This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a333a3a2f34382d3438203d3e20323632313832.roa
File:                     323830333a6630303a333a3a2f34382d3438203d3e20323632313832.roa (raw, json)
Hash identifier:          1kR8zuuNK6dSej1mdL+fD08OIPCDQmgdiSscO5fWEOE=
Subject key identifier:   BD:8E:B3:A2:BA:F1:94:5A:F4:79:1E:1F:8E:93:7A:1A:47:12:47:7C
Certificate issuer:       /CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Certificate serial:       6AE0D9E152F682C920DFB0654042F0FD6789D857
Authority key identifier: 3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a333a3a2f34382d3438203d3e20323632313832.roa
Signing time:             Mon 12 Jan 2026 21:00:05 +0000
ROA not before:           Mon 12 Jan 2026 20:55:05 +0000
ROA not after:            Mon 11 Jan 2027 21:00:05 +0000
asID:                     262182
IP address blocks:        2803:f00:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 18:58:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:e0:d9:e1:52:f6:82:c9:20:df:b0:65:40:42:f0:fd:67:89:d8:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
        Validity
            Not Before: Jan 12 20:55:05 2026 GMT
            Not After : Jan 11 21:00:05 2027 GMT
        Subject: CN=BD8EB3A2BAF1945AF4791E1F8E937A1A4712477C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ac:b7:32:0a:ce:2b:4d:9c:da:72:1c:86:85:
                    c6:57:53:a6:bf:a8:0e:d9:52:46:90:9d:b7:16:f0:
                    fa:cb:2d:bb:f6:b1:76:83:6c:62:e9:93:3f:af:d7:
                    50:e9:83:66:bd:44:b3:01:53:a9:ef:fa:c2:fe:36:
                    88:04:d8:35:15:91:59:6f:c1:1a:a0:f0:9e:c1:1f:
                    2b:66:0e:7e:4c:26:56:b3:dc:27:57:5b:3c:cc:68:
                    34:a8:02:47:89:21:b7:c8:b0:0b:0e:b5:0a:ec:b6:
                    da:b4:8e:8b:7a:95:b3:12:54:85:16:fc:ca:0b:9a:
                    6a:4b:74:e8:68:22:aa:99:c5:95:a5:c6:58:1f:12:
                    94:49:e0:1c:57:35:93:59:0b:e1:36:89:59:6d:14:
                    b3:5d:08:ae:37:68:fe:82:4e:df:67:ec:a2:d6:63:
                    6c:58:70:87:4c:87:fb:23:94:d8:b2:57:50:30:d1:
                    1a:e8:8a:05:07:d8:19:f8:f6:58:db:70:e3:0a:fa:
                    00:22:82:31:b4:ec:19:9a:75:66:39:56:ac:50:35:
                    8b:5e:61:a7:1c:ed:8a:ad:d5:19:1d:eb:f3:d0:90:
                    50:54:a3:db:60:f9:1e:15:b3:16:20:f0:ea:bc:3c:
                    9e:08:e1:b0:72:8b:e9:bb:ff:8f:a9:d9:dc:b1:1f:
                    c4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:8E:B3:A2:BA:F1:94:5A:F4:79:1E:1F:8E:93:7A:1A:47:12:47:7C
            X509v3 Authority Key Identifier:
                keyid:3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a333a3a2f34382d3438203d3e20323632313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f00:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         b4:7d:4b:9e:88:d0:b9:59:8a:1f:04:34:85:2a:e1:ef:83:f4:
         13:cf:67:dd:c0:2e:60:fb:fb:b6:78:01:cb:fd:a6:0b:4d:47:
         33:18:ac:0c:d0:d2:ea:35:c5:52:b7:d5:40:a8:51:f2:4f:91:
         ac:a6:9b:86:7f:be:ea:45:fb:49:ec:a8:36:31:cb:48:90:e6:
         02:33:cb:e8:57:84:ee:19:0f:93:cb:26:5f:f2:8f:e5:44:e1:
         66:6a:a8:5e:b7:a5:e7:a9:ee:3c:e4:08:17:6d:09:ca:8b:b9:
         9d:db:10:3c:ab:ad:ad:ad:2d:24:82:ca:7c:38:08:53:e3:f9:
         91:11:52:ea:61:1c:e9:ac:ec:25:e1:20:23:cc:1d:da:63:b5:
         16:88:d7:83:e7:28:c1:6e:42:0b:56:33:e6:13:c5:86:b0:0a:
         15:ba:71:7b:70:00:61:5e:e4:78:a6:86:36:a5:9d:88:dc:0c:
         a9:fc:1c:8b:42:b8:4a:e6:6f:0b:eb:85:62:f4:bd:e3:fb:e4:
         90:d2:35:a4:91:bf:9a:b7:a3:39:09:65:59:ac:ca:74:c5:9c:
         69:5d:57:f6:1f:63:d0:07:9e:d0:a7:53:17:f7:95:1d:05:34:
         5a:44:c7:29:ac:05:7a:30:cc:17:1b:86:c4:26:d5:8d:26:56:
         71:34:68:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 07:57:35 2026 by rpki-client