This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5E697061640116CEA57C9D9FD8C9DCE84EBDE94D27B887C6D39C08AB913F4571/0/323830333a6365303a3a2f33322d3438203d3e20323639383937.roa
File:                     323830333a6365303a3a2f33322d3438203d3e20323639383937.roa (raw, json)
Hash identifier:          Ds17DzX293SSF6xMK5OfXYotSDEmmdid6DRNIpDV2Es=
Subject key identifier:   34:7C:85:84:C8:19:87:E3:2D:BB:53:79:2B:8A:48:73:D2:AA:EB:B7
Certificate issuer:       /CN=FD4015BF5F4C074CA4D52302EBFBE392C5FFE6A4
Certificate serial:       2BDA5763568C23226043D7263DD71A3C85B5AFF7
Authority key identifier: FD:40:15:BF:5F:4C:07:4C:A4:D5:23:02:EB:FB:E3:92:C5:FF:E6:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD4015BF5F4C074CA4D52302EBFBE392C5FFE6A4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5E697061640116CEA57C9D9FD8C9DCE84EBDE94D27B887C6D39C08AB913F4571/0/323830333a6365303a3a2f33322d3438203d3e20323639383937.roa
Signing time:             Tue 06 Jan 2026 19:17:14 +0000
ROA not before:           Tue 06 Jan 2026 19:12:14 +0000
ROA not after:            Tue 05 Jan 2027 19:17:14 +0000
asID:                     269897
IP address blocks:        2803:ce0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5E697061640116CEA57C9D9FD8C9DCE84EBDE94D27B887C6D39C08AB913F4571/0/FD4015BF5F4C074CA4D52302EBFBE392C5FFE6A4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5E697061640116CEA57C9D9FD8C9DCE84EBDE94D27B887C6D39C08AB913F4571/0/FD4015BF5F4C074CA4D52302EBFBE392C5FFE6A4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD4015BF5F4C074CA4D52302EBFBE392C5FFE6A4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 01:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:da:57:63:56:8c:23:22:60:43:d7:26:3d:d7:1a:3c:85:b5:af:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD4015BF5F4C074CA4D52302EBFBE392C5FFE6A4
        Validity
            Not Before: Jan  6 19:12:14 2026 GMT
            Not After : Jan  5 19:17:14 2027 GMT
        Subject: CN=347C8584C81987E32DBB53792B8A4873D2AAEBB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:10:b2:7f:40:ba:d9:03:a9:c7:53:c1:39:3b:
                    75:b7:55:a4:ea:e0:9c:11:42:e7:c9:e8:22:bf:92:
                    f2:05:63:a6:8b:c9:3d:78:33:c3:89:d6:89:66:d7:
                    a3:25:39:d5:5c:60:5e:9d:65:4d:96:74:9f:da:82:
                    18:5c:e9:27:0c:85:6f:4c:41:5e:27:5f:d7:bf:49:
                    2b:29:9f:54:b5:58:1b:5e:ed:6d:12:42:10:a3:0f:
                    9f:9e:d9:10:16:c7:d2:6b:94:a5:1c:04:0b:b0:70:
                    97:23:79:8c:5e:af:4b:09:f0:e6:90:86:54:c2:75:
                    18:b5:3b:6b:ec:ef:1e:42:27:a6:ad:1c:57:83:cc:
                    05:10:40:21:da:20:0c:93:36:6f:a5:ea:0b:b1:f4:
                    f2:90:01:c7:90:83:bd:fc:e1:08:f1:18:58:35:07:
                    23:95:13:c2:55:ca:d9:4a:68:51:8f:af:5d:a6:5c:
                    1d:d0:58:5d:2f:6a:3e:a9:6c:8f:3a:77:11:65:9f:
                    42:2f:8b:14:d5:ee:21:ad:c4:f7:6d:67:75:83:a6:
                    96:74:4d:9f:6d:8c:82:85:81:f6:b3:28:4a:99:71:
                    a5:a9:77:15:8e:77:ec:f1:c7:56:58:27:20:dc:1f:
                    1d:d9:cb:a9:b6:a8:04:1c:ff:18:8f:85:cb:53:b6:
                    cc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:7C:85:84:C8:19:87:E3:2D:BB:53:79:2B:8A:48:73:D2:AA:EB:B7
            X509v3 Authority Key Identifier:
                keyid:FD:40:15:BF:5F:4C:07:4C:A4:D5:23:02:EB:FB:E3:92:C5:FF:E6:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5E697061640116CEA57C9D9FD8C9DCE84EBDE94D27B887C6D39C08AB913F4571/0/FD4015BF5F4C074CA4D52302EBFBE392C5FFE6A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD4015BF5F4C074CA4D52302EBFBE392C5FFE6A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5E697061640116CEA57C9D9FD8C9DCE84EBDE94D27B887C6D39C08AB913F4571/0/323830333a6365303a3a2f33322d3438203d3e20323639383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:b9:bd:d6:fb:e2:69:08:46:5c:e8:16:6f:0c:7a:8c:e4:08:
         e2:44:38:ae:fd:d3:14:37:a4:38:80:e0:ea:97:bc:15:58:af:
         be:0d:85:70:7d:a8:fb:2e:55:50:e8:29:f9:40:c5:91:38:c8:
         f0:83:94:f6:e7:8e:f8:6d:99:96:73:3c:dd:f8:0b:fd:7e:a2:
         bc:51:06:45:9f:c0:d6:70:52:e7:57:f5:1c:84:e9:9f:f1:97:
         7b:22:2a:05:13:d9:74:1e:d6:50:a5:b6:74:d1:57:e2:3e:23:
         d0:25:21:e1:37:a6:9e:94:b0:2a:eb:7f:89:47:cf:58:20:b7:
         57:34:ac:74:2c:3a:bd:45:60:a6:19:aa:2d:4b:67:a6:d1:f5:
         77:25:5b:a5:7b:ad:06:23:5d:0d:2c:cc:0c:ef:d2:e7:76:e4:
         5d:36:4c:cd:1b:36:c5:90:b9:9a:68:fd:d5:44:62:60:59:05:
         5a:68:78:33:41:13:7c:a3:f8:0b:5c:7a:30:62:2c:65:c7:30:
         4a:11:b8:3b:54:75:2a:38:c2:59:ab:2d:5c:b3:93:60:1d:45:
         01:15:3f:aa:39:d8:d6:cc:e6:93:88:45:b3:23:a7:81:66:5d:
         e0:49:43:49:ef:5d:43:d1:e5:0f:c4:da:ac:6d:e2:3e:44:93:
         53:68:0d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 06:13:43 2026 by rpki-client