This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E31FCEE674B889DCB26101BB3A42DA81330B9AA63D2722DDF515D067AF86125/0/323830333a623432303a3a2f33322d3332203d3e20323634363638.roa
File:                     323830333a623432303a3a2f33322d3332203d3e20323634363638.roa (raw, json)
Hash identifier:          7A+1jibTCYzC8nGtRlelGWD/lbExeuRVlKBElqcLIxY=
Subject key identifier:   FF:AF:62:BC:5E:07:65:D2:B4:8D:86:AE:29:7D:A0:D2:74:2D:39:C6
Certificate issuer:       /CN=AED4A1E6201DA852B960F5946F4F7E5EAA9A1F86
Certificate serial:       0C7A8E076E820458EABFEED478DC6329A21B5846
Authority key identifier: AE:D4:A1:E6:20:1D:A8:52:B9:60:F5:94:6F:4F:7E:5E:AA:9A:1F:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AED4A1E6201DA852B960F5946F4F7E5EAA9A1F86.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E31FCEE674B889DCB26101BB3A42DA81330B9AA63D2722DDF515D067AF86125/0/323830333a623432303a3a2f33322d3332203d3e20323634363638.roa
Signing time:             Tue 06 Jan 2026 19:46:46 +0000
ROA not before:           Tue 06 Jan 2026 19:41:46 +0000
ROA not after:            Tue 05 Jan 2027 19:46:46 +0000
asID:                     264668
IP address blocks:        2803:b420::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E31FCEE674B889DCB26101BB3A42DA81330B9AA63D2722DDF515D067AF86125/0/AED4A1E6201DA852B960F5946F4F7E5EAA9A1F86.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E31FCEE674B889DCB26101BB3A42DA81330B9AA63D2722DDF515D067AF86125/0/AED4A1E6201DA852B960F5946F4F7E5EAA9A1F86.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AED4A1E6201DA852B960F5946F4F7E5EAA9A1F86.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 07:35:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:7a:8e:07:6e:82:04:58:ea:bf:ee:d4:78:dc:63:29:a2:1b:58:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AED4A1E6201DA852B960F5946F4F7E5EAA9A1F86
        Validity
            Not Before: Jan  6 19:41:46 2026 GMT
            Not After : Jan  5 19:46:46 2027 GMT
        Subject: CN=FFAF62BC5E0765D2B48D86AE297DA0D2742D39C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7b:a3:df:94:5d:a0:ba:d7:5a:db:57:5f:db:
                    4c:e6:5d:c8:42:2e:27:4b:60:e2:b2:a7:e0:55:26:
                    84:cc:6c:16:ae:99:57:f5:2e:71:05:28:b5:38:be:
                    09:7a:d4:c7:5e:f8:5c:1b:83:1d:33:40:af:7a:4f:
                    2b:d5:64:1d:10:03:00:1f:39:b8:9e:26:0f:9d:34:
                    a3:45:c7:0b:2b:59:05:5b:47:77:97:65:5a:1b:1f:
                    68:6d:19:7f:8c:75:4c:e9:ed:62:cb:76:f3:94:77:
                    b1:26:75:3e:c9:ec:a7:6f:af:40:d3:d4:31:95:c1:
                    03:f4:0e:64:f5:12:a2:a1:67:b9:3b:75:e4:f2:c4:
                    8b:54:b9:5e:07:8c:1e:f6:1c:b4:ea:11:a4:1b:bc:
                    1b:32:ea:c2:0b:d1:85:32:ec:12:5f:81:9e:25:da:
                    ff:4b:4f:b7:7f:74:61:a2:1a:85:9d:d8:f3:7f:dd:
                    1d:57:41:95:81:40:c1:e5:3e:5c:24:b3:a5:19:9d:
                    d7:6d:38:37:f9:cc:74:98:81:6f:e3:31:f4:0f:dd:
                    06:49:27:44:22:21:da:9e:b1:d4:b0:84:ef:bd:9b:
                    1f:c7:aa:13:84:a0:a8:c7:73:55:b3:25:62:c9:7f:
                    ed:03:69:e7:71:fb:39:16:95:f1:f4:a4:90:9c:1a:
                    22:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:AF:62:BC:5E:07:65:D2:B4:8D:86:AE:29:7D:A0:D2:74:2D:39:C6
            X509v3 Authority Key Identifier:
