This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E48BD5125BE4EF36850271C1273146566C6040F126E3B70C75CDE1052E4BC55/0/323830333a616434303a3a2f33322d3438203d3e20323634363836.roa
File:                     323830333a616434303a3a2f33322d3438203d3e20323634363836.roa (raw, json)
Hash identifier:          ljqN+qFzBtXAaqtDnNb1cxDhrw4l/zGDUHvDrfLtgSI=
Subject key identifier:   4E:7E:CF:0E:AE:7E:09:5C:53:6B:6D:15:11:52:8F:B9:E4:FA:31:EF
Certificate issuer:       /CN=9BC9BC0DCE4759BD6CDEC9CB224346C109F4C949
Certificate serial:       05ACB69BBDB84407E2D0CA3AC49479EF244FD9CA
Authority key identifier: 9B:C9:BC:0D:CE:47:59:BD:6C:DE:C9:CB:22:43:46:C1:09:F4:C9:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BC9BC0DCE4759BD6CDEC9CB224346C109F4C949.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E48BD5125BE4EF36850271C1273146566C6040F126E3B70C75CDE1052E4BC55/0/323830333a616434303a3a2f33322d3438203d3e20323634363836.roa
Signing time:             Tue 06 Jan 2026 19:33:00 +0000
ROA not before:           Tue 06 Jan 2026 19:28:00 +0000
ROA not after:            Tue 05 Jan 2027 19:33:00 +0000
asID:                     264686
IP address blocks:        2803:ad40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E48BD5125BE4EF36850271C1273146566C6040F126E3B70C75CDE1052E4BC55/0/9BC9BC0DCE4759BD6CDEC9CB224346C109F4C949.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E48BD5125BE4EF36850271C1273146566C6040F126E3B70C75CDE1052E4BC55/0/9BC9BC0DCE4759BD6CDEC9CB224346C109F4C949.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BC9BC0DCE4759BD6CDEC9CB224346C109F4C949.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:ac:b6:9b:bd:b8:44:07:e2:d0:ca:3a:c4:94:79:ef:24:4f:d9:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BC9BC0DCE4759BD6CDEC9CB224346C109F4C949
        Validity
            Not Before: Jan  6 19:28:00 2026 GMT
            Not After : Jan  5 19:33:00 2027 GMT
        Subject: CN=4E7ECF0EAE7E095C536B6D1511528FB9E4FA31EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:f7:de:f4:19:39:ad:fc:98:e1:3b:0d:5f:
                    2c:fa:6d:4a:ac:77:b5:d7:33:9f:61:aa:b4:82:f4:
                    3d:c3:2e:5c:99:23:8a:2b:7c:a9:84:aa:a5:a3:a9:
                    07:8c:cb:fb:11:40:00:10:89:d0:82:13:c7:40:fa:
                    4a:c5:29:95:90:ba:10:d2:84:d5:cf:b9:68:34:18:
                    ed:49:87:c0:7d:aa:05:39:83:f7:6e:3a:81:1b:d9:
                    7f:77:fe:b5:6c:6d:c4:b2:e0:47:5f:2f:f8:1b:d4:
                    02:61:93:07:6a:28:2d:4d:44:89:89:11:e8:98:74:
                    d6:2d:12:4d:d0:de:96:78:f4:03:87:16:6e:23:92:
                    fb:f6:e9:7c:88:02:e5:bf:85:c7:de:0a:eb:d8:d2:
                    b3:8f:35:c2:88:ef:ef:45:c0:eb:c9:d6:6e:9e:d8:
                    30:28:54:e1:76:b5:c1:57:33:30:bf:0a:ed:19:ab:
                    5b:f6:b6:ec:a5:00:e6:4d:ed:ee:f9:72:de:dc:17:
                    6d:dc:fd:8d:65:d8:f5:aa:a5:68:24:84:6b:eb:58:
                    c2:c4:52:3e:97:0c:ce:9a:55:a7:be:2a:69:66:4b:
                    9f:25:db:6d:83:38:39:42:13:e7:67:4a:cd:b2:5f:
                    1a:45:ab:42:ba:3d:a1:87:d3:4b:ba:64:0d:9b:e5:
                    10:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:7E:CF:0E:AE:7E:09:5C:53:6B:6D:15:11:52:8F:B9:E4:FA:31:EF
            X509v3 Authority Key Identifier:
