This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a3a2f33342d3334203d3e20323639373832.roa
File:                     323830333a323336303a3a2f33342d3334203d3e20323639373832.roa (raw, json)
Hash identifier:          QhdwghMdpwVZLWm+F3PRe5JaeOu0VTp4u1bR0W3TsCo=
Subject key identifier:   61:18:AC:F5:DF:7E:A3:4F:E7:C7:5F:A9:CA:03:95:79:53:E7:67:69
Certificate issuer:       /CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
Certificate serial:       352FBECA5C90D62BBE46C5BB9124B99B9B6B5B1A
Authority key identifier: 01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a3a2f33342d3334203d3e20323639373832.roa
Signing time:             Tue 06 Jan 2026 19:12:23 +0000
ROA not before:           Tue 06 Jan 2026 19:07:23 +0000
ROA not after:            Tue 05 Jan 2027 19:12:23 +0000
asID:                     269782
IP address blocks:        2803:2360::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Jan 2026 14:30:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:2f:be:ca:5c:90:d6:2b:be:46:c5:bb:91:24:b9:9b:9b:6b:5b:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
        Validity
            Not Before: Jan  6 19:07:23 2026 GMT
            Not After : Jan  5 19:12:23 2027 GMT
        Subject: CN=6118ACF5DF7EA34FE7C75FA9CA03957953E76769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ec:d9:fb:aa:cd:1e:4c:8b:d0:ab:6b:42:c5:
                    e5:ec:c5:2b:0d:97:8f:34:f8:6c:d5:c2:23:fc:f5:
                    5e:63:b4:5e:df:86:78:91:d1:55:8b:3c:11:cd:ca:
                    62:7f:98:53:41:d4:7c:a5:bb:e0:84:0d:5d:ef:fc:
                    b0:0a:00:8c:39:7b:12:75:4f:2b:c0:24:56:91:3a:
                    49:38:2e:56:4f:7e:89:c6:c9:94:ee:fa:01:37:30:
                    1d:5d:45:d1:2f:c2:fd:11:17:08:9b:55:06:fd:a1:
                    f2:f7:59:58:cf:f5:5b:bc:df:fe:fa:97:11:77:d1:
                    a2:a8:8f:89:ab:ae:c4:82:86:e1:b8:65:8c:59:66:
                    f0:02:99:2c:f0:ba:5a:e6:ae:aa:d2:ce:33:88:e6:
                    23:ff:8c:33:08:63:a4:73:ac:bd:2f:92:10:cf:e1:
                    d3:e0:be:87:4b:06:79:2b:72:f2:61:64:10:a9:ed:
                    2a:21:84:cb:10:1e:15:76:a6:70:d4:05:31:40:16:
                    b9:f1:26:eb:26:d8:d9:b4:90:0f:28:46:8b:51:6e:
                    fe:07:9b:e5:78:05:7e:c0:34:bb:06:67:80:b3:54:
                    b0:3c:6a:68:64:04:da:fc:26:d4:60:8e:55:0d:68:
                    94:62:cd:3f:6f:3f:7d:ef:0f:ad:54:06:0b:1a:0e:
                    39:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:18:AC:F5:DF:7E:A3:4F:E7:C7:5F:A9:CA:03:95:79:53:E7:67:69
            X509v3 Authority Key Identifier:
                keyid:01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a3a2f33342d3334203d3e20323639373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2360::/34

    Signature Algorithm: sha256WithRSAEncryption
         66:01:59:19:60:a6:2b:bf:cb:15:bc:ec:3c:b2:a0:bc:eb:7f:
         86:10:00:20:e7:69:7f:3c:20:15:78:71:cc:a4:14:c1:2b:f0:
         3e:01:32:be:22:04:97:03:b8:2b:0c:17:7e:8e:a1:cc:ab:35:
         ae:f2:0c:b3:0e:cd:6a:97:c2:f2:b7:a9:76:eb:ff:80:6b:4c:
         de:c3:ab:fa:ef:d9:3f:21:7f:32:50:51:da:18:2c:91:75:10:
         49:d4:77:73:70:8c:3d:e5:a6:4b:22:40:26:8c:7a:e4:19:12:
         25:69:64:20:10:80:ee:76:fe:fb:c8:68:e0:cd:e9:b7:ef:82:
         e2:32:38:ce:c1:f4:c7:61:05:08:3c:06:ee:a0:0c:fc:1d:dc:
         73:99:47:92:78:6f:c1:fa:b2:33:f8:aa:5b:80:a7:86:b3:0e:
         e9:65:22:07:e0:c1:93:22:4d:61:be:4c:0a:45:0b:9e:27:0a:
         1a:f2:14:97:fc:05:c0:77:0b:23:31:0c:f9:ba:6e:f1:60:e5:
         af:f9:63:aa:12:b5:fa:36:f9:2f:e5:b7:e3:c9:22:e5:07:83:
         95:ed:7f:76:f9:5f:8e:55:79:ea:1b:e9:51:dd:d6:ff:01:f0:
         2c:e7:27:31:f9:03:57:6c:77:b8:b4:59:34:1b:ec:1b:17:6f:
         51:a8:3f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 11:33:58 2026 by rpki-client