     265801
IP address blocks:        2803:4000::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/20F4550334253ADAB7087063EE2084C8DFB90F6C4549E9DCD707455A76FE94FE/0/76B68D726059BE54F917099E654DC13D12330EF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/20F4550334253ADAB7087063EE2084C8DFB90F6C4549E9DCD707455A76FE94FE/0/76B68D726059BE54F917099E654DC13D12330EF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76B68D726059BE54F917099E654DC13D12330EF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Jan 2026 03:43:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:65:1a:89:59:86:da:33:01:cf:38:b4:a4:38:7b:4f:7d:54:62:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76B68D726059BE54F917099E654DC13D12330EF6
        Validity
            Not Before: Jan  6 19:42:01 2026 GMT
            Not After : Jan  5 19:47:01 2027 GMT
        Subject: CN=F4C4FCCC816FBC3B101E65843EE2314BCF632270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:08:d6:7e:7e:63:db:b2:f5:49:90:6b:84:f9:
                    a3:ea:58:a0:22:b5:7c:22:41:e1:ba:3a:eb:88:8a:
                    95:67:fc:36:11:76:1f:96:5e:2f:92:6b:bd:ef:6e:
                    dc:cb:68:f0:22:b8:fa:39:11:92:a6:9f:c0:2a:b5:
                    7e:2b:e1:f7:42:c9:ba:2c:bf:79:ae:50:2c:0c:b7:
                    5d:e9:cd:3e:cf:af:44:db:83:2b:3c:a4:8b:a5:48:
                    60:76:25:4e:3d:88:64:1d:1e:08:1c:55:64:da:89:
                    ae:3c:7b:94:5d:11:95:d8:70:3f:55:dc:fc:19:87:
                    65:e6:8d:9a:5f:e3:5d:89:35:22:81:33:f9:9f:b8:
                    a0:49:71:c8:c2:64:a8:00:3d:5a:68:17:21:b2:31:
                    37:af:8e:5b:46:d7:01:ab:ff:b3:6d:30:60:11:50:
                    be:14:d0:69:04:d8:b7:cc:44:75:e3:3f:3d:a5:e0:
                    3c:b2:90:10:ee:bc:39:75:46:16:ec:57:81:4f:1f:
                    6e:e0:0f:8a:70:00:93:b4:c4:bb:50:0f:19:8a:83:
                    82:bc:56:b6:d4:8c:54:5b:4c:48:80:7d:58:9d:43:
                    53:aa:1f:f1:a9:d6:23:cb:3d:7d:e9:cf:7b:1c:19:
                    6b:c5:ed:65:49:ef:34:0e:c9:c0:f2:08:97:85:4b:
                    92:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C4:FC:CC:81:6F:BC:3B:10:1E:65:84:3E:E2:31:4B:CF:63:22:70
            X509v3 Authority Key Identifier:
                keyid:76:B6:8D:72:60:59:BE:54:F9:17:09:9E:65:4D:C1:3D:12:33:0E:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/20F4550334253ADAB7087063EE2084C8DFB90F6C4549E9DCD707455A76FE94FE/0/76B68D726059BE54F917099E654DC13D12330EF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76B68D726059BE54F917099E654DC13D12330EF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/20F4550334253ADAB7087063EE2084C8DFB90F6C4549E9DCD707455A76FE94FE/0/323830333a343030303a3a2f33322d3438203d3e20323635383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4000::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:88:04:55:04:5d:14:a6:79:fc:45:75:04:91:12:c5:8a:03:
         06:40:a9:ba:61:48:10:c5:f6:cb:94:bf:25:96:bd:bd:9d:6a:
         54:bc:39:77:fa:c1:1f:2d:80:9b:55:05:a8:f6:7d:f2:a4:9f:
         73:57:df:c2:2b:6f:4a:7a:86:f5:d9:9a:65:7d:90:8a:bd:26:
         34:06:e6:17:8f:d0:60:2f:d6:9e:d9:89:66:7f:8c:c9:10:cd:
         a0:c6:e9:8b:d9:f9:24:f5:01:26:35:18:6b:ca:c7:b9:ab:89:
         2b:f1:9d:cd:81:84:62:b5:bd:74:83:6f:ee:aa:f4:7d:54:38:
         ac:31:b0:62:5d:00:10:81:a8:75:56:c3:ef:b9:c1:1a:86:6e:
         9d:37:e9:a0:d6:bf:f3:d5:9e:b3:49:d5:d9:1c:aa:41:f8:83:
         00:48:8b:8c:ee:fa:82:96:a8:82:88:53:06:76:e2:d8:95:63:
         00:3e:29:4f:ac:76:8b:1e:db:bb:52:98:86:40:a1:0b:99:b6:
         7d:10:f8:dc:44:74:7b:41:f1:af:f2:74:1c:97:62:24:0c:46:
         18:74:f4:00:2c:40:f7:7c:2e:79:21:7c:41:08:ff:89:93:95:
         96:75:05:2b:ba:50:8d:0a:03:30:17:ee:fc:c1:41:32:57:3d:
         52:62:ce:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 23:36:38 2026 by rpki-client