This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/323830333a613339303a3a2f33322d3438203d3e20323733303135.roa
File:                     323830333a613339303a3a2f33322d3438203d3e20323733303135.roa (raw, json)
Hash identifier:          Fu/SZhrr6Jw7DbYo5CUKcfKCtKHHVYuJggcFFClGvTs=
Subject key identifier:   9C:3D:C8:F7:04:2F:9B:7D:D7:32:CC:52:4C:1E:0B:E0:89:30:B2:09
Certificate issuer:       /CN=5021716DB872AFEA302E881734C3D03B1DCE1384
Certificate serial:       3B9EF61116F7BE0CA2DE08DC8F67DCCD483DEA46
Authority key identifier: 50:21:71:6D:B8:72:AF:EA:30:2E:88:17:34:C3:D0:3B:1D:CE:13:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5021716DB872AFEA302E881734C3D03B1DCE1384.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/323830333a613339303a3a2f33322d3438203d3e20323733303135.roa
Signing time:             Tue 06 Jan 2026 19:10:19 +0000
ROA not before:           Tue 06 Jan 2026 19:05:19 +0000
ROA not after:            Tue 05 Jan 2027 19:10:19 +0000
asID:                     273015
IP address blocks:        2803:a390::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5021716DB872AFEA302E881734C3D03B1DCE1384.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 03:17:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:9e:f6:11:16:f7:be:0c:a2:de:08:dc:8f:67:dc:cd:48:3d:ea:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5021716DB872AFEA302E881734C3D03B1DCE1384
        Validity
            Not Before: Jan  6 19:05:19 2026 GMT
            Not After : Jan  5 19:10:19 2027 GMT
        Subject: CN=9C3DC8F7042F9B7DD732CC524C1E0BE08930B209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9c:c0:49:c4:7d:fc:e8:1b:c4:e2:2a:30:34:
                    53:39:28:8c:82:ef:18:7b:8f:72:63:1c:18:bc:d4:
                    09:ee:c2:61:20:a8:e5:6e:7f:16:58:2e:a5:4b:35:
                    90:a3:de:63:9b:a2:39:49:31:52:8f:9c:b1:45:5c:
                    79:ea:8a:35:b4:48:45:a6:e7:4f:c9:50:96:ef:d0:
                    80:39:7f:79:00:57:91:34:24:c4:3e:93:f6:3d:d7:
                    03:da:a0:62:db:9f:68:1e:4c:44:76:fc:29:5f:aa:
                    13:ec:7e:5e:8f:08:66:36:91:d4:ff:5f:02:0a:77:
                    46:84:f6:34:6c:ca:0d:0f:29:7e:20:15:d4:34:ad:
                    5e:51:22:74:9d:ba:13:3b:5e:22:37:a7:86:88:1e:
                    3c:83:6e:57:a5:f7:8d:86:5d:23:9f:ca:be:61:04:
                    cd:11:93:71:05:81:e8:72:e5:ca:26:c1:19:a8:87:
                    dd:70:96:00:48:91:d9:e4:1f:68:2e:57:7c:d2:2f:
                    fd:2e:c3:b3:f3:61:f8:51:a8:c0:30:ce:c5:65:d0:
                    18:09:bc:8b:32:a7:58:40:15:fc:0c:79:19:8c:28:
                    87:6d:47:ad:5f:48:b5:0e:75:47:37:af:fd:7b:27:
                    47:a7:cb:c6:8a:b8:4f:37:c9:82:52:0f:7f:63:d5:
                    35:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:3D:C8:F7:04:2F:9B:7D:D7:32:CC:52:4C:1E:0B:E0:89:30:B2:09
            X509v3 Authority Key Identifier:
                keyid:50:21:71:6D:B8:72:AF:EA:30:2E:88:17:34:C3:D0:3B:1D:CE:13:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5021716DB872AFEA302E881734C3D03B1DCE1384.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/323830333a613339303a3a2f33322d3438203d3e20323733303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a390::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:bf:a3:ab:1e:8c:f4:71:23:4b:81:03:2f:d9:d1:38:39:8d:
         ca:b0:80:8e:78:c6:a0:d0:51:d6:60:aa:ea:4f:6a:82:05:e7:
         f2:73:b4:c0:58:97:ba:9a:8b:64:20:69:c1:6a:b2:a5:02:79:
         51:da:44:bd:09:07:df:e8:7f:83:2c:63:64:34:a2:0f:22:a3:
         88:21:b1:b4:a0:79:5e:08:f4:0c:59:56:33:44:1d:59:b2:b4:
         93:7c:7b:a3:62:ce:41:f6:ae:a8:cc:71:22:83:7b:27:06:61:
         41:12:45:d2:f2:b5:bd:fc:b0:81:ad:1e:c1:d0:f9:53:a2:af:
         bf:c2:b5:c6:eb:d7:2f:14:e9:72:da:82:99:91:16:fe:4f:46:
         ff:52:bf:26:7d:3c:af:ce:a2:5b:2c:2f:0d:b8:1f:64:3e:0c:
         18:7b:b3:f2:7f:2f:7e:2f:02:d1:11:bb:6e:96:cf:22:ea:da:
         1a:72:68:c7:14:75:29:ee:71:fc:75:e4:2b:f4:6f:f5:2e:c2:
         cf:b5:e6:c3:8f:45:b1:b7:bc:27:20:41:05:b5:a2:e7:f4:4e:
         2d:4a:b6:44:0e:64:7b:c2:ee:65:fb:64:02:5d:db:47:5f:66:
         db:43:5b:b5:20:82:a2:58:cb:3e:ad:d9:31:6d:28:0e:43:41:
         a9:d2:42:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 23:53:38 2026 by rpki-client