This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/69BB55EA9235D147025B32B9AEC5160107DE56283C0F0D8550BE32B0883CFF0C/0/323830333a3230303a3a2f33322d3332203d3e203532323834.roa
File:                     323830333a3230303a3a2f33322d3332203d3e203532323834.roa (raw, json)
Hash identifier:          B/hQV1Q+piZOtOQU8W4n2ue/qGDVrlj6oIQHrRWFNiI=
Subject key identifier:   73:0F:52:2F:B8:E6:CB:E0:43:9B:DB:4E:13:D4:69:C7:19:13:8E:4E
Certificate issuer:       /CN=3C0D9824A61951890549A3BAB2843EF4DD28F6EF
Certificate serial:       6B143EAF9A429C15CFA1095D6BEB8519468A7E7C
Authority key identifier: 3C:0D:98:24:A6:19:51:89:05:49:A3:BA:B2:84:3E:F4:DD:28:F6:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C0D9824A61951890549A3BAB2843EF4DD28F6EF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/69BB55EA9235D147025B32B9AEC5160107DE56283C0F0D8550BE32B0883CFF0C/0/323830333a3230303a3a2f33322d3332203d3e203532323834.roa
Signing time:             Tue 06 Jan 2026 20:56:14 +0000
ROA not before:           Tue 06 Jan 2026 20:51:14 +0000
ROA not after:            Tue 05 Jan 2027 20:56:14 +0000
asID:                     52284
IP address blocks:        2803:200::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/69BB55EA9235D147025B32B9AEC5160107DE56283C0F0D8550BE32B0883CFF0C/0/3C0D9824A61951890549A3BAB2843EF4DD28F6EF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/69BB55EA9235D147025B32B9AEC5160107DE56283C0F0D8550BE32B0883CFF0C/0/3C0D9824A61951890549A3BAB2843EF4DD28F6EF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C0D9824A61951890549A3BAB2843EF4DD28F6EF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 06:03:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:14:3e:af:9a:42:9c:15:cf:a1:09:5d:6b:eb:85:19:46:8a:7e:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C0D9824A61951890549A3BAB2843EF4DD28F6EF
        Validity
            Not Before: Jan  6 20:51:14 2026 GMT
            Not After : Jan  5 20:56:14 2027 GMT
        Subject: CN=730F522FB8E6CBE0439BDB4E13D469C719138E4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fa:0a:92:b1:0b:72:3f:ad:78:9f:e5:c8:3c:
                    61:21:ef:00:aa:0d:8c:8b:e2:28:69:d9:e8:17:77:
                    1b:6f:5c:b8:b7:6a:63:10:e2:e9:d5:27:68:ca:71:
                    ea:d0:8f:5a:ab:fa:15:d7:d5:85:ea:ed:78:cc:64:
                    7e:2e:a7:8e:ed:81:ca:e6:83:bc:16:59:9a:d0:18:
                    ef:b5:e1:a9:8d:02:ea:fb:83:29:57:25:ad:6c:7a:
                    7c:08:4b:c7:21:0e:9e:a7:23:a5:2e:a6:17:b9:5a:
                    b4:c0:17:15:26:0a:89:ef:4d:7e:f5:c3:8d:b3:17:
                    fd:a6:5e:59:ee:25:c8:a7:72:ef:4c:6c:a9:ae:52:
                    fa:48:5c:fb:77:a5:8a:47:0d:08:b9:f9:4a:c6:8c:
                    51:fc:c6:ac:34:b5:2b:fd:65:53:b3:9d:65:38:66:
                    0c:03:1f:6c:80:0e:1c:9b:08:26:02:2c:3a:c6:d8:
                    89:2b:2a:dd:67:b8:2b:23:bd:e7:4d:20:4c:ff:72:
                    ba:9f:1f:40:45:e6:6f:e5:2d:9a:3d:7d:38:50:b6:
                    2a:7d:13:ce:ae:18:33:26:ef:a6:f6:16:92:1f:b1:
                    8b:15:00:32:e8:f1:e9:79:d0:b2:be:68:6c:3d:28:
                    7e:27:82:a5:9c:d6:73:4e:43:82:8d:df:f0:6b:b8:
                    aa:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:0F:52:2F:B8:E6:CB:E0:43:9B:DB:4E:13:D4:69:C7:19:13:8E:4E
            X509v3 Authority Key Identifier:
