This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a3638303a3a2f34322d3438203d3e20323632313832.roa
File:                     323830333a6630303a3638303a3a2f34322d3438203d3e20323632313832.roa (raw, json)
Hash identifier:          8ZGz6n2A+qt7/TPepk9k55X7g30AicL4+s9UlON4/ck=
Subject key identifier:   2A:0D:86:B9:52:E0:F1:5E:DC:8B:BD:9F:DA:CC:CC:FB:1B:85:7A:C7
Certificate issuer:       /CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Certificate serial:       114DE423B2FCB0D99438AA68F4CB64D6090EA12D
Authority key identifier: 3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a3638303a3a2f34322d3438203d3e20323632313832.roa
Signing time:             Mon 12 Jan 2026 21:00:06 +0000
ROA not before:           Mon 12 Jan 2026 20:55:06 +0000
ROA not after:            Mon 11 Jan 2027 21:00:06 +0000
asID:                     262182
IP address blocks:        2803:f00:680::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 18:58:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:4d:e4:23:b2:fc:b0:d9:94:38:aa:68:f4:cb:64:d6:09:0e:a1:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
        Validity
            Not Before: Jan 12 20:55:06 2026 GMT
            Not After : Jan 11 21:00:06 2027 GMT
        Subject: CN=2A0D86B952E0F15EDC8BBD9FDACCCCFB1B857AC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e0:4e:a8:c4:31:ab:60:65:4b:be:b3:23:28:
                    68:d6:2d:45:89:d1:ce:fd:d4:d4:43:f7:8f:f1:c8:
                    86:5f:73:c8:00:55:36:a3:f4:c8:04:ba:c8:27:96:
                    e2:47:51:11:0f:b7:eb:ac:f2:0a:48:c3:0a:a5:27:
                    23:7c:57:8b:1a:19:d3:6b:a7:1e:22:bf:b6:9b:69:
                    1e:d6:8f:0b:dc:90:eb:b3:59:72:bd:59:e9:aa:a2:
                    6e:f4:37:30:32:4b:01:85:f0:78:94:14:7a:d5:28:
                    cb:15:0f:4d:85:2c:bd:29:74:c9:a2:1f:f1:b8:62:
                    84:63:e7:7c:e0:34:b4:d4:8d:75:24:0a:01:6c:c1:
                    9a:76:2e:68:be:2e:85:00:a4:94:0a:36:3f:c2:52:
                    d7:36:df:6b:d8:f0:ad:50:ab:b7:ce:f0:55:b2:d4:
                    87:93:75:69:d9:52:20:8a:61:85:5a:2c:79:42:b5:
                    aa:32:7b:b8:8a:cf:bc:6c:7b:80:ae:e0:9e:a5:ba:
                    08:90:9a:ac:09:76:91:fb:ec:5e:53:93:65:e7:fd:
                    47:e2:eb:37:40:87:5f:50:1e:e5:ba:45:49:6a:71:
                    ba:88:ed:c6:42:c2:1f:bf:77:13:fc:ec:c7:22:d7:
                    51:97:47:fd:a0:fd:25:75:4b:45:cd:ec:ef:bd:d4:
                    68:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:0D:86:B9:52:E0:F1:5E:DC:8B:BD:9F:DA:CC:CC:FB:1B:85:7A:C7
            X509v3 Authority Key Identifier:
                keyid:3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a3638303a3a2f34322d3438203d3e20323632313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f00:680::/42

    Signature Algorithm: sha256WithRSAEncryption
         dc:b8:bc:c3:83:d8:3e:49:8e:f2:d7:01:aa:f1:14:ba:12:d4:
         96:2c:73:e7:ea:f1:95:9d:b8:9a:cd:df:c5:56:19:2f:f1:4b:
         b2:04:30:51:ba:9e:63:4a:94:ac:98:99:b3:90:fd:60:2a:bd:
         ed:c4:1a:8c:b3:ab:01:41:ae:da:f7:6a:43:d9:80:66:f9:09:
         c3:d5:bf:77:8b:92:31:a3:2a:f3:b2:20:c1:cc:3d:d8:36:69:
         a3:79:7c:a8:5b:f6:5b:bb:a5:d1:99:60:56:e3:cc:5a:83:51:
         14:c4:36:a2:17:b4:7b:e3:46:be:61:00:59:3a:6e:9e:28:d0:
         91:de:99:99:e5:51:e3:bc:0f:56:2f:ed:68:ff:3b:03:21:a9:
         29:b7:47:43:d9:ec:26:27:6d:93:52:1a:22:d8:ed:16:79:f4:
         30:3f:8a:b5:81:e2:4d:10:db:61:99:72:fc:ba:1a:88:22:5d:
         50:24:d1:5b:c7:e5:31:37:f1:6d:b9:e0:4e:45:83:26:4b:78:
         0e:7b:46:35:73:2f:08:a2:99:73:7e:b0:af:ca:45:3f:af:34:
         8e:73:56:46:2b:27:4e:22:39:63:7c:db:6b:79:12:5f:94:d7:
         67:37:13:01:a0:dd:95:3f:a6:a2:c0:21:b0:79:5b:52:7e:37:
         92:34:96:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 07:56:50 2026 by rpki-client