This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/323830333a636231303a3a2f33322d3438203d3e20323635363838.roa
File:                     323830333a636231303a3a2f33322d3438203d3e20323635363838.roa (raw, json)
Hash identifier:          cBLrIZG3C1Jc0hBrTqiJV1SNu5M/1A/OA0H2N9ZmUHQ=
Subject key identifier:   7A:B7:A3:FD:6F:D4:40:85:10:CC:BC:80:22:02:58:9E:1B:65:ED:97
Certificate issuer:       /CN=C274FF55FBE54DCF3A4879BE94792462D4B95DA0
Certificate serial:       4A9D8346596F37D28AE628CA5DC5278E473B5B39
Authority key identifier: C2:74:FF:55:FB:E5:4D:CF:3A:48:79:BE:94:79:24:62:D4:B9:5D:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/323830333a636231303a3a2f33322d3438203d3e20323635363838.roa
Signing time:             Tue 06 Jan 2026 19:47:28 +0000
ROA not before:           Tue 06 Jan 2026 19:42:28 +0000
ROA not after:            Tue 05 Jan 2027 19:47:28 +0000
asID:                     265688
IP address blocks:        2803:cb10::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 17:07:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:9d:83:46:59:6f:37:d2:8a:e6:28:ca:5d:c5:27:8e:47:3b:5b:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C274FF55FBE54DCF3A4879BE94792462D4B95DA0
        Validity
            Not Before: Jan  6 19:42:28 2026 GMT
            Not After : Jan  5 19:47:28 2027 GMT
        Subject: CN=7AB7A3FD6FD4408510CCBC802202589E1B65ED97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8f:bb:9c:65:54:4f:e7:58:c6:07:37:d0:d2:
                    a8:f3:7c:6b:d8:af:82:b4:fb:65:e3:57:0b:97:b7:
                    01:ee:6c:80:c7:cd:ae:15:50:8b:d1:65:33:5d:1b:
                    a0:8f:24:a2:a8:74:31:08:62:02:02:8e:9c:24:cc:
                    6f:e7:00:62:be:bb:5b:8f:c5:7c:c7:be:fe:f5:09:
                    49:af:a5:01:25:47:a2:e5:27:ea:b2:7f:d0:9a:0b:
                    13:07:8b:cb:f1:0a:50:f2:2f:52:61:4d:de:03:a8:
                    72:64:53:40:fc:55:05:a7:f1:21:cd:45:86:06:c9:
                    51:7d:80:27:72:8a:62:7d:01:2f:0d:34:40:18:d0:
                    5b:ec:a3:08:d0:21:0d:8d:05:57:20:78:8a:9b:4b:
                    29:c1:32:84:67:c1:74:89:9c:d6:6a:72:57:2d:86:
                    0a:68:47:7b:c4:a0:91:56:99:9d:33:c0:f9:2c:08:
                    b1:10:fa:21:da:02:50:43:7b:3b:11:58:15:46:61:
                    22:ec:46:6a:f9:b5:a0:b3:79:eb:b8:bb:08:c9:7e:
                    d8:8a:76:47:d1:e0:9c:ef:9c:f7:98:b0:dd:46:21:
                    82:b2:e6:16:9b:d4:d0:e2:15:68:e7:23:68:7e:2c:
                    a9:b8:ce:ea:af:8d:5b:ce:97:d9:7a:99:a7:56:46:
                    94:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B7:A3:FD:6F:D4:40:85:10:CC:BC:80:22:02:58:9E:1B:65:ED:97
            X509v3 Authority Key Identifier:
                keyid:C2:74:FF:55:FB:E5:4D:CF:3A:48:79:BE:94:79:24:62:D4:B9:5D:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/323830333a636231303a3a2f33322d3438203d3e20323635363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cb10::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:11:09:e3:68:96:ca:f1:e3:27:01:e9:2e:bc:a5:d8:f3:86:
