This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/323830333a383831303a3a2f33322d3332203d3e20323731383134.roa
File:                     323830333a383831303a3a2f33322d3332203d3e20323731383134.roa (raw, json)
Hash identifier:          u9ygh/UBwa+eaaBA6ZIz+GMklsz9tPBVwOHbiu0fSTw=
Subject key identifier:   4E:73:95:F0:FB:36:6F:FA:BB:B4:E4:38:3B:C6:95:33:A7:DE:87:6F
Certificate issuer:       /CN=E8415F203EB930F191C0398A880C11B310EE5884
Certificate serial:       118E9ADCDC053F44CCD52996EFEABB7510C4D593
Authority key identifier: E8:41:5F:20:3E:B9:30:F1:91:C0:39:8A:88:0C:11:B3:10:EE:58:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8415F203EB930F191C0398A880C11B310EE5884.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/323830333a383831303a3a2f33322d3332203d3e20323731383134.roa
Signing time:             Tue 06 Jan 2026 18:59:35 +0000
ROA not before:           Tue 06 Jan 2026 18:54:35 +0000
ROA not after:            Tue 05 Jan 2027 18:59:35 +0000
asID:                     271814
IP address blocks:        2803:8810::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/E8415F203EB930F191C0398A880C11B310EE5884.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/E8415F203EB930F191C0398A880C11B310EE5884.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8415F203EB930F191C0398A880C11B310EE5884.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:8e:9a:dc:dc:05:3f:44:cc:d5:29:96:ef:ea:bb:75:10:c4:d5:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8415F203EB930F191C0398A880C11B310EE5884
        Validity
            Not Before: Jan  6 18:54:35 2026 GMT
            Not After : Jan  5 18:59:35 2027 GMT
        Subject: CN=4E7395F0FB366FFABBB4E4383BC69533A7DE876F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7d:60:45:bb:1b:34:8a:37:c9:81:15:52:20:
                    6b:6d:85:e3:7d:11:45:32:10:64:c1:bd:13:e4:e0:
                    65:f3:ce:58:9f:c3:ca:29:a1:ad:e1:40:93:5e:ad:
                    f1:7a:d9:d0:e1:e0:47:b5:82:20:67:43:ca:74:14:
                    6a:bd:45:6f:a8:95:b7:f9:97:e2:d9:1c:5e:45:22:
                    da:8b:e1:54:fd:ff:3e:b9:73:93:b3:87:e5:a9:6c:
                    77:15:a4:bf:67:be:bd:b5:88:f6:6b:33:7d:49:61:
                    33:dd:18:9b:15:97:33:1a:d9:5b:5b:7a:c7:98:a8:
                    28:11:2b:84:cb:e9:c2:64:60:18:42:8a:30:ec:4c:
                    3e:09:99:d2:b9:93:aa:fd:8a:3f:11:aa:5f:a2:a2:
                    6f:39:e3:f4:f4:49:77:d8:35:7f:d7:1b:f1:d7:48:
                    61:9e:1f:b7:23:7e:b8:02:2e:72:b6:59:f6:55:8d:
                    c6:ae:eb:ca:70:0b:1e:19:ed:8e:67:23:4e:8d:76:
                    e7:b0:45:bb:37:62:12:ae:4a:de:21:32:f7:fa:bd:
                    1e:22:02:66:e9:99:22:6e:d9:b7:76:c2:d6:43:c6:
                    68:3b:44:f2:ea:97:1b:70:9b:69:9f:4f:31:1d:86:
                    1f:33:e8:f1:01:d7:cc:a8:e0:02:ea:d6:9f:90:c0:
                    f9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:73:95:F0:FB:36:6F:FA:BB:B4:E4:38:3B:C6:95:33:A7:DE:87:6F
            X509v3 Authority Key Identifier:
                keyid:E8:41:5F:20:3E:B9:30:F1:91:C0:39:8A:88:0C:11:B3:10:EE:58:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/E8415F203EB930F191C0398A880C11B310EE5884.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8415F203EB930F191C0398A880C11B310EE5884.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/323830333a383831303a3a2f33322d3332203d3e20323731383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8810::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:89:fd:56:b1:63:6b:9e:be:e5:14:ca:03:14:b9:28:f9:02:
         d3:9c:fd:ce:d3:79:56:85:2d:30:38:ff:93:e8:c5:e5:aa:7d:
         f4:07:1c:de:f6:8b:cb:68:0d:2d:fe:25:d4:42:e3:d1:d4:b9:
         87:3a:4f:de:73:a6:f4:fe:e2:c1:64:15:fa:71:9c:d6:02:66:
         fc:75:dc:a2:a6:a3:0b:f9:dd:a2:4d:fa:5a:1b:57:a3:59:64:
         1a:24:95:b5:d3:74:cf:d0:5e:60:37:6f:1c:12:d8:44:a2:76:
         32:3a:41:95:87:55:b8:91:a7:60:98:2e:15:a2:48:01:1b:25:
         48:7e:a7:82:d9:f5:b7:fe:30:ec:bb:22:87:5e:f1:b7:93:73:
         90:9b:aa:4a:79:b0:07:0e:f0:8b:0d:44:83:55:56:55:b4:43:
         23:2b:31:a2:2a:9e:05:c8:b8:77:a6:8f:91:ab:af:f3:95:02:
         9a:86:12:9f:98:02:6e:b9:c9:d1:43:79:3d:9c:70:d5:70:54:
         47:d8:f1:74:cf:57:4d:39:79:f8:a3:47:d4:44:2c:58:d8:86:
         75:f2:3b:8c:eb:5e:d2:68:f4:f2:d4:61:1b:df:1a:95:11:af:
         bc:43:01:ff:8d:8a:4f:9e:3f:d1:76:28:51:14:00:9d:01:fc:
         9c:0e:67:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 13:39:47 2026 by rpki-client