This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CB49828355CAE78B8A7162EC32F371E65CD840A8223C3054A33B5C7DAE817E23/0/323830333a663532303a3a2f33322d3332203d3e20323636363935.roa
File:                     323830333a663532303a3a2f33322d3332203d3e20323636363935.roa (raw, json)
Hash identifier:          Dt8pftow81rwQ6h2DYZ45sbcGq+1iiWcEgJKrPkzYJU=
Subject key identifier:   F2:3C:C6:57:84:12:2A:9B:B4:58:2C:22:5A:F7:02:74:F4:54:5C:00
Certificate issuer:       /CN=9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57
Certificate serial:       19108C26E10CE5FC66160B4404DDEA26CEB17221
Authority key identifier: 9E:6E:56:6C:CF:B3:96:F5:0A:A0:EE:8B:60:11:CD:17:E7:AF:2E:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CB49828355CAE78B8A7162EC32F371E65CD840A8223C3054A33B5C7DAE817E23/0/323830333a663532303a3a2f33322d3332203d3e20323636363935.roa
Signing time:             Tue 06 Jan 2026 19:29:00 +0000
ROA not before:           Tue 06 Jan 2026 19:24:00 +0000
ROA not after:            Tue 05 Jan 2027 19:29:00 +0000
asID:                     266695
IP address blocks:        2803:f520::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CB49828355CAE78B8A7162EC32F371E65CD840A8223C3054A33B5C7DAE817E23/0/9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CB49828355CAE78B8A7162EC32F371E65CD840A8223C3054A33B5C7DAE817E23/0/9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:10:8c:26:e1:0c:e5:fc:66:16:0b:44:04:dd:ea:26:ce:b1:72:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57
        Validity
            Not Before: Jan  6 19:24:00 2026 GMT
            Not After : Jan  5 19:29:00 2027 GMT
        Subject: CN=F23CC65784122A9BB4582C225AF70274F4545C00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:2a:60:9b:f1:c6:43:32:a0:70:42:19:20:39:
                    75:c7:ac:5f:55:d4:20:e0:19:15:80:ed:87:5d:35:
                    8a:75:8c:f5:3d:f9:94:23:90:57:d9:9a:e2:76:a9:
                    ee:b6:ae:53:06:e4:c3:d8:69:cc:15:9a:a3:8b:60:
                    0d:a4:59:97:0f:6c:52:db:62:60:03:e0:51:b0:ac:
                    ff:65:4e:cc:e7:c5:89:41:8d:c2:d0:eb:fa:3a:3b:
                    d4:21:44:d8:9d:96:0f:35:ba:06:6c:f5:49:6f:7f:
                    2b:fe:b2:71:91:55:58:d1:b0:26:4d:b9:b4:83:17:
                    9b:84:e1:6f:0e:dc:c8:94:a5:c2:7a:de:5f:e7:43:
                    a3:9d:2b:ee:b4:bc:8c:f0:5e:a4:7e:8e:8a:e1:db:
                    4f:72:2c:ec:be:55:06:85:b4:b2:3e:91:94:84:cd:
                    79:7d:b2:16:d4:54:53:0e:db:8d:c4:86:8f:85:f9:
                    34:40:78:48:1a:ed:57:fb:dd:71:07:66:57:2e:8e:
                    a7:cb:8f:99:f8:65:1b:7f:a5:c4:61:88:46:3c:4d:
                    ae:35:f6:9f:f0:c1:a0:22:ec:20:f1:7e:4c:1e:47:
                    b8:f9:b9:c4:c6:54:ea:dc:ff:c4:5d:0f:ca:15:80:
                    ee:70:09:b4:7a:32:2a:66:dd:08:a7:b0:c8:45:53:
                    7d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:3C:C6:57:84:12:2A:9B:B4:58:2C:22:5A:F7:02:74:F4:54:5C:00
            X509v3 Authority Key Identifier:
                keyid:9E:6E:56:6C:CF:B3:96:F5:0A:A0:EE:8B:60:11:CD:17:E7:AF:2E:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CB49828355CAE78B8A7162EC32F371E65CD840A8223C3054A33B5C7DAE817E23/0/9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CB49828355CAE78B8A7162EC32F371E65CD840A8223C3054A33B5C7DAE817E23/0/323830333a663532303a3a2f33322d3332203d3e20323636363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f520::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:c6:a2:29:93:9d:96:e4:5d:5c:31:1c:0f:54:94:80:26:a6:
         20:db:7b:bd:fb:ce:4e:68:3b:4c:43:02:f1:0e:fe:35:e3:4b:
         d9:1f:72:61:f8:6e:68:3b:8e:a3:24:6d:41:05:58:a7:80:c5:
         5d:40:c8:d0:53:18:97:d0:2c:4d:fa:20:58:2d:9c:32:71:b0:
         12:ed:e5:7f:1b:64:07:a2:e6:94:66:24:5a:68:ea:d5:40:46:
         87:8c:58:11:c4:2c:5a:4a:04:b1:66:27:41:3f:dc:ac:51:12:
         ee:a8:13:ac:49:63:bf:39:8e:8b:18:85:7b:70:f4:cb:57:74:
         b7:67:61:c8:0f:d8:3b:cb:8d:6e:b9:9c:d7:8e:10:e3:79:77:
         62:52:b2:84:d9:8d:46:81:e0:0d:7a:62:92:66:05:ae:98:da:
         01:ab:e4:bc:48:94:04:e3:01:fc:df:e3:3d:3b:a0:54:41:1a:
         a5:59:9c:c8:a0:9a:c3:a1:6c:17:73:fb:94:66:1c:3a:3c:1a:
         28:4b:9b:f2:cc:98:14:c6:6c:5d:13:89:02:49:46:a8:e4:9f:
         85:0c:c3:05:22:d2:75:13:f2:fc:89:26:c5:ba:cd:8d:5b:6a:
         f4:14:59:53:d5:fb:ad:ff:17:37:2a:cf:9e:e3:93:53:27:87:
         58:91:1b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 09:11:22 2026 by rpki-client