                keyid:AE:D4:A1:E6:20:1D:A8:52:B9:60:F5:94:6F:4F:7E:5E:AA:9A:1F:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E31FCEE674B889DCB26101BB3A42DA81330B9AA63D2722DDF515D067AF86125/0/AED4A1E6201DA852B960F5946F4F7E5EAA9A1F86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AED4A1E6201DA852B960F5946F4F7E5EAA9A1F86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E31FCEE674B889DCB26101BB3A42DA81330B9AA63D2722DDF515D067AF86125/0/323830333a623432303a3a2f33322d3332203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b420::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:c8:78:53:f1:b6:45:cd:ef:cc:2e:91:a7:6f:69:17:87:fb:
         c2:8e:30:7d:a5:3a:3c:29:1e:69:e7:49:60:44:50:20:f3:99:
         04:b4:7b:d7:32:d5:a5:e7:d2:c1:04:a6:ad:ec:50:9e:ec:6e:
         76:54:9b:ef:5f:e7:78:ba:5b:13:20:3d:4c:0c:b4:25:95:43:
         00:e1:ec:2e:ed:f9:c6:c6:d2:9b:50:b7:fb:3a:c4:f7:bb:50:
         12:f7:26:64:36:eb:27:24:5e:3c:c8:90:68:2e:8e:88:a2:76:
         78:f4:16:26:c8:26:26:4d:4f:97:95:79:88:af:d4:09:8a:9a:
         c5:62:26:76:bf:53:6b:d4:45:e8:f4:1c:78:a0:13:09:66:12:
         81:85:d8:ed:54:e2:5a:14:b4:ef:f0:d3:51:1b:e0:3e:5b:30:
         57:1c:b9:fa:04:5d:be:18:60:b1:fd:d0:f8:50:ce:0f:38:d1:
         98:b8:71:f8:b5:64:88:fb:dc:69:8a:71:ea:5a:de:1e:fa:ee:
         0d:18:85:96:9e:69:08:be:7c:a0:41:ea:ff:47:ca:ea:40:cf:
         c7:2e:73:e5:7e:2e:9a:80:76:00:bc:d6:c9:77:8e:0b:8f:00:
         50:1e:fb:28:3e:bf:bc:5d:7c:7f:c9:ac:51:cb:29:9f:29:cd:
         c1:b2:44:c3
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUDHqOB26CBFjqv+7UeNxjKaIbWEYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVENEExRTYyMDFEQTg1MkI5NjBGNTk0NkY0RjdFNUVB
QTlBMUY4NjAeFw0yNjAxMDYxOTQxNDZaFw0yNzAxMDUxOTQ2NDZaMDMxMTAvBgNV
BAMTKEZGQUY2MkJDNUUwNzY1RDJCNDhEODZBRTI5N0RBMEQyNzQyRDM5QzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZe6PflF2gutda21df20zmXchC
LidLYOKyp+BVJoTMbBaumVf1LnEFKLU4vgl61Mde+Fwbgx0zQK96TyvVZB0QAwAf
ObieJg+dNKNFxwsrWQVbR3eXZVobH2htGX+MdUzp7WLLdvOUd7EmdT7J7Kdvr0DT
1DGVwQP0DmT1EqKhZ7k7deTyxItUuV4HjB72HLTqEaQbvBsy6sIL0YUy7BJfgZ4l
2v9LT7d/dGGiGoWd2PN/3R1XQZWBQMHlPlwks6UZnddtODf5zHSYgW/jMfQP3QZJ
J0QiIdqesdSwhO+9mx/HqhOEoKjHc1WzJWLJf+0Daedx+zkWlfH0pJCcGiJfAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU/69ivF4HZdK0jYauKX2g0nQtOcYwHwYDVR0j
BBgwFoAUrtSh5iAdqFK5YPWUb09+XqqaH4YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RTMxRkNFRTY3NEI4ODlEQ0IyNjEwMUJCM0E0MkRBODEz
MzBCOUFBNjNEMjcyMkRERjUxNUQwNjdBRjg2MTI1LzAvQUVENEExRTYyMDFEQTg1
MkI5NjBGNTk0NkY0RjdFNUVBQTlBMUY4Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRUQ0QTFFNjIwMURBODUyQjk2
MEY1OTQ2RjRGN0U1RUFBOUExRjg2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0UzMUZDRUU2NzRCODg5RENCMjYxMDFCQjNBNDJEQTgxMzMwQjlBQTYz
RDI3MjJEREY1MTVEMDY3QUY4NjEyNS8wLzMyMzgzMDMzM2E2MjM0MzIzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNDM2MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDtCAw
DQYJKoZIhvcNAQELBQADggEBAJHIeFPxtkXN78wukadvaReH+8KOMH2lOjwpHmnn
SWBEUCDzmQS0e9cy1aXn0sEEpq3sUJ7sbnZUm+9f53i6WxMgPUwMtCWVQwDh7C7t
+cbG0ptQt/s6xPe7UBL3JmQ26yckXjzIkGgujoiidnj0FibIJiZNT5eVeYiv1AmK
msViJna/U2vURej0HHigEwlmEoGF2O1U4loUtO/w01Eb4D5bMFccufoEXb4YYLH9
0PhQzg840Zi4cfi1ZIj73GmKcepa3h767g0YhZaeaQi+fKBB6v9HyupAz8cuc+V+
LpqAdgC81sl3jguPAFAe+yg+v7xdfH/JrFHLKZ8pzcGyRMM=
-----END CERTIFICATE-----
Generated at Mon Jan 12 15:18:53 2026 by rpki-client