This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D597C5D3A278EA56F9B0B669807AF2EA429D758CF27567E05936C3E80DC3CFE/0/323830333a336132303a3a2f33322d3438203d3e203532333237.roa
File:                     323830333a336132303a3a2f33322d3438203d3e203532333237.roa (raw, json)
Hash identifier:          MZGJ+WTQxUYT6oHUwJlmD6kHt/AU+TNaUFgo4Jpt5nY=
Subject key identifier:   E3:CD:8B:82:46:26:56:FC:91:63:64:41:37:56:91:6B:4E:FB:28:33
Certificate issuer:       /CN=6C43D070D53868DD0F1A352EAB84A7642B5CEF73
Certificate serial:       023E4DED61D62ABA881BBFE3769D1B7D5FFA30BC
Authority key identifier: 6C:43:D0:70:D5:38:68:DD:0F:1A:35:2E:AB:84:A7:64:2B:5C:EF:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C43D070D53868DD0F1A352EAB84A7642B5CEF73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D597C5D3A278EA56F9B0B669807AF2EA429D758CF27567E05936C3E80DC3CFE/0/323830333a336132303a3a2f33322d3438203d3e203532333237.roa
Signing time:             Wed 07 Jan 2026 19:59:14 +0000
ROA not before:           Wed 07 Jan 2026 19:54:14 +0000
ROA not after:            Wed 06 Jan 2027 19:59:14 +0000
asID:                     52327
IP address blocks:        2803:3a20::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D597C5D3A278EA56F9B0B669807AF2EA429D758CF27567E05936C3E80DC3CFE/0/6C43D070D53868DD0F1A352EAB84A7642B5CEF73.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D597C5D3A278EA56F9B0B669807AF2EA429D758CF27567E05936C3E80DC3CFE/0/6C43D070D53868DD0F1A352EAB84A7642B5CEF73.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C43D070D53868DD0F1A352EAB84A7642B5CEF73.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 00:41:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:3e:4d:ed:61:d6:2a:ba:88:1b:bf:e3:76:9d:1b:7d:5f:fa:30:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C43D070D53868DD0F1A352EAB84A7642B5CEF73
        Validity
            Not Before: Jan  7 19:54:14 2026 GMT
            Not After : Jan  6 19:59:14 2027 GMT
        Subject: CN=E3CD8B82462656FC916364413756916B4EFB2833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c9:eb:a8:ce:51:21:5b:b7:a8:13:9a:7c:e9:
                    5d:a0:a2:54:22:35:f4:4f:24:29:01:34:9a:e4:c9:
                    b8:c1:cc:52:12:d5:a5:a2:58:13:83:98:f9:5b:fa:
                    23:0f:ba:8a:a0:3a:a4:3f:c3:5f:f0:31:23:8c:e5:
                    42:77:a2:b9:c9:fc:fc:87:ef:08:7b:30:54:05:67:
                    4c:a6:df:81:58:ee:b9:f8:8d:6b:aa:45:bd:3b:99:
                    fe:cf:09:a8:b7:96:1a:33:78:84:a7:c5:16:e7:37:
                    c6:a7:d3:20:2c:3a:25:6f:87:3b:21:b9:f1:ac:f6:
                    b7:56:9c:91:33:4b:ef:b1:c3:46:c2:f6:d0:c5:7e:
                    40:4d:5e:93:51:9b:9c:f7:8b:8a:2b:fc:30:f8:10:
                    40:e6:47:c0:b4:74:94:df:1c:c2:f9:f9:4f:c7:c1:
                    c5:43:2e:56:42:92:5d:e7:e7:09:84:f7:fb:d4:3b:
                    4c:28:c5:aa:02:38:b7:da:d4:6e:01:48:d9:66:b4:
                    6d:a8:e4:ff:88:eb:19:cf:d5:e8:c6:32:f7:75:1b:
                    94:83:30:6c:e4:87:92:cb:b6:bc:79:11:eb:55:81:
                    db:4d:82:1a:a0:dd:74:43:7b:f4:29:31:eb:8b:20:
                    a8:2b:f1:7e:5f:f7:19:6e:2e:63:a8:32:89:8d:ab:
                    88:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:CD:8B:82:46:26:56:FC:91:63:64:41:37:56:91:6B:4E:FB:28:33
            X509v3 Authority Key Identifier:
                keyid:6C:43:D0:70:D5:38:68:DD:0F:1A:35:2E:AB:84:A7:64:2B:5C:EF:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D597C5D3A278EA56F9B0B669807AF2EA429D758CF27567E05936C3E80DC3CFE/0/6C43D070D53868DD0F1A352EAB84A7642B5CEF73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C43D070D53868DD0F1A352EAB84A7642B5CEF73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D597C5D3A278EA56F9B0B669807AF2EA429D758CF27567E05936C3E80DC3CFE/0/323830333a336132303a3a2f33322d3438203d3e203532333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3a20::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:3f:11:67:6b:b1:1d:21:42:00:2c:f9:66:ad:11:6d:f2:8e:
         0b:6f:b1:26:42:1e:9b:a0:e6:ad:31:6c:6e:cc:5f:11:d4:7f:
         d1:91:27:1d:2f:d4:2d:10:e6:c8:0e:4c:b4:14:e0:40:45:9b:
         06:bc:e9:a6:3c:d0:21:0d:6c:91:f0:a8:43:cf:f5:91:d3:7e:
         64:d4:de:02:c2:93:9f:28:1c:42:7e:df:1b:e2:67:70:fb:c4:
         01:ac:ea:18:93:20:3c:fc:57:e2:97:3e:5d:72:3c:b3:36:c4:
         7e:c4:93:83:e6:7f:b3:9c:2b:0f:17:6a:a2:89:a0:6d:ea:5e:
         6d:87:b8:0c:a2:c9:f1:22:1b:60:b1:93:d1:84:b9:8d:9a:72:
         1f:71:6c:66:f8:c1:ed:fa:b9:41:fc:a7:d3:71:40:ae:53:d6:
         29:01:06:5b:f4:2d:6e:29:ef:bd:8b:c4:ef:05:e3:51:f5:8f:
         bd:b8:63:3f:07:e3:41:0a:25:54:b5:fd:8b:6f:98:58:ea:62:
         20:99:61:aa:2e:62:86:ec:45:ab:48:9a:e8:ab:67:46:a0:36:
         2e:78:81:b7:43:27:fd:91:e7:f8:f0:c2:f7:4f:a1:8c:fb:99:
         d3:49:00:91:b7:85:de:f2:b0:39:8f:56:9c:5c:e0:85:8f:33:
         20:4a:8b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 06:44:03 2026 by rpki-client