This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65A52F5280C6FAA27A2F11A9F8A684876A22458797F162DBE9A73E420C40339B/0/323830333a313765303a3a2f33322d3438203d3e203532343638.roa
File:                     323830333a313765303a3a2f33322d3438203d3e203532343638.roa (raw, json)
Hash identifier:          PJKHfR6l3qqdMd1uMY5gRl0i71CscUfkPjCkGBEVQiY=
Subject key identifier:   1B:AE:10:9A:60:8D:A0:63:91:2C:52:57:2E:4F:E6:B3:4F:C9:D5:B4
Certificate issuer:       /CN=A8BD34F2B469A2D97364857900B9F36A1297D50E
Certificate serial:       0D715053FA38ECBDF7E10279A33C21744A369DF4
Authority key identifier: A8:BD:34:F2:B4:69:A2:D9:73:64:85:79:00:B9:F3:6A:12:97:D5:0E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8BD34F2B469A2D97364857900B9F36A1297D50E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65A52F5280C6FAA27A2F11A9F8A684876A22458797F162DBE9A73E420C40339B/0/323830333a313765303a3a2f33322d3438203d3e203532343638.roa
Signing time:             Tue 06 Jan 2026 19:00:40 +0000
ROA not before:           Tue 06 Jan 2026 18:55:40 +0000
ROA not after:            Tue 05 Jan 2027 19:00:40 +0000
asID:                     52468
IP address blocks:        2803:17e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/65A52F5280C6FAA27A2F11A9F8A684876A22458797F162DBE9A73E420C40339B/0/A8BD34F2B469A2D97364857900B9F36A1297D50E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/65A52F5280C6FAA27A2F11A9F8A684876A22458797F162DBE9A73E420C40339B/0/A8BD34F2B469A2D97364857900B9F36A1297D50E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8BD34F2B469A2D97364857900B9F36A1297D50E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:71:50:53:fa:38:ec:bd:f7:e1:02:79:a3:3c:21:74:4a:36:9d:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8BD34F2B469A2D97364857900B9F36A1297D50E
        Validity
            Not Before: Jan  6 18:55:40 2026 GMT
            Not After : Jan  5 19:00:40 2027 GMT
        Subject: CN=1BAE109A608DA063912C52572E4FE6B34FC9D5B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0c:8a:a2:d3:3d:40:62:62:f0:3e:7e:da:12:
                    1e:81:a9:a9:ed:f3:3c:ac:f7:00:c6:41:77:39:d1:
                    89:fd:f7:69:81:fd:cc:05:3b:4f:93:bb:f6:0e:19:
                    4c:dc:5d:d3:b6:f5:2c:82:0f:5f:18:7c:31:c2:e2:
                    56:11:b3:88:72:ad:8c:5e:0b:17:9c:b4:ec:5f:59:
                    c1:5d:ee:85:80:2d:98:cf:a0:c5:12:5e:a1:78:26:
                    23:a4:90:6f:de:79:6c:76:af:d7:49:46:38:72:40:
                    e7:55:64:cb:b9:bb:90:3d:d6:8f:5f:db:26:24:e1:
                    d6:dc:08:0d:f2:0f:0d:74:3f:e0:78:b6:1e:f1:2d:
                    37:49:c6:f8:62:e6:01:c1:6f:62:86:2b:cf:f3:aa:
                    54:8b:95:b9:00:3a:a6:b2:7c:1f:0b:cf:04:db:92:
                    76:b8:1e:d7:41:d8:8b:47:f2:2e:92:2f:8d:8a:31:
                    0b:99:4d:d3:0b:a8:55:46:3b:00:bd:d7:e4:d3:bb:
                    15:e3:c5:a8:62:b0:7e:83:70:5e:28:48:1c:4f:86:
                    98:04:16:7c:49:8b:cb:ef:51:0e:6f:fa:2b:96:af:
                    ae:4c:92:3b:da:b4:d3:9a:a4:9b:ed:24:c2:23:4e:
                    09:30:74:4a:dd:7b:15:5d:7c:2d:d1:2e:60:07:1c:
                    e7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:AE:10:9A:60:8D:A0:63:91:2C:52:57:2E:4F:E6:B3:4F:C9:D5:B4
            X509v3 Authority Key Identifier:
                keyid:A8:BD:34:F2:B4:69:A2:D9:73:64:85:79:00:B9:F3:6A:12:97:D5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65A52F5280C6FAA27A2F11A9F8A684876A22458797F162DBE9A73E420C40339B/0/A8BD34F2B469A2D97364857900B9F36A1297D50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8BD34F2B469A2D97364857900B9F36A1297D50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65A52F5280C6FAA27A2F11A9F8A684876A22458797F162DBE9A73E420C40339B/0/323830333a313765303a3a2f33322d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:17e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:80:ab:85:12:b2:bb:62:fd:3d:34:1e:5e:d9:8d:79:3c:f4:
         34:f7:17:3a:3a:9d:0b:54:18:50:78:e3:fc:93:78:1e:04:30:
         60:e1:77:91:91:c7:8d:2f:25:e2:50:61:96:f7:28:ef:65:97:
         0a:68:13:7a:ec:41:80:69:3a:44:d3:a9:6b:bb:0c:fb:f0:94:
         27:9a:c5:06:10:2b:2a:a2:07:27:da:00:ec:95:74:8c:8b:6e:
         7c:13:f7:84:c7:40:55:51:f0:8d:1d:49:c1:52:af:ce:c0:a0:
         31:e3:46:ce:41:54:c7:da:a0:1c:8c:41:20:bd:e8:43:f8:ff:
         b9:01:aa:47:a5:96:41:c0:a0:50:8b:1b:12:44:e7:8a:ae:13:
         12:1b:8b:7d:7e:cb:ba:d4:5e:f9:c4:8c:2f:38:39:b7:ba:ae:
         e6:9d:bc:cf:e2:59:8d:5e:4f:c0:c8:7f:56:35:52:53:43:4e:
         7c:eb:29:e0:8f:70:62:73:35:1e:71:15:41:fe:54:bc:dd:b9:
         ff:40:0e:bd:9d:74:a7:5f:f7:47:63:de:e5:53:0a:ca:1f:5a:
         37:a1:e4:aa:d6:5b:c1:9a:e8:d2:52:79:82:90:d3:ee:1d:39:
         74:0a:b9:c2:a5:ab:b7:5f:39:1d:fc:33:13:d2:f2:3d:99:af:
         28:72:a6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 12:46:44 2026 by rpki-client