This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9DBE2F180B65BBCAB9DA7B5B427A1A5DE1C8C4EB182D90606D097BEC079F119F/0/323830333a346138303a3a2f33342d3335203d3e203237383635.roa
File:                     323830333a346138303a3a2f33342d3335203d3e203237383635.roa (raw, json)
Hash identifier:          97ajo0/GLnT2W0eK9Q0AplatcC+pFDzXTkIKy1HPvGk=
Subject key identifier:   F7:BE:6F:79:4E:4E:97:C2:97:64:F3:AA:95:F5:92:94:96:36:6A:1B
Certificate issuer:       /CN=A5CE25AA2B9FB1CE0BE54FB6B339C5CCF502CF48
Certificate serial:       326A4A308938CBF6C4D348494C5C01D02A0FB2AD
Authority key identifier: A5:CE:25:AA:2B:9F:B1:CE:0B:E5:4F:B6:B3:39:C5:CC:F5:02:CF:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5CE25AA2B9FB1CE0BE54FB6B339C5CCF502CF48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9DBE2F180B65BBCAB9DA7B5B427A1A5DE1C8C4EB182D90606D097BEC079F119F/0/323830333a346138303a3a2f33342d3335203d3e203237383635.roa
Signing time:             Tue 06 Jan 2026 19:33:58 +0000
ROA not before:           Tue 06 Jan 2026 19:28:58 +0000
ROA not after:            Tue 05 Jan 2027 19:33:58 +0000
asID:                     27865
IP address blocks:        2803:4a80::/34 maxlen: 35
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9DBE2F180B65BBCAB9DA7B5B427A1A5DE1C8C4EB182D90606D097BEC079F119F/0/A5CE25AA2B9FB1CE0BE54FB6B339C5CCF502CF48.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9DBE2F180B65BBCAB9DA7B5B427A1A5DE1C8C4EB182D90606D097BEC079F119F/0/A5CE25AA2B9FB1CE0BE54FB6B339C5CCF502CF48.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5CE25AA2B9FB1CE0BE54FB6B339C5CCF502CF48.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 07:27:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:6a:4a:30:89:38:cb:f6:c4:d3:48:49:4c:5c:01:d0:2a:0f:b2:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5CE25AA2B9FB1CE0BE54FB6B339C5CCF502CF48
        Validity
            Not Before: Jan  6 19:28:58 2026 GMT
            Not After : Jan  5 19:33:58 2027 GMT
        Subject: CN=F7BE6F794E4E97C29764F3AA95F5929496366A1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a1:86:e5:55:68:69:e0:a4:19:91:00:90:36:
                    52:0d:78:59:39:68:24:0f:41:f4:45:c7:8e:ff:e3:
                    d6:98:17:e1:0f:f7:18:8f:b1:9b:47:0f:d4:cf:10:
                    1a:29:a1:78:7d:29:b0:78:64:dc:ca:9c:59:d6:52:
                    ae:68:3b:07:e6:9e:8c:6a:94:56:16:e2:48:d5:b9:
                    76:bd:10:68:63:9c:69:6d:ec:b3:0b:9e:7c:bd:ee:
                    c3:81:ba:f5:18:28:05:69:c4:79:6c:a6:66:a0:d9:
                    72:09:46:fe:1c:b5:96:46:5f:42:64:a6:4d:e7:5b:
                    dd:85:c4:81:b4:ec:49:0d:e0:2d:f8:0d:83:31:1d:
                    61:76:5b:3f:1e:f4:1f:ab:72:a5:e1:ec:99:14:44:
                    6e:e5:31:02:97:b6:af:47:9e:ee:53:8d:d6:4a:3d:
                    de:d3:0e:cb:0c:f0:b2:20:60:66:d4:f5:ac:06:74:
                    95:b0:e7:0c:36:e7:5a:1d:b2:d9:f4:a7:13:e1:6f:
                    47:b0:f5:af:52:86:2a:77:e2:ff:2d:ae:91:b0:0e:
                    3c:fd:3c:93:9b:20:6e:3e:b0:33:e7:d4:d2:76:22:
                    bf:5c:39:e5:73:b4:64:a6:24:bd:3a:a3:a4:87:8a:
                    ac:8e:3b:0c:67:fb:bf:f6:42:75:de:e3:3f:5e:08:
                    3c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:BE:6F:79:4E:4E:97:C2:97:64:F3:AA:95:F5:92:94:96:36:6A:1B
            X509v3 Authority Key Identifier:
