This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a383630303a3a2f34302d3430203d3e203631343631.roa
File:                     323830333a643730303a383630303a3a2f34302d3430203d3e203631343631.roa (raw, json)
Hash identifier:          GfFj7OL6/451f4tfCjeEy/JRRQfe0NK4PGBUU2DPxz4=
Subject key identifier:   4C:98:D2:7E:99:69:10:E1:E4:0B:A4:A1:70:BD:FF:24:6B:06:9F:1D
Certificate issuer:       /CN=B137142754DED915D3341628E74A8B91AF0CB76A
Certificate serial:       47D72CA151A719915069CC59845300169C628D88
Authority key identifier: B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a383630303a3a2f34302d3430203d3e203631343631.roa
Signing time:             Tue 06 Jan 2026 19:11:29 +0000
ROA not before:           Tue 06 Jan 2026 19:06:29 +0000
ROA not after:            Tue 05 Jan 2027 19:11:29 +0000
asID:                     61461
IP address blocks:        2803:d700:8600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 09:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:d7:2c:a1:51:a7:19:91:50:69:cc:59:84:53:00:16:9c:62:8d:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B137142754DED915D3341628E74A8B91AF0CB76A
        Validity
            Not Before: Jan  6 19:06:29 2026 GMT
            Not After : Jan  5 19:11:29 2027 GMT
        Subject: CN=4C98D27E996910E1E40BA4A170BDFF246B069F1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2c:c9:35:9c:eb:d6:a2:91:52:dd:a4:39:b8:
                    53:6a:ce:e9:b9:99:b5:5f:ac:f7:78:89:bf:ed:9c:
                    15:77:97:60:4f:94:61:4d:fe:52:0b:ea:d2:7b:39:
                    0a:c3:86:e0:96:90:2c:31:c3:33:42:89:59:65:69:
                    64:6b:b0:2c:06:e1:82:82:b4:8c:af:73:1b:ef:e9:
                    61:ed:3e:20:ab:f7:47:d2:d8:fe:00:46:b4:47:64:
                    23:8c:5c:2e:7d:90:f3:aa:dd:32:30:6a:81:ca:af:
                    26:21:6f:64:35:05:7a:35:ff:55:33:86:da:b2:39:
                    9b:ab:37:dd:46:0e:51:9c:f5:43:7e:dc:1a:fa:7e:
                    a8:d1:0a:82:15:16:0e:c9:04:20:77:ff:70:b8:fb:
                    7b:cc:14:77:6f:e6:7a:fc:f9:a2:f3:84:3c:18:88:
                    9a:a0:ec:66:e5:e4:9c:d1:55:e2:04:40:21:d7:a4:
                    99:9e:ab:8c:97:b1:2c:00:0b:d9:f6:c6:7a:2d:61:
                    47:f5:6d:41:05:09:5f:bc:73:f2:4f:a7:0f:b3:2f:
                    c3:13:41:bf:68:96:5d:aa:cc:2d:07:c6:84:0c:83:
                    50:73:1b:6a:81:96:a8:7a:8d:af:33:b0:ce:e0:eb:
                    98:f7:e4:3f:f6:33:c2:de:83:8b:6d:7f:67:cf:ce:
                    1a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:98:D2:7E:99:69:10:E1:E4:0B:A4:A1:70:BD:FF:24:6B:06:9F:1D
            X509v3 Authority Key Identifier:
                keyid:B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a383630303a3a2f34302d3430203d3e203631343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d700:8600::/40