                keyid:3C:0D:98:24:A6:19:51:89:05:49:A3:BA:B2:84:3E:F4:DD:28:F6:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/69BB55EA9235D147025B32B9AEC5160107DE56283C0F0D8550BE32B0883CFF0C/0/3C0D9824A61951890549A3BAB2843EF4DD28F6EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C0D9824A61951890549A3BAB2843EF4DD28F6EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/69BB55EA9235D147025B32B9AEC5160107DE56283C0F0D8550BE32B0883CFF0C/0/323830333a3230303a3a2f33322d3332203d3e203532323834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:200::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:7e:f8:00:2e:df:c8:54:d8:27:a8:e8:5f:cc:27:8b:00:7c:
         fb:14:45:28:59:bc:e8:d3:7a:a0:7e:48:29:15:ba:ac:c2:78:
         94:42:06:e7:b0:2e:81:e0:6d:32:db:cf:75:f7:61:03:c8:c1:
         c6:69:d7:2e:38:f9:49:4e:ed:52:91:9c:93:66:28:2b:06:95:
         aa:58:b4:1b:23:ce:8d:ea:07:ea:e4:96:e0:8c:96:c9:e9:9c:
         5b:26:0f:79:6b:3a:cf:d8:66:ab:12:93:9d:f9:2e:54:4f:11:
         cf:ab:a5:37:5a:2b:9a:ea:67:1e:33:c2:d8:de:cd:14:4c:a7:
         40:09:4f:e5:20:5e:dc:d6:2d:c0:3c:df:48:67:c0:69:ec:35:
         31:fc:cf:74:f1:08:d6:61:4a:82:a5:5b:b8:5f:8c:95:e8:48:
         a1:c4:c6:80:cb:e5:b9:94:59:23:d1:5f:29:3b:82:27:f4:ae:
         51:3a:43:08:3d:3a:ae:93:d3:87:e4:a7:15:a8:c5:6e:d7:ac:
         40:bc:4e:e0:33:4b:4f:1b:eb:af:32:0c:0a:52:3a:27:32:08:
         76:eb:d1:91:bf:05:56:47:57:56:1d:96:df:63:cd:92:4c:33:
         b3:34:2c:fc:25:2f:6e:2f:26:90:1d:31:ec:13:34:26:a0:2e:
         75:0a:5a:05
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUaxQ+r5pCnBXPoQlda+uFGUaKfnwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0MwRDk4MjRBNjE5NTE4OTA1NDlBM0JBQjI4NDNFRjRE
RDI4RjZFRjAeFw0yNjAxMDYyMDUxMTRaFw0yNzAxMDUyMDU2MTRaMDMxMTAvBgNV
BAMTKDczMEY1MjJGQjhFNkNCRTA0MzlCREI0RTEzRDQ2OUM3MTkxMzhFNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCM+gqSsQtyP614n+XIPGEh7wCq
DYyL4ihp2egXdxtvXLi3amMQ4unVJ2jKcerQj1qr+hXX1YXq7XjMZH4up47tgcrm
g7wWWZrQGO+14amNAur7gylXJa1senwIS8chDp6nI6Uuphe5WrTAFxUmConvTX71
w42zF/2mXlnuJcincu9MbKmuUvpIXPt3pYpHDQi5+UrGjFH8xqw0tSv9ZVOznWU4
ZgwDH2yADhybCCYCLDrG2IkrKt1nuCsjvedNIEz/crqfH0BF5m/lLZo9fThQtip9
E86uGDMm76b2FpIfsYsVADLo8el50LK+aGw9KH4ngqWc1nNOQ4KN3/BruKoHAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUcw9SL7jmy+BDm9tOE9RpxxkTjk4wHwYDVR0j
BBgwFoAUPA2YJKYZUYkFSaO6soQ+9N0o9u8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82OUJCNTVFQTkyMzVEMTQ3MDI1QjMyQjlBRUM1MTYwMTA3
REU1NjI4M0MwRjBEODU1MEJFMzJCMDg4M0NGRjBDLzAvM0MwRDk4MjRBNjE5NTE4
OTA1NDlBM0JBQjI4NDNFRjRERDI4RjZFRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQzBEOTgyNEE2MTk1MTg5MDU0
OUEzQkFCMjg0M0VGNEREMjhGNkVGLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjlCQjU1RUE5MjM1RDE0NzAyNUIzMkI5QUVDNTE2MDEwN0RFNTYyODND
MEYwRDg1NTBCRTMyQjA4ODNDRkYwQy8wLzMyMzgzMDMzM2EzMjMwMzAzYTNhMmYz
MzMyMmQzMzMyMjAzZDNlMjAzNTMyMzIzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMCADANBgkq
hkiG9w0BAQsFAAOCAQEAbX74AC7fyFTYJ6joX8wniwB8+xRFKFm86NN6oH5IKRW6
rMJ4lEIG57AugeBtMtvPdfdhA8jBxmnXLjj5SU7tUpGck2YoKwaVqli0GyPOjeoH
6uSW4IyWyemcWyYPeWs6z9hmqxKTnfkuVE8Rz6ulN1ormupnHjPC2N7NFEynQAlP
5SBe3NYtwDzfSGfAaew1MfzPdPEI1mFKgqVbuF+MlehIocTGgMvluZRZI9FfKTuC
J/SuUTpDCD06rpPTh+SnFajFbtesQLxO4DNLTxvrrzIMClI6JzIIduvRkb8FVkdX
Vh2W32PNkkwzszQs/CUvbi8mkB0x7BM0JqAudQpaBQ==
-----END CERTIFICATE-----
Generated at Tue Jan 13 03:24:20 2026 by rpki-client