                keyid:A5:CE:25:AA:2B:9F:B1:CE:0B:E5:4F:B6:B3:39:C5:CC:F5:02:CF:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9DBE2F180B65BBCAB9DA7B5B427A1A5DE1C8C4EB182D90606D097BEC079F119F/0/A5CE25AA2B9FB1CE0BE54FB6B339C5CCF502CF48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5CE25AA2B9FB1CE0BE54FB6B339C5CCF502CF48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9DBE2F180B65BBCAB9DA7B5B427A1A5DE1C8C4EB182D90606D097BEC079F119F/0/323830333a346138303a3a2f33342d3335203d3e203237383635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4a80::/34

    Signature Algorithm: sha256WithRSAEncryption
         01:c0:59:b2:30:1a:0a:7f:22:d7:b7:18:61:20:0f:f8:03:66:
         83:00:59:a1:58:71:4e:37:fb:bb:d7:a5:fe:0f:42:cb:7e:7e:
         94:bf:37:bc:f4:67:d2:a3:fb:7a:3d:5c:37:ef:44:15:59:6e:
         6d:2c:1c:15:a7:76:a3:09:7b:ac:16:93:ff:f5:93:e7:e7:61:
         4f:d4:51:1d:5b:94:cc:b1:60:77:0a:0b:24:01:2a:ab:a0:f9:
         14:b0:31:0f:d4:f0:5a:c0:e3:01:e0:62:cb:48:ce:5c:a2:f3:
         4a:82:a3:f5:c9:39:1a:d2:d6:e5:68:ce:be:86:21:af:da:e0:
         70:fe:90:56:6c:a4:4e:d4:ec:fc:b5:33:08:25:32:ef:dc:48:
         fd:b7:95:68:a8:05:6f:44:a3:2a:07:50:af:8f:75:3c:fb:e9:
         81:d5:19:34:67:59:9f:02:b8:f4:cf:8d:e1:c9:00:88:bd:48:
         56:4b:35:de:ce:84:a2:24:c0:39:25:86:20:b5:85:a6:bf:63:
         c4:40:17:c9:c8:5a:62:5f:26:e7:36:4b:e7:c5:4a:95:67:50:
         0d:71:f7:f4:62:47:14:c5:f3:c3:1b:cd:bb:8a:d1:7d:a4:9e:
         20:74:0b:47:7e:d6:66:03:1a:2a:43:6a:bc:ee:8c:76:3c:0f:
         b5:ac:7a:71
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUMmpKMIk4y/bE00hJTFwB0CoPsq0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTVDRTI1QUEyQjlGQjFDRTBCRTU0RkI2QjMzOUM1Q0NG
NTAyQ0Y0ODAeFw0yNjAxMDYxOTI4NThaFw0yNzAxMDUxOTMzNThaMDMxMTAvBgNV
BAMTKEY3QkU2Rjc5NEU0RTk3QzI5NzY0RjNBQTk1RjU5Mjk0OTYzNjZBMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsoYblVWhp4KQZkQCQNlINeFk5
aCQPQfRFx47/49aYF+EP9xiPsZtHD9TPEBopoXh9KbB4ZNzKnFnWUq5oOwfmnoxq
lFYW4kjVuXa9EGhjnGlt7LMLnny97sOBuvUYKAVpxHlspmag2XIJRv4ctZZGX0Jk
pk3nW92FxIG07EkN4C34DYMxHWF2Wz8e9B+rcqXh7JkURG7lMQKXtq9Hnu5TjdZK
Pd7TDssM8LIgYGbU9awGdJWw5ww251odstn0pxPhb0ew9a9Ship34v8trpGwDjz9
PJObIG4+sDPn1NJ2Ir9cOeVztGSmJL06o6SHiqyOOwxn+7/2QnXe4z9eCDzPAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU975veU5Ol8KXZPOqlfWSlJY2ahswHwYDVR0j
BBgwFoAUpc4lqiufsc4L5U+2sznFzPUCz0gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85REJFMkYxODBCNjVCQkNBQjlEQTdCNUI0MjdBMUE1REUx
QzhDNEVCMTgyRDkwNjA2RDA5N0JFQzA3OUYxMTlGLzAvQTVDRTI1QUEyQjlGQjFD
RTBCRTU0RkI2QjMzOUM1Q0NGNTAyQ0Y0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNUNFMjVBQTJCOUZCMUNFMEJF
NTRGQjZCMzM5QzVDQ0Y1MDJDRjQ4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOURCRTJGMTgwQjY1QkJDQUI5REE3QjVCNDI3QTFBNURFMUM4QzRFQjE4
MkQ5MDYwNkQwOTdCRUMwNzlGMTE5Ri8wLzMyMzgzMDMzM2EzNDYxMzgzMDNhM2Ey
ZjMzMzQyZDMzMzUyMDNkM2UyMDMyMzczODM2MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoA0qAADAN
BgkqhkiG9w0BAQsFAAOCAQEAAcBZsjAaCn8i17cYYSAP+ANmgwBZoVhxTjf7u9el
/g9Cy35+lL83vPRn0qP7ej1cN+9EFVlubSwcFad2owl7rBaT//WT5+dhT9RRHVuU
zLFgdwoLJAEqq6D5FLAxD9TwWsDjAeBiy0jOXKLzSoKj9ck5GtLW5WjOvoYhr9rg
cP6QVmykTtTs/LUzCCUy79xI/beVaKgFb0SjKgdQr491PPvpgdUZNGdZnwK49M+N
4ckAiL1IVks13s6EoiTAOSWGILWFpr9jxEAXychaYl8m5zZL58VKlWdQDXH39GJH
FMXzwxvNu4rRfaSeIHQLR37WZgMaKkNqvO6MdjwPtax6cQ==
-----END CERTIFICATE-----
Generated at Mon Jan 12 00:00:09 2026 by rpki-client