This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/323830303a3361303a3a2f33322d3438203d3e203233323031.roa
File:                     323830303a3361303a3a2f33322d3438203d3e203233323031.roa (raw, json)
Hash identifier:          bJG+Cqjz6gS2B3+9Pb8gby6l3unAMwszMMI4DOqzUa0=
Subject key identifier:   2A:7B:46:78:50:DA:1B:51:79:7F:5C:EA:22:F5:62:D7:7C:94:37:7D
Certificate issuer:       /CN=9857400AE42A0A22A3E618304A1502E0E0C01DCA
Certificate serial:       30BC4C241E80340492265A95770E854A600868C2
Authority key identifier: 98:57:40:0A:E4:2A:0A:22:A3:E6:18:30:4A:15:02:E0:E0:C0:1D:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/323830303a3361303a3a2f33322d3438203d3e203233323031.roa
Signing time:             Tue 06 Jan 2026 19:34:10 +0000
ROA not before:           Tue 06 Jan 2026 19:29:10 +0000
ROA not after:            Tue 05 Jan 2027 19:34:10 +0000
asID:                     23201
IP address blocks:        2800:3a0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 22:53:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:bc:4c:24:1e:80:34:04:92:26:5a:95:77:0e:85:4a:60:08:68:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9857400AE42A0A22A3E618304A1502E0E0C01DCA
        Validity
            Not Before: Jan  6 19:29:10 2026 GMT
            Not After : Jan  5 19:34:10 2027 GMT
        Subject: CN=2A7B467850DA1B51797F5CEA22F562D77C94377D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b8:03:57:5c:c4:0b:71:90:45:65:cb:b1:17:
                    41:3f:bf:a3:37:38:47:2f:c4:c4:f6:f7:58:8f:91:
                    3c:d3:11:7d:07:6c:0e:c7:29:2f:da:62:58:71:06:
                    ee:38:e8:63:f1:25:69:27:92:fb:6b:49:04:8b:ea:
                    f1:44:12:82:a4:5d:52:59:55:f8:60:e7:cd:7b:41:
                    d3:e2:32:67:d1:b3:cb:d5:f0:9a:f7:a6:08:ea:62:
                    c8:0a:55:c8:64:7a:aa:30:38:00:7c:ef:fa:89:c4:
                    55:d6:3b:4d:68:83:56:79:00:93:26:f3:37:13:a5:
                    24:26:3f:4c:37:4f:ec:10:41:10:0b:35:8a:7b:7b:
                    be:c4:9f:91:10:75:c5:53:9a:12:23:9a:41:f0:c2:
                    77:c1:fc:d9:5d:0d:4d:97:d4:fa:23:4d:15:33:b0:
                    a7:52:f1:71:c5:0d:00:ed:7d:e7:e7:d4:45:6a:95:
                    0a:0a:95:33:8f:36:54:e9:a1:de:d2:13:87:09:c2:
                    e4:24:e9:32:e9:25:ac:6b:ee:61:38:09:61:82:f5:
                    4a:fa:a6:f3:a4:f4:13:fb:e1:fe:ce:c6:ed:d7:a8:
                    81:7d:17:1e:d2:b6:6f:a7:2d:8d:85:c3:e8:21:e6:
                    9d:2f:eb:82:6a:41:f0:cb:8b:39:fb:9f:1e:21:03:
                    34:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:7B:46:78:50:DA:1B:51:79:7F:5C:EA:22:F5:62:D7:7C:94:37:7D
            X509v3 Authority Key Identifier:
                keyid:98:57:40:0A:E4:2A:0A:22:A3:E6:18:30:4A:15:02:E0:E0:C0:1D:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/323830303a3361303a3a2f33322d3438203d3e203233323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:3a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:93:40:8e:75:65:7d:23:9d:09:f8:2c:42:e8:2e:5a:d9:c5:
         3e:20:48:a3:2c:a1:58:fe:6e:c3:40:c8:5a:b2:1c:ac:2b:84:
         8a:d2:51:0e:2e:ee:a1:5b:ee:81:8f:dc:07:95:2a:1b:55:15:
         ce:a9:b6:72:0f:d6:0e:29:91:e2:3b:80:dd:0d:9f:6e:81:1f:
         d2:35:ab:31:38:fb:92:e1:ee:e7:4a:64:a0:46:2e:47:84:dc:
         7e:b3:cd:b0:32:24:6a:12:ca:66:b8:ea:36:cd:9a:fb:1e:2e:
         78:18:f4:56:3c:9a:9f:5f:b5:93:f8:93:a9:8a:86:b1:99:31:
         66:e7:3b:be:6b:02:af:e7:0a:5c:18:7d:05:74:e9:54:8d:47:
         9d:fa:79:14:cd:ad:18:ea:5c:fa:e1:0e:7e:48:f5:d5:8c:36:
         f8:b7:ff:d4:5c:59:6f:13:be:71:10:03:f9:46:2e:11:fe:86:
         e7:e6:4d:36:19:fc:76:15:45:5d:3a:26:c1:32:7b:75:b9:90:
         70:70:42:64:41:d9:61:8c:46:69:e8:53:7c:7c:80:ad:73:08:
         5e:69:9a:8d:17:18:66:10:c3:61:20:ec:88:0e:d7:5a:78:b4:
         d7:7e:d1:20:1d:6b:ac:ce:17:2b:f0:2b:10:3e:85:5c:a5:7f:
         83:2d:43:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 05:13:23 2026 by rpki-client