This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a393430303a3a2f34302d3430203d3e203631343631.roa
File:                     323830333a643730303a393430303a3a2f34302d3430203d3e203631343631.roa (raw, json)
Hash identifier:          tKceUgpVOJTFQolkPcWxlHejoNz6pGaloeOTPGsWeEo=
Subject key identifier:   BF:D1:89:74:E6:DC:47:B0:3E:B7:B9:60:F0:02:70:E7:37:0C:BC:F2
Certificate issuer:       /CN=B137142754DED915D3341628E74A8B91AF0CB76A
Certificate serial:       592C6A63791CD6C4A4E9A74BE20274A88A040D22
Authority key identifier: B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a393430303a3a2f34302d3430203d3e203631343631.roa
Signing time:             Tue 06 Jan 2026 19:11:26 +0000
ROA not before:           Tue 06 Jan 2026 19:06:26 +0000
ROA not after:            Tue 05 Jan 2027 19:11:26 +0000
asID:                     61461
IP address blocks:        2803:d700:9400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 09:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:2c:6a:63:79:1c:d6:c4:a4:e9:a7:4b:e2:02:74:a8:8a:04:0d:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B137142754DED915D3341628E74A8B91AF0CB76A
        Validity
            Not Before: Jan  6 19:06:26 2026 GMT
            Not After : Jan  5 19:11:26 2027 GMT
        Subject: CN=BFD18974E6DC47B03EB7B960F00270E7370CBCF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9b:5b:f7:0e:f2:1d:24:ad:39:37:e7:d0:5b:
                    80:0a:67:de:4d:04:9b:ab:0b:ca:b5:fb:be:2b:47:
                    11:12:da:2b:bb:b6:e6:04:76:11:92:35:ee:94:c9:
                    4c:80:d6:e5:db:cd:9e:d6:c8:de:cd:16:e2:88:5a:
                    a7:e3:f0:58:8a:84:7a:c6:c9:83:75:95:c1:d4:2e:
                    86:26:ed:23:8c:89:07:9b:9d:c6:62:37:04:49:d0:
                    9d:9d:6a:e2:10:b8:95:35:4f:42:24:be:31:48:cc:
                    bb:3b:35:f5:53:af:c2:69:87:7b:51:48:10:51:26:
                    1f:ab:2c:00:f9:4b:e7:3c:34:69:2e:58:b4:47:4c:
                    6d:0a:ac:50:0e:72:94:af:0d:24:35:8b:56:92:41:
                    a1:37:92:c3:ef:c7:81:83:a0:67:a3:61:bc:5b:6c:
                    ac:e0:8a:a3:77:63:f7:2f:65:99:ad:91:d7:08:ab:
                    30:2e:3b:15:2c:88:df:e9:46:68:e4:d5:b7:d5:1d:
                    0b:55:9d:41:cf:81:99:d8:21:81:21:c6:8f:1a:c9:
                    d5:0d:14:67:d8:4f:1d:5f:fe:79:89:c5:2e:74:0b:
                    fb:53:66:ca:6e:aa:20:99:34:d9:e9:17:bd:88:50:
                    5f:df:43:60:e5:5a:07:67:bc:d7:33:84:eb:a1:fc:
                    01:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D1:89:74:E6:DC:47:B0:3E:B7:B9:60:F0:02:70:E7:37:0C:BC:F2
            X509v3 Authority Key Identifier:
                keyid:B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a393430303a3a2f34302d3430203d3e203631343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d700:9400::/40