         3f:22:3b:89:62:f8:e2:c6:64:8f:bd:de:bf:35:df:b4:6f:57:
         e5:f0:91:4e:c1:0d:83:00:be:8d:d9:35:51:bd:2c:3b:0d:3e:
         a7:8d:15:34:d4:eb:b8:57:a9:98:73:55:2f:76:dd:65:4d:f6:
         a4:4b:54:9d:48:5c:c5:18:48:7b:00:8c:84:d3:c9:cf:13:b4:
         b9:91:53:6a:38:b9:12:a3:de:a8:02:2c:e8:be:1c:fb:2b:3e:
         7b:36:39:f5:e6:80:20:f1:36:70:8c:d8:96:5c:72:d2:24:a1:
         3f:17:ae:6d:0d:6f:2f:e8:6f:46:fc:7f:6d:33:75:82:c8:b7:
         53:65:d9:b9:e0:5e:96:ed:a5:2b:1c:4d:a8:81:cb:62:37:43:
         d2:91:76:6d:6c:c0:a6:df:aa:44:01:07:46:9f:05:bd:83:18:
         9f:ad:bf:14:ab:27:3e:a4:b9:e4:c7:7b:2d:bd:6a:f8:49:0c:
         89:67:19:06:68:83:e1:ce:d2:09:81:ad:33:c4:3d:cd:5a:ec:
         c4:c2:7a:c7:a9:3c:01:7b:15:2e:d7:f5:9f:01:2f:1a:70:60:
         45:b9:09:a1:6c:d7:14:11:e5:9c:a3:99:2f:05:d9:49:43:15:
         2c:5c:40:e8
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUSp2DRllvN9KK5ijKXcUnjkc7WzkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzI3NEZGNTVGQkU1NERDRjNBNDg3OUJFOTQ3OTI0NjJE
NEI5NURBMDAeFw0yNjAxMDYxOTQyMjhaFw0yNzAxMDUxOTQ3MjhaMDMxMTAvBgNV
BAMTKDdBQjdBM0ZENkZENDQwODUxMENDQkM4MDIyMDI1ODlFMUI2NUVEOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZj7ucZVRP51jGBzfQ0qjzfGvY
r4K0+2XjVwuXtwHubIDHza4VUIvRZTNdG6CPJKKodDEIYgICjpwkzG/nAGK+u1uP
xXzHvv71CUmvpQElR6LlJ+qyf9CaCxMHi8vxClDyL1JhTd4DqHJkU0D8VQWn8SHN
RYYGyVF9gCdyimJ9AS8NNEAY0FvsowjQIQ2NBVcgeIqbSynBMoRnwXSJnNZqclct
hgpoR3vEoJFWmZ0zwPksCLEQ+iHaAlBDezsRWBVGYSLsRmr5taCzeeu4uwjJftiK
dkfR4JzvnPeYsN1GIYKy5hab1NDiFWjnI2h+LKm4zuqvjVvOl9l6madWRpSTAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUerej/W/UQIUQzLyAIgJYnhtl7ZcwHwYDVR0j
BBgwFoAUwnT/VfvlTc86SHm+lHkkYtS5XaAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81QzY0QkQ1MjZBREQ1N0NFMThFN0FDMzZFQjgwODhCN0Iw
MThEQjAyMDNDN0M1MDA4OEI4MzJCOTFBNkVFODk3LzAvQzI3NEZGNTVGQkU1NERD
RjNBNDg3OUJFOTQ3OTI0NjJENEI5NURBMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMjc0RkY1NUZCRTU0RENGM0E0
ODc5QkU5NDc5MjQ2MkQ0Qjk1REEwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUM2NEJENTI2QURENTdDRTE4RTdBQzM2RUI4MDg4QjdCMDE4REIwMjAz
QzdDNTAwODhCODMyQjkxQTZFRTg5Ny8wLzMyMzgzMDMzM2E2MzYyMzEzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNTM2MzgzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDyxAw
DQYJKoZIhvcNAQELBQADggEBAIwRCeNolsrx4ycB6S68pdjzhj8iO4li+OLGZI+9
3r8137RvV+XwkU7BDYMAvo3ZNVG9LDsNPqeNFTTU67hXqZhzVS923WVN9qRLVJ1I
XMUYSHsAjITTyc8TtLmRU2o4uRKj3qgCLOi+HPsrPns2OfXmgCDxNnCM2JZcctIk
oT8Xrm0Nby/ob0b8f20zdYLIt1Nl2bngXpbtpSscTaiBy2I3Q9KRdm1swKbfqkQB
B0afBb2DGJ+tvxSrJz6kueTHey29avhJDIlnGQZog+HO0gmBrTPEPc1a7MTCesep
PAF7FS7X9Z8BLxpwYEW5CaFs1xQR5ZyjmS8F2UlDFSxcQOg=
-----END CERTIFICATE-----
Generated at Sun Jan 11 20:27:15 2026 by rpki-client