This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59C309A622CB5FE765EBFE53726DDA237F5D19499290DCFDC6BD1B72736E61BF/0/323830333a333565303a3a2f33322d3334203d3e20323730303430.roa
File:                     323830333a333565303a3a2f33322d3334203d3e20323730303430.roa (raw, json)
Hash identifier:          ZHigqVmO5d7B/WfhCosfnmvLlPjwF5oohLco5sM4QgU=
Subject key identifier:   92:BD:AB:D6:E1:86:9E:93:06:F5:81:5D:7F:9C:F5:E4:A6:B6:B9:47
Certificate issuer:       /CN=8B1611C244523EC9C11F004445CE4D43BBDAB765
Certificate serial:       7E61B63552AB9F32A025BF4705E46B71969BC0C4
Authority key identifier: 8B:16:11:C2:44:52:3E:C9:C1:1F:00:44:45:CE:4D:43:BB:DA:B7:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B1611C244523EC9C11F004445CE4D43BBDAB765.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59C309A622CB5FE765EBFE53726DDA237F5D19499290DCFDC6BD1B72736E61BF/0/323830333a333565303a3a2f33322d3334203d3e20323730303430.roa
Signing time:             Tue 06 Jan 2026 19:16:49 +0000
ROA not before:           Tue 06 Jan 2026 19:11:49 +0000
ROA not after:            Tue 05 Jan 2027 19:16:49 +0000
asID:                     270040
IP address blocks:        2803:35e0::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59C309A622CB5FE765EBFE53726DDA237F5D19499290DCFDC6BD1B72736E61BF/0/8B1611C244523EC9C11F004445CE4D43BBDAB765.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59C309A622CB5FE765EBFE53726DDA237F5D19499290DCFDC6BD1B72736E61BF/0/8B1611C244523EC9C11F004445CE4D43BBDAB765.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B1611C244523EC9C11F004445CE4D43BBDAB765.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:61:b6:35:52:ab:9f:32:a0:25:bf:47:05:e4:6b:71:96:9b:c0:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B1611C244523EC9C11F004445CE4D43BBDAB765
        Validity
            Not Before: Jan  6 19:11:49 2026 GMT
            Not After : Jan  5 19:16:49 2027 GMT
        Subject: CN=92BDABD6E1869E9306F5815D7F9CF5E4A6B6B947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:69:35:b9:be:ec:61:f5:d0:f7:7c:a1:2b:e4:
                    0d:d8:e1:a6:af:98:1f:4d:72:cb:86:78:02:f1:39:
                    39:48:c6:4f:54:6e:a1:ca:11:a5:44:c1:18:6d:b7:
                    b5:79:32:38:15:15:10:a6:cd:c0:f2:14:38:8d:7c:
                    89:cd:f7:73:5b:ea:58:34:3f:31:11:23:b3:06:3a:
                    01:ae:c8:a7:83:8a:17:bf:40:69:b2:5c:d7:ff:45:
                    c7:72:2c:dd:fa:f4:17:9f:39:c7:06:76:45:e1:d7:
                    5e:e0:b2:f5:d7:52:86:ab:54:31:fa:89:28:95:ab:
                    fc:a9:e3:99:b6:30:1e:d2:ca:12:dd:25:71:82:81:
                    92:7f:ba:e6:8a:68:98:a0:af:a3:03:e9:7b:69:38:
                    f8:15:ac:90:2e:47:25:dc:f5:98:5e:84:41:47:e5:
                    29:f5:29:44:91:ce:74:5d:c4:ea:8a:c6:21:5f:af:
                    ef:97:7c:fe:d9:1b:21:da:b9:85:6d:4a:d5:33:10:
                    95:7a:c5:12:46:e9:9b:11:64:6a:ce:31:71:e5:4f:
                    74:ab:d1:6b:b4:53:9c:21:82:86:e7:19:10:3a:65:
                    45:f9:a6:a0:cb:84:b3:6e:79:a8:1f:a9:1d:40:20:
                    f2:98:39:3a:7b:12:f4:a9:02:88:c4:f7:ff:6f:e0:
                    21:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:BD:AB:D6:E1:86:9E:93:06:F5:81:5D:7F:9C:F5:E4:A6:B6:B9:47
            X509v3 Authority Key Identifier:
                keyid:8B:16:11:C2:44:52:3E:C9:C1:1F:00:44:45:CE:4D:43:BB:DA:B7:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59C309A622CB5FE765EBFE53726DDA237F5D19499290DCFDC6BD1B72736E61BF/0/8B1611C244523EC9C11F004445CE4D43BBDAB765.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B1611C244523EC9C11F004445CE4D43BBDAB765.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59C309A622CB5FE765EBFE53726DDA237F5D19499290DCFDC6BD1B72736E61BF/0/323830333a333565303a3a2f33322d3334203d3e20323730303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:35e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:96:fc:cb:87:1e:f8:02:79:dc:62:03:65:4c:9a:01:f3:67:
         24:62:ba:1f:f8:95:f7:d8:72:fd:fd:f7:1d:fc:26:ee:24:d2:
         c7:5f:51:10:4b:05:05:e4:68:6c:0b:ee:c3:f9:d4:2c:6b:ff:
         dd:b9:b7:0a:f5:96:b4:eb:5d:f3:a1:d3:35:e1:01:56:e3:a6:
         ee:cd:cc:fe:6d:91:b6:ba:8e:09:a5:2e:cd:51:66:ba:96:c4:
         3f:dd:a3:73:3d:a7:bb:58:f4:75:96:20:4e:a8:4b:04:e2:4b:
         e9:62:bd:14:c9:c9:2a:0c:84:1d:ef:02:c7:4b:74:aa:a7:12:
         84:92:24:dd:c0:66:c7:57:93:39:6d:dc:d4:24:a0:8c:83:6d:
         d1:0f:a1:18:d1:6a:44:3b:73:8c:23:c9:ae:d4:9e:ae:ab:3b:
         41:ef:6c:4c:33:a8:46:7e:7d:11:a6:b9:45:68:44:eb:ff:71:
         52:d4:86:ce:2d:dc:20:85:59:a4:ba:62:49:02:7e:a3:30:a0:
         22:19:bc:ee:74:5f:a1:70:9b:d6:0c:69:0a:4f:b2:6a:94:c4:
         a9:16:22:ae:52:53:e3:9e:e9:1b:9e:f5:6f:aa:71:ec:af:33:
         0c:96:5d:df:34:b2:13:6e:dd:98:40:fc:7d:49:28:08:97:80:
         4b:28:db:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 03:30:56 2026 by rpki-client