    Signature Algorithm: sha256WithRSAEncryption
         c5:93:ab:df:7e:d3:50:18:10:27:ad:ca:53:80:bd:a3:e4:41:
         1b:74:d9:6b:02:64:01:e4:21:24:54:b6:7a:dc:f4:40:ed:40:
         d4:35:1e:94:26:f4:10:64:2b:de:9e:7e:66:fd:49:75:85:9d:
         a7:c4:0d:84:78:6a:93:22:88:9c:2d:02:59:94:42:cd:41:1d:
         98:48:0a:6a:60:e3:c1:2e:3c:66:2d:33:e9:a6:c1:e2:4d:d4:
         84:ca:05:6e:ca:35:f4:fc:b3:ce:3f:29:57:16:30:fa:cd:7a:
         ed:fd:19:84:b1:8e:19:de:e5:f9:5c:69:fb:c1:b8:f6:5e:5e:
         b6:bd:c0:fb:12:e2:2a:7b:11:63:db:1b:9c:ac:cc:89:45:53:
         97:62:bb:a3:ba:37:0d:85:2f:83:4a:cb:54:1d:c9:10:b7:d4:
         76:f9:55:40:17:e8:9c:28:13:88:12:16:63:02:fa:9c:1d:8f:
         c7:8c:d0:12:0d:a5:f2:cb:4b:1d:41:04:3f:2f:39:81:a5:bf:
         f1:6b:e7:3d:95:34:d0:3f:16:21:10:96:71:1b:af:31:26:28:
         5d:ca:42:78:75:f1:03:89:14:9c:88:71:fe:a9:3c:0d:09:a7:
         dc:6b:18:5d:c4:fa:22:23:7d:f5:3c:c6:4b:1e:f5:5a:bd:18:
         9d:4c:39:c6
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUWSxqY3kc1sSk6adL4gJ0qIoEDSIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjEzNzE0Mjc1NERFRDkxNUQzMzQxNjI4RTc0QThCOTFB
RjBDQjc2QTAeFw0yNjAxMDYxOTA2MjZaFw0yNzAxMDUxOTExMjZaMDMxMTAvBgNV
BAMTKEJGRDE4OTc0RTZEQzQ3QjAzRUI3Qjk2MEYwMDI3MEU3MzcwQ0JDRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgm1v3DvIdJK05N+fQW4AKZ95N
BJurC8q1+74rRxES2iu7tuYEdhGSNe6UyUyA1uXbzZ7WyN7NFuKIWqfj8FiKhHrG
yYN1lcHULoYm7SOMiQebncZiNwRJ0J2dauIQuJU1T0IkvjFIzLs7NfVTr8Jph3tR
SBBRJh+rLAD5S+c8NGkuWLRHTG0KrFAOcpSvDSQ1i1aSQaE3ksPvx4GDoGejYbxb
bKzgiqN3Y/cvZZmtkdcIqzAuOxUsiN/pRmjk1bfVHQtVnUHPgZnYIYEhxo8aydUN
FGfYTx1f/nmJxS50C/tTZspuqiCZNNnpF72IUF/fQ2DlWgdnvNczhOuh/AHPAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUv9GJdObcR7A+t7lg8AJw5zcMvPIwHwYDVR0j
BBgwFoAUsTcUJ1Te2RXTNBYo50qLka8Mt2owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRTdCNjQzMDk3MjdGNDQ2N0I2OEE3NkQ5MEQzMDVCRkUz
Q0NGQzkxNTE4NTM1QkQ4NzVFRTU1MDM4MUExREZDLzAvQjEzNzE0Mjc1NERFRDkx
NUQzMzQxNjI4RTc0QThCOTFBRjBDQjc2QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMTM3MTQyNzU0REVEOTE1RDMz
NDE2MjhFNzRBOEI5MUFGMENCNzZBLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkU3QjY0MzA5NzI3RjQ0NjdCNjhBNzZEOTBEMzA1QkZFM0NDRkM5MTUx
ODUzNUJEODc1RUU1NTAzODFBMURGQy8wLzMyMzgzMDMzM2E2NDM3MzAzMDNhMzkz
NDMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzNjMxMzQzNjMxLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAPXAJQwDQYJKoZIhvcNAQELBQADggEBAMWTq99+01AYECetylOAvaPkQRt0
2WsCZAHkISRUtnrc9EDtQNQ1HpQm9BBkK96efmb9SXWFnafEDYR4apMiiJwtAlmU
Qs1BHZhICmpg48EuPGYtM+mmweJN1ITKBW7KNfT8s84/KVcWMPrNeu39GYSxjhne
5flcafvBuPZeXra9wPsS4ip7EWPbG5yszIlFU5diu6O6Nw2FL4NKy1QdyRC31Hb5
VUAX6JwoE4gSFmMC+pwdj8eM0BINpfLLSx1BBD8vOYGlv/Fr5z2VNNA/FiEQlnEb
rzEmKF3KQnh18QOJFJyIcf6pPA0Jp9xrGF3E+iIjffU8xkse9Vq9GJ1MOcY=
-----END CERTIFICATE-----
Generated at Tue Jan 13 03:41:19 2026 by rpki-client