This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/323830333a366530303a3a2f33322d3332203d3e203532333938.roa
File:                     323830333a366530303a3a2f33322d3332203d3e203532333938.roa (raw, json)
Hash identifier:          1mPOCzpHii9ykB7j1CoKXatT4O+5Gk6SdGVQHHbVZsM=
Subject key identifier:   7E:CF:73:A5:B3:0B:BB:DB:1D:0D:F9:BC:7B:D9:DD:9B:00:B1:09:6B
Certificate issuer:       /CN=319D62645871D3B24C33AF24E8F1C30794A59476
Certificate serial:       6417E6B0B727F1DCBAACFFB0B6C6344715CB946C
Authority key identifier: 31:9D:62:64:58:71:D3:B2:4C:33:AF:24:E8:F1:C3:07:94:A5:94:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/319D62645871D3B24C33AF24E8F1C30794A59476.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/323830333a366530303a3a2f33322d3332203d3e203532333938.roa
Signing time:             Tue 06 Jan 2026 19:04:38 +0000
ROA not before:           Tue 06 Jan 2026 18:59:38 +0000
ROA not after:            Tue 05 Jan 2027 19:04:38 +0000
asID:                     52398
IP address blocks:        2803:6e00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/319D62645871D3B24C33AF24E8F1C30794A59476.crl
                          rsync://repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/319D62645871D3B24C33AF24E8F1C30794A59476.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/319D62645871D3B24C33AF24E8F1C30794A59476.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 23:35:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:17:e6:b0:b7:27:f1:dc:ba:ac:ff:b0:b6:c6:34:47:15:cb:94:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319D62645871D3B24C33AF24E8F1C30794A59476
        Validity
            Not Before: Jan  6 18:59:38 2026 GMT
            Not After : Jan  5 19:04:38 2027 GMT
        Subject: CN=7ECF73A5B30BBBDB1D0DF9BC7BD9DD9B00B1096B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bd:9c:8d:c3:54:af:aa:de:96:76:34:ec:48:
                    03:9e:97:31:66:d5:26:e5:c0:ca:92:af:e3:0e:26:
                    ae:cd:aa:47:ef:a7:11:df:ef:39:ea:ba:26:9f:f2:
                    6a:ff:21:40:cd:51:d5:e6:8e:03:53:08:b9:af:0d:
                    8b:96:a6:80:c0:f3:4b:60:32:37:9e:65:94:76:66:
                    30:bb:a9:7b:4e:dd:f4:43:7c:73:a2:99:a1:b9:a9:
                    23:79:90:c2:b7:d4:60:e6:0d:c8:2b:45:30:35:c6:
                    7b:e4:1d:35:04:a6:0f:6b:83:f8:14:ef:0c:67:96:
                    9d:f5:d0:8d:6f:91:a9:40:b3:3e:cb:a1:50:ff:e9:
                    6a:6d:a2:af:22:24:d5:9b:e5:a9:30:b8:8e:01:20:
                    a3:71:c2:81:f7:c9:51:d5:16:54:3d:4e:10:ec:fc:
                    9f:44:1e:5c:8b:84:88:6e:7c:a9:59:77:2b:b1:ed:
                    51:d9:9f:6a:b1:3b:ff:d7:66:91:bc:c1:0a:06:aa:
                    42:ac:70:1f:de:bc:99:4c:f4:ae:7c:b3:0e:a0:83:
                    0c:61:de:1b:14:ff:b3:63:f7:4a:50:a9:e2:a1:63:
                    15:5e:ae:9c:82:2f:88:d4:a3:e2:ad:45:97:ad:a7:
                    e1:04:0f:6c:65:b2:2b:4e:de:f2:ac:1d:44:6f:fe:
                    41:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:CF:73:A5:B3:0B:BB:DB:1D:0D:F9:BC:7B:D9:DD:9B:00:B1:09:6B
            X509v3 Authority Key Identifier:
                keyid:31:9D:62:64:58:71:D3:B2:4C:33:AF:24:E8:F1:C3:07:94:A5:94:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/319D62645871D3B24C33AF24E8F1C30794A59476.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/319D62645871D3B24C33AF24E8F1C30794A59476.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/323830333a366530303a3a2f33322d3332203d3e203532333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6e00::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:a4:05:54:57:28:da:1e:80:ae:aa:7c:d9:f6:95:be:ce:9a:
         32:a3:e8:16:64:42:46:93:9f:7d:27:b6:b5:8c:53:66:3e:fd:
         9d:ee:dc:f0:ee:e8:bd:e3:86:67:9e:c3:0e:0e:20:7e:2f:3a:
         6f:09:e8:c0:ca:bd:f7:10:f6:aa:2d:d0:a0:85:ee:35:9e:6a:
         82:7c:cd:07:86:0a:1e:9f:96:e3:07:13:3b:65:6a:ee:5c:8c:
         aa:39:8d:2b:87:35:cf:4f:19:17:81:58:54:4f:f5:a7:04:2a:
         38:8e:de:9f:69:1b:4f:85:d0:f3:64:4b:ce:76:ab:b6:2a:21:
         1d:e9:e3:3b:55:f2:ef:0e:ac:e5:5b:bd:e6:29:e9:f8:5e:97:
         0a:0e:df:1a:7e:d1:40:78:66:4a:6c:7f:bc:d6:43:59:c9:f0:
         f5:85:a6:26:34:3b:40:59:04:a8:19:45:39:2f:e4:93:d7:a6:
         db:c2:7a:12:c4:ec:92:7b:18:31:31:b9:18:92:48:11:3e:dc:
         15:cd:d3:d1:be:da:b4:1b:88:92:7d:86:2d:04:fd:d7:4d:7b:
         8e:13:e7:75:0c:af:02:e4:4e:45:b4:6b:c8:47:b2:65:60:1f:
         4e:4b:96:7e:3c:2c:7d:29:5b:4c:1b:17:0d:ed:4b:1a:04:86:
         76:96:91:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 05:20:35 2026 by rpki-client