This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BD01AE1AE0B334DC5993A1822F3322B117D689C14E8CE16BFFCF452E46929DD2/0/323830333a363932303a3a2f33322d3332203d3e20323636363730.roa
File:                     323830333a363932303a3a2f33322d3332203d3e20323636363730.roa (raw, json)
Hash identifier:          TThGELJlqAdtbxS7664QLqMbijWOL9ox6HUQ+oW7eTY=
Subject key identifier:   97:62:75:ED:4F:02:7F:A4:80:62:F0:86:2D:B7:6D:1E:C0:48:8E:01
Certificate issuer:       /CN=841EE6C0920D7F05C7686B132A17AE71FCC549B8
Certificate serial:       754FCD13B5CC3B5FE172B878FA79029BE26D73D5
Authority key identifier: 84:1E:E6:C0:92:0D:7F:05:C7:68:6B:13:2A:17:AE:71:FC:C5:49:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/841EE6C0920D7F05C7686B132A17AE71FCC549B8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BD01AE1AE0B334DC5993A1822F3322B117D689C14E8CE16BFFCF452E46929DD2/0/323830333a363932303a3a2f33322d3332203d3e20323636363730.roa
Signing time:             Tue 06 Jan 2026 19:07:29 +0000
ROA not before:           Tue 06 Jan 2026 19:02:29 +0000
ROA not after:            Tue 05 Jan 2027 19:07:29 +0000
asID:                     266670
IP address blocks:        2803:6920::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BD01AE1AE0B334DC5993A1822F3322B117D689C14E8CE16BFFCF452E46929DD2/0/841EE6C0920D7F05C7686B132A17AE71FCC549B8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BD01AE1AE0B334DC5993A1822F3322B117D689C14E8CE16BFFCF452E46929DD2/0/841EE6C0920D7F05C7686B132A17AE71FCC549B8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/841EE6C0920D7F05C7686B132A17AE71FCC549B8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Jan 2026 05:29:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:4f:cd:13:b5:cc:3b:5f:e1:72:b8:78:fa:79:02:9b:e2:6d:73:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=841EE6C0920D7F05C7686B132A17AE71FCC549B8
        Validity
            Not Before: Jan  6 19:02:29 2026 GMT
            Not After : Jan  5 19:07:29 2027 GMT
        Subject: CN=976275ED4F027FA48062F0862DB76D1EC0488E01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:78:1b:85:56:53:b6:b3:bf:f0:e0:53:0c:32:
                    66:26:bf:1c:1f:d8:73:f3:bf:73:b0:4c:d3:8d:8c:
                    50:83:7f:3d:6a:5b:1d:97:5e:cb:5f:e8:9f:ae:64:
                    0b:54:fc:91:48:c2:8e:3f:67:b2:85:5d:bc:4b:68:
                    5c:d2:1f:16:f0:73:18:5e:cd:18:88:d6:0d:6e:95:
                    13:37:49:6a:1e:4c:9a:cf:c2:f5:c8:12:00:c5:5b:
                    60:96:e0:49:ba:0b:6d:e0:d3:5f:e8:1f:7a:73:97:
                    66:87:eb:9e:45:14:94:8d:4a:4f:b4:81:6a:3b:95:
                    0b:39:7b:08:22:0f:b0:51:4d:87:e2:a9:e5:10:b9:
                    c0:a8:4b:a8:d0:8b:53:1f:f0:3b:98:e0:81:9e:8f:
                    25:de:0b:68:1c:fd:50:37:dd:af:a1:da:88:91:8e:
                    6d:24:2f:07:55:5a:a8:35:a0:af:20:c3:de:13:31:
                    0f:93:30:6e:ad:29:2a:22:b8:2f:c3:d3:be:5c:1a:
                    f8:5b:f2:a9:00:76:83:c1:05:ce:db:6e:8d:2c:2f:
                    82:77:c9:f4:0b:94:81:4f:48:c5:c3:d3:1f:09:ad:
                    c1:c8:e7:2a:fa:bf:69:31:1a:75:eb:84:ee:d1:4f:
                    e8:5b:ad:72:1f:f5:df:0b:20:17:3d:16:ef:7e:d8:
                    66:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:62:75:ED:4F:02:7F:A4:80:62:F0:86:2D:B7:6D:1E:C0:48:8E:01
            X509v3 Authority Key Identifier:
                keyid:84:1E:E6:C0:92:0D:7F:05:C7:68:6B:13:2A:17:AE:71:FC:C5:49:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BD01AE1AE0B334DC5993A1822F3322B117D689C14E8CE16BFFCF452E46929DD2/0/841EE6C0920D7F05C7686B132A17AE71FCC549B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/841EE6C0920D7F05C7686B132A17AE71FCC549B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BD01AE1AE0B334DC5993A1822F3322B117D689C14E8CE16BFFCF452E46929DD2/0/323830333a363932303a3a2f33322d3332203d3e20323636363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6920::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:ae:b1:c4:29:d1:94:0b:8d:97:1c:a1:1e:01:67:6c:b3:2c:
         b7:7b:09:9b:02:ff:6f:cf:b6:84:24:1e:ca:ba:e1:88:94:fb:
         dc:7a:38:a1:41:d5:e2:10:1b:bd:28:9f:e7:ee:b6:4d:17:a2:
         53:54:48:10:d8:6f:e1:bd:ea:f7:d1:e9:23:0a:c6:6c:ec:74:
         15:b3:7b:25:b8:35:f8:e9:cf:50:d6:9d:ec:5a:3f:60:95:d6:
         1b:71:2b:66:a8:19:21:2e:08:fe:3e:39:3d:70:ba:16:7f:91:
         d0:db:86:0a:2e:d4:d8:11:5e:76:7e:b2:17:90:74:c3:2e:3b:
         1d:d4:48:97:6b:9c:d1:f9:a6:82:80:73:ff:c3:c8:fc:32:61:
         c6:8e:6b:ce:6c:37:5e:b3:9e:f2:4a:b1:24:c8:48:1e:15:fc:
         2d:11:2c:38:d7:a9:50:b8:9b:85:44:5d:b4:4d:90:95:56:b8:
         94:93:c6:1f:b1:c1:f6:3d:a3:35:a8:3f:5c:de:fd:56:11:63:
         94:c8:22:ca:2c:be:d1:f9:04:be:68:ae:e1:95:e8:ff:62:93:
         b1:5a:63:3c:86:51:3b:a6:6f:be:79:b3:ed:21:e4:8e:d5:3f:
         57:19:74:e8:49:e6:01:2b:28:19:07:0f:bf:08:e4:f8:9e:6d:
         4c:5f:2c:a3
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUdU/NE7XMO1/hcrh4+nkCm+Jtc9UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQxRUU2QzA5MjBEN0YwNUM3Njg2QjEzMkExN0FFNzFG
Q0M1NDlCODAeFw0yNjAxMDYxOTAyMjlaFw0yNzAxMDUxOTA3MjlaMDMxMTAvBgNV
BAMTKDk3NjI3NUVENEYwMjdGQTQ4MDYyRjA4NjJEQjc2RDFFQzA0ODhFMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0eBuFVlO2s7/w4FMMMmYmvxwf
2HPzv3OwTNONjFCDfz1qWx2XXstf6J+uZAtU/JFIwo4/Z7KFXbxLaFzSHxbwcxhe
zRiI1g1ulRM3SWoeTJrPwvXIEgDFW2CW4Em6C23g01/oH3pzl2aH655FFJSNSk+0
gWo7lQs5ewgiD7BRTYfiqeUQucCoS6jQi1Mf8DuY4IGejyXeC2gc/VA33a+h2oiR
jm0kLwdVWqg1oK8gw94TMQ+TMG6tKSoiuC/D075cGvhb8qkAdoPBBc7bbo0sL4J3
yfQLlIFPSMXD0x8JrcHI5yr6v2kxGnXrhO7RT+hbrXIf9d8LIBc9Fu9+2GZBAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUl2J17U8Cf6SAYvCGLbdtHsBIjgEwHwYDVR0j
BBgwFoAUhB7mwJINfwXHaGsTKheucfzFSbgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CRDAxQUUxQUUwQjMzNERDNTk5M0ExODIyRjMzMjJCMTE3
RDY4OUMxNEU4Q0UxNkJGRkNGNDUyRTQ2OTI5REQyLzAvODQxRUU2QzA5MjBEN0Yw
NUM3Njg2QjEzMkExN0FFNzFGQ0M1NDlCOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NDFFRTZDMDkyMEQ3RjA1Qzc2
ODZCMTMyQTE3QUU3MUZDQzU0OUI4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkQwMUFFMUFFMEIzMzREQzU5OTNBMTgyMkYzMzIyQjExN0Q2ODlDMTRF
OENFMTZCRkZDRjQ1MkU0NjkyOUREMi8wLzMyMzgzMDMzM2EzNjM5MzIzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNjM2MzczMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDaSAw
DQYJKoZIhvcNAQELBQADggEBAB2uscQp0ZQLjZccoR4BZ2yzLLd7CZsC/2/PtoQk
Hsq64YiU+9x6OKFB1eIQG70on+futk0XolNUSBDYb+G96vfR6SMKxmzsdBWzeyW4
Nfjpz1DWnexaP2CV1htxK2aoGSEuCP4+OT1wuhZ/kdDbhgou1NgRXnZ+sheQdMMu
Ox3USJdrnNH5poKAc//DyPwyYcaOa85sN16znvJKsSTISB4V/C0RLDjXqVC4m4VE
XbRNkJVWuJSTxh+xwfY9ozWoP1ze/VYRY5TIIsosvtH5BL5oruGV6P9ik7FaYzyG
UTumb755s+0h5I7VP1cZdOhJ5gErKBkHD78I5PiebUxfLKM=
-----END CERTIFICATE-----
Generated at Tue Jan 13 07:58:17 2026 by rpki-client