                keyid:9B:C9:BC:0D:CE:47:59:BD:6C:DE:C9:CB:22:43:46:C1:09:F4:C9:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E48BD5125BE4EF36850271C1273146566C6040F126E3B70C75CDE1052E4BC55/0/9BC9BC0DCE4759BD6CDEC9CB224346C109F4C949.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BC9BC0DCE4759BD6CDEC9CB224346C109F4C949.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E48BD5125BE4EF36850271C1273146566C6040F126E3B70C75CDE1052E4BC55/0/323830333a616434303a3a2f33322d3438203d3e20323634363836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ad40::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:67:80:24:59:f9:27:b4:ac:97:18:45:6b:a1:ed:06:8a:94:
         f3:8a:a8:fd:c6:0d:91:51:38:54:88:1b:c2:18:81:54:b7:34:
         ac:54:12:2c:84:9e:aa:a5:71:3f:bc:c0:92:c5:94:fe:6a:92:
         51:ed:09:7b:a4:a9:56:b2:78:f1:b4:31:55:2e:18:19:ae:16:
         c4:9e:da:19:dc:cb:d5:9f:45:5c:dc:4b:de:9d:dd:ca:d0:0c:
         89:d1:0e:b0:39:42:d0:32:bb:3d:b6:df:d2:77:6d:5b:94:cb:
         25:f0:02:2e:19:99:e0:05:98:45:01:9c:ab:36:2c:8e:46:20:
         53:b5:83:1a:7c:9b:eb:02:22:13:37:a6:88:ca:92:27:e6:09:
         a9:1c:30:5b:d3:0c:ed:3c:c6:96:d1:55:98:be:6f:ad:86:76:
         0e:1d:5a:ff:31:2a:b6:27:ca:bc:cf:54:ff:91:0d:b1:8f:6d:
         5b:a6:54:89:32:b6:6d:e6:be:47:6d:c7:59:27:35:ab:58:63:
         33:95:b4:97:03:d3:ec:ad:19:30:f0:e3:21:7f:65:87:be:70:
         62:72:68:df:fe:65:0c:51:ce:7f:c7:3d:70:bb:06:19:5d:da:
         3e:b6:09:e5:83:01:07:d5:6b:86:57:a6:38:c0:69:ec:80:3f:
         dc:a9:27:21
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUBay2m724RAfi0Mo6xJR57yRP2cowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJDOUJDMERDRTQ3NTlCRDZDREVDOUNCMjI0MzQ2QzEw
OUY0Qzk0OTAeFw0yNjAxMDYxOTI4MDBaFw0yNzAxMDUxOTMzMDBaMDMxMTAvBgNV
BAMTKDRFN0VDRjBFQUU3RTA5NUM1MzZCNkQxNTExNTI4RkI5RTRGQTMxRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxrPfe9Bk5rfyY4TsNXyz6bUqs
d7XXM59hqrSC9D3DLlyZI4orfKmEqqWjqQeMy/sRQAAQidCCE8dA+krFKZWQuhDS
hNXPuWg0GO1Jh8B9qgU5g/duOoEb2X93/rVsbcSy4EdfL/gb1AJhkwdqKC1NRImJ
EeiYdNYtEk3Q3pZ49AOHFm4jkvv26XyIAuW/hcfeCuvY0rOPNcKI7+9FwOvJ1m6e
2DAoVOF2tcFXMzC/Cu0Zq1v2tuylAOZN7e75ct7cF23c/Y1l2PWqpWgkhGvrWMLE
Uj6XDM6aVae+KmlmS58l222DODlCE+dnSs2yXxpFq0K6PaGH00u6ZA2b5RDXAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUTn7PDq5+CVxTa20VEVKPueT6Me8wHwYDVR0j
BBgwFoAUm8m8Dc5HWb1s3snLIkNGwQn0yUkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82RTQ4QkQ1MTI1QkU0RUYzNjg1MDI3MUMxMjczMTQ2NTY2
QzYwNDBGMTI2RTNCNzBDNzVDREUxMDUyRTRCQzU1LzAvOUJDOUJDMERDRTQ3NTlC
RDZDREVDOUNCMjI0MzQ2QzEwOUY0Qzk0OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QkM5QkMwRENFNDc1OUJENkNE
RUM5Q0IyMjQzNDZDMTA5RjRDOTQ5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkU0OEJENTEyNUJFNEVGMzY4NTAyNzFDMTI3MzE0NjU2NkM2MDQwRjEy
NkUzQjcwQzc1Q0RFMTA1MkU0QkM1NS8wLzMyMzgzMDMzM2E2MTY0MzQzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNDM2MzgzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDrUAw
DQYJKoZIhvcNAQELBQADggEBABJngCRZ+Se0rJcYRWuh7QaKlPOKqP3GDZFROFSI
G8IYgVS3NKxUEiyEnqqlcT+8wJLFlP5qklHtCXukqVayePG0MVUuGBmuFsSe2hnc
y9WfRVzcS96d3crQDInRDrA5QtAyuz2239J3bVuUyyXwAi4ZmeAFmEUBnKs2LI5G
IFO1gxp8m+sCIhM3pojKkifmCakcMFvTDO08xpbRVZi+b62Gdg4dWv8xKrYnyrzP
VP+RDbGPbVumVIkytm3mvkdtx1knNatYYzOVtJcD0+ytGTDw4yF/ZYe+cGJyaN/+
ZQxRzn/HPXC7Bhld2j62CeWDAQfVa4ZXpjjAaeyAP9ypJyE=
-----END CERTIFICATE-----
Generated at Mon Jan 12 16:45:34 2026 by rpki-client