    Signature Algorithm: sha256WithRSAEncryption
         9c:8a:f7:01:3a:d3:c3:99:17:bc:93:83:e2:29:21:46:42:a9:
         8a:fc:dc:86:ca:49:b9:81:6c:c4:c3:d2:49:7d:85:da:c8:e6:
         28:c2:3a:ef:8d:3c:79:53:31:ac:c5:6d:46:24:50:f9:90:ea:
         d7:9d:7a:9b:77:52:1d:77:53:ef:a9:08:98:ae:df:fe:31:20:
         3c:a5:a2:ba:0b:71:15:8c:8a:f2:21:7c:af:52:10:cf:f6:8d:
         d3:44:32:b7:22:9c:84:0d:6f:f6:bc:ed:f1:37:57:c2:f4:3f:
         d7:e8:12:4b:39:59:30:38:39:c5:f5:6f:f3:c9:a7:39:3f:43:
         73:bd:79:6a:9b:ee:ea:39:40:47:12:3b:d7:9a:c2:57:0c:aa:
         e0:83:b5:ec:16:fb:c6:1b:1f:dd:40:86:29:ce:1c:0f:26:38:
         7b:e7:64:21:26:68:3c:a3:d3:1a:66:94:4c:a7:da:b5:ec:a6:
         59:bc:68:a4:ed:24:67:c8:5b:72:45:ae:89:0a:9c:46:8d:46:
         93:7a:01:79:16:48:d1:46:ee:86:b0:ee:0e:5e:0d:d7:a1:12:
         fd:7b:93:06:88:3f:57:5f:ae:15:99:dd:08:e8:97:b6:85:e5:
         dc:d9:d8:59:51:74:d9:7f:3d:ac:b3:0a:09:54:67:89:9a:59:
         43:3f:5b:c3
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUR9csoVGnGZFQacxZhFMAFpxijYgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjEzNzE0Mjc1NERFRDkxNUQzMzQxNjI4RTc0QThCOTFB
RjBDQjc2QTAeFw0yNjAxMDYxOTA2MjlaFw0yNzAxMDUxOTExMjlaMDMxMTAvBgNV
BAMTKDRDOThEMjdFOTk2OTEwRTFFNDBCQTRBMTcwQkRGRjI0NkIwNjlGMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFLMk1nOvWopFS3aQ5uFNqzum5
mbVfrPd4ib/tnBV3l2BPlGFN/lIL6tJ7OQrDhuCWkCwxwzNCiVllaWRrsCwG4YKC
tIyvcxvv6WHtPiCr90fS2P4ARrRHZCOMXC59kPOq3TIwaoHKryYhb2Q1BXo1/1Uz
htqyOZurN91GDlGc9UN+3Br6fqjRCoIVFg7JBCB3/3C4+3vMFHdv5nr8+aLzhDwY
iJqg7Gbl5JzRVeIEQCHXpJmeq4yXsSwAC9n2xnotYUf1bUEFCV+8c/JPpw+zL8MT
Qb9oll2qzC0HxoQMg1BzG2qBlqh6ja8zsM7g65j35D/2M8Leg4ttf2fPzhr3AgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUTJjSfplpEOHkC6ShcL3/JGsGnx0wHwYDVR0j
BBgwFoAUsTcUJ1Te2RXTNBYo50qLka8Mt2owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRTdCNjQzMDk3MjdGNDQ2N0I2OEE3NkQ5MEQzMDVCRkUz
Q0NGQzkxNTE4NTM1QkQ4NzVFRTU1MDM4MUExREZDLzAvQjEzNzE0Mjc1NERFRDkx
NUQzMzQxNjI4RTc0QThCOTFBRjBDQjc2QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMTM3MTQyNzU0REVEOTE1RDMz
NDE2MjhFNzRBOEI5MUFGMENCNzZBLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkU3QjY0MzA5NzI3RjQ0NjdCNjhBNzZEOTBEMzA1QkZFM0NDRkM5MTUx
ODUzNUJEODc1RUU1NTAzODFBMURGQy8wLzMyMzgzMDMzM2E2NDM3MzAzMDNhMzgz
NjMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzNjMxMzQzNjMxLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAPXAIYwDQYJKoZIhvcNAQELBQADggEBAJyK9wE608OZF7yTg+IpIUZCqYr8
3IbKSbmBbMTD0kl9hdrI5ijCOu+NPHlTMazFbUYkUPmQ6tedept3Uh13U++pCJiu
3/4xIDyloroLcRWMivIhfK9SEM/2jdNEMrcinIQNb/a87fE3V8L0P9foEks5WTA4
OcX1b/PJpzk/Q3O9eWqb7uo5QEcSO9eawlcMquCDtewW+8YbH91AhinOHA8mOHvn
ZCEmaDyj0xpmlEyn2rXsplm8aKTtJGfIW3JFrokKnEaNRpN6AXkWSNFG7oaw7g5e
DdehEv17kwaIP1dfrhWZ3Qjol7aF5dzZ2FlRdNl/PayzCglUZ4maWUM/W8M=
-----END CERTIFICATE-----
Generated at Tue Jan 13 03:41:26 2026 by rpki-client